签名生成方法
- 所有请求参数(不包括signature不包括signature,redirecturl), 加入平台密钥secret=xxx(从兔展开放平台获取找给客户开通平台的兔展运营同学 或者 营销平台租户端系统的开发者中心), 根据参数名称进行字典递增排序(按照第一个字符的键值ASCII码递增排序, 如果遇到相同字符则按照第二个字符的键值ASCII码递增排序, 以此类推)
- 将排序后的参数与其对应值, 组合成"参数=参数值"的形式, 然后用'&'字符连接起来, 作为待签名字符串
将待签名字符串使用SHA1算法处理, 结果作为signature(签名)的值
注意事项
...
secret只在待签名字符串中使用,请求接口时,请勿带上secret参数。signature有效期60秒,超过60秒的请求会提示 signature已过期
以下提供了3种实现方式请参考:JavaScript、Java、Postman(GET, POST有区别)
代码参考
以JavaScript代码为例
代码块 | ||||||
---|---|---|---|---|---|---|
| ||||||
<script src="https://cdn.bootcss.com/crypto-js/3.1.9-1/crypto-js.min.js"></script> <script> const iframe = document.querySelector('#test-iframe'); function getUnionLoginParams() { const nonce = 'fb4706'; const opfid = '572115641423875';//开发者中心获取 const uid = '18576626619'; const secret = '92cba47a143a0c22ee7';//开发者中心获取 const timestamp = Date.now().toString(); const params = { opfid, secret, uid, nonce, timestamp }; const query = Object.keys(params) .sort( (key1, key2) => key1.charCodeAt(0) - key2.charCodeAt(0) ) .reduce((str, key) => (str += `${key}=${params[key]}&`), '') .slice(0, -1); const signature = CryptoJS.SHA1(query).toString(CryptoJS.enc.Hex); return { nonce, opfid, uid, timestamp, signature }; } const params = getUnionLoginParams(); let loginUrl = 'https://open.rabbitpre.com/union-login.html'; loginUrl += `?nonce=${params.nonce}`; loginUrl += `&opfid=${params.opfid}`; loginUrl += `&uid=${params.uid}`; loginUrl += `×tamp=${params.timestamp}`; loginUrl += `&signature=${params.signature}`; loginUrl += `&redirecturl=${encodeURIComponent('https://www.rabbitpre.com/template/multipage.html')}`; iframe.setAttribute('src', loginUrl); </script> |
...
代码块 | ||||
---|---|---|---|---|
| ||||
SortedMap<String, String> map = new TreeMap<String, String>(); map.put("opfid", opfid); map.put("nonce", nonce); map.put("timestamp", timestamp); map.put("secret", secret); map.put("uid", uid); String signature = SHA1Util.createSHA1Sign(map); System.err.println("--signature生成signature-->>" + signature); companyId 打印信息: --拼接计算signature的入参-->>companyId=1&nonce=123456&opfid=65499870709224111111&secret=2222222222222222×tamp=1625194549051&uid=1000010001 --生成signature-->>c1e0401e25926f3d42de2f03fc989eec4f15b01d |
SHA1Util参考代码
代码块 | ||||
---|---|---|---|---|
| ||||
package com.base.utils; import java.io.UnsupportedEncodingException; import java.net.URLEncoder; import java.security.MessageDigest; import java.util.Iterator; import java.util.Set; import java.util.SortedMap; import java.util.TreeMap; import java.util.Map.Entry; import org.slf4j.Logger; import org.slf4j.LoggerFactory; public class SHA1Util { protected static final Logger logger = LoggerFactory.getLogger(SHA1Util.class); public SHA1Util() { } public static String getTimeStamp() { return String.valueOf(System.currentTimeMillis() / 1000L); } public static String createSHA1Sign(SortedMap<String, String> signParams) { StringBuffer sb = new StringBuffer(); Set es = signParams.entrySet(); Iterator it = es.iterator(); while(it.hasNext()) { Entry params = (Entry)it.next(); --signature→>c1e0401e25926f3d42de2f03fc989eec4f15b01d String k = (String)params.getKey(); String v = (String)params.getValue(); sb.append(k + "=" + v + "&"); } String params1 = sb.substring(0, sb.lastIndexOf("&")); System.out.println("--拼接计算signature的入参-->>"+params1); return getSha1(params1); } public static String getSha1(String str) { if(str != null && str.length() != 0) { char[] hexDigits = new char[]{'0', '1', '2', '3', '4', '5', '6', '7', '8', '9', 'a', 'b', 'c', 'd', 'e', 'f'}; try { MessageDigest e = MessageDigest.getInstance("SHA1"); e.update(str.getBytes("UTF-8")); byte[] md = e.digest(); int j = md.length; char[] buf = new char[j * 2]; int k = 0; for(int i = 0; i < j; ++i) { byte byte0 = md[i]; buf[k++] = hexDigits[byte0 >>> 4 & 15]; buf[k++] = hexDigits[byte0 & 15]; } return new String(buf); } catch (Exception var9) { logger.error("--计算signature--getSha1 error", var9); throw new RuntimeException(var9.getMessage(), var9); } } else { return null; } } } |
后续技术对接,首先执行联合登录接口。开放平台目前只支持HTML联合登录的方式(即浏览器访问如下示例)
下面示例是test环境的域名(生产域名: https://open.rabbitpre.com):后续技术对接,首先执行联合登录接口。开放平台目前只支持HTML联合登录的方式(即浏览器访问如下示例)
https://testopen.rabbitpre.com/union-login.html?nonce=123456&opfid=65499870709224111111&uid=uidjj×tamp=1625194549051&signature=c1e0401e25926f3d42de2f03fc989eec4f15b01d&redirecturl=https://home.rabbitpre.com
...