devbox
IT小白
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

微信小程序获取用户手机号码，Java后台servlet解密（微信小程序调用微信支付也是大致的流程）_{ code, encrypteddata, iv }

作者：IT小白 | 2024-03-22 02:26:16

赞

踩

{ code, encrypteddata, iv }

本篇记录说明

微信小程序获取用户手机号码，Java后台servlet解密（微信小程序调用微信支付也是大致的流程，详细内容可私信交流）

（第一次写博客，写得不好的地方见谅，面向新手，大佬请无视，不喜勿喷）

一、前言： 

微信小程序有一个获取用户手机号码很便捷的接口，通过getPhoneNumber获取用户的已经绑定微信的手机号码。

现在微信和注重用户体验，必须要用户主动触发才可以。必须使用 open-type="getPhoneNumber" 的按钮来触发。

二、实现步骤：

1、通过wx.login获取【code】；

2、通过getPhoneNumber获取【encryptedData】 、【iv】；（ps：切记第1步和第2步的顺序不能颠倒，先调用wx.login，把wx.login写在onload方法里面；然后再通过getPhoneNumber获取【encryptedData】 、【iv】）

3、通过wx.request将【encryptedData】 、【iv】 、【code】发送到Java后台；

4、Java后台使用【code】，请求微信后台登录凭证校验接口auth.code2Session，获取【openid】和【sessionKey】返回Java后台；

5、Java后台使用【encryptedData】、【iv】、【sessionKey】解密获取用户手机号返回给微信小程序。（ps：微信给的后台解密示例代码里面没有Java，是的，你没有看错，没有Java。）

三、代码展示

1、小程序代码如下：

(1)getPhoneNumber.wxml

  1. <view class='header'>
  2.  
  3. </view>
  4.  
  5.  
  6. <view class='text_view'>
  7.  
  8.   <text>申请获取以下权限</text>
  9. </view>
  10.  
  11.  
  12. <view class='content'>
  13.   <text>获得您的信息(手机号码等)</text>
  14. </view>
  15.  
  16. <button class='bottom' type='primary' lang="zh_CN" open-type="getPhoneNumber" bindgetphonenumber="getPhoneNumber">
  17.   获取手机号码
  18. </button>
  19.  
  20. <view class='problem'>
  21.   <text>登陆遇到问题？点此联系客服</text>
  22.   <button class='contact-btn' open-type='contact'>a</button>
  23. </view>
  24.  
  25.  
  26.  
  27.  
  28. <view bindtap="cooperate" class='cooperate-phonenumber'>
  29.   
  30. </view>

(2)getPhoneNumber.wxss

  1. page {
  2.   /* background-color: #eee; */
  3.   height: 100%;
  4.   overflow: hidden;
  5. }
  6.  
  7.  
  8. .header {
  9.   margin: 90rpx 0 90rpx 50rpx;
  10.   text-align: center;
  11.   width: 650rpx;
  12.   height: 300rpx;
  13.   line-height: 450rpx;
  14. }
  15.  
  16. .header image {
  17.   width: 180rpx;
  18.   height: 180rpx;
  19. }
  20.  
  21. .text_view {
  22.   width: 750rpx;
  23.   display: flex;
  24.   flex-direction: column;
  25.   justify-content: center;
  26.   align-items: center;
  27. }
  28.  
  29. .content {
  30.   margin-bottom: 90rpx;
  31.   display: flex;
  32.   flex-direction: column;
  33.   justify-content: center;
  34.   align-items: center;
  35. }
  36.  
  37. .content text {
  38.   display: block;
  39.   color: #9d9d9d;
  40.   margin-top: 40rpx;
  41. }
  42.  
  43. .bottom {
  44.   border-radius: 80rpx;
  45.   margin: 30rpx 20rpx;
  46.   font-size: 35rpx;
  47. }
  48.  
  49.  
  50.  
  51. .problem {
  52.   width: 50%;
  53.   display: flex;
  54.   flex-direction: column;
  55.   justify-content: center;
  56.   align-items:center;
  57.   margin-left: 50%;
  58. }
  59.  
  60. .problem text {
  61.   font-size: 28rpx;
  62.   /* display: block; */
  63.   color: #576B95; 
  64. }
  65.  
  66. .contact-btn {
  67.   position: absolute;
  68.   width: 100%;
  69.   opacity: 0;
  70. }
  71.  
  72.  
  73. .cooperate-phonenumber {
  74.   width: 100%;
  75.   position: fixed;
  76.   bottom:20rpx;
  77.   display: flex;
  78.   /* margin-top: 30%; */
  79.   flex-direction: column;
  80.   justify-content: center;
  81.   align-items:center;
  82.   /* margin-left: 50%; */
  83. }
  84.  
  85. .cooperate-phonenumber text {
  86.   font-size: 28rpx;
  87.   /* display: block; */
  88.   color: #576B95; 
  89. }

