java 调用微信js-sdk接口

JSSDK使用步骤

http://mp.weixin.qq.com/wiki?t=resource/res_main&id=mp1421141115&token=&lang=zh_CN 官网文档

步骤一：绑定域名

注意：前面不需要加http

步骤二：引入JS文件

在需要调用JS接口的页面引入如下JS文件，（支持https）：http://res.wx.qq.com/open/js/jweixin-1.0.0.js
如需使用摇一摇周边功能，请引入 http://res.wx.qq.com/open/js/jweixin-1.1.0.js
备注：支持使用 AMD/CMD 标准模块加载方法加载

jquery.js自行下载到自己的工程引入即可。

<script src="/js/jquery.js"></script>
<script src="http://res.wx.qq.com/open/js/jweixin-1.0.0.js"></script>

前端传的 url : https%3A%2F%2Foftoo.site%2F%3Fcode%3D071N3ldz0A3Ixd1RIXez0fqXcz0N3ldT%26state%3D123 在后的代码要decode


@ApiOperation("获取签名")
@RequestMapping(value = "/getSignature",method = RequestMethod.GET)
public Map<String, Object> getSignature(String url) throws Exception {
    url = URLDecoder.decode(url, "UTF-8");
    //测试
    String ticketKey = CacheConfigManagement.WX_SKD_JSAPITICKET + appId;
    String ticket = redis.get(ticketKey);
    if(StringUtils.isEmpty(ticket)){
        //获取access_token
        String access_token = getAccessToken(appId , appSecret);
        //获取jspai_ticket
        ticket = getTicket(access_token);
        redis.set(ticketKey,ticket,7000);
    }else{
        ticket = redis.get(ticketKey);
    }
    return  getSign(url, ticket);
}
// 网页授权接口
public String getAccessToken(String appId , String appSecret) throws Exception {
    // 网页授权接口
    String GetPageAccessTokenUrl = "https://api.weixin.qq.com/cgi-bin/token?grant_type=client_credential&appid="+appId+"&secret="+appSecret;

    DefaultHttpClient client = null;
    String access_token = null;
    int expires_in = 0;
    try {
        client = new DefaultHttpClient();
        HttpGet httpget = new HttpGet(GetPageAccessTokenUrl);
        ResponseHandler<String> responseHandler = new BasicResponseHandler();
        String response = client.execute(httpget, responseHandler);
        JSONObject OpenidJSONO = JSONObject.parseObject(response);
        access_token = String.valueOf(OpenidJSONO.get("access_token"));//获取access_token
        expires_in = Integer.parseInt(String.valueOf(OpenidJSONO.get("expires_in")));//获取时间
    } catch (Exception e) {
        throw new Exception("获取AccessToken出错！");
    } finally {
        client.getConnectionManager().shutdown();
    }
    return access_token;
}


public String getTicket(String accessToken) throws Exception {
    // 网页授权接口
    String GetPageAccessTokenUrl = "https://api.weixin.qq.com/cgi-bin/ticket/getticket?access_token="+accessToken+"&type=jsapi";
    DefaultHttpClient client = null;
    String ticket = "";
    int expires_in = 0;
    try {
        client = new DefaultHttpClient();
        HttpGet httpget = new HttpGet(GetPageAccessTokenUrl);
        ResponseHandler<String> responseHandler = new BasicResponseHandler();
        String response = client.execute(httpget, responseHandler);
        JSONObject OpenidJSONO = JSONObject.parseObject(response);
        ticket = String.valueOf(OpenidJSONO.get("ticket"));//获取ticket
        expires_in = Integer.parseInt(String.valueOf(OpenidJSONO.get("expires_in")));//获取时间
    } catch (Exception e) {
        throw new Exception("获取Ticket出错！");
    } finally {
        client.getConnectionManager().shutdown();
    }

    return ticket;
}

public String SHA1(String str) {
    try {
        MessageDigest digest = java.security.MessageDigest
                .getInstance("SHA-1"); //如果是SHA加密只需要将"SHA-1"改成"SHA"即可
        digest.update(str.getBytes());
        byte messageDigest[] = digest.digest();
        // Create Hex String
        StringBuffer hexStr = new StringBuffer();
        // 字节数组转换为 十六进制 数
        for (int i = 0; i < messageDigest.length; i++) {
            String shaHex = Integer.toHexString(messageDigest[i] & 0xFF);
            if (shaHex.length() < 2) {
                hexStr.append(0);
            }
            hexStr.append(shaHex);
        }
        return hexStr.toString();

    } catch (Exception e) {
        e.printStackTrace();
    }
    return null;
}
private Map<String,Object> getSign(String url,String jsapi_ticket) {
    Map<String,Object> map = new HashMap<>();
    //获取noncestr
    String noncestr = UUID.randomUUID().toString().replace("-", "");
    String timestamp = String.valueOf(System.currentTimeMillis() / 1000);
    //将四个数据进行组合，传给SHA1进行加密
    String str = "jsapi_ticket=" + jsapi_ticket +
            "&noncestr=" + noncestr +
            "&timestamp=" + timestamp +
            "&url=" + url;
    String signature = SHA1(str);
    map.put("timestamp",timestamp);
    map.put("noncestr",noncestr);
    map.put("signature",signature);
    map.put("appid",appId);
    map.put("url",url);
    return map;
}

根据JSAPITICKET生成的字符串。与微信返回的数据在签名校验工具网址进行对比加密后的signature是否一致