Quick Audience:WeChat Mini Program Authorization accessToken Configuration Guide

1. API documentation

II. Signature Verification Description

QA will generate the signature according to the following method. If necessary, please verify the signature according to this method.

QA will include appId, accessKey, timestamp (timestamp parameter) on the API path of the request, and need to add signature Authorization in the header.

Common parameters

Signature generation rules:

• Use the request parameters to construct a canonicalized query string.

• Sort all the parameters in the request (including the "public request parameters" described in the document and the custom parameters of the given request API) in the lexicographical order of the request parameters names. Note: When the GET method is used to submit a request, these parameters are the parameter part of the request URI (that is, the part of the URI after "?" connected by "&")

• Parameter names and values must be URL-encoded by using the UTF-8 character set.

Sample code

The following Java code provides an example of the signature generation logic:

String appId="tttt";
String accessKey = "xxxx";
String accessSecret ="yyyy";
String timeStamp = "1708235644862";

SortedMap<String, String> map = new TreeMap<>();
map.put("appId", appId);
map.put("accessKey", accessKey);
map.put("accessSecret",accessSecret );
map.put("timestamp", timeStamp);
// If it is a get request and there are other query parameters, continue to add

String aa = getCanonicalQueryString(map);
System.out.println(aa);
String authorization = org.apache.commons.codec.digest.DigestUtils.md5Hex(aa);
System.out.println(authorization);

public static String getCanonicalQueryString(SortedMap<String, String> paramsMap) {
        StringBuilder queryString = new StringBuilder();
        boolean isFirstParameter = true;

        for (Map.Entry<String, String> entry : paramsMap.entrySet()) {
            String paramName = entry.getKey();
            String value = entry.getValue();

            if (!isFirstParameter) {
                queryString.append("&");
            } else {
                isFirstParameter = false;
            }
            queryString.append(paramName).append("=").append(value);
        }
        return queryString.toString();
}

Sample statement:

curl --location -g --request POST 'http://{configured URL for obtaining the token}?appId=aaa&accessKey=xxx&timestamp=yyy' \
--header 'Authorization: demosign'

3. Exception codes