zxc
5 years ago
20 changed files with 774 additions and 600 deletions
@ -0,0 +1,96 @@ |
|||
/* |
|||
* Copyright (C) 2018 Baidu, Inc. All Rights Reserved. |
|||
*/ |
|||
package com.epmet.mpaes; |
|||
|
|||
import org.apache.commons.codec.binary.Base64; |
|||
|
|||
import javax.crypto.Cipher; |
|||
import javax.crypto.spec.IvParameterSpec; |
|||
import javax.crypto.spec.SecretKeySpec; |
|||
import java.nio.charset.Charset; |
|||
import java.util.Arrays; |
|||
|
|||
/** |
|||
* JAVA AES 消息加解密 |
|||
*/ |
|||
public class AesDecryptUtil { |
|||
|
|||
private static Charset CHARSET = Charset.forName("utf-8"); |
|||
private Cipher decCipher; |
|||
|
|||
/** |
|||
* 构造函数 |
|||
* |
|||
* @param encodingAesKey encodingAESKey |
|||
* |
|||
* @throws Exception 异常错误信息 |
|||
*/ |
|||
public AesDecryptUtil(String encodingAesKey) throws Exception { |
|||
int encodingAesKeyLength = 43; |
|||
if (encodingAesKey.length() != encodingAesKeyLength) { |
|||
throw new Exception("ILLEGAL_AES_KEY_ERROR"); |
|||
} |
|||
byte[] aesKey = Base64.decodeBase64(encodingAesKey + "="); |
|||
|
|||
SecretKeySpec keySpec = new SecretKeySpec(aesKey, "AES"); |
|||
IvParameterSpec iv = new IvParameterSpec(aesKey, 0, 16); |
|||
Cipher encCipher = Cipher.getInstance("AES/CBC/NoPadding"); |
|||
encCipher.init(Cipher.ENCRYPT_MODE, keySpec, iv); |
|||
|
|||
decCipher = Cipher.getInstance("AES/CBC/NoPadding"); |
|||
decCipher.init(Cipher.DECRYPT_MODE, keySpec, iv); |
|||
} |
|||
|
|||
/** |
|||
* 还原4个字节的网络字节序 |
|||
* |
|||
* @param orderBytes 字节码 |
|||
* |
|||
* @return sourceNumber |
|||
*/ |
|||
private int recoverNetworkBytesOrder(byte[] orderBytes) { |
|||
int sourceNumber = 0; |
|||
int length = 4; |
|||
int number = 8; |
|||
for (int i = 0; i < length; i++) { |
|||
sourceNumber <<= number; |
|||
sourceNumber |= orderBytes[i] & 0xff; |
|||
} |
|||
return sourceNumber; |
|||
} |
|||
|
|||
/** |
|||
* 对密文进行解密 |
|||
* |
|||
* @param text 需要解密的密文 |
|||
* |
|||
* @return 解密得到的明文 |
|||
* |
|||
* @throws Exception 异常错误信息 |
|||
*/ |
|||
public String decrypt(String text) |
|||
throws Exception { |
|||
byte[] original; |
|||
try { |
|||
|
|||
byte[] encrypted = Base64.decodeBase64(text); |
|||
original = decCipher.doFinal(encrypted); |
|||
} catch (Exception e) { |
|||
throw new Exception("DECRYPT_AES_ERROR"); |
|||
} |
|||
String xmlContent; |
|||
try { |
|||
// 去除补位字符
|
|||
byte[] bytes = PKCS7Encoder.decode(original); |
|||
// 分离16位随机字符串,网络字节序和ClientId
|
|||
byte[] networkOrder = Arrays.copyOfRange(bytes, 16, 20); |
|||
int xmlLength = recoverNetworkBytesOrder(networkOrder); |
|||
xmlContent = new String(Arrays.copyOfRange(bytes, 20, 20 + xmlLength), CHARSET); |
|||
} catch (Exception e) { |
|||
throw new Exception("ILLEGAL_BUFFER_ERROR"); |
|||
} |
|||
return xmlContent; |
|||
} |
|||
|
|||
} |
|||
@ -0,0 +1,59 @@ |
|||
package com.epmet.mpaes; |
|||
|
|||
@SuppressWarnings("serial") |
|||
public class AesException extends Exception { |
|||
|
|||
public final static int OK = 0; |
|||
public final static int ValidateSignatureError = -40001; |
|||
public final static int ParseXmlError = -40002; |
|||
public final static int ComputeSignatureError = -40003; |
|||
public final static int IllegalAesKey = -40004; |
|||
public final static int ValidateAppidError = -40005; |
|||
public final static int EncryptAESError = -40006; |
|||
public final static int DecryptAESError = -40007; |
|||
public final static int IllegalBuffer = -40008; |
|||
//public final static int EncodeBase64Error = -40009;
|
|||
//public final static int DecodeBase64Error = -40010;
|
|||
//public final static int GenReturnXmlError = -40011;
|
|||
|
|||
private int code; |
|||
|
|||
private static String getMessage(int code) { |
|||
switch (code) { |
|||
case ValidateSignatureError: |
|||
return "签名验证错误"; |
|||
case ParseXmlError: |
|||
return "xml解析失败"; |
|||
case ComputeSignatureError: |
|||
return "sha加密生成签名失败"; |
|||
case IllegalAesKey: |
|||
return "SymmetricKey非法"; |
|||
case ValidateAppidError: |
|||
return "appid校验失败"; |
|||
case EncryptAESError: |
|||
return "aes加密失败"; |
|||
case DecryptAESError: |
|||
return "aes解密失败"; |
|||
case IllegalBuffer: |
|||
return "解密后得到的buffer非法"; |
|||
// case EncodeBase64Error:
|
|||
// return "base64加密错误";
|
|||
// case DecodeBase64Error:
|
|||
// return "base64解密错误";
|
|||
// case GenReturnXmlError:
|
|||
// return "xml生成失败";
