{
"encrypedEvent":"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"
}

/**
     * 数字签名
     *
     * @param token     token
     * @param timestamp 时间戳
     * @param nonce     随机串
     * @param encrypt   加密文本
     * @return
     * @throws DingCallbackCrypto.DingTalkEncryptException
     */
    public String getSignature(String token, String timestamp, String nonce, String encrypt){
            String[] array = new String[]{token, timestamp, nonce, encrypt};
            Arrays.sort(array);
            StringBuffer sb = new StringBuffer();
            for (int i = 0; i < 4; i++) {
                sb.append(array[i]);
            }
            String str = sb.toString();
            MessageDigest md = MessageDigest.getInstance("SHA-1");
            md.update(str.getBytes());
            byte[] digest = md.digest();

            StringBuffer hexstr = new StringBuffer();
            String shaHex = "";
            for (int i = 0; i < digest.length; i++) {
                shaHex = Integer.toHexString(digest[i] &amp; 0xFF);
                if (shaHex.length() < 2) {
                    hexstr.append(0);
                }
                hexstr.append(shaHex);
            }
            return hexstr.toString();
    }​

      
package cn.bee.modules.beesys.util;

import cn.bee.modules.approval.utils.DingCallbackCrypto;
import cn.bee.modules.util.RandomUtil;
import com.alibaba.fastjson.JSON;
import org.apache.commons.codec.binary.Base64;

import javax.crypto.spec.IvParameterSpec;
import java.security.MessageDigest;
import java.util.Arrays;
import java.util.HashMap;
import java.util.Map;
import java.util.Random;

//订阅蜂订阅通知加密解密方法
public class DingYueFengCallBackCrypto {
    private static final Base64 base64 = new Base64();

    private static final String ALGORITHM = "AES";
    private static final String AES_CBC_PADDING = "AES/CBC/PKCS5Padding";

    private byte[] aesKey;

    private String token;
    /**
     * 密钥长度
     */
    private static final Integer encryption_key_Length = 64;
    //token长度
    private static final Integer token_Length = 32;


    /**
     * 构造函数
     *
     * @param token         订阅蜂 事件订阅配置 签名token
     * @param encryptionKey 订阅蜂 事件订阅配置 加密密钥
     * @throws DingYueFengEncryptException
     */
    public DingYueFengCallBackCrypto(String token, String encryptionKey) throws DingYueFengEncryptException {
        if (null == encryptionKey || encryptionKey.length() != encryption_key_Length) {
            throw new DingYueFengEncryptException(DingYueFengEncryptException.AES_KEY_ILLEGAL);
        }
        if (token == null || token.length() != token_Length) {
            throw new DingYueFengEncryptException(DingYueFengEncryptException.TOKEN_ILLEGAL);
        }
        this.token = token;
        String encryptionKeyString = encryptionKey.substring(0, 43);
        aesKey = Base64.decodeBase64(encryptionKeyString + "=");
    }

    /**
     * 订阅蜂平台加密，返回map
     * @param text
     * @return
     * @throws DingYueFengEncryptException
     */
    public Map<String, String> setEncryptedMap(String text) throws DingYueFengEncryptException {
        return setEncryptedMap(text, System.currentTimeMillis(),randomData(16,true));
    }

    /**
     * 和订阅蜂平台加密，返回map
     *
     * @param text      传递的消息明文
     * @param timeStamp 时间戳
     * @param nonce     随机字符串
     * @return
     * @throws DingYueFengEncryptException
     */
    public Map<String, String> setEncryptedMap(String text, Long timeStamp, String nonce) throws DingYueFengEncryptException {
        if (null == text) {
            throw new DingYueFengEncryptException(DingYueFengEncryptException.ENCRYPTION_PLAINTEXT_ILLEGAL);
        }
        if (null == timeStamp) {
            throw new DingYueFengEncryptException(DingYueFengEncryptException.ENCRYPTION_TIMESTAMP_ILLEGAL);
        }
        if (null == nonce) {
            throw new DingYueFengEncryptException(DingYueFengEncryptException.ENCRYPTION_NONCE_ILLEGAL);
        }
        //进行加密
        // 加密
        String encrypt = setEncrypt(text);
        String signature = getSignature(token, String.valueOf(timeStamp), nonce, encrypt);
        Map<String, String> resultMap = new HashMap<String, String>();
        resultMap.put(EventSubscription.signature, signature);
        resultMap.put(EventSubscription.reqParam, encrypt);
        resultMap.put(EventSubscription.timeStamp, String.valueOf(timeStamp));
        resultMap.put(EventSubscription.nonce, nonce);
        return resultMap;
    }

