Java对PHP服务器hmac_sha1签名认证⽅法的匹配实
现
如果你的API服务安全认证协议中要求使⽤hmac_sha1⽅法对信息进⾏编码,
⽽你的服务是由PHP实现的，客户端是由JAVA实现的，那么为了对签名正确⽐对，就需要在两者之间建⽴能匹配的编码⽅式.
PHP侧如下:
define('ID','123456');
define('KEY','k123456');
$strToSign = "test_string";
$utf8Str = mb_convert_encoding($strToSign, "UTF-8");
$hmac_sha1_str = base64_encode(hash_hmac("sha1", $utf8Str, KEY));
$signature = urlencode($hmac_sha1_str);
print_r($signature);
JAVA侧需要注意如下⼏点:
1. hmac_sha1编码结果需要转换成hex格式
2. java中base64的实现和php不⼀致，其中java并不会在字符串末尾填补=号以把字节数补充为8的整数
3. hmac_sha1并⾮sha1, hmac_sha1是需要共享密钥的
参考实现如下:
import java.io.UnsupportedEncodingException;
pto.Mac;
pto.spec.SecretKeySpec;
import org.apache.pt.Base64UrlSafe;
public class test {
public static void main(String[] args) {
String key = "f85b8b30f73eb2bf5d8063a9224b5e90";
String toHash =  "GET"+"\n"+"Thu, 09 Aug 2012 13:33:46 +0000"+"\n"+"/ApiChannel/Report.m";
//String toHashUtf8 = de(toHash, "UTF-8");
String res = hmac_sha1(toHash, key);
//System.out.print(res+"\n");
String signature;
try {
signature = new Bytes()),"UTF-8");
signature = appendEqualSign(signature);
System.out.print(signature);
} catch (UnsupportedEncodingException e) {
e.printStackTrace();
}
}
public static String hmac_sha1(String value, String key) {
try {
// Get an hmac_sha1 key from the raw key bytes
byte[] keyBytes = Bytes();
国外java phpSecretKeySpec signingKey = new SecretKeySpec(keyBytes, "HmacSHA1");
SecretKeySpec signingKey = new SecretKeySpec(keyBytes, "HmacSHA1");
// Get an hmac_sha1 Mac instance and initialize with the signing key
Mac mac = Instance("HmacSHA1");
mac.init(signingKey);
// Compute the hmac on input data bytes
byte[] rawHmac = mac.Bytes());
// Convert raw bytes to Hex
String hexBytes = byte2hex(rawHmac);
return hexBytes;
} catch (Exception e) {
throw new RuntimeException(e);
}
}
private static String byte2hex(final byte[] b){
String hs="";
String stmp="";
for (int n=0; n<b.length; n++){
stmp=(java.HexString(b[n] & 0xFF));
if (stmp.length()==1) hs=hs+"0"+stmp;
else hs=hs+stmp;
}
return hs;
}
private static String appendEqualSign(String s){
int len = s.length();
int appendNum = 8 - (int)(len/8);
for (int n=0; n<appendNum; n++){
s += "%3D";
}
return s;
}
}
iefreer

版权声明：本站内容均来自互联网，仅供演示用，请勿用于商业和其他非法用途。如果侵犯了您的权益请与我们联系QQ:729038198，我们将在24小时内删除。