自己的服务解密，获取微信小程序用户的手机号码

墨蓝 2022-05-31 13:15 232阅读 0赞

1、小程序传参数js\_code（用户获取session\_key）和encryptedData、vi（用于解密手机号）

发送http请求调接口：

https://api.weixin.qq.com/sns/jscode2session?appid=固定的appid&secret=固定的secret&js_code=每次小程序传参&grant_type=authorization_code

返回数据如下，取出session\_key用于解密：

\{"session\_key":"EKjnfpQ6LFxScbtOg==","expires\_in":7200,"openid":"oBEMf0UbSQ6xpgUcI"\}

2、拿session\_key和encryptedData、vi解密手机号

import org.apache.commons.codec.binary.Base64;
    import javax.crypto.Cipher;
    import javax.crypto.spec.IvParameterSpec;
    import javax.crypto.spec.SecretKeySpec;
    import java.security.spec.AlgorithmParameterSpec;
    
    /**
     * Created by hgg on 2018/2/24.
     * 小程序AES解密
     */
    public class AESDecodeUtils {
    
        public static void main(String[] args) throws Exception {
            byte[] encrypData = Base64.decodeBase64("mgxuts7uEbdnBclp0Qim0TS3MGoaSyE09MqTvbeG9Z1PjxsDwjVH0FxG1Q==");
            byte[] ivData = Base64.decodeBase64("SG386etdA3sOXHxqfnw==");
            byte[] sessionKey = Base64.decodeBase64("Fn6r4IOiZJBXn4hQ0w==");
            System.out.println(decrypt(sessionKey,ivData,encrypData));
        }
    
        public static String decrypt(byte[] key, byte[] iv, byte[] encData) throws Exception {
            AlgorithmParameterSpec ivSpec = new IvParameterSpec(iv);
            Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
            SecretKeySpec keySpec = new SecretKeySpec(key, "AES");
            cipher.init(Cipher.DECRYPT_MODE, keySpec, ivSpec);
            //解析解密后的字符串
            return new String(cipher.doFinal(encData),"UTF-8");
        }
    }

encryptedData 解密后为以下 json 结构，详见[加密数据解密算法][Link 1]

{
        "phoneNumber": "13580006666",  
        "purePhoneNumber": "13580006666", 
        "countryCode": "86",
        "watermark":
        {
            "appid":"APPID",
            "timestamp":TIMESTAMP
        }
    }

<table style="border-spacing:0px;margin-top:1em;width:960px;border-bottom:1px solid rgb(231,231,235);font-family:'Helvetica Neue', 'Hiragino Sans GB', 'Microsoft YaHei', '黑体', Arial, sans-serif;letter-spacing:.2px;background-color:rgb(255,255,255);margin-bottom:0px;"> 
 <thead> 
  <tr style="background-color:rgb(246,248,249);border-style:none;"> 
   <th style="padding:6px 20px;border-style:none;font-weight:400;color:rgb(141,141,141);height:40px;white-space:nowrap;">参数</th> 
   <th style="padding:6px 20px;border-style:none;font-weight:400;color:rgb(141,141,141);height:40px;white-space:nowrap;">类型</th> 
   <th style="padding:6px 20px;border-style:none;font-weight:400;color:rgb(141,141,141);height:40px;white-space:nowrap;">说明</th> 
  </tr> 
 </thead> 
 <tbody> 
  <tr style="border-style:none;"> 
   <td style="padding:12px 20px;border-style:none;height:60px;">phoneNumber</td> 
   <td style="padding:12px 20px;border-style:none;height:60px;">String</td> 
   <td style="padding:12px 20px;border-style:none;height:60px;">用户绑定的手机号（国外手机号会有区号）</td> 
  </tr> 
  <tr style="background-color:rgb(255,255,255);border-top-color:rgb(231,231,235);"> 
   <td style="padding:12px 20px;border-style:none;height:60px;">purePhoneNumber</td> 
   <td style="padding:12px 20px;border-style:none;height:60px;">String</td> 
   <td style="padding:12px 20px;border-style:none;height:60px;">没有区号的手机号</td> 
  </tr> 
  <tr style="border-top-color:rgb(231,231,235);"> 
   <td style="padding:12px 20px;border-style:none;height:60px;">countryCode</td> 
   <td style="padding:12px 20px;border-style:none;height:60px;">String</td> 
   <td style="padding:12px 20px;border-style:none;height:60px;">区号</td> 
  </tr> 
 </tbody> 
</table>

[借鉴文章][Link 2]，感谢！

[Link 1]: https://mp.weixin.qq.com/debug/wxadoc/dev/api/signature.html?t=201828#%E5%8A%A0%E5%AF%86%E6%95%B0%E6%8D%AE%E8%A7%A3%E5%AF%86%E7%AE%97%E6%B3%95
[Link 2]: https://zhuanlan.zhihu.com/p/31667763