介面文件地址

訂單推送(已確定訂單)：https://open-shangou.meituan.com/home/docDetail/177

簽名演算法：https://opendj.meituan.com/home/questionDetail/5730

測試訂單：https://opendj.meituan.com/platform/guide/market/10657

控制器

    @RequestMapping("confirm_order")
    public void confirmOrder(HttpServletRequest request) {
        //驗證美團閃購簽名
        Boolean flag = CommonUtil.checkMeiTuanShanGouSign(request, "6bdfc78d4a64e82bc59e2a67d746a06e");
        
 
if (flag) {
            SortedMap<String, String> requestParam = CommonUtil.getMeiTuanShanGouRequestParam(request);
            String json = JSON.toJSONString(requestParam);
            System.err.println(json);
            MeiTuanShanGouConfirmOrderVo vo = JSON.parseObject(json, MeiTuanShanGouConfirmOrderVo.class
 
);
            System.out.println("=====================================");
            System.err.println(vo);
        }
    }

工具類

 /**
     * 獲取美團閃購請求引數
     *
     * @param request 請求頭
     * @return
     */
    public static SortedMap<String, String> getMeiTuanShanGouRequestParam(HttpServletRequest request) {
        SortedMap
 
<String, String> treeMap = new TreeMap<>();
        Enumeration<String> parameterNames = request.getParameterNames();
        while (parameterNames.hasMoreElements()) {
            String name = parameterNames.nextElement();
            String value = request.getParameter(name);
            if (!SIG_FIELD_NAME.equals(name)) {
                try {
                    treeMap.put(name, URLDecoder.decode(value, "UTF-8"));
                } catch (UnsupportedEncodingException e) {
                }
            }
        }
        return treeMap;
    }

    /**
     * 獲取美團閃購簽名
     *
     * @param url       請求url，注意不能帶?，如：https://waimaiopen.meituan.com/api/v1/oauth/authorize
     * @param param     SortedMap<String, String> params = new TreeMap<>();
     * @param appSecret APP Secret
     * @return
     */
    public static String getMeiTuanShanGouSign(String url, SortedMap<String, String> param, String appSecret) {
        StringBuilder sb = new StringBuilder();
        Set<Map.Entry<String, String>> entries = param.entrySet();
        Iterator<Map.Entry<String, String>> it = entries.iterator();
        while (it.hasNext()) {
            Map.Entry<String, String> next = it.next();
            String key = next.getKey();
            String value = next.getValue();
            if (null != value && !"".equals(value) && !"sign".equals(key) && !"key".equals(key)) {
                sb.append(key + "=" + value + "&");
            }
        }
        String result = url + "?" + sb.substring(0, sb.toString().length() - 1) + appSecret;
        return MD5(result);
    }

    /**
     * 美團簽名的欄位名
     */
    private static final String SIG_FIELD_NAME = "sig";


    /**
     * 檢查美團閃購簽名
     *
     * @param request   請求頭
     * @param appSecret 金鑰
     * @return
     */
    public static Boolean checkMeiTuanShanGouSign(HttpServletRequest request, String appSecret) {
        String url = String.format("%s://%s%s", request.getScheme(), request.getServerName(), request.getRequestURI());
        SortedMap<String, String> treeMap = new TreeMap<>();
        Enumeration<String> parameterNames = request.getParameterNames();
        while (parameterNames.hasMoreElements()) {
            String name = parameterNames.nextElement();
            String value = request.getParameter(name);
            if (!SIG_FIELD_NAME.equals(name)) {
                try {
                    treeMap.put(name, URLDecoder.decode(value, "UTF-8"));
                } catch (UnsupportedEncodingException e) {
                }
            }
        }
        String sign = generatorMeiTuanShanGouSign(url, treeMap, appSecret);
        String realSign = request.getParameter(SIG_FIELD_NAME).toUpperCase();
        if (sign.equals(realSign)) {
            log.info("驗證美團閃購簽名正確，真實簽名：{}", realSign);
            return true;
        }
        log.error("驗證美團閃購簽名錯誤，真實簽名：{}", realSign);
        return false;
    }

    /**
     * 生成美團閃購簽名
     *
     * @param url       請求的完整的url
     * @param treeMap   請求的全部引數
     * @param appSecret APP Secret
     * @return sign
     */
    private static String generatorMeiTuanShanGouSign(String url, SortedMap<String, String> treeMap, String appSecret) {
        String queryString = Joiner.on("&").useForNull("").withKeyValueSeparator("=").join(treeMap);
        String md5str = url.concat("?").concat(queryString).concat(appSecret);
        try {
            return MD5(URLDecoder.decode(md5str, "UTF-8"));
        } catch (UnsupportedEncodingException encodingException) {
            System.out.println("簽名生成失敗");
        }
        return "";
    }






    /**
     * md5加密
     *
     * @param data
     * @return
     */
    public static String MD5(String data) {
        try {
            java.security.MessageDigest md = MessageDigest.getInstance("MD5");
            byte[] array = md.digest(data.getBytes("UTF-8"));
            StringBuilder sb = new StringBuilder();
            for (byte item : array) {
                sb.append(Integer.toHexString((item & 0xFF) | 0x100).substring(1, 3));
            }
            return sb.toString().toUpperCase();
        } catch (Exception exception) {
        }
        return null;
    }