public class WechatSignProvider extends java.lang.Object implements SignProvider
Sign algorithm: SHA1(sort(token, timestamp, nonce))
Corresponds to api-gateway's SecurityFilter logic:
String[] arr = new String[]{token, timestamp, nonce};
Arrays.sort(arr);
String content = arr[0] + arr[1] + arr[2];
String tmpStr = SHA1(content);
return tmpStr.equalsIgnoreCase(signature);
The nonce is retrieved from SignParameters.getParameters(),
the original timestamp from query params (not the converted ms version).
signKey (appSecret in AppAuthData) stores the wechat token.
| 构造器和说明 |
|---|
WechatSignProvider() |
| 限定符和类型 | 方法和说明 |
|---|---|
java.lang.String |
generateSign(java.lang.String signKey,
SignParameters signParameters)
Generates sign.
|
java.lang.String |
generateSign(java.lang.String signKey,
SignParameters signParameters,
java.lang.String requestBody)
Generates sign.
|
public java.lang.String generateSign(java.lang.String signKey,
SignParameters signParameters,
java.lang.String requestBody)
SignProvidergenerateSign 在接口中 SignProvidersignKey - signKeysignParameters - signParametersrequestBody - requestBodypublic java.lang.String generateSign(java.lang.String signKey,
SignParameters signParameters)
SignProvidergenerateSign 在接口中 SignProvidersignKey - signKeysignParameters - signParametersCopyright © 2026 The Apache Software Foundation. All rights reserved.