//验证URL // @param sMsgSignature: 签名串,对应URL参数的msg_signature // @param sTimeStamp: 时间戳,对应URL参数的timestamp // @param sNonce: 随机串,对应URL参数的nonce // @param sEchoStr: 随机串,对应URL参数的echostr // @param aes_key: 加密串 // @param sReplyEchoStr: 解密之后的echostr,当return返回0时有效 // @return:成功0,失败返回对应的错误码 public int VerifyURL(WXUnit unit, string sMsgSignature, string sTimeStamp, string sNonce, string sEchoStr, string aes_key, ref string sReplyEchoStr) { int ret = 0; if (aes_key.Length != 43) { return((int)WXBizMsgCryptErrorCode.WXBizMsgCrypt_IllegalAesKey); } ret = VerifySignature(unit.EVENT_TOKEN, sTimeStamp, sNonce, sEchoStr, sMsgSignature); if (0 != ret) { return(ret); } sReplyEchoStr = ""; string cpid = ""; try { sReplyEchoStr = WXCryptography.AES_decrypt(sEchoStr, aes_key, ref cpid); //m_sCorpID); } catch (Exception) { sReplyEchoStr = ""; return((int)WXBizMsgCryptErrorCode.WXBizMsgCrypt_DecryptAES_Error); } if (cpid != unit.APP_ID) { sReplyEchoStr = ""; return((int)WXBizMsgCryptErrorCode.WXBizMsgCrypt_ValidateCorpid_Error); } return(0); }
// 检验消息的真实性,并且获取解密后的明文 // @param sMsgSignature: 签名串,对应URL参数的msg_signature // @param sTimeStamp: 时间戳,对应URL参数的timestamp // @param sNonce: 随机串,对应URL参数的nonce // @param sPostData: 密文,对应POST请求的数据 // @param aes_key: 加密串 // @param sMsg: 解密后的原文,当return返回0时有效 // @return: 成功0,失败返回对应的错误码 public int DecryptMsg(WXUnit unit, string sMsgSignature, string sTimeStamp, string sNonce, string sPostData, string aes_key, ref string sMsg) { if (aes_key.Length != 43) { return((int)WXBizMsgCryptErrorCode.WXBizMsgCrypt_IllegalAesKey); } XmlDocument doc = new XmlDocument(); XmlNode root; string sEncryptMsg; try { doc.LoadXml(sPostData); root = doc.FirstChild; sEncryptMsg = root["Encrypt"].InnerText; } catch (Exception) { return((int)WXBizMsgCryptErrorCode.WXBizMsgCrypt_ParseXml_Error); } //verify signature int ret = 0; ret = VerifySignature(unit.EVENT_TOKEN, sTimeStamp, sNonce, sEncryptMsg, sMsgSignature); if (ret != 0) { return(ret); } //decrypt string cpid = ""; try { sMsg = WXCryptography.AES_decrypt(sEncryptMsg, aes_key, ref cpid); } catch (FormatException) { sMsg = ""; return((int)WXBizMsgCryptErrorCode.WXBizMsgCrypt_DecodeBase64_Error); } catch (Exception) { sMsg = ""; return((int)WXBizMsgCryptErrorCode.WXBizMsgCrypt_DecryptAES_Error); } if (cpid != unit.APP_ID) { return((int)WXBizMsgCryptErrorCode.WXBizMsgCrypt_ValidateCorpid_Error); } return(0); }