签名鉴权

<script src="https://cdn.bootcss.com/crypto-js/3.1.9-1/crypto-js.min.js"></script>  
<script>
      const iframe = document.querySelector('#test-iframe');
      function getUnionLoginParams() {
        const nonce = 'fb4706';
        const opfid = '572115641423875';//开发者中心获取
        const uid = '18576626619';
        const secret = '92cba47a143a0c22ee7';//开发者中心获取
        const timestamp = Date.now().toString();
        const params = { opfid, secret, uid, nonce, timestamp };
        const query = Object.keys(params)
          .sort(
            (key1, key2) => key1.charCodeAt(0) - key2.charCodeAt(0)
          )
          .reduce((str, key) => (str += `${key}=${params[key]}&`), '')
          .slice(0, -1);
        const signature = CryptoJS.SHA1(query).toString(CryptoJS.enc.Hex);
        return { nonce, opfid, uid, timestamp, signature };
      }

      const params = getUnionLoginParams();
      let loginUrl = 'https://open.rabbitpre.com/union-login.html';
      loginUrl += `?nonce=${params.nonce}`;
      loginUrl += `&opfid=${params.opfid}`;
      loginUrl += `&uid=${params.uid}`;
      loginUrl += `&timestamp=${params.timestamp}`;
      loginUrl += `&signature=${params.signature}`;
      loginUrl += `&redirecturl=${encodeURIComponent('https://www.rabbitpre.com/template/multipage.html')}`;
      iframe.setAttribute('src', loginUrl);
      
    </script>

package com.base.utils;

import java.io.UnsupportedEncodingException;
import java.net.URLEncoder;
import java.security.MessageDigest;
import java.util.Iterator;
import java.util.Set;
import java.util.SortedMap;
import java.util.TreeMap;
import java.util.Map.Entry;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

public class SHA1Util {
    protected static final Logger logger = LoggerFactory.getLogger(SHA1Util.class);

    public SHA1Util() {
    }

    public static String getTimeStamp() {
        return String.valueOf(System.currentTimeMillis() / 1000L);
    }

    public static String createSHA1Sign(SortedMap<String, String> signParams) {
        StringBuffer sb = new StringBuffer();
        Set es = signParams.entrySet();
        Iterator it = es.iterator();

        while(it.hasNext()) {
            Entry params = (Entry)it.next();
            String k = (String)params.getKey();
            String v = (String)params.getValue();
            sb.append(k + "=" + v + "&");
        }

        String params1 = sb.substring(0, sb.lastIndexOf("&"));
        System.out.println(params1);
        return getSha1(params1);
    }

    public static String getSha1(String str) {
        if(str != null && str.length() != 0) {
            char[] hexDigits = new char[]{'0', '1', '2', '3', '4', '5', '6', '7', '8', '9', 'a', 'b', 'c', 'd', 'e', 'f'};

            try {
                MessageDigest e = MessageDigest.getInstance("SHA1");
                e.update(str.getBytes("UTF-8"));
                byte[] md = e.digest();
                int j = md.length;
                char[] buf = new char[j * 2];
                int k = 0;

                for(int i = 0; i < j; ++i) {
                    byte byte0 = md[i];
                    buf[k++] = hexDigits[byte0 >>> 4 & 15];
                    buf[k++] = hexDigits[byte0 & 15];
                }

                return new String(buf);
            } catch (Exception var9) {
                logger.error("getSha1 error", var9);
                throw new RuntimeException(var9.getMessage(), var9);
            }
        } else {
            return null;
        }
    }
}

/**
 * 通过request.data获取body的内容，这个是postman内置变量
 * 常用内置参数如下：
 * request 获取请求的参数，包括头和请求体
 * responseHeaders 返回值的header
 * responseBody 返回值的body
 * responseCode 返回值的http code
 */


var params = pm.request.url.query.members;
var map = new Map();
map.set("secret","89908acc57d64110b0b805977244d5c6")
var timestamp = Date.parse(new Date());
map.set("timestamp",timestamp)
for (var i=0; i<params.length; i++)
{
    // console.log(params[i])
    if(params[i].key=="signature"){
        continue
    }
    if(params[i].key=="timestamp"){
        // let time2 = new Date().getTime(); 
        console.log("------------------")
        // map.set(params[i].key,time2)
        continue
    }
    map.set(params[i].key,params[i].value)
}
console.log(map)
var arrayObj=Array.from(map);
arrayObj.sort(function(a,b){return a[0].localeCompare(b[0])})
//字段重新组装拼接
var tmp='';
for(var i=0;i<arrayObj.length;i++){
    tmp += arrayObj[i][0]+"="+arrayObj[i][1]+"&";
}
tmp = tmp.substring(0,tmp.lastIndexOf("&"))
console.log("tmp ---->" + tmp);

//生成签名串：这里使用SHA1算法并使用十六进制编码
//CryptoJS-为JavaScript提供了各种各样的加密算法
//作者：CryptoJS<>(https://code.google.com/p/crypto-js/)
// var signHmacSHA1=CryptoJS.SHA1(tmp).toString(CryptoJS.enc.Hex).toUpperCase();
var signHmacSHA1=CryptoJS.SHA1(tmp).toString(CryptoJS.enc.Hex);
console.log("sign ---->" + signHmacSHA1);

//放入环境变量
//pm.environment.set("sha1msg",signHmacSHA1)
postman.setGlobalVariable("signature", signHmacSHA1);
postman.setGlobalVariable("timestamp", timestamp);

var params = request.data
let parmsJson = JSON.parse(params)
var map = new Map();
map.set("secret","0fdb9fc1c0ca423c9af1f87baaf711d3")
var timestamp = Date.parse(new Date());
map.set("timestamp",timestamp)
for(var key in parmsJson){
    if(key=="signature"){
        continue
    }
    if(key=="timestamp"){
        continue
    }
    map.set(key,parmsJson[key])
}
console.log(map)
var arrayObj=Array.from(map);
arrayObj.sort(function(a,b){return a[0].localeCompare(b[0])})
//字段重新组装拼接
var tmp='';
for(var i=0;i<arrayObj.length;i++){
    var value = arrayObj[i][1]
    if(value instanceof Object){
        value = JSON.stringify(arrayObj[i][1])
    }
    tmp += arrayObj[i][0]+"="+value+"&";
}
tmp = tmp.substring(0,tmp.lastIndexOf("&"))
console.log("tmp ---->" + tmp);
 
//生成签名串：这里使用SHA1算法并使用十六进制编码
//CryptoJS-为JavaScript提供了各种各样的加密算法
//作者：CryptoJS<>(https://code.google.com/p/crypto-js/)
// var signHmacSHA1=CryptoJS.SHA1(tmp).toString(CryptoJS.enc.Hex).toUpperCase();
var signHmacSHA1=CryptoJS.SHA1(tmp).toString(CryptoJS.enc.Hex);
console.log("sign ---->" + signHmacSHA1);


//放入环境变量
//pm.environment.set("sha1msg",signHmacSHA1)
postman.setGlobalVariable("signature", signHmacSHA1);
postman.setGlobalVariable("timestamp", timestamp);