您好,登錄后才能下訂單哦!
這篇文章主要介紹了接口簽名如何使用Java實(shí)現(xiàn),具有一定借鑒價(jià)值,感興趣的朋友可以參考下,希望大家閱讀完這篇文章之后大有收獲,下面讓小編帶著大家一起了解一下。
為了保證數(shù)據(jù)傳輸?shù)陌踩?,跟其他系統(tǒng)進(jìn)行數(shù)據(jù)交互時(shí),雙方應(yīng)該約定好密鑰,把數(shù)據(jù)進(jìn)行加密,接口簽名,這樣雙方調(diào)用接口時(shí),驗(yàn)證接口簽名一致時(shí)就表明數(shù)據(jù)傳輸過(guò)程中沒(méi)有被修改。
后端數(shù)據(jù)簽名主要代碼:
控制器:
@Controller public class SignController { @Autowired private ISignService signService; /** * 驗(yàn)證接口簽名 * @param dto * @return */ @RequestMapping("/testSign") @ResponseBody public String sign(@RequestBody SignDTO dto) throws Exception{ return signService.testSign(dto); } }
實(shí)現(xiàn)類(lèi):
@Service public class SignServiceImpl implements ISignService { /** * 獲取發(fā)起數(shù)據(jù)請(qǐng)求的簽名數(shù)據(jù),可以轉(zhuǎn)為json發(fā)起請(qǐng)求,服務(wù)端再根據(jù)接收到的數(shù)據(jù)進(jìn)行簽名驗(yàn)證,一致則證明數(shù)據(jù)傳輸過(guò)程中沒(méi)有被更改。 * @return * @throws Exception */ public SignDTO getSignData() throws Exception{ User user = new User(); user.setName("測(cè)試"); user.setSex("男"); String data = JSONUtil.toJsonStr(user); //密鑰 String accessKey = "accessKey"; String secretKey = "secretKey"; String version = "1.0"; int encrypt = 1; long time = System.currentTimeMillis(); String nonce = RandomUtil.randomString(4); //本地加簽 SignReqParam signReqParam = new SignReqParam( accessKey, time, nonce, encrypt, version, secretKey, data); //數(shù)據(jù)加密 data = EncryptUtils.aesEncrypt(data, EncryptUtils.KEY); System.out.println("加密后數(shù)據(jù):" + data); SignDTO dto = new SignDTO(); dto.setAccessKey(accessKey); dto.setVersion(version); dto.setEncrypt(encrypt); dto.setNonce(nonce); dto.setTimestamp(time); dto.setSign(signReqParam.getSign()); dto.setData(data); return dto; } /** * 返回json字符串,用于postman進(jìn)行測(cè)試數(shù)據(jù) * @return * @throws Exception */ public String getSignDataJson() throws Exception{ SignDTO dto = getSignData(); return JSONUtil.toJsonStr(dto); } /** * 根據(jù)接收到的數(shù)據(jù),進(jìn)行驗(yàn)證接口簽名,正確再進(jìn)行數(shù)據(jù)處理 * @param dto * @return */ @Override public String testSign(SignDTO dto) throws Exception{ String result = "簽名不合法"; //密鑰 String accessKey = "accessKey"; String secretKey = "secretKey"; String version = "1.0"; int encrypt = 1; if(ObjectUtils.isEmpty(dto.getVersion()) || !dto.getVersion().equals(version) || ObjectUtils.isEmpty(dto.getData()) || ObjectUtils.isEmpty(dto.getAccessKey()) || !dto.getAccessKey().equals(accessKey)){ return result; } // 解密為字符串 String data = EncryptUtils.aesDecrypt(dto.getData(), EncryptUtils.KEY); System.out.println("解密后數(shù)據(jù):" + data); //本地加簽 SignReqParam signReqParam = new SignReqParam( accessKey, dto.getTimestamp(), dto.getNonce(), encrypt, version, secretKey, data); //簽名對(duì)比 if(dto.getSign().equals(signReqParam.getSign())){ User user = JSONUtil.toBean(data, User.class); System.out.println("接口簽名合法,可以處理請(qǐng)求中的用戶信息,可以進(jìn)行一系列數(shù)據(jù)庫(kù)操作:" + user.toString()); result = "接口簽名合法"; } return result; } public static void main(String[] args) throws Exception { SignServiceImpl obj = new SignServiceImpl(); SignDTO dto = obj.getSignData(); String result = obj.testSign(dto); System.out.println("接口簽名結(jié)果:" + result); }
實(shí)體類(lèi):
@Data public class SignDTO { /*密鑰*/ private String accessKey; /*密鑰*/ private String secretKey; /*版本*/ private String version; /*加密*/ private int encrypt; /*驗(yàn)簽參數(shù)*/ private String nonce; /*簽名*/ private String sign; /*數(shù)據(jù)*/ private String data; /*時(shí)間戳*/ private long timestamp; }
@Data public class User implements Serializable { private String name; private String sex; }
main方法測(cè)試結(jié)果:
Connected to the target VM, address: '127.0.0.1:52259', transport: 'socket' 加密后數(shù)據(jù):IkoCXfjUX0dawZkLQlqkcex3TJzzQM9VsLg1UuCSvz4= 獲取接口請(qǐng)求數(shù)據(jù)json:{"data":"IkoCXfjUX0dawZkLQlqkcex3TJzzQM9VsLg1UuCSvz4=","accessKey":"accessKey","encrypt":1,"sign":"49EA679C9ED2C49E7FDB7221ECD5784F","version":"1.0","nonce":"oe9w","timestamp":1622972771180} 加密后數(shù)據(jù):IkoCXfjUX0dawZkLQlqkcex3TJzzQM9VsLg1UuCSvz4= 解密后數(shù)據(jù):{"sex":"男","name":"測(cè)試"} 接口簽名合法,可以處理請(qǐng)求中的用戶信息,可以進(jìn)行一系列數(shù)據(jù)庫(kù)操作:User(name=測(cè)試, sex=男) 接口簽名結(jié)果:接口簽名合法 Disconnected from the target VM, address: '127.0.0.1:52259', transport: 'socket'
postman測(cè)試結(jié)果:
感謝你能夠認(rèn)真閱讀完這篇文章,希望小編分享的“接口簽名如何使用Java實(shí)現(xiàn)”這篇文章對(duì)大家有幫助,同時(shí)也希望大家多多支持億速云,關(guān)注億速云行業(yè)資訊頻道,更多相關(guān)知識(shí)等著你來(lái)學(xué)習(xí)!
免責(zé)聲明:本站發(fā)布的內(nèi)容(圖片、視頻和文字)以原創(chuàng)、轉(zhuǎn)載和分享為主,文章觀點(diǎn)不代表本網(wǎng)站立場(chǎng),如果涉及侵權(quán)請(qǐng)聯(lián)系站長(zhǎng)郵箱:is@yisu.com進(jìn)行舉報(bào),并提供相關(guān)證據(jù),一經(jīng)查實(shí),將立刻刪除涉嫌侵權(quán)內(nèi)容。