cn.smallbun.scaffold.framework.common.toolkit.SignUtil Maven / Gradle / Ivy
The newest version!
/*
* Copyright (c) 2018-2019.[zuoqinggang] www.pingfangushi.com
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program. If not, see map, String md5Key) {
Map sortMap = new TreeMap<>();
for (Map.Entry entry : map.entrySet()) {
if (StringUtils.isNotBlank(entry.getValue())) {
sortMap.put(entry.getKey(), entry.getValue());
}
}
StringBuilder sb = new StringBuilder();
for (Map.Entry keyValue : sortMap.entrySet()) {
sb.append(keyValue.getKey()).append("=").append(keyValue.getValue()).append("&");
}
sb.append("key=").append(md5Key);
log.info(sb.toString());
String result = sb.toString();
result = DigestUtils.md5Hex(result).toUpperCase();
return result;
}
/**
* ascii码升序,MD5消息摘要
* json字符串转换为ascii码升序集合并拼接待签名数据 repository
*
* @param json json
* @param md5Key md5Key
* @return String
*/
public static String getSignFromJson(JSONObject json, String md5Key) {
//签名
ObjectMapper mapper = new ObjectMapper();
//返回数据转换成待签名数据
TreeMap respMap = null;
try {
respMap = mapper.readValue(json.toString(), new TypeReference>() {
});
} catch (IOException e) {
e.printStackTrace();
}
StringBuilder sb = new StringBuilder();
//拼接待签名字符串
assert respMap != null;
for (Map.Entry entry : respMap.entrySet()) {
if (StringUtils.isNotBlank(entry.getValue())) {
sb.append(entry.getKey()).append("=").append(entry.getValue()).append("&");
}
}
sb.append("key=").append(md5Key);
return DigestUtils.md5Hex(sb.toString()).toUpperCase();
}
/**
* 验签
* json字符串转换为ascii码升序集合并拼接待签名数据
*
* @param signJson 待签名json对象
* @param md5Key 签名密钥,MD5
* @return 验签结果, true, false
*/
public static boolean checkSign(JSONObject signJson, String md5Key) {
String signData = (String) signJson.get("signData");
//sign置空
signJson.put("signData", "");
String signForNow = getSignFromJson(signJson, md5Key);
log.info("前端传递的签名->:{},后端加密后的签名->:{}", signData, signForNow);
return signData.equals(signForNow);
}
/**
* 微信公众号验签
* json字符串转换为ascii码升序集合并拼接待签名数据
*
* @param map 待签名resp对象
* @param md5Key 签名密钥,MD5
* @return 验签结果, true, false
*/
public static boolean checkWechatJsApiSign(Map map, String md5Key) {
String signData = map.get("signData");
//sign置空
map.put("signData", "");
String signForNow = getSignFromMap(map, md5Key);
log.info("前端传递的签名->:{},后端加密后的签名->:{}", signData, signForNow);
return signData.equals(signForNow);
}
/**
* 获取需要传递的URL,用户注册支付共用
*
* @param o o
* @param signKey 加密串
* @return 对象
*/
public static String getEncryption(Object o, String signKey) {
getEncryptionPackage(o, signKey);
StringBuilder buffer = new StringBuilder();
Field[] fields = o.getClass().getDeclaredFields();
String attributeName;
for (int i = 0; i < fields.length; i++) {
attributeName = fields[i].getName();
Object invoke = null;
try {
invoke = o.getClass()
.getMethod("get" + attributeName.substring(0, 1).toUpperCase() + attributeName.substring(1))
.invoke(o);
} catch (IllegalAccessException | NoSuchMethodException | InvocationTargetException e) {
e.printStackTrace();
}
if (invoke == null) {
invoke = "";
}
if (i == 0) {
buffer.append("?").append(attributeName).append("=").append(invoke);
} else {
buffer.append("&").append(attributeName).append("=").append(invoke);
}
}
return buffer.toString();
}
/**
* 对参数进行加密,并封装到对象中返回
*
* @param o o
* @param signKey signKey
* @return 加密封装后的对象
*/
public static Object getEncryptionPackage(Object o, String signKey) {
try {
Field[] fields = o.getClass().getDeclaredFields();
StringBuilder buffer = new StringBuilder();
int lenth = fields.length;
String attributeName;
for (int i = 0; i < lenth - 1; i++) {
attributeName = fields[i].getName();
Object invoke = o.getClass()
.getMethod("get" + attributeName.substring(0, 1).toUpperCase() + attributeName.substring(1))
.invoke(o);
if (invoke == null) {
invoke = "";
o.getClass()
.getMethod("set" + attributeName.substring(0, 1).toUpperCase() + attributeName.substring(1),
String.class).invoke(o, "");
}
buffer.append(invoke).append("|");
}
buffer.append(signKey);
//加密后的字符串
String encode = Md5Util.encode(buffer.toString());
o.getClass().getMethod("setSignature", String.class).invoke(o, encode);
} catch (Exception e) {
e.printStackTrace();
}
return o;
}
/**
* @param object object
* @return Map
*/
public static Map objectMap(Object object) {
com.alibaba.fastjson.JSONObject jsonObject = (com.alibaba.fastjson.JSONObject) JSON.toJSON(object);
Set> entrySet = jsonObject.entrySet();
Map map = new HashMap<>(16);
for (Map.Entry entry : entrySet) {
map.put(entry.getKey(), entry.getValue());
}
return map;
}
/**
* @param from from
* @param to to
* @return Object
*/
public static Object convertBean2Bean(Object from, Object to) {
try {
BeanInfo beanInfo = Introspector.getBeanInfo(to.getClass());
PropertyDescriptor[] ps = beanInfo.getPropertyDescriptors();
for (PropertyDescriptor p : ps) {
Method getMethod = p.getReadMethod();
Method setMethod = p.getWriteMethod();
if (getMethod != null && setMethod != null) {
try {
Object result = getMethod.invoke(from);
setMethod.invoke(to, result);
} catch (Exception e) {
// 如果from没有此属性的get方法，跳过
}
}
}
} catch (Exception e) {
e.printStackTrace();
}
return to;
}
/**
* 验证签名是否正确
*
* @param o 验签的对象
* @param key 加密串
* @return Boolean
*/
public static Boolean checkSignature(Object o, String key) {
try {
String signatureFront = (String) o.getClass().getMethod("getSignature").invoke(o);
String signatureAfter = (String) getEncryptionPackage(o, key).getClass().getMethod("getSignature")
.invoke(o);
log.info("传递来的签名:{},验证后的签名:{}", signatureFront, signatureAfter);
if ((signatureFront).equals(signatureAfter)) {
log.info("签名验证成功!");
return true;
}
return false;
} catch (Exception e) {
throw new RuntimeException("签名验证错误");
}
}
}
© 2015 - 2025 Weber Informatics LLC | Privacy Policy