|
|||
default: |
|||
return null; // cannot be
|
|||
} |
|||
} |
|||
|
|||
public int getCode() { |
|||
return code; |
|||
} |
|||
|
|||
AesException(int code) { |
|||
super(getMessage(code)); |
|||
this.code = code; |
|||
} |
|||
|
|||
} |
|||
@ -0,0 +1,26 @@ |
|||
package com.epmet.mpaes; |
|||
|
|||
import java.util.ArrayList; |
|||
|
|||
class ByteGroup { |
|||
ArrayList<Byte> byteContainer = new ArrayList<Byte>(); |
|||
|
|||
public byte[] toBytes() { |
|||
byte[] bytes = new byte[byteContainer.size()]; |
|||
for (int i = 0; i < byteContainer.size(); i++) { |
|||
bytes[i] = byteContainer.get(i); |
|||
} |
|||
return bytes; |
|||
} |
|||
|
|||
public ByteGroup addBytes(byte[] bytes) { |
|||
for (byte b : bytes) { |
|||
byteContainer.add(b); |
|||
} |
|||
return this; |
|||
} |
|||
|
|||
public int size() { |
|||
return byteContainer.size(); |
|||
} |
|||
} |
|||
@ -0,0 +1,67 @@ |
|||
/** |
|||
* 对公众平台发送给公众账号的消息加解密示例代码. |
|||
* |
|||
* @copyright Copyright (c) 1998-2014 Tencent Inc. |
|||
*/ |
|||
|
|||
// ------------------------------------------------------------------------
|
|||
|
|||
package com.epmet.mpaes; |
|||
|
|||
import java.nio.charset.Charset; |
|||
import java.util.Arrays; |
|||
|
|||
/** |
|||
* 提供基于PKCS7算法的加解密接口. |
|||
*/ |
|||
class PKCS7Encoder { |
|||
static Charset CHARSET = Charset.forName("utf-8"); |
|||
static int BLOCK_SIZE = 32; |
|||
|
|||
/** |
|||
* 获得对明文进行补位填充的字节. |
|||
* |
|||
* @param count 需要进行填充补位操作的明文字节个数 |
|||
* @return 补齐用的字节数组 |
|||
*/ |
|||
static byte[] encode(int count) { |
|||
// 计算需要填充的位数
|
|||
int amountToPad = BLOCK_SIZE - (count % BLOCK_SIZE); |
|||
if (amountToPad == 0) { |
|||
amountToPad = BLOCK_SIZE; |
|||
} |
|||
// 获得补位所用的字符
|
|||
char padChr = chr(amountToPad); |
|||
String tmp = new String(); |
|||
for (int index = 0; index < amountToPad; index++) { |
|||
tmp += padChr; |
|||
} |
|||
return tmp.getBytes(CHARSET); |
|||
} |
|||
|
|||
/** |
|||
* 删除解密后明文的补位字符 |
|||
* |
|||
* @param decrypted 解密后的明文 |
|||
* @return 删除补位字符后的明文 |
|||
*/ |
|||
static byte[] decode(byte[] decrypted) { |
|||
int pad = (int) decrypted[decrypted.length - 1]; |
|||
if (pad < 1 || pad > 32) { |
|||
pad = 0; |
|||
} |
|||
return Arrays.copyOfRange(decrypted, 0, decrypted.length - pad); |
|||
} |
|||
|
|||
/** |
|||
* 将数字转化成ASCII码对应的字符，用于对明文进行补码 |
|||
* |
|||
* @param a 需要转化的数字 |
|||
* @return 转化得到的字符 |
|||
*/ |
|||
static char chr(int a) { |
|||
byte target = (byte) (a & 0xFF); |
|||
return (char) target; |
|||
} |
|||
|
|||
} |
|||
@ -0,0 +1,63 @@ |
|||
/** |
|||
* 对公众平台发送给公众账号的消息加解密示例代码. |
|||
* |
|||
* @copyright Copyright (c) 1998-2014 Tencent Inc. |
|||
*/ |
|||
|
|||
// ------------------------------------------------------------------------
|
|||
|
|||
package com.epmet.mpaes; |
|||
|
|||
import org.springframework.stereotype.Component; |
|||
|
|||
import java.security.MessageDigest; |
|||
import java.util.Arrays; |
|||
|
|||
/** |
|||
* SHA1 class |
|||
* |
|||
* 计算公众平台的消息签名接口. |
|||
*/ |
|||
@Component |
|||
public class SHA1 { |
|||
|
|||
/** |
|||
* 用SHA1算法生成安全签名 |
|||
* @param token 票据 |
|||
* @param timestamp 时间戳 |
|||
* @param nonce 随机字符串 |
|||
* @param encrypt 密文 |
|||
* @return 安全签名 |
|||
* @throws AesException |
|||
*/ |
|||
public static String getSHA1(String token, String timestamp, String nonce, String encrypt) throws AesException { |
|||
try { |
|||
String[] array = new String[]{token, timestamp, nonce, encrypt}; |
|||
StringBuffer sb = new StringBuffer(); |
|||
// 字符串排序
|
|||
Arrays.sort(array); |
|||
for (int i = 0; i < 4; i++) { |
|||
sb.append(array[i]); |
|||
} |
|||
String str = sb.toString(); |
|||
// SHA1签名生成
|
|||
MessageDigest md = MessageDigest.getInstance("SHA-1"); |
|||
md.update(str.getBytes()); |
|||
byte[] digest = md.digest(); |
|||
|
|||
StringBuffer hexstr = new StringBuffer(); |
|||
String shaHex = ""; |
|||
for (int i = 0; i < digest.length; i++) { |
|||
shaHex = Integer.toHexString(digest[i] & 0xFF); |
|||
if (shaHex.length() < 2) { |
|||
hexstr.append(0); |
|||
} |
|||
hexstr.append(shaHex); |
|||
} |
|||
return hexstr.toString(); |
|||
} catch (Exception e) { |
|||
e.printStackTrace(); |
|||
throw new AesException(AesException.ComputeSignatureError); |
|||
} |
|||
} |
|||
} |
|||
@ -0,0 +1,281 @@ |
|||
/** |
|||
* 对公众平台发送给公众账号的消息加解密示例代码. |
|||
* |
|||
* @copyright Copyright (c) 1998-2014 Tencent Inc. |
