加密工具类 - CryptoUtils.java，登录时对用户进行签名，重定向时验证用户的签名，基于hutool工具

小鱼儿 2023-10-10 15:04 1阅读 0赞

public class CryptoUtil {
        //签名   
        private static Date checkParams(String params) throws Exception {
            if (!params.contains("&") && !params.contains("=")) {
                throw new Exception("params参数格式不正确");
            } else if (!params.contains("time=")) {
                throw new Exception("params参数未包含time参数");
            } else {
                String time = params.split("time=")[1];
                time = time.split("&")[0];
    
                try {
                    return DateUtil.parse(time, "yyyyMMddHHmmss");
                } catch (DateException var3) {
                    throw new Exception("params参数中的time参数无法解析");
                }
            }
        }
        //验证签名
        public static String sign(String params) throws Exception {
            checkParams(params);
            String[] paramArray = params.split("&");
            Arrays.sort(paramArray);
            params = String.join("&", paramArray);
            Sign sign = SecureUtil.sign(SignAlgorithm.MD5withRSA, Base64.decode("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"), Base64.decode("MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCgpgVDRXXj+h28dGtKJgipWYkeBPJvvmmEOvAjCAkCP2yEUlocm0yevsUOAHAsvJ1thPvNmNHGuIfYf5wmDPXztrqfSC9elloJf7T6FV7JreyQVsWmrD18WQypvBwfCT/C/TnBj4S1njN+IuIz7kLpenk1fBGGrmtcOhtwdTCrjQIDAQAB"));
            byte[] signed = sign.sign(params.getBytes(CHARSET));
            return Base64.encode(signed);
        }
    
        public static boolean verify(String params, String signed) throws Exception {
            Date requestTime = checkParams(params);
            Date nowTime = DateTime.now();
            if (requestTime.after(nowTime)) {
                throw new Exception("时间参数time不正确");
            } else {
                long seconds = DateUtil.between(requestTime, nowTime, DateUnit.SECOND);
                if (seconds > 600L) {
                    throw new Exception("接口参数已失效");
                } else {
                    String[] paramArray = params.split("&");
                    Arrays.sort(paramArray);
                    params = String.join("&", paramArray);
                    Sign sign = SecureUtil.sign(SignAlgorithm.MD5withRSA, Base64.decode("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"), Base64.decode("MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCgpgVDRXXj+h28dGtKJgipWYkeBPJvvmmEOvAjCAkCP2yEUlocm0yevsUOAHAsvJ1thPvNmNHGuIfYf5wmDPXztrqfSC9elloJf7T6FV7JreyQVsWmrD18WQypvBwfCT/C/TnBj4S1njN+IuIz7kLpenk1fBGGrmtcOhtwdTCrjQIDAQAB"));
                    return sign.verify(params.getBytes(CHARSET), Base64.decode(signed));
                }
            }
        }
    
        static {
            CHARSET = CharsetUtil.CHARSET_UTF_8;
        }
    }

导入：

<dependency>
                <groupId>cn.hutool</groupId>
                <artifactId>hutool-all</artifactId>
                <version>5.7.15</version>
            </dependency>