/// <summary>

    /// 企業(yè)號回調(diào)信息接口。統(tǒng)一接收并處理信息的入口。

    /// </summary>

    public class corpapi : IHttpHandler

    {

        /// <summary>

        /// 處理企業(yè)號的信息

        /// </summary>

        /// <param name="context"></param>

        public void ProcessRequest(HttpContext context)

        {

            string postString = string.Empty;

            if (HttpContext.Current.Request.HttpMethod.ToUpper() == "POST")

            {

                using (Stream stream = HttpContext.Current.Request.InputStream)

                {

                    Byte[] postBytes = new Byte[stream.Length];

                    stream.Read(postBytes, 0, (Int32)stream.Length);

                    postString = Encoding.UTF8.GetString(postBytes);

                }

                if (!string.IsNullOrEmpty(postString))

                {

                    Execute(postString);

                }

            }

            else

            {

                Auth();

            }

        }

        /// <summary>

        /// 成為開發(fā)者的第一步，驗(yàn)證并相應(yīng)服務(wù)器的數(shù)據(jù)

        /// </summary>

        private void Auth()

        {

            #region 獲取關(guān)鍵參數(shù)

            string token = ConfigurationManager.AppSettings["CorpToken"];//從配置文件獲取Token

            if (string.IsNullOrEmpty(token))

            {

                LogTextHelper.Error(string.Format("CorpToken 配置項(xiàng)沒有配置！"));

            }

            string encodingAESKey = ConfigurationManager.AppSettings["EncodingAESKey"];//從配置文件獲取EncodingAESKey

            if (string.IsNullOrEmpty(encodingAESKey))

            {

                LogTextHelper.Error(string.Format("EncodingAESKey 配置項(xiàng)沒有配置！"));

            }

            string corpId = ConfigurationManager.AppSettings["CorpId"];//從配置文件獲取corpId

            if (string.IsNullOrEmpty(corpId))

            {

                LogTextHelper.Error(string.Format("CorpId 配置項(xiàng)沒有配置！"));

            } 

            #endregion

            string echoString = HttpContext.Current.Request.QueryString["echoStr"];

            string signature = HttpContext.Current.Request.QueryString["msg_signature"];//企業(yè)號的 msg_signature

            string timestamp = HttpContext.Current.Request.QueryString["timestamp"];

            string nonce = HttpContext.Current.Request.QueryString["nonce"];

            string decryptEchoString = "";

            if (new CorpBasicApi().CheckSignature(token, signature, timestamp, nonce, corpId, encodingAESKey, echoString, ref decryptEchoString))

            {

                if (!string.IsNullOrEmpty(decryptEchoString))

                {

                    HttpContext.Current.Response.Write(decryptEchoString);

                    HttpContext.Current.Response.End();

                }

            }

        }

    /// <summary>

    /// 企業(yè)號基礎(chǔ)操作API實(shí)現(xiàn)

    /// </summary>

    public class CorpBasicApi : ICorpBasicApi

    {

        /// <summary>

        /// 驗(yàn)證企業(yè)號簽名

        /// </summary>

        /// <param name="token">企業(yè)號配置的Token</param>

        /// <param name="signature">簽名內(nèi)容</param>

        /// <param name="timestamp">時間戳</param>

        /// <param name="nonce">nonce參數(shù)</param>

        /// <param name="corpId">企業(yè)號ID標(biāo)識</param>

        /// <param name="encodingAESKey">加密鍵</param>

        /// <param name="echostr">內(nèi)容字符串</param>

        /// <param name="retEchostr">返回的字符串</param>

        /// <returns></returns>

        public bool CheckSignature(string token, string signature, string timestamp, string nonce, string corpId, string encodingAESKey, string echostr, ref string retEchostr)

        {

            WXBizMsgCrypt wxcpt = new WXBizMsgCrypt(token, encodingAESKey, corpId);

            int result = wxcpt.VerifyURL(signature, timestamp, nonce, echostr, ref retEchostr);

            if (result != 0)

            {

                LogTextHelper.Error("ERR: VerifyURL fail, ret: " + result);

                return false;

            }

            return true;

            //ret==0表示驗(yàn)證成功，retEchostr參數(shù)表示明文，用戶需要將retEchostr作為get請求的返回參數(shù)，返回給企業(yè)號。

            // HttpUtils.SetResponse(retEchostr);

        }