(3)getPhoneNumber.js

  1. // src/pages/getPhoneNumber/getPhoneNumber.js
  2. Page({
  3.  
  4.   /**
  5.    * 页面的初始数据
  6.    */
  7.   data: {
  8.  
  9.   },
  10.  
  11.   /**
  12.    * 生命周期函数--监听页面加载
  13.    */
  14.   onLoad: function(options) {
  15.  
  16.     //获取openid
  17.     wx.login({
  18.       success(res) {
  19.         //获取登录凭证
  20.         console.log("res.conde:" + res.code)
  21.  
  22.  
  23.         try {
  24.           wx.setStorageSync('code', res.code)
  25.         } catch (e) {}
  26.  
  27.  
  28.  
  29.       }
  30.  
  31.     })
  32.  
  33.  
  34.  
  35.  
  36.   },
  37.  
  38.   /**
  39.    * 生命周期函数--监听页面初次渲染完成
  40.    */
  41.   onReady: function() {
  42.  
  43.   },
  44.  
  45.   /**
  46.    * 生命周期函数--监听页面显示
  47.    */
  48.   onShow: function() {
  49.  
  50.   },
  51.  
  52.  
  53.  
  54.   getPhoneNumber(e) {
  55.     console.log(e)
  56.     console.log("e.detail.errMsg:" + e.detail.errMsg)
  57.     console.log("e.detail.iv:" + e.detail.iv)
  58.     console.log("e.detail.encryptedData:" + e.detail.encryptedData)
  59.  
  60.     var code = wx.getStorageSync('code')
  61.     console.log("conde:" + code)
  62.  
  63.     wx.request({
  64.       url: 'java后台servlet链接',
  65.       method: "POST",
  66.       data: {
  67.         encryptedData: e.detail.encryptedData,
  68.         iv: e.detail.iv,
  69.         code: code,
  70.       },
  71.       header: {
  72.         "Content-Type": "application/x-www-form-urlencoded"
  73.       },
  74.       success: function(data) {
  75.         console.log('data：' + data.data)
  76.  
  77.       },
  78.       fail: function() {
  79.         console.log('request请求错误')
  80.       },
  81.     })
  82.  
  83.  
  84.   },
  85.  
  86.  
  87.  
  88.  
  89.   /**
  90.    * 生命周期函数--监听页面隐藏
  91.    */
  92.   onHide: function() {
  93.  
  94.   },
  95.  
  96.   /**
  97.    * 生命周期函数--监听页面卸载
  98.    */
  99.   onUnload: function() {
  100.  
  101.   },
  102.  
  103.   /**
  104.    * 页面相关事件处理函数--监听用户下拉动作
  105.    */
  106.   onPullDownRefresh: function() {
  107.  
  108.   },
  109.  
  110.   /**
  111.    * 页面上拉触底事件的处理函数
  112.    */
  113.   onReachBottom: function() {
  114.  
  115.   },
  116.  
  117.   /**
  118.    * 用户点击右上角分享
  119.    */
  120.   onShareAppMessage: function() {
  121.  
  122.   }
  123.  
  124.  
  125.  
  126.  
  127.  
  128.  
  129.  
  130.  
  131.  
  132.  
  133. })

