import java.io.IOException;
import java.io.PrintWriter;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import com.util.wechat.SignUtil;@Controller
@RequestMapping("wechat")
public class WechatController {private static Logger log = LoggerFactory.getLogger(WechatController.class);@RequestMapping(method = { RequestMethod.GET })public void doGet(HttpServletRequest request, HttpServletResponse response) {log.debug("weixin get...");// 微信加密签名，signature结合了开发者填写的token参数和请求中的timestamp参数、nonce参数。String signature = request.getParameter("signature");// 时间戳String timestamp = request.getParameter("timestamp");// 随机数String nonce = request.getParameter("nonce");// 随机字符串String echostr = request.getParameter("echostr");// 通过检验signature对请求进行校验，若校验成功则原样返回echostr，表示接入成功，否则接入失败PrintWriter out = null;try {out = response.getWriter();if (SignUtil.checkSignature(signature, timestamp, nonce)) {log.debug("weixin get success....");　　　　　　　　　　// 我们验证通过，确定是微信发过来的消息，就将 随机字符串原样返回给微信out.print(echostr);}} catch (IOException e) {e.printStackTrace();} finally {if (out != null)out.close();}}
}

import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.util.Arrays;/*** 微信请求校验工具类*/
public class SignUtil {// 与接口配置信息中的Token要一致private static String token = "mytoken";/*** 验证签名* * @param signature* @param timestamp* @param nonce* @return*/public static boolean checkSignature(String signature, String timestamp, String nonce) {String[] arr = new String[] { token, timestamp, nonce };// 将token、timestamp、nonce三个参数进行字典序排序
        Arrays.sort(arr);// 将三个字符串排序之后合并为一个StringBuilder content = new StringBuilder();for (int i = 0; i < arr.length; i++) {content.append(arr[i]);}MessageDigest md = null;String tmpStr = null;try {//  获得SHA-1 加密的对象md = MessageDigest.getInstance("SHA-1");// 将三个参数字符串拼接成一个字符串进行sha1加密byte[] digest = md.digest(content.toString().getBytes());// 将字节数组转换为十六进制字符串tmpStr = byteToStr(digest);} catch (NoSuchAlgorithmException e) {e.printStackTrace();}content = null;// 将sha1加密后的字符串可与signature对比，标识该请求来源于微信return tmpStr != null ? tmpStr.equals(signature.toUpperCase()) : false;}/*** 将字节数组转换为十六进制字符串* * @param byteArray* @return*/private static String byteToStr(byte[] byteArray) {String strDigest = "";for (int i = 0; i < byteArray.length; i++) {strDigest += byteToHexStr(byteArray[i]);}return strDigest;}/*** 将字节转换为十六进制字符串* * @param mByte* @return*/private static String byteToHexStr(byte mByte) {char[] Digit = { '0', '1', '2', '3', '4', '5', '6', '7', '8', '9', 'A', 'B', 'C', 'D', 'E', 'F' };char[] tempArr = new char[2];tempArr[0] = Digit[(mByte >>> 4) & 0X0F];tempArr[1] = Digit[mByte & 0X0F];String s = new String(tempArr);return s;}
}

import java.io.IOException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;import com.util.wechat.WechatUtil;/*** 获取关注公众号之后的微信用户信息的接口，如果在微信浏览器里访问* https://open.weixin.qq.com/connect/oauth2/authorize?appid=wxd7f6c5b8899fba83&redirect_uri=http://o2o.yitiaojieinfo.com/o2o/wechatlogin/logincheck&response_type=code&scope=snsapi_userinfo&state=1#wechat_redirect* 则这里将会获取到code,之后再可以通过code获取到access_token 进而获取到用户信息* @author xiangze**/
@Controller
@RequestMapping("wechatlogin")
public class WechatLoginController {private static Logger log = LoggerFactory.getLogger(WechatLoginController.class);private static final String FRONTEND = "1";private static final String SHOPEND = "2";@Autowiredprivate PersonInfoService personInfoService;@Autowiredprivate WechatAuthService wechatAuthService;@RequestMapping(value = "/logincheck", method = { RequestMethod.GET })public String doGet(HttpServletRequest request, HttpServletResponse response) {log.debug("weixin login get...");// 获取微信公众号传输过来的code,通过code可获取access_token,进而获取用户信息String code = request.getParameter("code");// 这个state可以用来传我们自定义的信息，方便程序调用，这里也可以不用String roleType = request.getParameter("state");log.debug("weixin login code:" + code);WechatUser user = null;String openId = null;WechatAuth auth = null;if (null != code) {UserAccessToken token;try {// 通过code获取access_tokentoken = WechatUtil.getUserAccessToken(code);log.debug("weixin login token:" + token.toString());// 通过token获取accessTokenString accessToken = token.getAccessToken();// 通过token获取openIdopenId = token.getOpenId();// 通过access_token和openId获取用户昵称等信息user = WechatUtil.getUserInfo(accessToken, openId);log.debug("weixin login user:" + user.toString());request.getSession().setAttribute("openId", openId);auth = wechatAuthService.getWechatAuthByOpenId(openId);} catch (IOException e) {log.error("error in getUserAccessToken or getUserInfo or findByOpenId: " + e.toString());e.printStackTrace();}}// 若微信帐号为空则需要注册微信帐号，同时注册用户信息if (auth == null) {PersonInfo personInfo = WechatUtil.getPersonInfoFromRequest(user);auth = new WechatAuth();auth.setOpenId(openId);if (FRONTEND.equals(roleType)) {personInfo.setUserType(1);} else {personInfo.setUserType(2);}auth.setPersonInfo(personInfo);WechatAuthExecution we = wechatAuthService.register(auth);if (we.getState() != WechatAuthStateEnum.SUCCESS.getState()) {return null;} else {personInfo = personInfoService.getPersonInfoById(auth.getPersonInfo().getUserId());request.getSession().setAttribute("user", personInfo);}} else {request.getSession().setAttribute("user", auth.getPersonInfo());}// 若用户点击的是前端展示系统按钮则进入前端展示系统if (FRONTEND.equals(roleType)) {return "frontend/index";} else {return "shop/shoplist";}}
}

