微信小程序登录状态java后台解密

doLogin:function(callback = () =>{}){
let that = this;
wx.login({
 success:function(loginRes){
  if(loginRes){
   //获取用户信息
   wx.getUserInfo({
    withCredentials:true,//非必填 默认为true
    success:function(infoRes){
     console.log(infoRes,\'>>>\');
     //请求服务端的登录接口
     wx.request({
      url: api.loginUrl,
      data:{
       code:loginRes.code,//临时登录凭证
       rawData:infoRes.rawData,//用户非敏感信息
       signature:infoRes.signature,//签名
       encrypteData:infoRes.encryptedData,//用户敏感信息
       iv:infoRes.iv//解密算法的向量
      },
      success:function(res){
       console.log(\'login success\');
       res = res.data;
       if(res.result==0){
        that.globalData.userInfo = res.userInfo;
        wx.setStorageSync(\'userInfo\',JSON.stringify(res.userInfo));
        wx.setStorageSync(\'loginFlag\',res.skey);
        console.log(\"skey=\"+res.skey);
        callback();
       }else{
        that.showInfo(\'res.errmsg\');
       }
      },
      fail:function(error){
       //调用服务端登录接口失败
       // that.showInfo(\'调用接口失败\');
       console.log(error);
      }
     });
    }
   });
  }else{

  }
 }
});
}

code:loginRes.code,//临时登录凭证
rawData:infoRes.rawData,//用户非敏感信息
signature:infoRes.signature,//签名
encrypteData:infoRes.encryptedData,//用户敏感信息
iv:infoRes.iv//解密算法的向量

@ResponseBody
@RequestMapping(\"/login\")
public Map<String, > doLogin(Model model,
                 @RequestParam(value = \"code\",required = false) String code,
                 @RequestParam(value = \"rawData\",required = false) String rawData,
                 @RequestParam(value = \"signature\",required = false) String signature,
                 @RequestParam(value = \"encrypteData\",required = false) String encrypteData,
                 @RequestParam(value = \"iv\",required = false) String iv){
  log.info( \"Start get SessionKey\" );


  Map<String, > map = new HashMap<String,  >( );
  System.out.println(\"用户非敏感信息\"+rawData);

  JSON  rawDataJson = JSON.parse ( rawData );

  System.out.println(\"签名\"+signature);
  JSON  SessionKeyOpenId = getSessionKeyOrOpenId( code );
  System.out.println(\"post请求获取的SessionAndopenId=\"+SessionKeyOpenId);

  String openid = SessionKeyOpenId.getString(\"openid\" );

  String sessionKey = SessionKeyOpenId.getString( \"session_key\" );

  System.out.println(\"openid=\"+openid+\",session_key=\"+sessionKey);

  User user = userService.findByOpenid( openid );
  //uuid生成唯一key
  String skey = UUID.randomUUID().toString();
  if(user==null){
    //入库
    String nickName = rawDataJson.getString( \"nickName\" );
    String avatarUrl = rawDataJson.getString( \"avatarUrl\" );
    String gender = rawDataJson.getString( \"gender\" );
    String city = rawDataJson.getString( \"city\" );
    String country = rawDataJson.getString( \"country\" );
    String province = rawDataJson.getString( \"province\" );


    user = new User();
    user.setUid( openid );
    user.setCreateTime( new Date( ) );
    user.setSessionkey( sessionKey );
    user.setUbalance( 0 );
    user.setSkey( skey );
    user.setUaddress( country+\" \"+province+\" \"+city );
    user.setUavatar( avatarUrl );
    user.setUgender( Integer.parseInt( gender ) );
    user.setUname( nickName );
    user.setUpdateTime( new Date( ) );

    userService.insert( user );
  }else {
    //已存在
    log.info( \"用户openid已存在,不需要插入\" );
  }
  //根据openid查询skey是否存在
  String skey_redis = (String) redisTemplate.opsForValue().get( openid );
  if(StringUtils.isNotBlank( skey_redis )){
    //存在 删除 skey 重新生成skey 将skey返回
    redisTemplate.delete( skey_redis );

