java如何对接企业微信的实现步骤

@Slf4j public class HttpUtils { static CloseableHttpClient httpClient; private HttpUtils() { throw new IllegalStateException("Utility class"); } static { Registry registry = RegistryBuilder.create() .register("http", PlainConnectionSocketFactory.getSocketFactory()) .register("https", SSLConnectionSocketFactory.getSocketFactory()) .build(); PoolingHttpClientConnectionManager connectionManager = new PoolingHttpClientConnectionManager(registry); connectionManager.setMaxTotal(200); connectionManager.setDefaultMaxPerRoute(200); connectionManager.setDefaultSocketConfig( SocketConfig.custom().setSoTimeout(15, TimeUnit.SECONDS) .setTcpNoDelay(true).build() ); connectionManager.setValidateAfterInactivity(TimeValue.ofSeconds(15)); httpClient = HttpClients.custom() .setConnectionManager(connectionManager) .disableAutomaticRetries() .build(); } public static String get(String url, Map paramMap, Map headerMap) { String param = paramMap.entrySet().stream().map(n -> n.getKey() + "=" + n.getValue()).collect(Collectors.joining("&")); String fullUrl = url + "?" + param; final HttpGet httpGet = new HttpGet(fullUrl); if (Objects.nonNull(headerMap) && headerMap.size() > 0) { headerMap.forEach((key, value) -> httpGet.addHeader(key, value)); } CloseableHttpResponse response = null; try { response = httpClient.execute(httpGet); String strResult = EntityUtils.toString(response.getEntity()); if (200 != response.getCode()) { log.error("HTTP get 返回状态非200[resp={}]", strResult); } return strResult; } catch (IOException | ParseException e) { log.error("HTTP get 异常", e); return ""; } finally { if (null != response) { try { EntityUtils.consume(response.getEntity()); } catch (IOException e) { e.printStackTrace(); } } } } public static String post(String url,Map paramMap, Map headerMap, String data) { CloseableHttpResponse response = null; try { String param = paramMap.entrySet().stream().map(n -> n.getKey() + "=" + n.getValue()).collect(Collectors.joining("&")); String fullUrl = url + "?" + param; final HttpPost httpPost = new HttpPost(fullUrl); if (Objects.nonNull(headerMap) && headerMap.size() > 0) { headerMap.forEach((key, value) -> httpPost.addHeader(key, value)); } StringEntity httpEntity = new StringEntity(data, StandardCharsets.UTF_8); httpPost.setEntity(httpEntity); response = httpClient.execute(httpPost); if (200 == response.getCode()) { String strResult = EntityUtils.toString(response.getEntity()); return strResult; } } catch (IOException | ParseException e) { e.printStackTrace(); return ""; } finally { if (null != response) { try { EntityUtils.consume(response.getEntity()); } catch (IOException e) { e.printStackTrace(); } } } return ""; } } 

public class AesException extends Exception { public final static int OK = 0; public final static int ValidateSignatureError = -40001; public final static int ParseXmlError = -40002; public final static int ComputeSignatureError = -40003; public final static int IllegalAesKey = -40004; public final static int ValidateCorpidError = -40005; public final static int EncryptAESError = -40006; public final static int DecryptAESError = -40007; public final static int IllegalBuffer = -40008; private int code; private static String getMessage(int code) { switch (code) { case ValidateSignatureError: return "签名验证错误"; case ParseXmlError: return "xml解析失败"; case ComputeSignatureError: return "sha加密生成签名失败"; case IllegalAesKey: return "SymmetricKey非法"; case ValidateCorpidError: return "corpid校验失败"; case EncryptAESError: return "aes加密失败"; case DecryptAESError: return "aes解密失败"; case IllegalBuffer: return "解密后得到的buffer非法"; default: return null; } } public int getCode() { return code; } AesException(int code) { super(getMessage(code)); this.code = code; } } 

public class MessageUtil { /** * 解析微信发来的请求（XML）. * * @param msg 消息 * @return map */ public static Map parseXml(final String msg) { // 将解析结果存储在HashMap中 Map map = new HashMap(); // 从request中取得输入流 try (InputStream inputStream = new ByteArrayInputStream(msg.getBytes(StandardCharsets.UTF_8.name()))) { // 读取输入流 SAXReader reader = new SAXReader(); Document document = reader.read(inputStream); // 得到xml根元素 Element root = document.getRootElement(); // 得到根元素的所有子节点 List elementList = root.elements(); // 遍历所有子节点 for (Element e : elementList) { map.put(e.getName(), e.getText()); } } catch (Exception e) { e.printStackTrace(); } return map; } } 

public enum QywechatEnum { TEST("测试", "123123123123", "123123123123", "12312312312"); /** * 应用名 */ private String name; /** * 企业ID */ private String corpid; /** * 回调url配置的token */ private String token; /** * 随机加密串 */ private String encodingAESKey; QywechatEnum(final String name, final String corpid, final String token, final String encodingAESKey) { this.name = name; this.corpid = corpid; this.encodingAESKey = encodingAESKey; this.token = token; } public String getCorpid() { return corpid; } public String getName() { return name; } public String getToken() { return token; } public String getEncodingAESKey() { return encodingAESKey; } } 

