there is
Jsapi_ticket noncestr, timestamp, the same url, generated the same string1, but quite different signature value after the sha1,
(should be here lead to invalid signatrue)

The operation process
1, page print jsapi_ticket noncestr, timestamp, url4 parameters (and string1 and signature)
2, copy the above parameters to https://mp.weixin.qq.com/debug/cgi-bin/sandbox? T=jsapisign tools to generate string1 and signature,
3, the page by hand string1, tool to generate string1, 2 string comparing human eye, including noncestr case, all the same,
4, page sha1 after signature, and tools to generate signature,

If PHP sha1 way , and public sha1 way , is not the same... ?

Length is the same, is 40

Or you really couldn't figure out what is the problem...

CodePudding user response:

The page manually string1, tools to generate string1
Because of the tool to generate string1 noncestr is lowercase, so all lowercase