|||
*/ |
|||
|
|||
// ------------------------------------------------------------------------
|
|||
|
|||
/** |
|||
* 针对org.apache.commons.codec.binary.Base64， |
|||
* 需要导入架包commons-codec-1.9（或commons-codec-1.8等其他版本） |
|||
* 官方下载地址：http://commons.apache.org/proper/commons-codec/download_codec.cgi
|
|||
*/ |
|||
package com.epmet.mpaes; |
|||
|
|||
import org.apache.commons.codec.binary.Base64; |
|||
|
|||
import javax.crypto.Cipher; |
|||
import javax.crypto.spec.IvParameterSpec; |
|||
import javax.crypto.spec.SecretKeySpec; |
|||
import java.nio.charset.Charset; |
|||
import java.util.Arrays; |
|||
import java.util.Random; |
|||
|
|||
/** |
|||
* 提供接收和推送给公众平台消息的加解密接口(UTF8编码的字符串). |
|||
* <ol> |
|||
* <li>第三方回复加密消息给公众平台</li> |
|||
* <li>第三方收到公众平台发送的消息，验证消息的安全性，并对消息进行解密。</li> |
|||
* </ol> |
|||
* 说明：异常java.security.InvalidKeyException:illegal Key Size的解决方案 |
|||
* <ol> |
|||
* <li>在官方网站下载JCE无限制权限策略文件（JDK7的下载地址： |
|||
* http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html</li>
|
|||
* <li>下载后解压，可以看到local_policy.jar和US_export_policy.jar以及readme.txt</li> |
|||
* <li>如果安装了JRE，将两个jar文件放到%JRE_HOME%\lib\security目录下覆盖原来的文件</li> |
|||
* <li>如果安装了JDK，将两个jar文件放到%JDK_HOME%\jre\lib\security目录下覆盖原来文件</li> |
|||
* </ol> |
|||
*/ |
|||
public class WXBizMsgCrypt { |
|||
static Charset CHARSET = Charset.forName("utf-8"); |
|||
Base64 base64 = new Base64(); |
|||
byte[] aesKey; |
|||
String token; |
|||
String appId; |
|||
|
|||
/** |
|||
* 构造函数 |
|||
* @param token 公众平台上，开发者设置的token |
|||
* @param encodingAesKey 公众平台上，开发者设置的EncodingAESKey |
|||
* @param appId 公众平台appid |
|||
* |
|||
* @throws AesException 执行失败，请查看该异常的错误码和具体的错误信息 |
|||
*/ |
|||
public WXBizMsgCrypt(String token, String encodingAesKey, String appId) throws AesException { |
|||
if (encodingAesKey.length() != 43) { |
|||
throw new AesException(AesException.IllegalAesKey); |
|||
} |
|||
|
|||
this.token = token; |
|||
this.appId = appId; |
|||
aesKey = Base64.decodeBase64(encodingAesKey + "="); |
|||
} |
|||
|
|||
// 生成4个字节的网络字节序
|
|||
byte[] getNetworkBytesOrder(int sourceNumber) { |
|||
byte[] orderBytes = new byte[4]; |
|||
orderBytes[3] = (byte) (sourceNumber & 0xFF); |
|||
orderBytes[2] = (byte) (sourceNumber >> 8 & 0xFF); |
|||
orderBytes[1] = (byte) (sourceNumber >> 16 & 0xFF); |
|||
orderBytes[0] = (byte) (sourceNumber >> 24 & 0xFF); |
|||
return orderBytes; |
|||
} |
|||
|
|||
// 还原4个字节的网络字节序
|
|||
int recoverNetworkBytesOrder(byte[] orderBytes) { |
|||
int sourceNumber = 0; |
|||
for (int i = 0; i < 4; i++) { |
|||
sourceNumber <<= 8; |
|||
sourceNumber |= orderBytes[i] & 0xff; |
|||
} |
|||
return sourceNumber; |
|||
} |
|||
|
|||
// 随机生成16位字符串
|
|||
String getRandomStr() { |
|||
String base = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"; |
|||
Random random = new Random(); |
|||
StringBuffer sb = new StringBuffer(); |
|||
for (int i = 0; i < 16; i++) { |
|||
int number = random.nextInt(base.length()); |
|||
sb.append(base.charAt(number)); |
|||
} |
|||
return sb.toString(); |
|||
} |
|||
|
|||
/** |
|||
* 对明文进行加密. |
|||
* |
|||
* @param text 需要加密的明文 |
|||
* @return 加密后base64编码的字符串 |
|||
* @throws AesException aes加密失败 |
|||
*/ |
|||
String encrypt(String randomStr, String text) throws AesException { |
|||
ByteGroup byteCollector = new ByteGroup(); |
|||
byte[] randomStrBytes = randomStr.getBytes(CHARSET); |
|||
byte[] textBytes = text.getBytes(CHARSET); |
|||
byte[] networkBytesOrder = getNetworkBytesOrder(textBytes.length); |
|||
byte[] appidBytes = appId.getBytes(CHARSET); |
|||
|
|||
// randomStr + networkBytesOrder + text + appid
|
|||
byteCollector.addBytes(randomStrBytes); |
|||
byteCollector.addBytes(networkBytesOrder); |
|||
byteCollector.addBytes(textBytes); |
|||
byteCollector.addBytes(appidBytes); |
|||
|
|||
// ... + pad: 使用自定义的填充方式对明文进行补位填充
|
|||
byte[] padBytes = PKCS7Encoder.encode(byteCollector.size()); |
|||
byteCollector.addBytes(padBytes); |
|||
|
|||
// 获得最终的字节流, 未加密
|
|||
byte[] unencrypted = byteCollector.toBytes(); |
|||
|
|||
try { |
|||
// 设置加密模式为AES的CBC模式
|
|||
Cipher cipher = Cipher.getInstance("AES/CBC/NoPadding"); |
|||
SecretKeySpec keySpec = new SecretKeySpec(aesKey, "AES"); |
|||
IvParameterSpec iv = new IvParameterSpec(aesKey, 0, 16); |
|||
cipher.init(Cipher.ENCRYPT_MODE, keySpec, iv); |
|||
|
|||
// 加密
|
|||
byte[] encrypted = cipher.doFinal(unencrypted); |
|||
|
|||
