工具類文章來(lái)源地址http://www.zghlxwxcb.cn/news/detail-568641.html

package com.huash.wechat.utils;

import java.io.BufferedReader;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.io.OutputStream;
import java.net.URL;
import java.security.Key;
import java.security.Security;
import java.util.Arrays;

import javax.crypto.Cipher;
import javax.crypto.spec.IvParameterSpec;
import javax.crypto.spec.SecretKeySpec;
import javax.net.ssl.HttpsURLConnection;

import org.bouncycastle.jce.provider.BouncyCastleProvider;
import org.bouncycastle.util.encoders.Base64;


public class WeChatUtil
{
     public static String httpRequest(String requestUrl,String requestMethod,String output)
     {
            try
            {
                URL url = new URL(requestUrl);
                HttpsURLConnection connection = (HttpsURLConnection) url.openConnection();
                connection.setDoOutput(true);
                connection.setDoInput(true);
                connection.setUseCaches(false);
                if(null != output){
                    OutputStream outputStream = connection.getOutputStream();
                    outputStream.write(output.getBytes("utf-8"));
                    outputStream.close();
                }
                // 從輸入流讀取返回內(nèi)容
                InputStream inputStream = connection.getInputStream();
                InputStreamReader inputStreamReader = new InputStreamReader(inputStream, "utf-8");
                BufferedReader bufferedReader = new BufferedReader(inputStreamReader);
                String str = null;
                StringBuffer buffer = new StringBuffer();
                while ((str = bufferedReader.readLine()) != null){
                    buffer.append(str);
                }
                bufferedReader.close();
                inputStreamReader.close();
                inputStream.close();
                inputStream = null;
                connection.disconnect();
                return buffer.toString();
            }catch(Exception e){
                e.printStackTrace();
            }
            return "";
     }
     
     
    public static String decryptData(String encryptDataB64, String sessionKeyB64, String ivB64) {
        return new String(
                decryptOfDiyIV(
                        Base64.decode(encryptDataB64),
                        Base64.decode(sessionKeyB64),
                        Base64.decode(ivB64)
                )
        );
    }

    private static final String KEY_ALGORITHM = "AES";
    private static final String ALGORITHM_STR = "AES/CBC/PKCS7Padding";
    private static Key key;
    private static Cipher cipher;

    private static void init(byte[] keyBytes) {
        // 如果密鑰不足16位，那么就補(bǔ)足.  這個(gè)if 中的內(nèi)容很重要
        int base = 16;
        if (keyBytes.length % base != 0) {
            int groups = keyBytes.length / base + (keyBytes.length % base != 0 ? 1 : 0);
            byte[] temp = new byte[groups * base];
            Arrays.fill(temp, (byte) 0);
            System.arraycopy(keyBytes, 0, temp, 0, keyBytes.length);
            keyBytes = temp;
        }
        // 初始化
        Security.addProvider(new BouncyCastleProvider());
        // 轉(zhuǎn)化成JAVA的密鑰格式
        key = new SecretKeySpec(keyBytes, KEY_ALGORITHM);
        try {
            // 初始化cipher
            cipher = Cipher.getInstance(ALGORITHM_STR, "BC");
        } catch (Exception e) {
            e.printStackTrace();
        }
    }

    /**
     * 解密方法
     *
     * @param encryptedData 要解密的字符串
     * @param keyBytes      解密密鑰
     * @param ivs           自定義對(duì)稱解密算法初始向量 iv
     * @return 解密后的字節(jié)數(shù)組
     */
    private static byte[] decryptOfDiyIV(byte[] encryptedData, byte[] keyBytes, byte[] ivs) {
        byte[] encryptedText = null;
        init(keyBytes);
        try {
            cipher.init(Cipher.DECRYPT_MODE, key, new IvParameterSpec(ivs));
            encryptedText = cipher.doFinal(encryptedData);
        } catch (Exception e) {
            e.printStackTrace();
        }
        return encryptedText;
    }
}

package com.huash.wechat.webv2;

import io.swagger.annotations.ApiOperation;

import java.security.AlgorithmParameters;
import java.security.Security;
import java.util.Arrays;
import java.util.Optional;

import javax.crypto.Cipher;
import javax.crypto.spec.IvParameterSpec;
import javax.crypto.spec.SecretKeySpec;
import javax.servlet.http.HttpServletRequest;

import org.apache.commons.lang.StringUtils;
import org.bouncycastle.jce.provider.BouncyCastleProvider;
import org.bouncycastle.util.encoders.Base64;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.RestController;

import com.alibaba.dubbo.config.annotation.Reference;
import com.alibaba.fastjson.JSONObject;



