//因为是url的方式传值，公钥中的/需要进行转换一下，传到后端再转回来（PS：因为生成的公钥里是不存在","的，所以这里转成逗号）websocket = new WebSocket("ws://localhost:10086/websocket/" + userId + "/" + window.jsPublicKey.replace(/\//g,","));

/*** WebSocket服务*/
@Component
@ServerEndpoint(value = "/websocket/{userId}/{publicKey}", configurator = MyEndpointConfigure.class)
public class WebSocketServer {//省略其他代码  /*** 登录用户的前端公钥Map集合（其实应该放在Redis）*/private static Map<Session, String> loginPublicKeyList = new HashMap<Session, String>();/*** 连接建立成功调用的方法*/@OnOpenpublic void onOpen(Session session, @PathParam("userId") String userId, @PathParam("publicKey") String publicKey) {//省略其他代码//设置前端公钥，因为是url的方式传值，公钥中的/需要进行转换一下，传到后端再转回来，然后将每个用户的前端公钥存储起来loginPublicKeyList.put(session,publicKey.replaceAll(",", "/"));}
}

//发送消息
function send(but) {//业务操作不变，省略代码//先加密let aesKey = aesUtil.genKey();let data = {data: aesUtil.encrypt(JSON.stringify({"type": "1","toUser": {"userId": toUserId},"fromUser": {"userId": fromUserId},"message": message,"date": nowTime}), aesKey),//AES加密后的数据aesKey: rsaUtil.encrypt(aesKey, sessionStorage.getItem('javaPublicKey')),//后端RSA公钥加密后的AES的keypublicKey: window.jsPublicKey//前端公钥
    };websocket.send(JSON.stringify(data));//业务操作不变，省略代码
}    

    /*** 服务器接收到客户端消息时调用的方法*/@OnMessagepublic void onMessage(String message, Session session) {try {//jacksonObjectMapper mapper = new ObjectMapper();//jackson 序列化和反序列化 date处理mapper.setDateFormat(new SimpleDateFormat("yyyy-MM-dd HH:mm:ss"));mapper.configure(DeserializationFeature.FAIL_ON_UNKNOWN_PROPERTIES, false);//JSON字符串转 HashMapHashMap map = mapper.readValue(message, HashMap.class);//先解密String data = (String) map.get("data");String aesKey = (String) map.get("aesKey");//后端私钥解密的到AES的keybyte[] plaintext = RsaUtil.decryptByPrivateKey(Base64.decodeBase64(aesKey), RsaUtil.getPrivateKey());aesKey = new String(plaintext);//RSA解密出来字符串多一对双引号aesKey = aesKey.substring(1, aesKey.length() - 1);//AES解密得到明文data数据String decrypt = AesUtil.decrypt(data, aesKey);//JSON字符串转 HashMapHashMap hashMap = mapper.readValue(decrypt, HashMap.class);//得到hashMap，下面的业务操作跟前面的一样，这里就不贴出来了
} catch (Exception e) {e.printStackTrace();}}

    /*** 封装一个send方法，发送消息到前端*/private void send(Session session, String message) {try {//发送前加密//每次响应之前随机获取AES的key，加密data数据String key = AesUtil.getKey();String data = AesUtil.encrypt(message, key);//用前端的公钥来解密AES的key，并转成Base64，注意：这里需要用接收方的前端公钥进行加密，从loginPublicKeyList集合获取String aesKey = Base64.encodeBase64String(RsaUtil.encryptByPublicKey(key.getBytes(), loginPublicKeyList.get(session)));//发送过去的是AES加密后的data，跟RSA加密后的aesKeysession.getBasicRemote().sendText("{\"data\":\"" + data + "\",\"aesKey\":\"" + aesKey + "\"}");} catch (Exception e) {e.printStackTrace();}}

//接收到消息的回调方法
websocket.onmessage = function (event) {let data = eval("(" + event.data + ")");//先解密let msgObj = aesUtil.decrypt(data.data, rsaUtil.decrypt(data.aesKey, window.jsPrivateKey));//业务操作不变，省略代码

};