public class QywechatInfo { /** * 签名 */ private String msgSignature; /** * 随机时间戳 */ private String timestamp; /** * 随机值 */ private String nonce; /** * 加密的xml字符串 */ private String sPostData; /** * 企业微信回调配置 */ private QywechatEnum qywechatEnum; } 

public class SHA1Utils { /** * 用SHA1算法生成安全签名 * * @param token     票据 * @param timestamp 时间戳 * @param nonce     随机字符串 * @param encrypt   密文 * @return 安全签名 * @throws AesException */ public static String getSHA1(String token, String timestamp, String nonce, String encrypt) throws AesException { try { String[] array = new String[]{token, timestamp, nonce, encrypt}; StringBuffer sb = new StringBuffer(); // 字符串排序 Arrays.sort(array); for (int i = 0; i <4; i++) { sb.append(array[i]); } String str = sb.toString(); // SHA1签名生成 MessageDigest md = MessageDigest.getInstance("SHA-1"); md.update(str.getBytes()); byte[] digest = md.digest(); StringBuffer hexstr = new StringBuffer(); String shaHex = ""; for (int i = 0; i 

public class WXBizMsgCrypt { static Charset CHARSET = Charset.forName("utf-8"); Base64 base64 = new Base64(); byte[] aesKey; String token; String receiveid; /** * 构造函数 * * @throws AesException 执行失败，请查看该异常的错误码和具体的错误信息 */ public WXBizMsgCrypt(final QywechatEnum qywechatEnum) throws AesException { this.token = qywechatEnum.getToken(); this.receiveid = qywechatEnum.getCorpid(); String encodingAesKey = qywechatEnum.getEncodingAESKey(); if (encodingAesKey.length() != 43) { throw new AesException(AesException.IllegalAesKey); } aesKey = Base64.decodeBase64(encodingAesKey + "="); } // 生成4个字节的网络字节序 byte[] getNetworkBytesOrder(int sourceNumber) { byte[] orderBytes = new byte[4]; orderBytes[3] = (byte) (sourceNumber & 0xFF); orderBytes[2] = (byte) (sourceNumber >> 8 & 0xFF); orderBytes[1] = (byte) (sourceNumber >> 16 & 0xFF); orderBytes[0] = (byte) (sourceNumber >> 24 & 0xFF); return orderBytes; } // 还原4个字节的网络字节序 int recoverNetworkBytesOrder(byte[] orderBytes) { int sourceNumber = 0; for (int i = 0; i <4; i++) { sourceNumber <<= 8; sourceNumber |= orderBytes[i] & 0xff; } return sourceNumber; } // 随机生成16位字符串 String getRandomStr() { String base = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"; Random random = new Random(); StringBuffer sb = new StringBuffer(); for (int i = 0; i <16; i++) { int number = random.nextInt(base.length()); sb.append(base.charAt(number)); } return sb.toString(); } /** * 对明文进行加密. * * @param text 需要加密的明文 * @return 加密后base64编码的字符串 * @throws AesException aes加密失败 */ String encrypt(String randomStr, String text) throws AesException { ByteGroup byteCollector = new ByteGroup(); byte[] randomStrBytes = randomStr.getBytes(CHARSET); byte[] textBytes = text.getBytes(CHARSET); byte[] networkBytesOrder = getNetworkBytesOrder(textBytes.length); byte[] receiveidBytes = receiveid.getBytes(CHARSET); // randomStr + networkBytesOrder + text + receiveid byteCollector.addBytes(randomStrBytes); byteCollector.addBytes(networkBytesOrder); byteCollector.addBytes(textBytes); byteCollector.addBytes(receiveidBytes); // ... + pad: 使用自定义的填充方式对明文进行补位填充 byte[] padBytes = PKCS7Encoder.encode(byteCollector.size()); byteCollector.addBytes(padBytes); // 获得最终的字节流, 未加密 byte[] unencrypted = byteCollector.toBytes(); try { // 设置加密模式为AES的CBC模式 Cipher cipher = Cipher.getInstance("AES/CBC/NoPadding"); SecretKeySpec keySpec = new SecretKeySpec(aesKey, "AES"); IvParameterSpec iv = new IvParameterSpec(aesKey, 0, 16); cipher.init(Cipher.ENCRYPT_MODE, keySpec, iv); // 加密 byte[] encrypted = cipher.doFinal(unencrypted); // 使用BASE64对加密后的字符串进行编码 String base64Encrypted = base64.encodeToString(encrypted); return base64Encrypted; } catch (Exception e) { e.printStackTrace(); throw new AesException(AesException.EncryptAESError); } } /** * 对密文进行解密. * * @param text 需要解密的密文 * @return 解密得到的明文 * @throws AesException aes解密失败 */ String decrypt(String text) throws AesException { byte[] original; try { // 设置解密模式为AES的CBC模式 Cipher