// 使用BASE64对加密后的字符串进行编码
|
|||
String base64Encrypted = base64.encodeToString(encrypted); |
|||
|
|||
return base64Encrypted; |
|||
} catch (Exception e) { |
|||
e.printStackTrace(); |
|||
throw new AesException(AesException.EncryptAESError); |
|||
} |
|||
} |
|||
|
|||
/** |
|||
* 对密文进行解密. |
|||
* |
|||
* @param text 需要解密的密文 |
|||
* @return 解密得到的明文 |
|||
* @throws AesException aes解密失败 |
|||
*/ |
|||
String decrypt(String text) throws AesException { |
|||
byte[] original; |
|||
try { |
|||
// 设置解密模式为AES的CBC模式
|
|||
Cipher cipher = Cipher.getInstance("AES/CBC/NoPadding"); |
|||
SecretKeySpec key_spec = new SecretKeySpec(aesKey, "AES"); |
|||
IvParameterSpec iv = new IvParameterSpec(Arrays.copyOfRange(aesKey, 0, 16)); |
|||
cipher.init(Cipher.DECRYPT_MODE, key_spec, iv); |
|||
|
|||
// 使用BASE64对密文进行解码
|
|||
byte[] encrypted = Base64.decodeBase64(text); |
|||
|
|||
// 解密
|
|||
original = cipher.doFinal(encrypted); |
|||
} catch (Exception e) { |
|||
e.printStackTrace(); |
|||
throw new AesException(AesException.DecryptAESError); |
|||
} |
|||
|
|||
String xmlContent, from_appid; |
|||
try { |
|||
// 去除补位字符
|
|||
byte[] bytes = PKCS7Encoder.decode(original); |
|||
|
|||
// 分离16位随机字符串,网络字节序和AppId
|
|||
byte[] networkOrder = Arrays.copyOfRange(bytes, 16, 20); |
|||
|
|||
int xmlLength = recoverNetworkBytesOrder(networkOrder); |
|||
|
|||
xmlContent = new String(Arrays.copyOfRange(bytes, 20, 20 + xmlLength), CHARSET); |
|||
from_appid = new String(Arrays.copyOfRange(bytes, 20 + xmlLength, bytes.length), |
|||
CHARSET); |
|||
} catch (Exception e) { |
|||
e.printStackTrace(); |
|||
throw new AesException(AesException.IllegalBuffer); |
|||
} |
|||
|
|||
// appid不相同的情况
|
|||
if (!from_appid.equals(appId)) { |
|||
throw new AesException(AesException.ValidateAppidError); |
|||
} |
|||
return xmlContent; |
|||
|
|||
} |
|||
|
|||
/** |
|||
* 将公众平台回复用户的消息加密打包. |
|||
* <ol> |
|||
* <li>对要发送的消息进行AES-CBC加密</li> |
|||
* <li>生成安全签名</li> |
|||
* <li>将消息密文和安全签名打包成xml格式</li> |
|||
* </ol> |
|||
* |
|||
* @param replyMsg 公众平台待回复用户的消息，xml格式的字符串 |
|||
* @param timeStamp 时间戳，可以自己生成，也可以用URL参数的timestamp |
|||
* @param nonce 随机串，可以自己生成，也可以用URL参数的nonce |
|||
* |
|||
* @return 加密后的可以直接回复用户的密文，包括msg_signature, timestamp, nonce, encrypt的xml格式的字符串 |
|||
* @throws AesException 执行失败，请查看该异常的错误码和具体的错误信息 |
|||
*/ |
|||
public String encryptMsg(String replyMsg, String timeStamp, String nonce) throws AesException { |
|||
// 加密
|
|||
String encrypt = encrypt(getRandomStr(), replyMsg); |
|||
|
|||
// 生成安全签名
|
|||
if (timeStamp == "") { |
|||
timeStamp = Long.toString(System.currentTimeMillis()); |
|||
} |
|||
|
|||
String signature = SHA1.getSHA1(token, timeStamp, nonce, encrypt); |
|||
|
|||
// System.out.println("发送给平台的签名是: " + signature[1].toString());
|
|||
// 生成发送的xml
|
|||
String result = XMLParse.generate(encrypt, signature, timeStamp, nonce); |
|||
return result; |
|||
} |
|||
|
|||
/** |
|||
* 检验消息的真实性，并且获取解密后的明文. |
|||
* <ol> |
|||
* <li>利用收到的密文生成安全签名，进行签名验证</li> |
|||
* <li>若验证通过，则提取xml中的加密消息</li> |
|||
* <li>对消息进行解密</li> |
|||
* </ol> |
|||
* |
|||
* @param msgSignature 签名串，对应URL参数的msg_signature |
|||
* @param timeStamp 时间戳，对应URL参数的timestamp |
|||
* @param nonce 随机串，对应URL参数的nonce |
|||
* @param postData 密文，对应POST请求的数据 |
|||
* |
|||
* @return 解密后的原文 |
|||
* @throws AesException 执行失败，请查看该异常的错误码和具体的错误信息 |
|||
*/ |
|||
public String decryptMsg(String msgSignature, String timeStamp, String nonce, String postData) |
|||
throws AesException { |
|||
// 提取密文
|
|||
String encrypt = XMLParse.extract(postData); |
|||
|
|||
// 验证安全签名
|
|||
String signature = SHA1.getSHA1(token, timeStamp, nonce, encrypt); |
|||
if (!signature.equals(msgSignature)) { |
|||
throw new AesException(AesException.ValidateSignatureError); |
|||
} |
|||
// 解密
|
|||
String result = decrypt(encrypt); |
|||
return result; |
|||
} |
|||
|
|||
/** |
|||
* 验证URL |
|||
* @param msgSignature 签名串，对应URL参数的msg_signature |
|||
* @param timeStamp 时间戳，对应URL参数的timestamp |
|||
* @param nonce 随机串，对应URL参数的nonce |
|||
* @param echoStr 随机串，对应URL参数的echostr |
|||
* |
|||
* @return 解密之后的echostr |
|||
* @throws AesException 执行失败，请查看该异常的错误码和具体的错误信息 |
|||
*/ |
|||
public String verifyUrl(String msgSignature, String timeStamp, String nonce, String echoStr) |
|||
throws AesException { |
|||
String signature = SHA1.getSHA1(token, timeStamp, nonce, echoStr); |
|||
|
|||
