lxm_library_java/WxJava
1
0
Fork 0
mirror of synced 2025-12-16 20:28:11 +08:00
Code Issues Projects Releases Wiki Activity

🎨 #3620 【小程序】修复同城配送API签名错误问题（添加RSA私钥序列号到签名payload和请求头）

Browse Source
This commit is contained in:
Copilot
2025-12-04 19:40:03 +08:00
committed by GitHub
parent cd4317ab3e
commit 219a8f4f36
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
weixin-java-miniapp/src/main/java/cn/binarywang/wx/miniapp/api/impl/BaseWxMaServiceImpl.java
View File

@@ -912,6 +912,10 @@ public abstract class BaseWxMaServiceImpl<H, P> implements WxMaService, RequestH
String rndStr = UUID.randomUUID().toString().replace("-", "").substring(0, 30); String rndStr = UUID.randomUUID().toString().replace("-", "").substring(0, 30);
String aesKey = this.getWxMaConfig().getApiSignatureAesKey(); String aesKey = this.getWxMaConfig().getApiSignatureAesKey();
String aesKeySn = this.getWxMaConfig().getApiSignatureAesKeySn(); String aesKeySn = this.getWxMaConfig().getApiSignatureAesKeySn();
String rsaKeySn = this.getWxMaConfig().getApiSignatureRsaPrivateKeySn();
if (rsaKeySn == null || rsaKeySn.isEmpty()) {
throw new SecurityException("ApiSignatureRsaPrivateKeySn不能为空，请检查配置");
}
jsonObject.addProperty("_n", rndStr); jsonObject.addProperty("_n", rndStr);
jsonObject.addProperty("_appid", appId); jsonObject.addProperty("_appid", appId);
@@ -956,7 +960,7 @@ public abstract class BaseWxMaServiceImpl<H, P> implements WxMaService, RequestH
String requestJson = reqData.toString(); String requestJson = reqData.toString();
// 计算签名 RSA // 计算签名 RSA
String payload = urlPath + "\n" + appId + "\n" + timestamp + "\n" + requestJson; String payload = urlPath + "\n" + appId + "\n" + timestamp + "\n" + rsaKeySn + "\n" + requestJson;
byte[] dataBuffer = payload.getBytes(StandardCharsets.UTF_8); byte[] dataBuffer = payload.getBytes(StandardCharsets.UTF_8);
RSAPrivateKey priKey; RSAPrivateKey priKey;
try { try {
@@ -985,6 +989,7 @@ public abstract class BaseWxMaServiceImpl<H, P> implements WxMaService, RequestH
header.put("Wechatmp-Signature", signatureString); header.put("Wechatmp-Signature", signatureString);
header.put("Wechatmp-Appid", appId); header.put("Wechatmp-Appid", appId);
header.put("Wechatmp-TimeStamp", String.valueOf(timestamp)); header.put("Wechatmp-TimeStamp", String.valueOf(timestamp));
header.put("Wechatmp-Serial", rsaKeySn);
log.debug("发送请求uri:{}, headers:{}, postData:{}", url, header, requestJson); log.debug("发送请求uri:{}, headers:{}, postData:{}", url, header, requestJson);
WxMaApiResponse response = WxMaApiResponse response =
this.execute(ApiSignaturePostRequestExecutor.create(this), url, header, requestJson); this.execute(ApiSignaturePostRequestExecutor.create(this), url, header, requestJson);