package wxTest;import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.util.Arrays;/*** Created by Administrator on 2019/3/15/0015.*/
public class wxService {/*** 验证签名* @param TOKEN* @param timestamp* @param nonce* @param signature* @return* 1）将token、timestamp、nonce三个参数进行字典序排序* 2）将三个参数字符串拼接成一个字符串进行sha1加密* 3）开发者获得加密后的字符串可与signature对比，标识该请求来源于微信*/public static boolean check(String TOKEN, String timestamp, String nonce, String signature) {//1）将token、timestamp、nonce三个参数进行字典序排序String[] strings = {TOKEN, timestamp, nonce};Arrays.sort(strings);String str =strings[0]+strings[1]+strings[2];// 将三个参数字符串拼接成一个字符串进行sha1加密String mysid =sha1(str);System.err.println(mysid);System.err.println(signature);return mysid.equalsIgnoreCase(signature);}private static String sha1(String str) {//获取加密对象MessageDigest md = null;StringBuffer sb = new StringBuffer();try {md = MessageDigest.getInstance("sha1");byte[] digest = md.digest(str.getBytes());char[] chars={'0','1','2','3','4','5','6','7','8','9','a','b','c','d','e','f'};for (byte b:digest){sb.append(chars[(b>>4)&15]);sb.append(chars[b&15]);}} catch (Exception e) {e.printStackTrace();}return sb.toString();}
}

package wxTest;import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.PrintWriter;/*** Created by Administrator on 2019/3/15/0015.*/
@WebServlet("/wx")
public class wxServlet extends HttpServlet {public static  final String TOKEN ="13245";protected void doPost(HttpServletRequest request, HttpServletResponse response) throws javax.servlet.ServletException, java.io.IOException {System.err.println("post");}protected void doGet( HttpServletRequest request,  HttpServletResponse response) throws javax.servlet.ServletException, java.io.IOException {System.err.println("get");/*** 验证消息的确来自微信服务器**signature    微信加密签名，signature结合了开发者填写的token参数和请求中的timestamp参数、nonce参数。timestamp    时间戳nonce    随机数echostr    随机字符串*/String signature = request.getParameter("signature");String timestamp = request.getParameter("timestamp");String nonce = request.getParameter("nonce");String echostr = request.getParameter("echostr");if (wxService.check(TOKEN,timestamp,nonce,signature)){System.err.println("接入成功");PrintWriter writer = response.getWriter();writer.print(echostr);writer.flush();writer.close();}else{System.err.println("接入失败");}}
}