if (!signature.equals(msgSignature)) { |
|||
throw new AesException(AesException.ValidateSignatureError); |
|||
} |
|||
|
|||
String result = decrypt(echoStr); |
|||
return result; |
|||
} |
|||
|
|||
} |
|||
@ -0,0 +1,71 @@ |
|||
/** |
|||
* 对公众平台发送给公众账号的消息加解密示例代码. |
|||
* |
|||
* @copyright Copyright (c) 1998-2014 Tencent Inc. |
|||
*/ |
|||
|
|||
// ------------------------------------------------------------------------
|
|||
|
|||
package com.epmet.mpaes; |
|||
|
|||
import org.w3c.dom.Document; |
|||
import org.w3c.dom.Element; |
|||
import org.w3c.dom.NodeList; |
|||
import org.xml.sax.InputSource; |
|||
|
|||
import javax.xml.parsers.DocumentBuilder; |
|||
import javax.xml.parsers.DocumentBuilderFactory; |
|||
import java.io.StringReader; |
|||
|
|||
/** |
|||
* XMLParse class |
|||
* |
|||
* 提供提取消息格式中的密文及生成回复消息格式的接口. |
|||
*/ |
|||
public class XMLParse { |
|||
|
|||
/** |
|||
* 提取出xml数据包中的加密消息 |
|||
* @param xmltext 待提取的xml字符串 |
|||
* @return 提取出的加密消息字符串 |
|||
* @throws AesException |
|||
*/ |
|||
public static String extract(String xmltext) throws AesException { |
|||
// Object[] result = new Object[3];
|
|||
try { |
|||
DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance(); |
|||
DocumentBuilder db = dbf.newDocumentBuilder(); |
|||
StringReader sr = new StringReader(xmltext); |
|||
InputSource is = new InputSource(sr); |
|||
Document document = db.parse(is); |
|||
|
|||
Element root = document.getDocumentElement(); |
|||
NodeList nodelist1 = root.getElementsByTagName("Encrypt"); |
|||
NodeList nodelist2 = root.getElementsByTagName("ToUserName"); |
|||
// result[0] = 0;
|
|||
String result = nodelist1.item(0).getTextContent(); |
|||
// result[2] = nodelist2.item(0).getTextContent();
|
|||
return result; |
|||
} catch (Exception e) { |
|||
e.printStackTrace(); |
|||
throw new AesException(AesException.ParseXmlError); |
|||
} |
|||
} |
|||
|
|||
/** |
|||
* 生成xml消息 |
|||
* @param encrypt 加密后的消息密文 |
|||
* @param signature 安全签名 |
|||
* @param timestamp 时间戳 |
|||
* @param nonce 随机字符串 |
|||
* @return 生成的xml字符串 |
|||
*/ |
|||
public static String generate(String encrypt, String signature, String timestamp, String nonce) { |
|||
|
|||
String format = "<xml>\n" + "<Encrypt><![CDATA[%1$s]]></Encrypt>\n" |
|||
+ "<MsgSignature><![CDATA[%2$s]]></MsgSignature>\n" |
|||
+ "<TimeStamp>%3$s</TimeStamp>\n" + "<Nonce><![CDATA[%4$s]]></Nonce>\n" + "</xml>"; |
|||
return String.format(format, encrypt, signature, timestamp, nonce); |
|||
|
|||
} |
|||
} |
|||
@ -1,30 +0,0 @@ |
|||
package com.epmet.util; |
|||
|
|||
import okhttp3.*; |
|||
import org.springframework.stereotype.Component; |
|||
|
|||
import java.io.IOException; |
|||
|
|||
/** |
|||
* @Author zxc |
|||
* @CreateTime 2020/7/7 17:39 |
|||
*/ |
|||
@Component |
|||
public class OkHttpHelper { |
|||
|
|||
public static final MediaType JSON = MediaType.get("application/json; charset=utf-8"); |
|||
|
|||
OkHttpClient client = new OkHttpClient(); |
|||
|
|||
public String post(String url, String json) throws IOException { |
|||
RequestBody body = RequestBody.create(JSON, json); |
|||
Request request = new Request.Builder() |
|||
.url(url) |
|||
.post(body) |
|||
.build(); |
|||
try (Response response = client.newCall(request).execute()) { |
|||
return response.body().string(); |
|||
} |
|||
} |
|||
|
|||
} |
|||
@ -1,63 +0,0 @@ |
|||
package com.epmet.util; |
|||
|
|||
import com.epmet.commons.tools.constant.NumConstant; |
|||
|
|||
import java.nio.charset.Charset; |
|||
import java.util.Arrays; |
|||
|
|||
/** |
|||
* @Author zxc |
|||
* @CreateTime 2020/7/6 10:45 |
|||
*/ |
|||
public class PKCS7EncoderUtil { |
|||
|
|||
static Charset CHARSET = Charset.forName("utf-8"); |
|||
static int BLOCK_SIZE = 32; |
|||
|
|||
/** |
|||
* 获得对明文进行补位填充的字节. |
|||
* |
|||
* @param count 需要进行填充补位操作的明文字节个数 |
|||
* @return 补齐用的字节数组 |
|||
*/ |
|||
static byte[] encode(int count) { |
|||
// 计算需要填充的位数
|
|||
int amountToPad = BLOCK_SIZE - (count % BLOCK_SIZE); |
|||
if (amountToPad == NumConstant.ZERO) { |
|||
amountToPad = BLOCK_SIZE; |
|||
} |
|||
// 获得补位所用的字符
|
|||
char padChr = chr(amountToPad); |
|||
String tmp = new String(); |
|||
for (int index = NumConstant.ZERO; index < amountToPad; index++) { |
|||
tmp += padChr; |
|||
} |
|||
return tmp.getBytes(CHARSET); |
|||
} |
|||
|
|||
/** |
|||
* 删除解密后明文的补位字符 |
|||
* |
|||
* @param decrypted 解密后的明文 |
