获取用户encryptKey | 微信开放文档 ()

一、需求

前端传值：encryptedData、iv、code

二、解密用户信息

step1：将code发送给微信服务器，获取openid和session_key

step2：根据encryptedData、iv、session_key（会话密钥），通过AES解密获取到用户所有信息

1.实体类：

import lombok.Data;@Data@AllArgsConstructor@NoArgsConstructor//前端传参字段定义public class EncryBO {private String code;private String iv;private String encryptedData;}

public interface Constants {String CODE_200 = "200"; //请求成功String CODE_401 = "401"; // 权限不足String CODE_400 = "400"; // 参数错误String CODE_500 = "500"; // 请求失败String DICT_TYPE_ICON = "icon";String FILES_KEY = "FILES_FRONT_ALL";}

import lombok.AllArgsConstructor;import lombok.Data;import lombok.NoArgsConstructor;@Data@AllArgsConstructor@NoArgsConstructorpublic class Back {private String code;private String msg;private Object data;public static Back success() {return new Back(Constants.CODE_200, "请求成功", null);}public static Back success(Object data) {return new Back(Constants.CODE_200, "请求成功", data);}public static Back error(String code, String msg) {return new Back(code, msg, null);}public static Back error() {return new Back(Constants.CODE_500, "请求失败", null);}}

2.工具类

import lombok.extern.slf4j.Slf4j;import mons.codec.binary.Base64;import org.bouncycastle.jce.provider.BouncyCastleProvider;import javax.crypto.BadPaddingException;import javax.crypto.Cipher;import javax.crypto.IllegalBlockSizeException;import javax.crypto.NoSuchPaddingException;import javax.crypto.spec.IvParameterSpec;import javax.crypto.spec.SecretKeySpec;import javax.validation.constraints.NotNull;import java.io.UnsupportedEncodingException;import java.security.*;import java.security.spec.InvalidParameterSpecException;import java.util.Arrays;/*** @ClassName AESUtils* @Description TODO* @Author 独狼Kiss* @Date /9/14 13:46* @Version 1.0**/@Slf4jpublic class AESUtils {// 加密模式private static final String ALGORITHM = "AES/CBC/PKCS7Padding";private static final String CHARSET_NAME = "UTF-8";private static final String AES_NAME = "AES";//解决java.security.NoSuchAlgorithmException: Cannot find any provider supporting AES/CBC/PKCS7Paddingstatic {Security.addProvider(new BouncyCastleProvider());}/*** 解密** @param content 目标密文* @param key秘钥* @param iv偏移量* @return*/public static String decrypt(@NotNull String content, @NotNull String key, @NotNull String iv) {String result = "";// 被加密的数据byte[] dataByte = Base64.decodeBase64(content);// 加密秘钥byte[] keyByte = Base64.decodeBase64(key);// 偏移量byte[] ivByte = Base64.decodeBase64(iv);try {// 如果密钥不足16位，那么就补足. 这个if 中的内容很重要int base = 16;if (keyByte.length % base != 0) {int groups = keyByte.length / base+ (keyByte.length % base != 0 ? 1 : 0);byte[] temp = new byte[groups * base];Arrays.fill(temp, (byte) 0);System.arraycopy(keyByte, 0, temp, 0, keyByte.length);keyByte = temp;}if (ivByte.length % base != 0) {int groups = ivByte.length / base+ (ivByte.length % base != 0 ? 1 : 0);byte[] temp = new byte[groups * base];Arrays.fill(temp, (byte) 0);System.arraycopy(ivByte, 0, temp, 0, ivByte.length);ivByte = temp;}// 初始化Security.addProvider(new BouncyCastleProvider());Cipher cipher = Cipher.getInstance("AES/CBC/PKCS7Padding", "BC");SecretKeySpec spec = new SecretKeySpec(keyByte, "AES");AlgorithmParameters parameters = AlgorithmParameters.getInstance("AES");parameters.init(new IvParameterSpec(ivByte));cipher.init(Cipher.DECRYPT_MODE, spec, parameters);// 初始化byte[] resultByte = cipher.doFinal(dataByte);if (null != resultByte && resultByte.length > 0) {result = new String(resultByte, "UTF-8");}} catch (NoSuchAlgorithmException e) {e.printStackTrace();} catch (NoSuchPaddingException e) {e.printStackTrace();} catch (InvalidParameterSpecException e) {e.printStackTrace();} catch (IllegalBlockSizeException e) {e.printStackTrace();} catch (BadPaddingException e) {e.printStackTrace();} catch (UnsupportedEncodingException e) {e.printStackTrace();} catch (InvalidKeyException e) {e.printStackTrace();} catch (InvalidAlgorithmParameterException e) {e.printStackTrace();} catch (NoSuchProviderException e) {e.printStackTrace();}return result;}}

3.接口

@RestController@RequestMapping("/scancode")public class ScanController {@Autowiredprivate UserService userService;JSONObject jsonObject;/*** 解密用户信息** @param encrybo* @return* @throws IOException*/@PostMapping("/authority")public Back detail1(@RequestBody EncryBO encrybo) throws IOException {//将appid和secret填上String url = "https://api./sns/jscode2session?appid=appid&secret=secret&js_code=" + encrybo.getCode() + "&grant_type=authorization_code ";OkHttpClient client = new OkHttpClient();Request request = new Request.Builder().url(url).build();Response response = client.newCall(request).execute();if (response.isSuccessful()) {//获取openid，session_key String body = response.body().string();JSONObject jsonObject = JSON.parseObject(body);String openid = jsonObject.getString("openid");String session_key = jsonObject.getString("session_key");//获取encryptedData，iv（前端传值，根据get方法获取）String encryptedData = encrybo.getEncryptedData();String iv = encrybo.getIv();//解密用户信息，decrypt是json格式String decrypt = AESUtils.decrypt(encryptedData, session_key, iv);//将json格式转换为字符串JSONObject jsonObject2 = JSON.parseObject(decrypt);String nickName = jsonObject2.getString("nickName");String gender = jsonObject2.getString("gender");String avatarUrl = jsonObject2.getString("avatarUrl");}return Back.error();}