2、Java后台servlet代码如下：

(1) getPhoneNumberServlet，网络请求用okhttp3

  1.  
  2. package servlet;
  3.  
  4. import java.io.DataOutputStream;
  5. import java.io.File;
  6. import java.io.IOException;
  7. import java.io.InputStream;
  8. import java.math.BigInteger;
  9. import java.net.Socket;
  10. import java.net.UnknownHostException;
  11. import java.security.MessageDigest;
  12.  
  13. import javax.security.sasl.SaslException;
  14. import javax.servlet.ServletException;
  15. import javax.servlet.http.HttpServlet;
  16. import javax.servlet.http.HttpServletRequest;
  17. import javax.servlet.http.HttpServletResponse;
  18.  
  19. import okhttp3.OkHttpClient;
  20. import okhttp3.Request;
  21. import okhttp3.Response;
  22. import tools.WXCore;
  23.  
  24.  
  25. public class getPhoneNumberServlet extends HttpServlet {
  26.  
  27. 	public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
  28.  
  29. 		String selStr;
  30. 		InputStream is = null;
  31.  
  32. 		try {
  33. 			is = request.getInputStream();
  34. 			StringBuilder sb = new StringBuilder();
  35. 			byte[] b = new byte[4096];
  36. 			for (int n; (n = is.read(b)) != -1;) {
  37. 				sb.append(new String(b, 0, n));
  38. 			}
  39.  
  40. 			selStr = java.net.URLDecoder.decode(sb.toString(), "UTF-8");
  41.  
  42. 		} catch (IOException e) {
  43.  
  44. 			e.printStackTrace();
  45. 			return;
  46.  
  47. 		} finally {
  48. 			if (null != is) {
  49. 				try {
  50. 					is.close();
  51. 				} catch (IOException e) {
  52. 					e.printStackTrace();
  53. 				}
  54. 			}
  55. 		}
  56.  
  57. 		System.out.println("selStr：" + selStr);
  58.  
  59. 		String encryptedData = selStr.substring(selStr.lastIndexOf("encryptedData=") + 14, selStr.lastIndexOf("&iv="));
  60. 		System.out.println("encryptedData：" + encryptedData);
  61.  
  62. 		String iv = selStr.substring(selStr.lastIndexOf("iv=") + 3, selStr.lastIndexOf("&code="));
  63. 		System.out.println("iv：" + iv);
  64.  
  65. 		String code = selStr.substring(selStr.lastIndexOf("code=") + 5);
  66. 		System.out.println("code：" + code);
  67.  
  68. 		OkHttpClient client = new OkHttpClient();
  69. 		Request okrequest = new Request.Builder()
  70.  
  71. 				.url("https://api.weixin.qq.com/sns/jscode2session?appid=APPID&secret=SECRET&js_code=JSCODE&grant_type=authorization_code")
  72.  
  73. 				.build();
  74. 		try {
  75.  
  76. 			Response okresponse = client.newCall(okrequest).execute();
  77.  
  78. 			String responsedata = okresponse.body().string();
  79. 			System.out.println("responsedata：" + responsedata);
  80.  
  81. 			String openid = responsedata.substring(responsedata.lastIndexOf(":") + 2,
  82. 					responsedata.lastIndexOf("\""));
  83. 			String session_key = responsedata.substring(responsedata.indexOf(":") + 2,
  84. 					responsedata.indexOf("==") + 2);
  85.  
  86.  
  87. 			System.out.println("原始的openid：" + openid);
  88. 			System.out.println("原始的session_key：" + session_key);
  89.  
  90.  
  91. 			String appId = "wx7xxxxxxxxxxxxxxxxxxxx";
  92. 			WXCore wxcore = new WXCore();
  93. 			String phonenumber = wxcore.decrypt(appId, encryptedData,                         responsedata_session_key, iv);
  94.  
  95. 			System.out.println("手机号码:" + phonenumber);
  96.  
  97. 			response.getWriter().write(openid + "&" + phonenumber);
  98.  
  99. 		} catch (IOException e) {
  100.  
  101. 			e.printStackTrace();
  102. 		}
  103.  
  104. 	}
  105.  
  106.  
  107.  
  108. 	public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
  109.  
  110. 		doGet(request, response);
  111.  
  112. 	}
  113.  
  114. }

(2) AES类、WxPKCS7Encoder类、WXCore类，用于解密，用到的包有：bcprov-jdk15on-1.52.jar，commons-codec-1.6.jar，fastjson-1.2.56.jar

