[转载]ASP.NET MVC 微信公共平台开发之验证消息的真实性 - 落落无尘小艾 - 博客园

baacloud免费翻墙vpn注册使用

[转载]ASP.NET MVC 微信公共平台开发之验证消息的真实性 – 落落无尘小艾 – 博客园.

  1. 在MVC Controller所在项目中添加过滤器,在过滤器中重写

    public override void OnActionExecuting(ActionExecutingContext filterContext)方法

  1. 新建数据模型

    注:服务器接收消息时,不再是signature而是msg_signature

  2. 方法重写,实现对消息的验证

    调用微信接入时验证的方法,不过参数需要小改动一下,采用新建的数据模型

  3. 在Action方法或在Controller上添加过滤器属性

  4. 代码示例
/// <summary>
    /// 微信推送消息模型
    /// </summary>
    public class WeChatMsgRequestModel
    {
        public string timestamp { get; set; }
        public string nonce { get; set; }

        public string msg_signature { get; set; }
    }

Model

public class WeChatRequestValidAttribute : ActionFilterAttribute
    {
        private const string Token = "StupidMe";

        public override void OnActionExecuting(ActionExecutingContext filterContext)
        {
            //参数适配
            Model.FormatModel.WeChatMsgRequestModel model = new Model.FormatModel.WeChatMsgRequestModel() { nonce= filterContext.HttpContext.Request.QueryString["nonce"],msg_signature= filterContext.HttpContext.Request.QueryString["msg_signature"],timestamp= filterContext.HttpContext.Request.QueryString["timestamp"] };
            //验证
            if (CheckSignature(model))
            {
                base.OnActionExecuting(filterContext);
            }            
        }

        private bool CheckSignature(Model.FormatModel.WeChatMsgRequestModel model)
        {
            string signature, timestamp, nonce, tempStr;
            //获取请求来的参数
            signature = model.msg_signature;
            timestamp = model.timestamp;
            nonce = model.nonce;
            //创建数组,将 Token, timestamp, nonce 三个参数加入数组
            string[] array = { Token, timestamp, nonce };
            //进行排序
            Array.Sort(array);
            //拼接为一个字符串
            tempStr = String.Join("", array);
            //对字符串进行 SHA1加密
            tempStr = FormsAuthentication.HashPasswordForStoringInConfigFile(tempStr, "SHA1").ToLower();
            //判断signature 是否正确
            if (tempStr.Equals(signature))
            {
                return true;
            }
            else
            {
                return false;
            }
        }
    }

Filter

/// <summary>
        /// 日志助手
        /// </summary>
        private static Common.LogHelper logger = new Common.LogHelper(typeof(HomeController));

        [Filters.WeChatRequestValid]
        public void Valid(Model.FormatModel.WeChatMsgRequestModel model)
        {
            if (ModelState.IsValid)
            {
                try
                {
                    //判断是否是POST请求
                    if (HttpContext.Request.HttpMethod.ToUpper() == "POST")
                    {
                        //从请求的数据流中获取请求信息
                        using (Stream stream = HttpContext.Request.InputStream)
                        {
                            byte[] postBytes = new byte[stream.Length];
                            stream.Read(postBytes, 0, (int)stream.Length);
                            string postString = System.Text.Encoding.UTF8.GetString(postBytes);
                            Handle(postString,model);
                        }
                    }
                }
                catch (Exception ex)
                {
                    logger.Error("发生异常,异常信息:" + ex.Message + ex.StackTrace);
                }
            }
        }            

Controller Code

赞(0) 打赏
分享到: 更多 (0)

觉得文章有用就打赏一下文章作者

支付宝扫一扫打赏

微信扫一扫打赏