|||
* @return 删除补位字符后的明文 |
|||
*/ |
|||
static byte[] decode(byte[] decrypted) { |
|||
int pad = (int) decrypted[decrypted.length - 1]; |
|||
if (pad < NumConstant.ONE || pad > 32) { |
|||
pad = NumConstant.ZERO; |
|||
} |
|||
return Arrays.copyOfRange(decrypted, 0, decrypted.length - pad); |
|||
} |
|||
|
|||
/** |
|||
* 将数字转化成ASCII码对应的字符，用于对明文进行补码 |
|||
* |
|||
* @param a 需要转化的数字 |
|||
* @return 转化得到的字符 |
|||
*/ |
|||
static char chr(int a) { |
|||
byte target = (byte) (a & 0xFF); |
|||
return (char) target; |
|||
} |
|||
|
|||
} |
|||
@ -1,246 +0,0 @@ |
|||
package com.epmet.util; |
|||
|
|||
import com.epmet.exception.AesException; |
|||
import me.chanjar.weixin.common.util.crypto.PKCS7Encoder; |
|||
import org.apache.commons.codec.binary.Base64; |
|||
import org.w3c.dom.Document; |
|||
import org.w3c.dom.Element; |
|||
import org.w3c.dom.NodeList; |
|||
import org.xml.sax.InputSource; |
|||
|
|||
import java.io.StringReader; |
|||
import java.nio.charset.Charset; |
|||
import java.security.MessageDigest; |
|||
import java.util.Arrays; |
|||
|
|||
import javax.crypto.Cipher; |
|||
import javax.crypto.spec.IvParameterSpec; |
|||
import javax.crypto.spec.SecretKeySpec; |
|||
import javax.xml.parsers.DocumentBuilder; |
|||
import javax.xml.parsers.DocumentBuilderFactory; |
|||
|
|||
/** |
|||
* 提供接收和推送给公众平台消息的加解密接口(UTF8编码的字符串). |
|||
* <ol> * <li>第三方回复加密消息给公众平台</li> * <li>第三方收到公众平台发送的消息，验证消息的安全性，并对消息进行解密。</li> |
|||
* </ol> |
|||
* 说明：异常java.security.InvalidKeyException:illegal Key Size的解决方案 |
|||
* <ol> |
|||
* <li>在官方网站下载JCE无限制权限策略文件（JDK7的下载地址： * |
|||
* http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html</li>
|
|||
* <li>下载后解压，可以看到local_policy.jar和US_export_policy.jar以及readme.txt</li> |
|||
* <li>如果安装了JRE，将两个jar文件放到%JRE_HOME%\lib\security目录下覆盖原来的文件</li> |
|||
* <li>如果安装了JDK，将两个jar文件放到%JDK_HOME%\jre\lib\security目录下覆盖原来文件</li> |
|||
* |
|||
* </ol> |
|||
*/ |
|||
|
|||
/** |
|||
* @Author zxc |
|||
* @CreateTime 2020/7/6 9:51 |
|||
*/ |
|||
public class WXBizMsgCrypt { |
|||
static Charset CHARSET = Charset.forName("utf-8"); |
|||
Base64 base64 = new Base64(); |
|||
byte[] aesKey; |
|||
String token; |
|||
String appId; |
|||
|
|||
/** |
|||
* 构造函数 |
|||
* @param token 公众平台上，开发者设置的token |
|||
* @param encodingAesKey 公众平台上，开发者设置的EncodingAESKey |
|||
* @param appId 公众平台appid |
|||
* |
|||
* @throws AesException 执行失败，请查看该异常的错误码和具体的错误信息 |
|||
*/ |
|||
public WXBizMsgCrypt(String token, String encodingAesKey, String appId) throws AesException { |
|||
if (encodingAesKey.length() != 43) { |
|||
throw new AesException(AesException.IllegalAesKey); |
|||
} |
|||
|
|||
this.token = token; |
|||
this.appId = appId; |
|||
aesKey = Base64.decodeBase64(encodingAesKey + "="); |
|||
} |
|||
|
|||
// 还原4个字节的网络字节序
|
|||
int recoverNetworkBytesOrder(byte[] orderBytes) { |
|||
int sourceNumber = 0; |
|||
for (int i = 0; i < 4; i++) { |
|||
sourceNumber <<= 8; |
|||
sourceNumber |= orderBytes[i] & 0xff; |
|||
} |
|||
return sourceNumber; |
|||
} |
|||
|
|||
/** |
|||
* 对密文进行解密. |
|||
* @param text 需要解密的密文 |
|||
* @return 解密得到的明文 |
|||
* @throws AesException aes解密失败 |
|||
*/ |
|||
String decrypt(String text) throws AesException { |
|||
byte[] original; |
|||
try { |
|||
// 设置解密模式为AES的CBC模式
|
|||
Cipher cipher = Cipher.getInstance("AES/CBC/NoPadding"); |
|||
SecretKeySpec key_spec = new SecretKeySpec(aesKey, "AES"); |
|||
IvParameterSpec iv = new IvParameterSpec(Arrays.copyOfRange(aesKey, 0, 16)); |
|||
cipher.init(Cipher.DECRYPT_MODE, key_spec, iv); |
|||
|
|||
// 使用BASE64对密文进行解码
|
|||
byte[] encrypted = Base64.decodeBase64(text); |
|||
|
|||
// 解密
|
|||
original = cipher.doFinal(encrypted); |
|||
} catch (Exception e) { |
|||
e.printStackTrace(); |
|||
throw new AesException(AesException.DecryptAESError); |
|||
} |
|||
|
|||
String xmlContent, from_appid; |
|||
try { |
|||
// 去除补位字符
|
|||
byte[] bytes = PKCS7Encoder.decode(original); |
|||
|
|||
// 分离16位随机字符串,网络字节序和AppId
|
|||
byte[] networkOrder = Arrays.copyOfRange(bytes, 16, 20); |
|||
|
|||
int xmlLength = recoverNetworkBytesOrder(networkOrder); |
|||
|
|||
xmlContent = new String(Arrays.copyOfRange(bytes, 20, 20 + xmlLength), CHARSET); |
|||
from_appid = |
|||
new String(Arrays.copyOfRange(bytes, 20 + xmlLength, bytes.length), CHARSET); |
|||
} catch (Exception e) { |
|||
e.printStackTrace(); |
|||
throw new AesException(AesException.IllegalBuffer); |