  1. <dependency>  
  2.     <groupId>org.bouncycastle</groupId>  
  3.     <artifactId>bcprov-jdk16</artifactId>  
  4.     <version>1.46</version>  
  5. </dependency>
  6.  
  7. <dependency>  
  8.     <groupId>commons-codec</groupId>  
  9.     <artifactId>commons-codec</artifactId>  
  10.     <version>1.10</version>  
  11. </dependency>  
  12.   
  13. <dependency>  
  14.     <groupId>com.alibaba</groupId>  
  15.     <artifactId>fastjson</artifactId>  
  16.     <version>1.2.29</version>  
  17. </dependency>  

  1.  
  2.   
  3. import java.security.AlgorithmParameters;  
  4. import java.security.InvalidAlgorithmParameterException;  
  5. import java.security.InvalidKeyException;  
  6. import java.security.Key;  
  7. import java.security.NoSuchAlgorithmException;  
  8. import java.security.NoSuchProviderException;  
  9. import java.security.Security;  
  10.    
  11. import javax.crypto.BadPaddingException;  
  12. import javax.crypto.Cipher;  
  13. import javax.crypto.IllegalBlockSizeException;  
  14. import javax.crypto.NoSuchPaddingException;  
  15. import javax.crypto.spec.IvParameterSpec;  
  16. import javax.crypto.spec.SecretKeySpec;  
  17. import org.bouncycastle.jce.provider.BouncyCastleProvider;  
  18.    
  19. /** 
  20.  * AES加密 
  21.  */  
  22. public class AES {  
  23.       
  24.     public static boolean initialized = false;  
  25.    
  26.     /** 
  27.      * AES解密 
  28.      *  
  29.      * @param content 
  30.      *            密文 
  31.      * @return 
  32.      * @throws InvalidAlgorithmParameterException 
  33.      * @throws NoSuchProviderException 
  34.      */  
  35.     public byte[] decrypt(byte[] content, byte[] keyByte, byte[] ivByte) throws InvalidAlgorithmParameterException {  
  36.         initialize();  
  37.         try {  
  38.             Cipher cipher = Cipher.getInstance("AES/CBC/PKCS7Padding");  
  39.             Key sKeySpec = new SecretKeySpec(keyByte, "AES");  
  40.             cipher.init(Cipher.DECRYPT_MODE, sKeySpec, generateIV(ivByte));// 初始化  
  41.             byte[] result = cipher.doFinal(content);  
  42.             return result;  
  43.         } catch (NoSuchAlgorithmException e) {  
  44.             e.printStackTrace();  
  45.         } catch (NoSuchPaddingException e) {  
  46.             e.printStackTrace();  
  47.         } catch (InvalidKeyException e) {  
  48.             e.printStackTrace();  
  49.         } catch (IllegalBlockSizeException e) {  
  50.             e.printStackTrace();  
  51.         } catch (BadPaddingException e) {  
  52.             e.printStackTrace();  
  53.         } catch (NoSuchProviderException e) {  
  54.             e.printStackTrace();  
  55.         } catch (Exception e) {  
  56.             e.printStackTrace();  
  57.         }  
  58.         return null;  
  59.     }  
  60.    
  61.     public static void initialize() {  
  62.         if (initialized)  
  63.             return;  
  64.         Security.addProvider(new BouncyCastleProvider());  
  65.         initialized = true;  
