微信企业号或微信公众号调用扫一扫功能
JS-SDK安全域名配置配置设置好之后下面就上代码java代码签名校验JS-SDK安全域名配置
企业微信号 —— 安全域名配置需要通过验证（如下图）
微信公众 ——— 安全域名配置
设置 ——>公众号设置 ——> 功能设置 ——>JS接口安全域名设置 （如下图）
配置设置好之后下面就上代码
<!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1" /><title>扫一扫</title></head><body><div style="color:red" id="jshref"></div><!-- <p>正在调用扫一扫 ..</p> --><script src="http://res2./open/js/jweixin-1.4.0.js"></script><script src="/jquery/3.2.1/jquery.min.js"></script><script>var wxAppId = "";var timestamp = "";var nonce_str = "";var signature = "";var url = "../../share.do?share";var data = {urlSigna: encodeURIComponent(window.location.href)};jQuery.getJSON(url, data, function (backdata){wxAppId = backdata.obj.wxAppId;timestamp = backdata.obj.timesTamp;nonce_str = backdata.obj.noncestr;signature = backdata.obj.signature;wx.config({debug:false, // 开启调试模式,调用的所有api的返回值会在客户端alert出来，若要查看传入的参数，可以在pc端打开，参数信息会通过log打出，仅在pc端时才会打印。appId: wxAppId,// 必填，公众号的唯一标识timestamp: timestamp,// 必填，生成签名的时间戳nonceStr: nonce_str,// 必填，生成签名的随机串signature: signature,// 必填，签名，见附录1jsApiList: ['scanQRCode']});wx.ready(function () {wx.scanQRCode({needResult: 1,desc: 'scanQRCode desc',scanType: ["qrCode", "barCode"], // 可以指定扫二维码还是一维码，默认二者都有success: function (res) {alert(res.resultStr);//扫描结果},cancel:function(){history.back();}});});wx.error(function (res) {alert("错误信息== " + JSON.stringify(res));});});</script></body></html>
java代码
Controller
@RequestMapping(params = "share", method = {RequestMethod.GET, RequestMethod.POST})@ResponseBodypublic AjaxJson share(HttpServletRequest request, @RequestParam String urlSigna) throws IOException {AjaxJson j = new AjaxJson();WeiXinUtils wx = new WeiXinUtils();urlSigna = URLDecoder.decode(urlSigna, "UTF-8");Map<String, Object> wxMap = wx.getSignature(urlSigna);wxMap.put("wxAppId", WeiXinUtils.APPID);j.setObj(wxMap);j.setSuccess(false);return j;}
获取签名的Utils
package com.xxx.xxx.xxxxx;import java.io.IOException;import java.util.*;import com.appiot.hp.util.HttpClientUtil;import net.sf.json.JSONObject;import mons.lang.RandomStringUtils;import org.apache.log4j.Logger;/*** Utils - 微信操作工具类* add by sl on -12-04 09:42:34* @author XIAER Team* @version 1.0*/public final class WeiXinUtils {private static Logger logger = Logger.getLogger(WeiXinUtils.class);//个人公众号public static final String APPID = "wxf34602xxxxxxx21";public static final String APP_SECRET ="90cbc9cd47xxxxxxxxxxx2b905";private static final Map map = new HashMap();/*** 获取accessToken* @return accessToken*/public static String getAccess_token(String wxAppId, String secret) {//String url = "https://api./cgi-bin/token?grant_type=client_credential&appid="+ wxAppId +"&secret=" + secret;String url = "https://qyapi./cgi-bin/gettoken?corpid="+ wxAppId +"&corpsecret="+ secret;JSONObject jsonobject = HttpClientUtil.sendGet(url, null);return jsonobject.getString("access_token");}/*** 获取jsapi_ticket* @author WFJ* @time 4月4日21:50:52* @return*/public static String getJsapiTicket(){String accessToken = "";accessToken = getAccess_token(APPID, APP_SECRET);//String url = "https://api./cgi-bin/ticket/getticket?access_token="+accessToken+"&type=jsapi";String url = "https://qyapi./cgi-bin/get_jsapi_ticket?access_token="+accessToken+"&type=jsapi";JSONObject jsonobject = HttpClientUtil.sendGet(url, null);return jsonobject.getString("ticket");}/*** 获取微信签名signature* @param url jsapi_ticket* add by zl on -2-2* @return signature* @throws IOException*/public Map<String, Object> getSignature(String url) throws IOException {Map<String, Object> wxMap = new HashMap<String, Object>();String jsapi_ticket = "";Long timeJt = (Long) map.get("timeJt");jsapi_ticket = (String) map.get("jsapi_ticket");Long nowDateJt = new Date().getTime();if (jsapi_ticket != null && timeJt != null && ((nowDateJt - timeJt) < 7200 * 1000L)) {System.out.println("jsapi_ticket 存在");System.out.println("nowDateJt - timeJt=="+(nowDateJt - timeJt));} else {jsapi_ticket = getJsapiTicket();System.out.println("jsapi_ticket 获取");map.put("jsapi_ticket",jsapi_ticket);map.put("timeJt",nowDateJt);}//随机字符串和时间戳String new_novestr = RandomStringUtils.randomAlphanumeric(16); //随机字符串String timestamp = String.valueOf(System.currentTimeMillis() / 1000);//时间戳String signature = "";// 拼接字符串String string1 = "jsapi_ticket=" + jsapi_ticket + "&noncestr=" + new_novestr + "×tamp=" + timestamp + "&url=" + url;signature = CheckUtil.SHA1(string1);System.out.println("签名=="+signature);wxMap.put("noncestr", new_novestr);wxMap.put("timesTamp", timestamp);wxMap.put("signature", signature);return wxMap;}}
CheckUtil
package com.xxx.xxx.xxxx;import java.security.MessageDigest;import java.security.NoSuchAlgorithmException;import java.util.Arrays;import java.util.UUID;public class CheckUtil {/*** 对所有待签名参数按照字段名的ASCII 码从小到大排序（字典序）后，使用URL键值对的格式 （即 key1=value1&key2=value2…）拼接成字符串string1* @return*/public static String SHA1(String decript) {try {MessageDigest digest = java.security.MessageDigest.getInstance("SHA-1");digest.update(decript.getBytes());byte messageDigest[] = digest.digest();// Create Hex StringStringBuffer hexString = new StringBuffer();// 字节数组转换为 十六进制 数for (int i = 0; i < messageDigest.length; i++) {String shaHex = Integer.toHexString(messageDigest[i] & 0xFF);if (shaHex.length() < 2) {hexString.append(0);}hexString.append(shaHex);}return hexString.toString();} catch (NoSuchAlgorithmException e) {e.printStackTrace();}return "";}}
发送请求获取accessToken 和 jsapi_ticket的get方法
package com.xxx.xxx.xxxx;import com.alibaba.fastjson.JSONException;import net.sf.json.JSONObject;import mons.lang.StringUtils;import org.apache.http.HttpEntity;import org.apache.http.client.ClientProtocolException;import org.apache.http.client.ResponseHandler;import org.apache.http.client.config.RequestConfig;import org.apache.http.client.methods.CloseableHttpResponse;import org.apache.http.client.methods.HttpPost;;import org.apache.http.impl.client.BasicResponseHandler;import org.apache.http.impl.client.CloseableHttpClient;import org.apache.http.impl.client.HttpClients;import org.apache.http.util.EntityUtils;import java.io.*;import .URL;import .URLConnection;import java.util.Map;public class HttpClientUtil {/*** 向指定URL发送GET方法的请求** @param url 发送请求的URL* @param param 请求参数,单个参数* @return URL 所代表远程资源的响应结果*/public static JSONObject sendGet(String url, String param) {String result = "";JSONObject retJson = new JSONObject();BufferedReader in = null;try {URL realUrl = new URL(url);// 打开和URL之间的连接URLConnection connection = realUrl.openConnection();// 设置通用的请求属性connection.setRequestProperty("accept", "*/*");connection.setRequestProperty("connection", "Keep-Alive");connection.setRequestProperty("user-agent", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");// 建立实际的连接connection.connect();// 获取所有响应头字段// 定义 BufferedReader输入流来读取URL的响应in = new BufferedReader(new InputStreamReader(connection.getInputStream(), "utf-8"));String line;while ((line = in.readLine()) != null) {result += line;//System.out.println("line====="+line);}if (StringUtils.isNotEmpty(result) && isJson(result)) {//数据不为空，进行转换为JSONObject格式数据进行返回retJson = JSONObject.fromObject(result);}} catch (Exception e) {System.out.println("发送GET请求出现异常！" + e);e.printStackTrace();retJson.put("status", "102");retJson.put("msg", "发送GET请求出现异常：" + e);}// 使用finally块来关闭输入流finally {try {if (in != null) {in.close();}} catch (Exception e2) {e2.printStackTrace();}}return retJson;} }
签名校验
校验地址：https://mp./debug/cgi-bin/sandbox?t=jsapisign
当校验获取到的签名和后台获取到的签名一致时，证明你的代码正确，但任然报签名错误 invalid signature，可能是你的安全域名配置有问题，页面动态获取的url地址不是你配置的安全域名