@RestController
@RequestMapping("/api/weChat/v2")
public class LoginV2Controller {

    @Reference(check = false, version = "1.0.0", timeout = 30000)
    private WcUesrService wcUserService;
    
    
    @ApiOperation(value = "登錄狀態(tài)", notes = "登錄狀態(tài)")
    @RequestMapping(value = "/login_status", method = RequestMethod.GET)
    public ResultJson login(HttpServletRequest request,String code) 
    {
        // 微信小程序ID
        String appid = "****";
        // 微信小程序秘鑰
        String secret = "****";
        // 根據(jù)小程序穿過(guò)來(lái)的code想這個(gè)url發(fā)送請(qǐng)求
        String url = "https://api.weixin.qq.com/sns/jscode2session?appid="
                + appid + "&secret=" + secret + "&js_code=" + code
                + "&grant_type=authorization_code";
        // 發(fā)送請(qǐng)求，返回Json字符串
        String str = WeChatUtil.httpRequest(url, "GET", null);
        // 轉(zhuǎn)成Json對(duì)象 獲取openid
        JSONObject jsonObject = JSONObject.parseObject(str);

        if (jsonObject != null) 
        {
            // 我們需要的openid，在一個(gè)小程序中，openid是唯一的(且只對(duì)該手機(jī)，當(dāng)切換賬號(hào)時(shí))
            String openid = jsonObject.get("openid").toString();

           //TODO
        }
        return ResultJson.failure(jsonObject);
    }
    
    
    @ApiOperation(value = "獲取手機(jī)號(hào)", notes = "獲取手機(jī)號(hào)")
    @RequestMapping(value = "/get_phone", method = RequestMethod.GET)
    public ResultJson getPhoneNumber(HttpServletRequest request,String encryptedData, String openid,String session_key, String iv,Integer memberType) 
    {
        // 被加密的數(shù)據(jù)
        byte[] dataByte = Base64.decode(encryptedData);
        System.out.println(session_key);
        // 加密秘鑰
        byte[] keyByte = Base64.decode(session_key);
        // 偏移量
        byte[] ivByte = Base64.decode(iv);
        
        try {
            // 如果密鑰不足16位，那么就補(bǔ)足. 這個(gè)if 中的內(nèi)容很重要
            int base = 16;
            if (keyByte.length % base != 0) 
            {
                int groups = keyByte.length / base
                        + (keyByte.length % base != 0 ? 1 : 0);
                byte[] temp = new byte[groups * base];
                Arrays.fill(temp, (byte) 0);
                System.arraycopy(keyByte, 0, temp, 0, keyByte.length);
                keyByte = temp;
            }
            // 初始化
            Security.addProvider(new BouncyCastleProvider());
            Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
            SecretKeySpec spec = new SecretKeySpec(keyByte, "AES");
            AlgorithmParameters parameters = AlgorithmParameters
                    .getInstance("AES");
            parameters.init(new IvParameterSpec(ivByte));
            cipher.init(Cipher.DECRYPT_MODE, spec, parameters);// 初始化
            byte[] resultByte = cipher.doFinal(dataByte);

            if (null != resultByte && resultByte.length > 0) 
            {
                String result = new String(resultByte, "UTF-8");

                if (StringUtils.isNotBlank(result))
                {
                    JSONObject jsonObject = JSONObject.parseObject(result);
                    String phone = jsonObject.get("phoneNumber").toString();
                   ?//Todo
                }    
            }
        } catch (Exception e) {
            e.printStackTrace();
        }
        return null;
    }
    
    
    @ApiOperation(value = "退出", notes = "退出")
    @RequestMapping(value = "/login_out", method = RequestMethod.GET)
    public ResultJson loginOut(HttpServletRequest request,Long userId) 
    {
        return ResultJson.success("操作成功");
    }
}