微信公众号JSSDK获取signature签名,史上最全，没有之一

1.操作流程

1、通过appId和appSecret获取access_token；

2、使用access_token获取jsapi_ticket ；

3、用时间戳、随机数、jsapi_ticket和要访问的url按照签名算法拼接字符串；

4、对第三步得到的字符串进行SHA1加密，得到签名。

2.上代码

获取accessToken与jsapi_ticket代码

import com.alibaba.fastjson.JSON;
import com.alibaba.fastjson.JSONObject;
import lombok.extern.slf4j.Slf4j;

import java.io.BufferedReader;
import java.io.InputStreamReader;
import java.net.URL;
import java.net.URLConnection;

/**
 * HTTPUtil get方法工具类
 *
 * @author javaNice
 * @time 2023年10月08日
 */
@Slf4j
public class HttpUtils {
    // 获取accesstoken
    public final static String GetAccessTokenUrl = "https://api.weixin.qq.com/cgi-bin/token?grant_type=client_credential&appid=APPID&secret=SECRET";

    // 获取ticket
    public final static String GetTicketUrl = "https://api.weixin.qq.com/cgi-bin/ticket/getticket?access_token=ACCESS_TOKEN&type=jsapi";


    /**
     * 传递请求url
     * @param requestUrl
     * @return
     */
    public static String sendGet(String requestUrl) {
        BufferedReader in = null;
        String result = "";
        try {
            URL realUrl = new URL(requestUrl);
            // 打开和URL之间的连接
            URLConnection connection = realUrl.openConnection();
            // 设置通用的请求属性
            connection.setRequestProperty("accept", "*/*");
            connection.setRequestProperty("connection", "Keep-Alive");
            connection.setRequestProperty("user-agent",
                    "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");
            // 建立实际的连接
            connection.connect();

            //获取返回结果
            in = new BufferedReader(new InputStreamReader(
                    connection.getInputStream()));
            String line;
            while ((line = in.readLine()) != null) {
                result += line;
            }
        } catch (Exception e) {
            log.error("发送GET请求出现异常！" + e);
            e.printStackTrace();
        }
        // 使用finally块来关闭输入流
        finally {
            try {
                if (in != null) {
                    in.close();
                }
            } catch (Exception e2) {
                log.error("发送GET请求出现异常e2！" + e2);
                e2.printStackTrace();
            }
        }
        return result;
    }


    public static void main(String[] args) {
        String appid="你自己的appid";
        String secret="你自己的appSecret";
        String accessTokenRequestUrl = GetAccessTokenUrl.replace("APPID", appid).replace("SECRET", secret);

        //获取accessToken
        String accessTokenResult = HttpUtils.sendGet(accessTokenRequestUrl);
        JSONObject accessTokenJsonObject = JSON.parseObject(accessTokenResult);
        String  accessToken = String.valueOf(accessTokenJsonObject.get("access_token"));


        System.out.println(accessToken);
        String ticketRequestUrl = GetTicketUrl.replace("ACCESS_TOKEN", accessToken);
        String ticketResult = HttpUtils.sendGet(ticketRequestUrl);

        //获取ticket
        JSONObject ticketResultJsonObject = JSON.parseObject(ticketResult);
        String ticket = String.valueOf(ticketResultJsonObject.get("ticket"));
        System.out.println(ticket);


    }
}

加密获取sign代码

import java.io.UnsupportedEncodingException;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.util.Formatter;
import java.util.HashMap;
import java.util.Map;
import java.util.UUID;

public class WxSign {


    public static void main(String[] args) {
        String jsapi_ticket = "获取到的ticket";

        // 注意 URL 一定要动态获取，不能 hardcode
        String url = "http://example.com";
        Map<String, String> ret = sign(jsapi_ticket, url);
        for (Map.Entry entry : ret.entrySet()) {
            System.out.println(entry.getKey() + ", " + entry.getValue());
        }
    };

    public static Map<String, String> sign(String jsapi_ticket, String url) {
        Map<String, String> ret = new HashMap<String, String>();
        String nonce_str = create_nonce_str();
        String timestamp = create_timestamp();
        String string1;
        String signature = "";

        //注意这里参数名必须全部小写，且必须有序
        string1 = "jsapi_ticket=" + jsapi_ticket +
                "&noncestr=" + nonce_str +
                "×tamp=" + timestamp +
                "&url=" + url;
        System.out.println(string1);

        try
        {
            MessageDigest crypt = MessageDigest.getInstance("SHA-1");
            crypt.reset();
            crypt.update(string1.getBytes("UTF-8"));
            signature = byteToHex(crypt.digest());
        }
        catch (NoSuchAlgorithmException e)
        {
            e.printStackTrace();
        }
        catch (UnsupportedEncodingException e)
        {
            e.printStackTrace();
        }

        ret.put("url", url);
        ret.put("jsapi_ticket", jsapi_ticket);
        ret.put("nonceStr", nonce_str);
        ret.put("timestamp", timestamp);
        ret.put("signature", signature);

        return ret;
    }

    private static String byteToHex(final byte[] hash) {
        Formatter formatter = new Formatter();
        for (byte b : hash)
        {
            formatter.format("%02x", b);
        }
        String result = formatter.toString();
        formatter.close();
        return result;
    }

    private static String create_nonce_str() {
        return UUID.randomUUID().toString();
    }

    private static String create_timestamp() {
        return Long.toString(System.currentTimeMillis() / 1000);
    }
}

整个流程官方文档地址

https://developers.weixin.qq.com/doc/offiaccount/OA_Web_Apps/JS-SDK.html#8

获取accesstoken官方文档

https://developers.weixin.qq.com/doc/offiaccount/Basic_Information/Get_access_token.html

官方校验签名是否正确网址

https://mp.weixin.qq.com/debug/cgi-bin/sandbox?t=jsapisign

JSSDK获取signature签名,史上最全，没有之一_System

官方获取加密签名代码示例代码包

https://www.weixinsxy.com/jssdk/sample.zip

备注：链接中包含php、java、nodejs以及python的示例代码供第三方参考，第三方切记要对获取的accesstoken以及jsapi_ticket进行缓存以确保不会触发频率限制。

常见错误40164

{"errcode":40164,"errmsg":"invalid ip 122.69.0.54 ipv6 ::ffff:122.69.0.54, not in whitelist rid: 65224c13-74f9b1e4-106f93ca"}

报此错误表示 需要将122.69.0.54 加入到app的白名单中