消息事件接收(加密)

package weixin.popular.example;

import java.io.IOException;
import java.io.OutputStream;
import java.io.UnsupportedEncodingException;
import java.net.URLDecoder;
import java.nio.charset.Charset;

import javax.servlet.ServletException;
import javax.servlet.ServletInputStream;
import javax.servlet.ServletOutputStream;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import weixin.popular.bean.message.EventMessage;
import weixin.popular.bean.xmlmessage.XMLTextMessage;
import weixin.popular.support.ExpireKey;
import weixin.popular.support.expirekey.DefaultExpireKey;
import weixin.popular.util.SignatureUtil;
import weixin.popular.util.StreamUtils;
import weixin.popular.util.XMLConverUtil;

import com.qq.weixin.mp.aes.AesException;
import com.qq.weixin.mp.aes.WXBizMsgCrypt;

/**
 * 服务端事件消息接收  加密模式
 * @author Yi
 *
 */
public class ReceiveServlet2 extends HttpServlet{

    /**
	 *
	 */
	private static final long serialVersionUID = 1L;

	private String appId = "";				//appid 通过微信后台获取
	private String token = "test";			//通过微信后台获取

	private String encodingToken = "";		//Token(令牌)   通过微信后台获取
	private String encodingAesKey = "";		//EncodingAESKey(消息加解密密钥) 通过微信后台获取

	//重复通知过滤
    private static ExpireKey expireKey = new DefaultExpireKey();

    @Override
    protected void doPost(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        ServletInputStream inputStream = request.getInputStream();
        ServletOutputStream outputStream = response.getOutputStream();
        String signature = request.getParameter("signature");
        String timestamp = request.getParameter("timestamp");
        String nonce = request.getParameter("nonce");
        String echostr = request.getParameter("echostr");

        //加密模式
        String encrypt_type = request.getParameter("encrypt_type");
        String msg_signature = request.getParameter("msg_signature");

    	WXBizMsgCrypt wxBizMsgCrypt = null;
    	//加密方式
    	boolean isAes = "aes".equals(encrypt_type);
    	if(isAes){
    		try {
				wxBizMsgCrypt = new WXBizMsgCrypt(encodingToken, encodingAesKey, appId);
			} catch (AesException e) {
				e.printStackTrace();
			}
    	}

        //首次请求申请验证,返回echostr
        if(isAes&&echostr!=null){
        	try {
				echostr = URLDecoder.decode(echostr,"utf-8");
				String echostr_decrypt = wxBizMsgCrypt.verifyUrl(msg_signature, timestamp, nonce, echostr);
				outputStreamWrite(outputStream,echostr_decrypt);
				return;
			} catch (AesException e) {
				e.printStackTrace();
			}
        }else if(echostr!=null){
            outputStreamWrite(outputStream,echostr);
            return;
        }

        EventMessage eventMessage = null;
        if(isAes){
        	try {
				//获取XML数据（含加密参数）
				String postData = StreamUtils.copyToString(inputStream, Charset.forName("utf-8"));
				//解密XML 数据
				String xmlData = wxBizMsgCrypt.decryptMsg(msg_signature, timestamp, nonce, postData);
				//XML 转换为bean 对象
				eventMessage = XMLConverUtil.convertToObject(EventMessage.class, xmlData);
			} catch (AesException e) {
				e.printStackTrace();
			}
        }else{
	        //验证请求签名
	        if(!signature.equals(SignatureUtil.generateEventMessageSignature(token,timestamp,nonce))){
	            System.out.println("The request signature is invalid");
	            return;
	        }

	        if(inputStream!=null){
	        	//XML 转换为bean 对象
	            eventMessage = XMLConverUtil.convertToObject(EventMessage.class,inputStream);
	        }
        }

        String key = eventMessage.getFromUserName() + "__"
				   + eventMessage.getToUserName() + "__"
				   + eventMessage.getMsgId() + "__"
				   + eventMessage.getCreateTime();
		if(expireKey.exists(key)){
			//重复通知不作处理
			return;
		}else{
			expireKey.add(key);
		}

		//创建回复
		XMLTextMessage xmlTextMessage = new XMLTextMessage(
		     eventMessage.getFromUserName(),
		     eventMessage.getToUserName(),
		     "你好");
		//回复
		xmlTextMessage.outputStreamWrite(outputStream,wxBizMsgCrypt);
    }

    /**
     * 数据流输出
     * @param outputStream
     * @param text
     * @return
     */
    private boolean outputStreamWrite(OutputStream outputStream,String text){
        try {
            outputStream.write(text.getBytes("utf-8"));
        } catch (UnsupportedEncodingException e) {
            // TODO Auto-generated catch block
            e.printStackTrace();
            return false;
        } catch (IOException e) {
            // TODO Auto-generated catch block
            e.printStackTrace();
            return false;
        }
        return true;
    }
}

aes 解密失败

解决方案：在官方网站下载JCE无限制权限策略文件（请到官网下载对应的版本， 例如JDK7的下载地址：http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html 下载后解压，可以看到local_policy.jar和US_export_policy.jar以及readme.txt，如果安装了JRE，将两个jar文件放到%JRE_HOME%\lib\security目录下覆盖原来的文件；如果安装了JDK，将两个jar文件放到%JDK_HOME%\jre\lib\security目录下覆盖原来文件