  66.     }  
  67.    
  68.     // 生成iv  
  69.     public static AlgorithmParameters generateIV(byte[] iv) throws Exception {  
  70.         AlgorithmParameters params = AlgorithmParameters.getInstance("AES");  
  71.         params.init(new IvParameterSpec(iv));  
  72.         return params;  
  73.     }  
  74. } 
  1.  
  2. import java.nio.charset.Charset;
  3. import java.util.Arrays;
  4.  
  5. /**
  6.  * 微信小程序加解密
  7.  */
  8. public class WxPKCS7Encoder {
  9. 	private static final Charset CHARSET = Charset.forName("utf-8");
  10. 	private static final int BLOCK_SIZE = 32;
  11.  
  12. 	/**
  13. 	 * 获得对明文进行补位填充的字节.
  14. 	 * 
  15. 	 * @param count 需要进行填充补位操作的明文字节个数
  16. 	 * @return 补齐用的字节数组
  17. 	 */
  18. 	public static byte[] encode(int count) {
  19. 		// 计算需要填充的位数
  20. 		int amountToPad = BLOCK_SIZE - (count % BLOCK_SIZE);
  21. 		if (amountToPad == 0) {
  22. 			amountToPad = BLOCK_SIZE;
  23. 		}
  24. 		// 获得补位所用的字符
  25. 		char padChr = chr(amountToPad);
  26. 		String tmp = new String();
  27. 		for (int index = 0; index < amountToPad; index++) {
  28. 			tmp += padChr;
  29. 		}
  30. 		return tmp.getBytes(CHARSET);
  31. 	}
  32.  
  33. 	/**
  34. 	 * 删除解密后明文的补位字符
  35. 	 * 
  36. 	 * @param decrypted 解密后的明文
  37. 	 * @return 删除补位字符后的明文
  38. 	 */
  39. 	public static byte[] decode(byte[] decrypted) {
  40. 		int pad = decrypted[decrypted.length - 1];
  41. 		if (pad < 1 || pad > 32) {
  42. 			pad = 0;
  43. 		}
  44. 		return Arrays.copyOfRange(decrypted, 0, decrypted.length - pad);
  45. 	}
  46.  
  47. 	/**
  48. 	 * 将数字转化成ASCII码对应的字符，用于对明文进行补码
  49. 	 * 
  50. 	 * @param a 需要转化的数字
  51. 	 * @return 转化得到的字符
  52. 	 */
  53. 	public static char chr(int a) {
  54. 		byte target = (byte) (a & 0xFF);
  55. 		return (char) target;
  56. 	}
  57. }
  1.  
  2. import org.apache.commons.codec.binary.Base64;
  3.  
  4. import com.alibaba.fastjson.JSON;
  5. import com.alibaba.fastjson.JSONObject;
  6.  
  7. /**
  8.  * 封装对外访问方法
  9.  */
  10. public class WXCore {
  11.  
  12. 	private static final String WATERMARK = "watermark";
  13. 	private static final String APPID = "appid";
  14.  
  15. 	/**
  16. 	 * 解密数据
  17. 	 * 
  18. 	 * @return
  19. 	 * @throws Exception
  20. 	 */
  21. 	public static String decrypt(String appId, String encryptedData, String sessionKey, String iv) {
  22. 		String result = "";
  23. 		try {
  24. 			AES aes = new AES();
  25. 			byte[] resultByte = aes.decrypt(Base64.decodeBase64(encryptedData), Base64.decodeBase64(sessionKey),
  26. 					Base64.decodeBase64(iv));
  27. 			if (null != resultByte && resultByte.length > 0) {
  28. 				result = new String(WxPKCS7Encoder.decode(resultByte));
  29. 				JSONObject jsonObject = JSON.parseObject(result);
  30. 				String decryptAppid = jsonObject.getJSONObject(WATERMARK).getString(APPID);
  31. 				if (!appId.equals(decryptAppid)) {
  32. 					result = "";
  33. 				}
  34. 			}
  35. 		} catch (Exception e) {
  36. 			result = "";
  37. 			e.printStackTrace();
  38. 		}
  39. 		return result;
  40. 	}
  41.  
  42. 	
  43. }