    /**
     * 对明文进行加密
     *
     * @param text 加密的名文
     * @return
     * @throws DingYueFengEncryptException
     */
    private String setEncrypt(String text) throws DingYueFengEncryptException {
        try {
            javax.crypto.SecretKey secretKey = new javax.crypto.spec.SecretKeySpec(aesKey, ALGORITHM);
            javax.crypto.Cipher cipher = javax.crypto.Cipher.getInstance(AES_CBC_PADDING);
            IvParameterSpec iv = new IvParameterSpec(aesKey, 0, 16);
            cipher.init(javax.crypto.Cipher.ENCRYPT_MODE, secretKey, iv);
            // 获取加密内容的字节数组(这里要设置为utf-8)不然内容中如果有中文和英文混合中文就会解密为乱码
            byte[] byteEncode = text.getBytes(java.nio.charset.StandardCharsets.UTF_8);
            // 根据密码器的初始化方式加密
            byte[] byteAES = cipher.doFinal(byteEncode);
            // 将加密后的数据转换为字符串
            return base64.encodeToString(byteAES);
        } catch (Exception e) {
            throw new DingYueFengEncryptException(DingYueFengEncryptException.COMPUTE_ENCRYPT_TEXT_ERROR);
        }
    }

    /**
     * 对密文进行解密
     *
     * @param msgSignature 签名串
     * @param timeStamp    时间戳
     * @param nonce        随机串
     * @param encryptMsg   密文
     * @return
     */
    public String getDecryptMessage(String msgSignature, String timeStamp, String nonce, String encryptMsg) throws DingYueFengEncryptException {
        //校验签名
        String sinature = getSignature(token, timeStamp, nonce, encryptMsg);
        if (!sinature.equals(msgSignature)) {
            throw new DingYueFengEncryptException(DingYueFengEncryptException.COMPUTE_SIGNATURE_ERROR);
        }
        //解密数据
        String result = getDecrypt(encryptMsg);
        return result;
    }

    /**
     * 对密文进行解密
     *
     * @param encryptMsg 需要解密的密文
     * @return
     * @throws DingYueFengEncryptException
     */
    private String getDecrypt(String encryptMsg) throws DingYueFengEncryptException {
        try {
            javax.crypto.SecretKey secretKey = new javax.crypto.spec.SecretKeySpec(aesKey, ALGORITHM);
            javax.crypto.Cipher cipher = javax.crypto.Cipher.getInstance(AES_CBC_PADDING);
            IvParameterSpec iv = new IvParameterSpec(aesKey, 0, 16);
            cipher.init(javax.crypto.Cipher.DECRYPT_MODE, secretKey, iv);

            // 将加密并编码后的内容解码成字节数组
            byte[] byteContent = base64.decodeBase64(encryptMsg);
            // 解密
            byte[] byteDecode = cipher.doFinal(byteContent);
            return new String(byteDecode, java.nio.charset.StandardCharsets.UTF_8);
        } catch (Exception e) {
            throw new DingYueFengEncryptException(DingYueFengEncryptException.COMPUTE_DECRYPT_TEXT_ERROR);
        }

    }

    /**
     * 数字签名
     *
     * @param token     token
     * @param timestamp 时间戳
     * @param nonce     随机串
     * @param encrypt   加密文本
     * @return
     * @throws DingCallbackCrypto.DingTalkEncryptException
     */
    public String getSignature(String token, String timestamp, String nonce, String encrypt)
            throws DingYueFengEncryptException {
        try {
            String[] array = new String[]{token, timestamp, nonce, encrypt};
            Arrays.sort(array);
            System.out.println(JSON.toJSONString(array));
            StringBuffer sb = new StringBuffer();
            for (int i = 0; i < 4; i++) {
                sb.append(array[i]);
            }
            String str = sb.toString();
            System.out.println(str);
            MessageDigest md = MessageDigest.getInstance("SHA-1");
            md.update(str.getBytes());
            byte[] digest = md.digest();

            StringBuffer hexstr = new StringBuffer();
            String shaHex = "";
            for (int i = 0; i < digest.length; i++) {
                shaHex = Integer.toHexString(digest[i] &amp; 0xFF);
                if (shaHex.length() < 2) {
                    hexstr.append(0);
                }
                hexstr.append(shaHex);
            }
            return hexstr.toString();
        } catch (Exception e) {
            throw new DingYueFengEncryptException(DingYueFengEncryptException.COMPUTE_SIGNATURE_ERROR);
        }
    }


    public static class DingYueFengEncryptException extends Exception {
        public static final int SUCCESS = 0;
        public static final int ENCRYPTION_PLAINTEXT_ILLEGAL = 100001;
        public static final int ENCRYPTION_TIMESTAMP_ILLEGAL = 100002;
        public static final int ENCRYPTION_NONCE_ILLEGAL = 100003;
        public static final int AES_KEY_ILLEGAL = 100004;
        public static final int SIGNATURE_NOT_MATCH = 100005;
        public static final int COMPUTE_SIGNATURE_ERROR = 100006;
        public static final int COMPUTE_ENCRYPT_TEXT_ERROR = 100007;
        public static final int COMPUTE_DECRYPT_TEXT_ERROR = 100008;
        public static final int TOKEN_ILLEGAL = 100009;

