微信公众平台企业号回调模式的URL验证

package

org.yhxz.weixin.servlet;

import

java.io.IOException;

import

java.io.PrintWriter;

import

javax.servlet.ServletException;

import

javax.servlet.http.HttpServlet;

import

javax.servlet.http.HttpServletRequest;

import

javax.servlet.http.HttpServletResponse;

import

com.qq.weixin.mp.aes.AesException;

import

com.qq.weixin.mp.aes.WXBizMsgCrypt;

/**

* 核心请求处理类

* 

* @author heqian

* 

*/

public

class

CoreServlet 

extends

HttpServlet {

private

static

final

long

serialVersionUID = 4440739483644821986L;

String sToken = 

"5XaQ8cG6x2pULd"

;

//这个Token是随机生成，但是必须跟企业号上的相同

String sCorpID = 

"wx4edd47d3a6r4r991"

;

//这里是你企业号的CorpID

String sEncodingAESKey = 

"jWmYm7qjusnxu65ZRjGtBxmz3KA1tkAj3ykkR6q2B2C"

;

//这个EncodingAESKey是随机生成，但是必须跟企业号上的相同

/**

* 确认请求来自微信服务器

* @throws IOException 

*/

public

void

doGet(HttpServletRequest request, HttpServletResponse response) 

throws

IOException{

// 微信加密签名 

String sVerifyMsgSig = request.getParameter(

"msg_signature"

);

// 时间戳

String sVerifyTimeStamp = request.getParameter(

"timestamp"

);

// 随机数

String sVerifyNonce = request.getParameter(

"nonce"

);

// 随机字符串

String sVerifyEchoStr = request.getParameter(

"echostr"

);

String sEchoStr; 

//需要返回的明文

PrintWriter out = response.getWriter();  

WXBizMsgCrypt wxcpt;

try

{

wxcpt = 

new

WXBizMsgCrypt(sToken, sEncodingAESKey, sCorpID);

sEchoStr = wxcpt.VerifyURL(sVerifyMsgSig, sVerifyTimeStamp,sVerifyNonce, sVerifyEchoStr);

// 验证URL成功，将sEchoStr返回

out.print(sEchoStr);  

} 

catch

(AesException e1) {

e1.printStackTrace();

}

}

/**

* 处理微信服务器发来的消息

*/

public

void

doPost(HttpServletRequest request, HttpServletResponse response) 

throws

ServletException, IOException {

// TODO 消息的接收、处理、响应

}

}

<?xml version=

"1.0"

encoding=

"UTF-8"

?>

<web-app version=

"2.5"

xmlns=

"http://java.sun.com/xml/ns/javaee"

xmlns:xsi=

"http://www.w3.org/2001/XMLSchema-instance"

xsi:schemaLocation="http:

//java.sun.com/xml/ns/javaee 

http:

//java.sun.com/xml/ns/javaee/web-app_2_5.xsd">

<servlet>

<servlet-name>coreServlet</servlet-name>

<servlet-

class

>

org.yhxz.course.servlet.CoreServlet

</servlet-

class

>

</servlet>

<!-- url-pattern中配置的/coreServlet用于指定该Servlet的访问路径 -->

<servlet-mapping>

<servlet-name>coreServlet</servlet-name>

<url-pattern>/coreServlet</url-pattern>

</servlet-mapping>

<welcome-file-list>

<welcome-file>index.html</welcome-file>

</welcome-file-list>

</web-app>