cipher = Cipher.getInstance("AES/CBC/NoPadding"); SecretKeySpec key_spec = new SecretKeySpec(aesKey, "AES"); IvParameterSpec iv = new IvParameterSpec(Arrays.copyOfRange(aesKey, 0, 16)); cipher.init(Cipher.DECRYPT_MODE, key_spec, iv); // 使用BASE64对密文进行解码 byte[] encrypted = Base64.decodeBase64(text); // 解密 original = cipher.doFinal(encrypted); } catch (Exception e) { e.printStackTrace(); throw new AesException(AesException.DecryptAESError); } String xmlContent, from_receiveid; try { // 去除补位字符 byte[] bytes = PKCS7Encoder.decode(original); // 分离16位随机字符串,网络字节序和receiveid byte[] networkOrder = Arrays.copyOfRange(bytes, 16, 20); int xmlLength = recoverNetworkBytesOrder(networkOrder); xmlContent = new String(Arrays.copyOfRange(bytes, 20, 20 + xmlLength), CHARSET); from_receiveid = new String(Arrays.copyOfRange(bytes, 20 + xmlLength, bytes.length), CHARSET); } catch (Exception e) { e.printStackTrace(); throw new AesException(AesException.IllegalBuffer); } // receiveid不相同的情况 if (!from_receiveid.equals(receiveid)) { throw new AesException(AesException.ValidateCorpidError); } return xmlContent; } /** * 将企业微信回复用户的消息加密打包. * 
 * 	
对要发送的消息进行AES-CBC加密
 * 	
生成安全签名
 * 	
将消息密文和安全签名打包成xml格式
 * 
 * * @param replyMsg 企业微信待回复用户的消息，xml格式的字符串 * @param timeStamp 时间戳，可以自己生成，也可以用URL参数的timestamp * @param nonce 随机串，可以自己生成，也可以用URL参数的nonce * * @return 加密后的可以直接回复用户的密文，包括msg_signature, timestamp, nonce, encrypt的xml格式的字符串 * @throws AesException 执行失败，请查看该异常的错误码和具体的错误信息 */ public String EncryptMsg(String replyMsg, String timeStamp, String nonce) throws AesException { // 加密 String encrypt = encrypt(getRandomStr(), replyMsg); // 生成安全签名 if (timeStamp == "") { timeStamp = Long.toString(System.currentTimeMillis()); } String signature = SHA1Utils.getSHA1(token, timeStamp, nonce, encrypt); // System.out.println("发送给平台的签名是: " + signature[1].toString()); // 生成发送的xml String result = XMLParse.generate(encrypt, signature, timeStamp, nonce); return result; } /** * 检验消息的真实性，并且获取解密后的明文. * 
 * 	
利用收到的密文生成安全签名，进行签名验证
 * 	
若验证通过，则提取xml中的加密消息
 * 	
对消息进行解密
 * 
 * * @param qywechatInfo  bean * @return 解密后的原文 * @throws AesException 执行失败，请查看该异常的错误码和具体的错误信息 */ public String decryptMsg(final QywechatInfo qywechatInfo) throws AesException { // 密钥，公众账号的app secret // 提取密文 Object[] encrypt = XMLParse.extract(qywechatInfo.getSPostData()); /** * @param msgSignature 签名串，对应URL参数的msg_signature * @param timeStamp 时间戳，对应URL参数的timestamp * @param nonce 随机串，对应URL参数的nonce * @param postData 密文，对应POST请求的数据 */ // 验证安全签名 String signature = SHA1Utils.getSHA1(token, qywechatInfo.getTimestamp(), qywechatInfo.getNonce(), encrypt[1].toString()); // 和URL中的签名比较是否相等 // System.out.println("第三方收到URL中的签名：" + msg_sign); // System.out.println("第三方校验签名：" + signature); if (!signature.equals(qywechatInfo.getMsgSignature())) { throw new AesException(AesException.ValidateSignatureError); } // 解密 String result = decrypt(encrypt[1].toString()); return result; } /** * 验证URL * @param msgSignature 签名串，对应URL参数的msg_signature * @param timeStamp 时间戳，对应URL参数的timestamp * @param nonce 随机串，对应URL参数的nonce * @param echoStr 随机串，对应URL参数的echostr * * @return 解密之后的echostr * @throws AesException 执行失败，请查看该异常的错误码和具体的错误信息 */ public String verifyURL(String msgSignature, String timeStamp, String nonce, String echoStr) throws AesException { String signature = SHA1Utils.getSHA1(token, timeStamp, nonce, echoStr); if (!signature.equals(msgSignature)) { throw new AesException(AesException.ValidateSignatureError); } String result = decrypt(echoStr); return result; } static class ByteGroup { ArrayList byteContainer = new ArrayList(); public byte[] toBytes() { byte[] bytes = new byte[byteContainer.size()]; for (int i = 0; i  32) { pad = 0; } return Arrays.copyOfRange(decrypted, 0, decrypted.length - pad); } /** * 将数字转化成ASCII码对应的字符，用于对明文进行补码 * * @param a 需要转化的数字 * @return 转化得到的字符 */ static char chr(int a) { byte target = (byte) (a & 0xFF); return (char) target; } } }