四、步骤详解：

1、通过wx.login获取【code】；

  1.   /**
  2.    * 生命周期函数--监听页面加载
  3.    */
  4.   onLoad: function(options) {
  5.  
  6.     //获取openid
  7.     wx.login({
  8.       success(res) {
  9.         //获取登录凭证
  10.         console.log("res.conde:" + res.code)
  11.  
  12.  
  13.         try {
  14.           wx.setStorageSync('code', res.code)
  15.         } catch (e) {}
  16.  
  17.  
  18.  
  19.       }
  20.  
  21.     })
  22.  
  23.  
  24.  
  25.  
  26.   },

2、通过getPhoneNumber获取【encryptedData】 、【iv】；（ps：切记第1步和第2步的顺序不能颠倒，先调用wx.login，把wx.login写在onload方法里面；然后再通过getPhoneNumber获取【encryptedData】 、【iv】）

  1.   getPhoneNumber(e) {
  2.  
  3.     console.log(e)
  4.     console.log("e.detail.errMsg:" + e.detail.errMsg)
  5.     console.log("e.detail.iv:" + e.detail.iv)
  6.     console.log("e.detail.encryptedData:" + e.detail.encryptedData)
  7.     
  8.   },

3、通过wx.request将【encryptedData】 、【iv】 、【code】发送到Java后台；

  1.  getPhoneNumber(e) {
  2.     console.log(e)
  3.     console.log("e.detail.errMsg:" + e.detail.errMsg)
  4.     console.log("e.detail.iv:" + e.detail.iv)
  5.     console.log("e.detail.encryptedData:" + e.detail.encryptedData)
  6.  
  7.     var code = wx.getStorageSync('code')
  8.     console.log("conde:" + code)
  9.  
  10.     wx.request({
  11.       url: 'Java后台servlet链接',
  12.       method: "POST",
  13.       data: {
  14.         encryptedData: e.detail.encryptedData,
  15.         iv: e.detail.iv,
  16.         code: code,
  17.       },
  18.       header: {
  19.         "Content-Type": "application/x-www-form-urlencoded"
  20.       },
  21.       success: function(data) {
  22.         console.log('data：' + data.data)
  23.  
  24.       },
  25.       fail: function() {
  26.         console.log('request请求错误')
  27.       },
  28.     })
  29.  
  30.  
  31.   },

4、Java后台使用【code】，请求微信后台登录凭证校验接口auth.code2Session，获取【openid】和【sessionKey】返回Java后台；（ps：本篇中不用到【openid】，后续微信小程序调用微信支付时用到）

(1)新建getPhoneNumberServlet类，获取【encryptedData】 、【iv】 、【code】

  1.  
  2. package servlet;
  3.  
  4. import java.io.DataOutputStream;
  5. import java.io.File;
  6. import java.io.IOException;
  7. import java.io.InputStream;
  8. import java.math.BigInteger;
  9. import java.net.Socket;
  10. import java.net.UnknownHostException;
  11. import java.security.MessageDigest;
  12.  
  13. import javax.security.sasl.SaslException;
  14. import javax.servlet.ServletException;
  15. import javax.servlet.http.HttpServlet;
  16. import javax.servlet.http.HttpServletRequest;
  17. import javax.servlet.http.HttpServletResponse;
  18.  
  19. import okhttp3.OkHttpClient;
  20. import okhttp3.Request;
  21. import okhttp3.Response;
  22. import tools.WXCore;
  23.  
  24. public class getPhoneNumberServlet extends HttpServlet {
  25.  
  26. 	public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
  27.  
  28. 		String selStr;
  29. 		InputStream is = null;
  30.  
  31. 		try {
  32. 			is = request.getInputStream();
  33. 			StringBuilder sb = new StringBuilder();
  34. 			byte[] b = new byte[4096];
  35. 			for (int n; (n = is.read(b)) != -1;) {
  36. 				sb.append(new String(b, 0, n));
  37. 			}
  38.  
  39. 			selStr = java.net.URLDecoder.decode(sb.toString(), "UTF-8");
  40.  
  41. 		} catch (IOException e) {
  42.  
  43. 			e.printStackTrace();
  44. 			return;
  45.  
  46. 		} finally {
  47. 			if (null != is) {
  48. 				try {
  49. 					is.close();
  50. 				} catch (IOException e) {
  51. 					e.printStackTrace();
  52. 				}
  53. 			}
  54. 		}
  55.  
  56. 		System.out.println("selStr：" + selStr);
  57.  
  58. 		String encryptedData = selStr.substring(selStr.lastIndexOf("encryptedData=") + 14, selStr.lastIndexOf("&iv="));
  59. 		System.out.println("encryptedData：" + encryptedData);
  60.  
  61. 		String iv = selStr.substring(selStr.lastIndexOf("iv=") + 3, selStr.lastIndexOf("&code="));
  62. 		System.out.println("iv：" + iv);
  63.  
  64. 		String code = selStr.substring(selStr.lastIndexOf("code=") + 5);
  65. 		System.out.println("code：" + code);
  66.  
  67. 		
  68.  
  69. 	
  70.  
  71. 	}
  72.  
  73.  
  74.  
  75. 	public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
  76.  
  77. 		doGet(request, response);
  78.  
  79. 	}
  80.  
  81. }

(2)将【code】、【小程序 appId】、【小程序 appSecret】、作为参数，使用okhttp请求微信后台登录凭证校验接口auth.code2Session，获取获取【openid】和【sessionKey】。（ps：本篇中不用到【openid】，后续微信小程序调用微信支付时用到）

