Generate signature

Generate signature

The parameter names are sorted according to the order of the ASCII code, converted into a json string, signed with a private key, and HMAC-SHA256 encryption should be used.

Signature generation step description

First step:
Let's assume all the data sent or received to be the set M, and sort the parameters of the non-empty parameter values in the set M according to the parameter name ASCII code from small to large (dictionary order), using the format of the URL key-value pair (ie key1=value1&key2=value2) ...) stitched into a string stringA.
Pay special attention to the following important rules:
  1. 1.
    The parameter name ASCII code is sorted from small to large (dictionary order);
  2. 2.
    app_id, timestamp is a required parameter; timestamp is the last five minutes timestamp, which is invalid for more than 5 minutes;
  3. 3.
    If the value of the parameter is null, it does not participate in the signature;
  4. 4.
    Parameter names are case sensitive;
  5. 5.
    The transmitted sign parameter does not participate in the signature, and the generated signature will be checked based on the sign value.
The Second step:
The string is finally stitched to get the stringSignTemp string, and the stringSignTemp is programmed according to HMAC-SHA256, and then all the characters of the obtained string are converted to uppercase, then the signvalue is set.
Pseudo code example
Assume that the parameters transmitted are as follows: channelId: mttest timestamp : 1516320000 body : test
1
First step: The parameters are sorted according to the key=value format and sorted according to the parameter name ASCII dictionary order as follows:
2
stringA="app_id=mttest&body=test&timestamp=1516320000";
3
The second step: splicing the API key:
4
stringSignTemp=stringA+"&secret=my_test_secret"
5
sign=hash_hmac("sha256",stringSignTemp,key).toUpperCase()="6A9AE1657590FD6257D693A078E1C3E4BB6BA4DC30B23E0EE2496E54170DACD6" //Note: HMAC-SHA256 signature method"
Copied!
Code example
1
@Test
2
public void deductBalance() throws IOException {
3
JTextField field ;
4
String url = "http://localhost:8088/channel/deductBalance";
5
TreeMap<String,Object> params = Maps.newTreeMap();
6
params.put("orderId","my_order_id");
7
params.put("channelId","test91021071617412");
8
long timestamp = System.currentTimeMillis();
9
params.put("timestamp",timestamp);
10
String channelSign = getChannelSign(params, secret);
11
params.put("sign",channelSign);
12
System.out.println(url);
13
System.out.println(JSON.toJSONString(params));
14
String result = HttpUtils.sendRequestBody(url, params);
15
System.out.println(result);
16
}
17
18
public static String getChannelSign(Map<String, Object> params,String secret) {
19
StringBuilder result = new StringBuilder();
20
if (params != null) {
21
for (Object key : params.keySet()) {
22
Object value = params.get(key);
23
result.append(key).append("=").append(value).append("&");
24
}
25
String tempString = result + "secret=" + secret;
26
try {
27
System.out.println(tempString);
28
String sign = EncryptUtils.sha256_HMAC(tempString, secret).toUpperCase();
29
System.out.println(sign);
30
return sign;
31
} catch (Exception e) {
32
e.printStackTrace();
33
}
34
}
35
return null;
36
}
Copied!
The parameters and order in which the code participates in encryption are:channelId=test91021071617412&orderId=my_test_id&timestamp=1547987604644&secret=my_secret
Last modified 2yr ago
Copy link