java微信平台验证票据

微信平台地址：https://developers.weixin.qq.com/doc/oplatform/Third-party_Platforms/2.0/api/ThirdParty/token/component_verify_ticket.html

需要下载微信平台示例代码,内容在java文件夹下注意需要手动导入dist文件夹下的aes-jre包并引入commons-codec依赖

		
			commons-codec
			commons-codec
			1.9
		

		
			aes-jre
			aes-jre
			1.2
			system
			${project.basedir}/src/main/resources/lib/aes-jre1.6.jar
			 
		

如果不引入aes-jre1.6.jar会导致微信服务器向我们发起调用时会 提示“回应失败”日志也查不到相关内容，但是本地调用可以查询到日志component_verify_ticket 的有效时间为12小时，比 component_access_token 更长，建议保存最近可用的component_verify_ticket，在 component_access_token 过期之前都可以直接使用该 component_verify_ticket 进行更新，避免出现因为 component_verify_ticket 接收失败而无法更新 component_access_token 的情况。

附上代码：

    private final static Log log = LogFactory.getLog(WxTicketController.class);
    @PostMapping("verify")
    public String verify(HttpServletRequest request){

        try {

            String encodingAesKey = "微信平台开发资料提供";
            String token = "微信平台开发资料提供";
            String appId = "微信平台开发资料提供";

            String replyMsg = request.getParameter("msg_signature");
            String timestamp = request.getParameter("timestamp");
            String nonce = request.getParameter("nonce");

            // 从请求中读取整个post数据
            InputStream inputStream;
            String postData = null;
            inputStream = request.getInputStream();
            postData=IOUtils.toString(inputStream, "UTF-8");    //获取接收到消息里的XML密文，存放在postData中
            WXBizMsgCrypt wxcpt = null;
            log.info("postdata:"+postData);
            log.info("postdata:"+postData);
            log.info("msg_signature:"+replyMsg);
            log.info("timestamp:"+timestamp);
            log.info("nonce:"+nonce);
            log.info("getServetoken:"+token);        //token
            log.info("getServeencodingaeskey:"+encodingAesKey);       //aeskey
            log.info("getServeappid:"+appId);         //appid

            //从XML中获取标签内的密文文本
            document document = documentHelper.parseText(postData);//获取xml字符串
            Element rootElement = document.getRootElement();//获取根目录
            String encrypt = rootElement.elementText("Encrypt");

            log.info("Encrypt:"+encrypt);
            //格式化密文文本，否则没有标签，会解密失败，参考官方的加解密代码JAVA版本
            String format = "";
            String fromXML = String.format(format, encrypt);

            String msg = "";   //解密后的明文
            if(StringUtil.isEmpty(encrypt)) {
                msg = fromXML;
            } else {
                wxcpt = new WXBizMsgCrypt(token,encodingAesKey,appId);
                // 解密消息
                msg = wxcpt.decryptMsg(replyMsg, timestamp, nonce, fromXML);
            }
            log.info("msg:"+msg);
            //将XML格式字符串转为Map类型
            Map msgMap = XMLUtil.readStringXmlOut(msg);
            String infotype = msgMap.get("InfoType");  //获取infotype,注：微信开放平台文档中标明固定为："component_verify_ticket",但参考其他代码，还包含authorized？？？
            log.info(infotype);
            switch (infotype) {
                case "component_verify_ticket":   //验证票据
                    String ComponentVerifyTicket = msgMap.get("ComponentVerifyTicket");
                    redisUtil.set("ComponentVerifyTicket",ComponentVerifyTicket);   //将票据值写入Redis缓存中
                    log.info("component_verify_ticket:" + ComponentVerifyTicket);
                    break;
                case "unauthorized"://用户取消授权
                    break;
            }
        } catch (Exception e) {
            e.printStackTrace();
            return  "success";
        }
        return  "success";
    }

XMLUtil.java

import org.dom4j.document;
import org.dom4j.documentException;
import org.dom4j.documentHelper;
import org.dom4j.Element;
import java.util.HashMap;
import java.util.List;
import java.util.Map;

public class XMLUtil {

    
    public static Map readStringXmlOut(String xml) {
        Map map = new HashMap();
        document doc = null;
        try {
            doc = documentHelper.parseText(xml); // 将字符串转为XML
            Element rootElt = doc.getRootElement(); // 获取根节点
            List list = rootElt.elements();//获取根节点下所有节点
            for (Element element : list) {  //遍历节点
                map.put(element.getName(), element.getText()); //节点的name为map的key，text为map的value
            }
        } catch (documentException e) {
            e.printStackTrace();
        } catch (Exception e) {
            e.printStackTrace();
        }
        return map;
    }
}