|||
} |
|||
|
|||
// appid不相同的情况
|
|||
if (!from_appid.equals(appId)) { |
|||
throw new AesException(AesException.ValidateSignatureError); |
|||
} |
|||
return xmlContent; |
|||
|
|||
} |
|||
|
|||
/** |
|||
* * 检验消息的真实性，并且获取解密后的明文. |
|||
* <ol> |
|||
* <li>利用收到的密文生成安全签名，进行签名验证</li> |
|||
* <li>若验证通过，则提取xml中的加密消息</li> |
|||
* <li>对消息进行解密</li> |
|||
* </ol> |
|||
* |
|||
* @param msgSignature 签名串，对应URL参数的msg_signature |
|||
* @param timeStamp 时间戳，对应URL参数的timestamp |
|||
* @param nonce 随机串，对应URL参数的nonce |
|||
* @param postData 密文，对应POST请求的数据 |
|||
* @return 解密后的原文 |
|||
* @throws AesException 执行失败，请查看该异常的错误码和具体的错误信息 |
|||
*/ |
|||
public String decryptMsg(String msgSignature, String timeStamp, String nonce, String postData) |
|||
throws AesException { |
|||
|
|||
// 密钥，公众账号的app secret
|
|||
// 提取密文
|
|||
Object[] encrypt = extract(postData); |
|||
|
|||
// 验证安全签名
|
|||
String signature = getSHA1(token, timeStamp, nonce, encrypt[1].toString()); |
|||
|
|||
// 和URL中的签名比较是否相等
|
|||
// System.out.println("第三方收到URL中的签名：" + msg_sign);
|
|||
// System.out.println("第三方校验签名：" + signature);
|
|||
if (!signature.equals(msgSignature)) { |
|||
throw new AesException(AesException.ValidateSignatureError); |
|||
} |
|||
|
|||
// 解密
|
|||
String result = decrypt(encrypt[1].toString()); |
|||
return result; |
|||
} |
|||
|
|||
/** |
|||
* 提取出xml数据包中的加密消息 |
|||
* @param xmltext 待提取的xml字符串 |
|||
* @return 提取出的加密消息字符串 |
|||
* @throws AesException |
|||
*/ |
|||
public static Object[] extract(String xmltext) throws AesException { |
|||
Object[] result = new Object[3]; |
|||
try { |
|||
DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance(); |
|||
dbf.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true); |
|||
dbf.setFeature("http://xml.org/sax/features/external-general-entities", false); |
|||
dbf.setFeature("http://xml.org/sax/features/external-parameter-entities", false); |
|||
dbf.setFeature("http://apache.org/xml/features/nonvalidating/load-external-dtd", false); |
|||
dbf.setXIncludeAware(false); |
|||
dbf.setExpandEntityReferences(false); |
|||
DocumentBuilder db = dbf.newDocumentBuilder(); |
|||
StringReader sr = new StringReader(xmltext); |
|||
InputSource is = new InputSource(sr); |
|||
Document document = db.parse(is); |
|||
|
|||
Element root = document.getDocumentElement(); |
|||
NodeList nodelist1 = root.getElementsByTagName("Encrypt"); |
|||
NodeList nodelist2 = root.getElementsByTagName("ToUserName"); |
|||
result[0] = 0; |
|||
result[1] = nodelist1.item(0).getTextContent(); |
|||
|
|||
//注意这里,获取ticket中的xml里面没有ToUserName这个元素,官网原示例代码在这里会报空
|
|||
//空指针,所以需要处理一下
|
|||
if (nodelist2 != null) { |
|||
if (nodelist2.item(0) != null) { |
|||
result[2] = nodelist2.item(0).getTextContent(); |
|||
} |
|||
} |
|||
return result; |
|||
} catch (Exception e) { |
|||
e.printStackTrace(); |
|||
throw new AesException(AesException.ParseXmlError); |
|||
} |
|||
} |
|||
|
|||
/** |
|||
* 用SHA1算法生成安全签名 |
|||
* @param token 票据 |
|||
* @param timestamp 时间戳 |
|||
* @param nonce 随机字符串 |
|||
* @param encrypt 密文 |
|||
* @return 安全签名 |
|||
* @throws |
|||
* AesException |
|||
*/ |
|||
public static String getSHA1(String token, String timestamp, String nonce, String encrypt) |
|||
throws AesException { |
|||
try { |
|||
String[] array = new String[]{token, timestamp, nonce, encrypt}; |
|||
StringBuffer sb = new StringBuffer(); |
|||
// 字符串排序
|
|||
Arrays.sort(array); |
|||
for (int i = 0; i < 4; i++) { |
|||
sb.append(array[i]); |
|||
} |
|||
String str = sb.toString(); |
|||
// SHA1签名生成
|
|||
MessageDigest md = MessageDigest.getInstance("SHA-1"); |
|||
md.update(str.getBytes()); |
|||
byte[] digest = md.digest(); |
|||
|
|||
StringBuffer hexstr = new StringBuffer(); |
|||
String shaHex = ""; |
|||
for (int i = 0; i < digest.length; i++) { |
|||
shaHex = Integer.toHexString(digest[i] & 0xFF); |
|||
if (shaHex.length() < 2) { |
|||
hexstr.append(0); |
|||
} |
|||
hexstr.append(shaHex); |
|||
} |
|||
return hexstr.toString(); |
|||
} catch (Exception e) { |
|||
e.printStackTrace(); |
|||
throw new AesException(AesException.ComputeSignatureError); |
|||
} |
|||
} |
|||
} |
|||
@ -1,172 +0,0 @@ |
|||
package com.epmet.util; |
|||
import com.google.common.collect.Lists; |
|||
import com.thoughtworks.xstream.XStream; |
|||
import com.thoughtworks.xstream.core.util.QuickWriter; |
|||
