package com.souvc.weixin.servlet;import java.io.IOException;
import java.io.PrintWriter;import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;import com.souvc.weixin.util.SignUtil;/*** 类名: CoreServlet </br> * 描述: 来接收微信服务器传来信息 </br> * 开发人员： souvc</br> * 创建时间：2015-9-29 </br> * 发布版本：V1.0 </br>*/
public class CoreServlet extends HttpServlet {private static final long serialVersionUID = 4323197796926899691L;/*** 确认请求来自微信服务器*/public void doGet(HttpServletRequest request, HttpServletResponse response)throws ServletException, IOException {// 微信加密签名String signature = request.getParameter("signature");// 时间戳String timestamp = request.getParameter("timestamp");// 随机数String nonce = request.getParameter("nonce");// 随机字符串String echostr = request.getParameter("echostr");PrintWriter out = response.getWriter();// 通过检验signature对请求进行校验，若校验成功则原样返回echostr，表示接入成功，否则接入失败if (SignUtil.checkSignature(signature, timestamp, nonce)) {out.print(echostr);}out.close();out = null;}/*** 处理微信服务器发来的消息*/public void doPost(HttpServletRequest request, HttpServletResponse response)throws ServletException, IOException {// TODO 消息的接收、处理、响应
    }}

package com.souvc.weixin.util;import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.util.Arrays;/**
* 类名: SignUtil </br>
* 描述: 检验signature 工具类 </br>
* 开发人员： souvc </br>
* 创建时间：  2015-9-29 </br>
* 发布版本：V1.0  </br>*/
public class SignUtil {// 与接口配置信息中的Token要一致private static String token = "souvcweixin";/*** 方法名：checkSignature</br>* 详述：验证签名</br>* 开发人员：souvc</br>* 创建时间：2015-9-29  </br>* @param signature* @param timestamp* @param nonce* @return* @throws*/public static boolean checkSignature(String signature, String timestamp,String nonce) {// 1.将token、timestamp、nonce三个参数进行字典序排序String[] arr = new String[] { token, timestamp, nonce };Arrays.sort(arr);// 2. 将三个参数字符串拼接成一个字符串进行sha1加密StringBuilder content = new StringBuilder();for (int i = 0; i < arr.length; i++) {content.append(arr[i]);}MessageDigest md = null;String tmpStr = null;try {md = MessageDigest.getInstance("SHA-1");// 将三个参数字符串拼接成一个字符串进行sha1加密byte[] digest = md.digest(content.toString().getBytes());tmpStr = byteToStr(digest);} catch (NoSuchAlgorithmException e) {e.printStackTrace();}content = null;// 3.将sha1加密后的字符串可与signature对比，标识该请求来源于微信return tmpStr != null ? tmpStr.equals(signature.toUpperCase()) : false;}/*** 方法名：byteToStr</br>* 详述：将字节数组转换为十六进制字符串</br>* 开发人员：souvc </br>* 创建时间：2015-9-29  </br>* @param byteArray* @return* @throws*/private static String byteToStr(byte[] byteArray) {String strDigest = "";for (int i = 0; i < byteArray.length; i++) {strDigest += byteToHexStr(byteArray[i]);}return strDigest;}/*** 方法名：byteToHexStr</br>* 详述：将字节转换为十六进制字符串</br>* 开发人员：souvc</br>* 创建时间：2015-9-29  </br>* @param mByte* @return* @throws*/private static String byteToHexStr(byte mByte) {char[] Digit = { '0', '1', '2', '3', '4', '5', '6', '7', '8', '9', 'A','B', 'C', 'D', 'E', 'F' };char[] tempArr = new char[2];tempArr[0] = Digit[(mByte >>> 4) & 0X0F];tempArr[1] = Digit[mByte & 0X0F];String s = new String(tempArr);return s;}
}

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" id="WebApp_ID" version="3.0"><display-name>souvc</display-name><welcome-file-list><welcome-file>index.html</welcome-file><welcome-file>index.htm</welcome-file><welcome-file>index.jsp</welcome-file><welcome-file>default.html</welcome-file><welcome-file>default.htm</welcome-file><welcome-file>default.jsp</welcome-file></welcome-file-list><servlet><servlet-name>coreServlet</servlet-name><servlet-class>com.souvc.weixin.servlet.CoreServlet</servlet-class></servlet><!-- url-pattern中配置的/coreServlet用于指定该Servlet的访问路径 --><servlet-mapping><servlet-name>coreServlet</servlet-name><url-pattern>/coreServlet</url-pattern></servlet-mapping></web-app>

<%@ page language="java" contentType="text/html; charset=utf-8"  pageEncoding="utf-8"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>欢迎访问我的网站 www.souvc.com </title>
</head>
<body>欢迎访问我的网站 www.souvc.com
</body>
</html>