import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.io.OutputStream;
import java.net.ConnectException;
import java.net.URL;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSocketFactory;
import javax.net.ssl.TrustManager;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import com.fasterxml.jackson.core.JsonParseException;
import com.fasterxml.jackson.databind.JsonMappingException;
import com.fasterxml.jackson.databind.ObjectMapper;/*** 微信工具类* * @author xiangze**/
public class WechatUtil {private static Logger log = LoggerFactory.getLogger(WechatUtil.class);/*** 获取UserAccessToken实体类* * @param code* @return* @throws IOException*/public static UserAccessToken getUserAccessToken(String code) throws IOException {// 测试号信息里的appIdString appId = "你的微信测试号appid";log.debug("appId:" + appId);// 测试号信息里的appsecretString appsecret = "你的微信测试号appsecret";log.debug("secret:" + appsecret);// 根据传入的code,拼接出访问微信定义好的接口的URLString url = "https://api.weixin.qq.com/sns/oauth2/access_token?appid=" + appId + "&secret=" + appsecret+ "&code=" + code + "&grant_type=authorization_code";// 向相应URL发送请求获取token json字符串String tokenStr = httpsRequest(url, "GET", null);log.debug("userAccessToken:" + tokenStr);UserAccessToken token = new UserAccessToken();ObjectMapper objectMapper = new ObjectMapper();try {// 将json字符串转换成相应对象token = objectMapper.readValue(tokenStr, UserAccessToken.class);} catch (JsonParseException e) {log.error("获取用户accessToken失败: " + e.getMessage());e.printStackTrace();} catch (JsonMappingException e) {log.error("获取用户accessToken失败: " + e.getMessage());e.printStackTrace();} catch (IOException e) {log.error("获取用户accessToken失败: " + e.getMessage());e.printStackTrace();}if (token == null) {log.error("获取用户accessToken失败。");return null;}return token;}/*** 发起https请求并获取结果* * @param requestUrl*            请求地址* @param requestMethod*            请求方式（GET、POST）* @param outputStr*            提交的数据* @return json字符串*/public static String httpsRequest(String requestUrl, String requestMethod, String outputStr) {StringBuffer buffer = new StringBuffer();try {// 创建SSLContext对象，并使用我们指定的信任管理器初始化TrustManager[] tm = { new MyX509TrustManager() };SSLContext sslContext = SSLContext.getInstance("SSL", "SunJSSE");sslContext.init(null, tm, new java.security.SecureRandom());// 从上述SSLContext对象中得到SSLSocketFactory对象SSLSocketFactory ssf = sslContext.getSocketFactory();URL url = new URL(requestUrl);HttpsURLConnection httpUrlConn = (HttpsURLConnection) url.openConnection();httpUrlConn.setSSLSocketFactory(ssf);httpUrlConn.setDoOutput(true);httpUrlConn.setDoInput(true);httpUrlConn.setUseCaches(false);// 设置请求方式（GET/POST）
            httpUrlConn.setRequestMethod(requestMethod);if ("GET".equalsIgnoreCase(requestMethod))httpUrlConn.connect();// 当有数据需要提交时if (null != outputStr) {OutputStream outputStream = httpUrlConn.getOutputStream();// 注意编码格式，防止中文乱码outputStream.write(outputStr.getBytes("UTF-8"));outputStream.close();}// 将返回的输入流转换成字符串InputStream inputStream = httpUrlConn.getInputStream();InputStreamReader inputStreamReader = new InputStreamReader(inputStream, "utf-8");BufferedReader bufferedReader = new BufferedReader(inputStreamReader);String str = null;while ((str = bufferedReader.readLine()) != null) {buffer.append(str);}bufferedReader.close();inputStreamReader.close();// 释放资源
            inputStream.close();inputStream = null;httpUrlConn.disconnect();log.debug("https buffer:" + buffer.toString());} catch (ConnectException ce) {log.error("Weixin server connection timed out.");} catch (Exception e) {log.error("https request error:{}", e);}return buffer.toString();}
}