微信企业号第三方应用开发[一]——创建套件

/**
     * 测试微信企业号第三方应用回调协议
     * @author:leap
     * @MethodName: testWXSaaSCallback 
     * @Description: 
     * @param req
     * @param res
     * @date:2016-8-9
     */
    @RequestMapping(value="testWXSaaSCallback")
    @ResponseBody
    public void testWXSaaSCallback( HttpServletRequest req, ServletResponse res){
        //常量值
        String CORP_ID = "wx9671de0651dbdxxx";    //CorpId, 企业号的普通管理组中可查看
        String SUITE_ID = "tja2312bedd5086xxx";    //套件ID，在套件信息中查看
        String SUITE_SECRET = "LGVT0BrN2DZ7VMTuIPOsudaWuXOE0iM67yHpIs1ofESS4l-jSC8LN9nOnmilhXXX";
        String SUITE_TOKEN = "ssI2AnbgOo40eb0kOxxx";
        String SUITE_ENCODING_AES_KEY = "Pmqgjzwt4yAEK9N6YZ34RKpy6onJD56r8mhCUFG9xxx";
        
        //获取参数
        String msgSignature = req.getParameter("msg_signature");
        String timestamp = req.getParameter("timestamp");
        String nonce = req.getParameter("nonce");
        String echostr = req.getParameter("echostr");    //创建套件时验证回调url时传入

        String result = "";
        try {
            if(!Utils.isBlank(echostr)){    //=======验证回调url有效性=======
                WXBizMsgCrypt wxBizMsgCrypt = new WXBizMsgCrypt(SUITE_TOKEN, 
                        SUITE_ENCODING_AES_KEY, CORP_ID);//注意是CORP_ID
                result = wxBizMsgCrypt.VerifyURL(msgSignature, timestamp, nonce, echostr);
                System.out.println(result);
                res.getWriter().write(result);    //对echostr参数解密并原样返回echostr明文(不能加引号，不能带bom头，不能带换行符)
            }else{
                //其他操作
                res.getWriter().write("false");    
            }
        } catch (Exception e) {
            e.printStackTrace();
        }
    }