  1.  
  2. package servlet;
  3.  
  4. import java.io.DataOutputStream;
  5. import java.io.File;
  6. import java.io.IOException;
  7. import java.io.InputStream;
  8. import java.math.BigInteger;
  9. import java.net.Socket;
  10. import java.net.UnknownHostException;
  11. import java.security.MessageDigest;
  12.  
  13. import javax.security.sasl.SaslException;
  14. import javax.servlet.ServletException;
  15. import javax.servlet.http.HttpServlet;
  16. import javax.servlet.http.HttpServletRequest;
  17. import javax.servlet.http.HttpServletResponse;
  18.  
  19. import okhttp3.OkHttpClient;
  20. import okhttp3.Request;
  21. import okhttp3.Response;
  22. import tools.WXCore;
  23.  
  24.  
  25. public class getPhoneNumberServlet extends HttpServlet {
  26.  
  27. 	public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
  28.  
  29. 		String selStr;
  30. 		InputStream is = null;
  31.  
  32. 		try {
  33. 			is = request.getInputStream();
  34. 			StringBuilder sb = new StringBuilder();
  35. 			byte[] b = new byte[4096];
  36. 			for (int n; (n = is.read(b)) != -1;) {
  37. 				sb.append(new String(b, 0, n));
  38. 			}
  39.  
  40. 			selStr = java.net.URLDecoder.decode(sb.toString(), "UTF-8");
  41.  
  42. 		} catch (IOException e) {
  43.  
  44. 			e.printStackTrace();
  45. 			return;
  46.  
  47. 		} finally {
  48. 			if (null != is) {
  49. 				try {
  50. 					is.close();
  51. 				} catch (IOException e) {
  52. 					e.printStackTrace();
  53. 				}
  54. 			}
  55. 		}
  56.  
  57. 		System.out.println("selStr：" + selStr);
  58.  
  59. 		String encryptedData = selStr.substring(selStr.lastIndexOf("encryptedData=") + 14, selStr.lastIndexOf("&iv="));
  60. 		System.out.println("encryptedData：" + encryptedData);
  61.  
  62. 		String iv = selStr.substring(selStr.lastIndexOf("iv=") + 3, selStr.lastIndexOf("&code="));
  63. 		System.out.println("iv：" + iv);
  64.  
  65. 		String code = selStr.substring(selStr.lastIndexOf("code=") + 5);
  66. 		System.out.println("code：" + code);
  67.  
  68. 		OkHttpClient client = new OkHttpClient();
  69. 		Request okrequest = new Request.Builder()
  70.  
  71. 				.url("https://api.weixin.qq.com/sns/jscode2session?appid=APPID&secret=SECRET&js_code=JSCODE&grant_type=authorization_code")
  72.  
  73. 				.build();
  74. 		try {
  75.  
  76. 			Response okresponse = client.newCall(okrequest).execute();
  77.  
  78. 			String responsedata = okresponse.body().string();
  79. 			System.out.println("responsedata：" + responsedata);
  80.  
  81. 			String openid = responsedata.substring(responsedata.lastIndexOf(":") + 2,
  82. 					responsedata.lastIndexOf("\""));
  83. 			String session_key = responsedata.substring(responsedata.indexOf(":") + 2,
  84. 					responsedata.indexOf("==") + 2);
  85.  
  86.  
  87. 			System.out.println("原始的openid：" + openid);
  88. 			System.out.println("原始的session_key：" + session_key);
  89.  
  90.  
  91. 		} catch (IOException e) {
  92.  
  93. 			e.printStackTrace();
  94. 		}
  95.  
  96. 	}
  97.  
  98.  
  99.  
  100. 	public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
  101.  
  102. 		doGet(request, response);
  103.  
  104. 	}
  105.  
  106. }

3、调用WXCore类的decrypt方法，将【appId】、【iv】、【sessionKey】作为参数，对【encryptedData】进行解密，获取手机号码。