  }
    // 缓存一份新的
    JSON  sessionObj = new JSON ( );
    sessionObj.put( \"openId\",openid );
    sessionObj.put( \"sessionKey\",sessionKey );
    redisTemplate.opsForValue().set( skey,sessionObj.toJSONString() );
    redisTemplate.opsForValue().set( openid,skey );

    //把新的sessionKey和oppenid返回给小程序
    map.put( \"skey\",skey );



  map.put( \"result\",\"0\" );



  JSON  userInfo = getUserInfo( encrypteData, sessionKey, iv );
  System.out.println(\"根据解密算法获取的userInfo=\"+userInfo);
  userInfo.put( \"balance\",user.getUbalance() );
  map.put( \"userInfo\",userInfo );

  return map;
}

public static JSON  getSessionKeyOrOpenId(String code){
  //微信端登录code
  String wxCode = code;
  String requestUrl = \"https://api.weixin.qq.com/sns/jscode2session\";
  Map<String,String> requestUrlParam = new HashMap<String, String>( );
  requestUrlParam.put( \"appid\",\"你的小程序appId\" );//小程序appId
  requestUrlParam.put( \"secret\",\"你的小程序appSecret\" );
  requestUrlParam.put( \"js_code\",wxCode );//小程序端返回的code
  requestUrlParam.put( \"grant_type\",\"authorization_code\" );//默认参数

  //发送post请求读取调用微信接口获取openid用户唯一标识
  JSON  json  = JSON.parse ( UrlUtil.sendPost( requestUrl,requestUrlParam ));
  return json ;
}

public static JSON  getUserInfo(String encryptedData,String sessionKey,String iv){
  // 被加密的数据
  byte[] dataByte =  64.decode(encryptedData);
  // 加密秘钥
  byte[] keyByte =  64.decode(sessionKey);
  // 偏移量
  byte[] ivByte =  64.decode(iv);
  try {
    // 如果密钥不足16位，那么就补足. 这个if 中的内容很重要
    int   = 16;
    if (keyByte.length %   != 0) {
      int groups = keyByte.length /   + (keyByte.length %   != 0 ? 1 : 0);
      byte[] temp = new byte[groups *  ];
      Arrays.fill(temp, (byte) 0);
      System.arraycopy(keyByte, 0, temp, 0, keyByte.length);
      keyByte = temp;
    }
    // 初始化
    Security.addProvider(new BouncyCastleProvider());
    Cipher cipher = Cipher.getInstance(\"AES/CBC/PKCS7Padding\",\"BC\");
    SecretKeySpec spec = new SecretKeySpec(keyByte, \"AES\");
    AlgorithmParameters parameters = AlgorithmParameters.getInstance(\"AES\");
    parameters.init(new IvParameterSpec(ivByte));
    cipher.init( Cipher.DECRYPT_MODE, spec, parameters);// 初始化
    byte[] resultByte = cipher.doFinal(dataByte);
    if (null != resultByte && resultByte.length > 0) {
      String result = new String(resultByte, \"UTF-8\");
      return JSON.parse (result);
    }
  } catch (NoSuchAlgorithmException e) {
    log.error(e.getMessage(), e);
  } catch (NoSuchPaddingException e) {
    log.error(e.getMessage(), e);
  } catch (InvalidParameterSpecException e) {
    log.error(e.getMessage(), e);
  } catch (IllegalBlockSizeException e) {
    log.error(e.getMessage(), e);
  } catch (BadPaddingException e) {
    log.error(e.getMessage(), e);
  } catch (UnsupportedEncodingException e) {
    log.error(e.getMessage(), e);
  } catch (InvalidKeyException e) {
    log.error(e.getMessage(), e);
  } catch (InvalidAlgorithmParameterException e) {
    log.error(e.getMessage(), e);
  } catch (NoSuchProviderException e) {
    log.error(e.getMessage(), e);
  }
  return null;
}

map.put( \"skey\",skey );
map.put( \"result\",\"0\" );
map.put( \"userInfo\",userInfo ); 
return map;