        private static Map<Integer, String> msgMap = new HashMap();
        private Integer code;

        static {
            msgMap.put(0, "成功");
            msgMap.put(100001, "加密明文文本非法");
            msgMap.put(100002, "加密时间戳参数非法");
            msgMap.put(100003, "加密随机字符串参数非法");
            msgMap.put(100004, "不合法的encryption key");
            msgMap.put(100005, "签名不匹配");
            msgMap.put(100006, "签名计算失败");
            msgMap.put(100007, "计算加密文字错误");
            msgMap.put(100008, "计算解密文字错误");
            msgMap.put(100009, "不合法的token");
        }

        public Integer getCode() {
            return this.code;
        }

        public DingYueFengEncryptException(Integer exceptionCode) {
            super((String) msgMap.get(exceptionCode));
            this.code = exceptionCode;
        }
    }

    public static String randomData(int length, boolean... ma) {
        Random random = new Random();
        //定义一个字符串（A-Z，a-z，0-9）即62位；
        String str = "zxcvbnmlkjhgfdsaqwertyuiopQWERTYUIOPASDFGHJKLZXCVBNM1234567890";
        //由Random生成随机数
        StringBuffer sb = new StringBuffer();
        //长度为几就循环几次
        for (int i = 0; i < length; ++i) {
            //产生0-61的数字
            int number = random.nextInt(62);
            //将产生的数字通过length次承载到sb中
            sb.append(str.charAt(number));
        }
        //将承载的字符转换成字符串
        return ma.length != 0 ? ma[0] ? sb.toString().toUpperCase() : sb.toString().toLowerCase() : sb.toString();
    }

    //加密测试算法
    public static void main(String[] args) {
        try {
            String message = "abcedewwsewwe";
            DingYueFengCallBackCrypto crypto = new DingYueFengCallBackCrypto(RandomUtil.randomData(32, true), RandomUtil.randomData(encryption_key_Length, true));
            Map<String, String> stringStringMap = crypto.setEncryptedMap(message, System.currentTimeMillis(), RandomUtil.randomData(16, true));
            String msg_signature = stringStringMap.get(EventSubscription.signature);
            String timeStamp = stringStringMap.get(EventSubscription.timeStamp);
            String encrypt = stringStringMap.get(EventSubscription.reqParam);
            String nonce = stringStringMap.get(EventSubscription.nonce);
            String decryptMessage = crypto.getDecryptMessage(msg_signature, timeStamp, nonce, encrypt);
            System.out.println(decryptMessage);
        } catch (DingYueFengEncryptException e) {
            e.printStackTrace();
        }
    }
}

    

public class EventSubscription {

    /**
     * 时间戳变量
     */
    public static final String timeStamp = "X-Bee-Request-Timestamp";
    /**
     * 随机数变量
     */
    public static final String nonce = "X-Bee-Request-Nonce";
    /**
     * 签名
     */
    public static final String signature = "X-Bee-Signature";
    /**
     * 发送加密后的参数名称
     */
    public static final String reqParam="encrypedEvent";
    /**
     * 发送返回结果值
     */
    public static final String result="subscribe";
}

@PostMapping("test")
@ApiOperation("测试")
public Map<String, String> test(HttpServletRequest httpServletRequest, @RequestParam(value = "encrypedEvent") String encrypedEvent) {
    String signature = httpServletRequest.getHeader(EventSubscription.signature);
    String noce = httpServletRequest.getHeader(EventSubscription.nonce);
    String timeStamp = httpServletRequest.getHeader(EventSubscription.timeStamp);
    System.out.println("signature:" + signature);
    System.out.println("encry:" + encrypedEvent);
    try {
        //解密数据
        DingYueFengCallBackCrypto crypto = new DingYueFengCallBackCrypto("RVIKZSTDW9MODM6UPEWQAHQIDUMXXJYB","FW3ENVZAOXUEEYJVASNMCT27TO3IGJBK2MNG8KQMN7JSTKL2H8HB0QQNEAXX2M99");
        String decryptMessage = crypto.getDecryptMessage(signature, timeStamp, noce, encrypedEvent);
        System.out.println("解密后结果："+decryptMessage);
        //todo 处理业务数据

        //结果回密返回
        return crypto.setEncryptedMap("subscribe");
    } catch (DingYueFengCallBackCrypto.DingYueFengEncryptException e) {
        e.printStackTrace();
    }
    return null;
}

{
"X-Bee-Signature":"生成的数字签名"，
"X-Bee-Request-Nonce":"随机数变量",
"X-Bee-Request-Timestamp":"时间戳",
"encrypedEvent":"加密后的subscribe"
}

“subscribe"