  1.  
  2. package servlet;
  3.  
  4. import java.io.DataOutputStream;
  5. import java.io.File;
  6. import java.io.IOException;
  7. import java.io.InputStream;
  8. import java.math.BigInteger;
  9. import java.net.Socket;
  10. import java.net.UnknownHostException;
  11. import java.security.MessageDigest;
  12.  
  13. import javax.security.sasl.SaslException;
  14. import javax.servlet.ServletException;
  15. import javax.servlet.http.HttpServlet;
  16. import javax.servlet.http.HttpServletRequest;
  17. import javax.servlet.http.HttpServletResponse;
  18.  
  19. import okhttp3.OkHttpClient;
  20. import okhttp3.Request;
  21. import okhttp3.Response;
  22. import tools.WXCore;
  23.  
  24.  
  25. public class getPhoneNumberServlet extends HttpServlet {
  26.  
  27. 	public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
  28.  
  29. 		String selStr;
  30. 		InputStream is = null;
  31.  
  32. 		try {
  33. 			is = request.getInputStream();
  34. 			StringBuilder sb = new StringBuilder();
  35. 			byte[] b = new byte[4096];
  36. 			for (int n; (n = is.read(b)) != -1;) {
  37. 				sb.append(new String(b, 0, n));
  38. 			}
  39.  
  40. 			selStr = java.net.URLDecoder.decode(sb.toString(), "UTF-8");
  41.  
  42. 		} catch (IOException e) {
  43.  
  44. 			e.printStackTrace();
  45. 			return;
  46.  
  47. 		} finally {
  48. 			if (null != is) {
  49. 				try {
  50. 					is.close();
  51. 				} catch (IOException e) {
  52. 					e.printStackTrace();
  53. 				}
  54. 			}
  55. 		}
  56.  
  57. 		System.out.println("selStr：" + selStr);
  58.  
  59. 		String encryptedData = selStr.substring(selStr.lastIndexOf("encryptedData=") + 14, selStr.lastIndexOf("&iv="));
  60. 		System.out.println("encryptedData：" + encryptedData);
  61.  
  62. 		String iv = selStr.substring(selStr.lastIndexOf("iv=") + 3, selStr.lastIndexOf("&code="));
  63. 		System.out.println("iv：" + iv);
  64.  
  65. 		String code = selStr.substring(selStr.lastIndexOf("code=") + 5);
  66. 		System.out.println("code：" + code);
  67.  
  68. 		OkHttpClient client = new OkHttpClient();
  69. 		Request okrequest = new Request.Builder()
  70.  
  71. 				.url("https://api.weixin.qq.com/sns/jscode2session?appid=APPID&secret=SECRET&js_code=JSCODE&grant_type=authorization_code")
  72.  
  73. 				.build();
  74. 		try {
  75.  
  76. 			Response okresponse = client.newCall(okrequest).execute();
  77.  
  78. 			String responsedata = okresponse.body().string();
  79. 			System.out.println("responsedata：" + responsedata);
  80.  
  81. 			String openid = responsedata.substring(responsedata.lastIndexOf(":") + 2,
  82. 					responsedata.lastIndexOf("\""));
  83. 			String session_key = responsedata.substring(responsedata.indexOf(":") + 2,
  84. 					responsedata.indexOf("==") + 2);
  85.  
  86.  
  87. 			System.out.println("原始的openid：" + openid);
  88. 			System.out.println("原始的session_key：" + session_key);
  89.  
  90.  
  91. 			String appId = "wx7xxxxxxxxxxxxxxxxxxxx";
  92. 			WXCore wxcore = new WXCore();
  93. 			String phonenumber = wxcore.decrypt(appId, encryptedData,                         responsedata_session_key, iv);
  94.  
  95. 			System.out.println("手机号码:" + phonenumber);
  96.  
  97. 			response.getWriter().write(openid + "&" + phonenumber);
  98.  
  99. 		} catch (IOException e) {
  100.  
  101. 			e.printStackTrace();
  102. 		}
  103.  
  104. 	}
  105.  
  106.  
  107.  
  108. 	public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
  109.  
  110. 		doGet(request, response);
  111.  
  112. 	}
  113.  
  114. }

4、大功告成。

五、运行效果截图：

六、结语

以上就是微信小程序获取用户手机号码，Java后台servlet解密的流程和注意事项；微信小程序调用微信支付也基本是这样的流程，第一次写博客，写得不好的地方见谅，面向新手，大佬请无视，不喜勿喷。

如有疑问或项目开发合作，欢迎私信交流

声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/IT小白/article/detail/284629
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。

  

闽ICP备14008679号