import com.thoughtworks.xstream.io.HierarchicalStreamWriter; |
|||
import com.thoughtworks.xstream.io.naming.NoNameCoder; |
|||
import com.thoughtworks.xstream.io.xml.CompactWriter; |
|||
import com.thoughtworks.xstream.io.xml.DomDriver; |
|||
import com.thoughtworks.xstream.io.xml.PrettyPrintWriter; |
|||
import com.thoughtworks.xstream.io.xml.XppDriver; |
|||
|
|||
import java.io.StringWriter; |
|||
import java.io.Writer; |
|||
import java.nio.charset.StandardCharsets; |
|||
import java.util.List; |
|||
|
|||
public class XmlUtil { |
|||
|
|||
/** |
|||
* 转换不带CDDATA的XML |
|||
* |
|||
* @return |
|||
* @ |
|||
*/ |
|||
private static XStream getXStream() { |
|||
// 实例化XStream基本对象
|
|||
XStream xstream = new XStream(new DomDriver(StandardCharsets.UTF_8.name(), new NoNameCoder() { |
|||
// 不对特殊字符进行转换，避免出现重命名字段时的“双下划线”
|
|||
@Override |
|||
public String encodeNode(String name) { |
|||
return name; |
|||
} |
|||
})); |
|||
// 忽视XML与JAVABEAN转换时，XML中的字段在JAVABEAN中不存在的部分
|
|||
xstream.ignoreUnknownElements(); |
|||
return xstream; |
|||
} |
|||
|
|||
|
|||
|
|||
/** |
|||
* 转换带CDDATA的XML |
|||
* |
|||
* @return |
|||
* @ |
|||
*/ |
|||
private static XStream getXStreamWithCData(List<String> ignoreCDATA) { |
|||
// 实例化XStream扩展对象
|
|||
XStream xstream = new XStream(new XppDriver() { |
|||
// 扩展xstream，使其支持CDATA块
|
|||
@Override |
|||
public HierarchicalStreamWriter createWriter(Writer out) { |
|||
return new PrettyPrintWriter(out) { |
|||
boolean cdata = true; |
|||
// 不对特殊字符进行转换，避免出现重命名字段时的“双下划线”
|
|||
@Override |
|||
public String encodeNode(String name) { |
|||
if(!ignoreCDATA.isEmpty()){ |
|||
for(String str:ignoreCDATA){ |
|||
if(str.equals(name)){ |
|||
cdata=false; |
|||
return name; |
|||
} |
|||
} |
|||
} |
|||
cdata=true; |
|||
return name; |
|||
} |
|||
// 对xml节点的转换都增加CDATA标记
|
|||
@Override |
|||
protected void writeText(QuickWriter writer, String text) { |
|||
if (cdata) { |
|||
writer.write("<![CDATA["); |
|||
writer.write(text); |
|||
writer.write("]]>"); |
|||
} else { |
|||
writer.write(text); |
|||
} |
|||
} |
|||
|
|||
|
|||
}; |
|||
} |
|||
}); |
|||
// 忽视XML与JAVABEAN转换时，XML中的字段在JAVABEAN中不存在的部分
|
|||
xstream.ignoreUnknownElements(); |
|||
return xstream; |
|||
} |
|||
|
|||
/** |
|||
* 以压缩的方式输出XML |
|||
* |
|||
* @param obj |
|||
* @return |
|||
*/ |
|||
public static String toCompressXml(Object obj) { |
|||
XStream xstream = getXStream(); |
|||
StringWriter sw = new StringWriter(); |
|||
// 识别obj类中的注解
|
|||
xstream.processAnnotations(obj.getClass()); |
|||
// 设置JavaBean的类别名
|
|||
xstream.aliasType("xml", obj.getClass()); |
|||
xstream.marshal(obj, new CompactWriter(sw)); |
|||
return sw.toString(); |
|||
} |
|||
|
|||
/** |
|||
* 以格式化的方式输出XML |
|||
* |
|||
* @param obj |
|||
* @return |
|||
*/ |
|||
public static String toXml(Object obj) { |
|||
XStream xstream = getXStream(); |
|||
// 识别obj类中的注解
|
|||
xstream.processAnnotations(obj.getClass()); |
|||
// 设置JavaBean的类别名
|
|||
xstream.aliasType("xml", obj.getClass()); |
|||
return xstream.toXML(obj); |
|||
} |
|||
|
|||
/** |
|||
* 转换成JavaBean |
|||
* |
|||
* @param xmlStr |
|||
* @param cls |
|||
* @return |
|||
*/ |
|||
@SuppressWarnings("unchecked") |
|||
public static <T> T toBean(String xmlStr, Class<T> cls) { |
|||
XStream xstream = getXStream(); |
|||
// 识别cls类中的注解
|
|||
xstream.processAnnotations(cls); |
|||
// 设置JavaBean的类别名
|
|||
xstream.aliasType("xml", cls); |
|||
T t = (T) xstream.fromXML(xmlStr); |
|||
return t; |
|||
} |
|||
|
|||
/** |
|||
* 以格式化的方式输出XML |
|||
* |
|||
* @param obj |
|||
* @return |
|||
*/ |
|||
public static String toXmlWithCData(Object obj,List<String> ignoreCDAA) { |
|||
XStream xstream = getXStreamWithCData(ignoreCDAA); |
|||
// 识别obj类中的注解
|
|||
xstream.processAnnotations(obj.getClass()); |
|||
// 设置JavaBean的类别名
|
|||
xstream.aliasType("xml", obj.getClass()); |
|||
return xstream.toXML(obj); |
|||
} |
|||
|
|||
/** |
|||
* 转换成JavaBean |
|||
* |
|||
* @param xmlStr |
|||
* @param cls |
|||
* @return |
|||
*/ |
|||
@SuppressWarnings("unchecked") |
|||
public static <T> T toBeanWithCData(String xmlStr, Class<T> cls) { |
|||
XStream xstream = getXStreamWithCData(null); |
|||
// 识别cls类中的注解
|
|||
xstream.processAnnotations(cls); |
|||
// 设置JavaBean的类别名
|
|||
xstream.alias("xml", cls); |
|||
T t = (T) xstream.fromXML(xmlStr); |
|||
return t; |
|||
} |
|||
} |
|||
Loading…
Reference in new issue