• 流程
  向后端ajax申請時進行加密，加密是通過一些規(guī)則對data加密玫荣，調(diào)用tokentest方法需要做三個事情
  1.生成時間戳 timestamp
  2.生成隨機字符串 nonceStr
  3.通過CryptoJS.HmacSHA256生成加密簽名 signature，密要就是nonceStr

let hash = CryptoJS.HmacSHA256(根據(jù)一定順序從系排序后獲取的data的鍵值組成的數(shù)據(jù)字符串, nonceStr);
let hashInBase64 = CryptoJS.enc.Hex.stringify(hash);

// 生成隨機字符串
    function generateMixed() {
        var chars = ['0','1','2','3','4','5','6','7','8','9','A','B','C','D','E','F','G','H','I','J','K','L','M','N','O','P','Q','R','S','T','U','V','W','X','Y','Z'];

        var res = "";
        for(var i = 0; i < 16 ; i ++) {
            var id = Math.ceil(Math.random()*35);
            res += chars[id];
            }
            return res;
            
        }


    function tokentest(data){
        // 時間戳
        let timestamp =  new Date().getTime();
        // 隨即字符串
        let nonceStr  = generateMixed();

        data.timestamp = timestamp;
        data.nonceStr= nonceStr;

        let sorted = {}; //存放排序后的對象
        let newstr='';
        
        // 前后端交互默認字段排序
         Object.keys(data).sort().forEach(item=>{
            sorted[item]=data[item];
        })

        // 獲取排序后的屬性值
       Object.values(sorted).forEach(item=>{
                newstr+=item;
       });


        // 生成aes加密簽名
        let hash = CryptoJS.HmacSHA256(newstr, nonceStr);
        let hashInBase64 = CryptoJS.enc.Hex.stringify(hash);
        // let hashInBase64 = CryptoJS.enc.Base64.stringify(hash);
        // let hashInBase64 = CryptoJS.enc.Utf8.stringify(hash);
        // let hashInBase64 = CryptoJS.enc.Latin1.stringify(hash);
        data.signature = hashInBase64;

        return data;

    }


  function submits() {
    var data = {
        'submit':00001
        ,'submit_s':0001001
        ,'tel':188888888
        ,'s_id':3
        ,'g_id':5,




        // 'tel': 188888888,
        // 'submit': 00001,
        // 'submit_s': 0001001,
        // 'code':88889,
        // 'content':'我想xxx'
        // 'timestamp': xxx,
        // 'nonceStr': 'xxx',
        // 'signature': '43d00401cca4a588xxxxxxxxxxxxxxxxxxxxxxxxxxx',
    }
    

        $.ajax(
            {
                url: /submit/,
                type: 'POST',
                dataType: 'json',
                data:tokentest(data),
        
                cache: false,
                timeout: 20000,
                error: function() {layer.msg('系統(tǒng)錯誤');},
                success: function(json)
                {
                    console.log(json,'hhh');
                }
            });
    }

//引入的插件文件
 <script src="cryptojs/core.js"></script>
    <script src="cryptojs/hmac.js"></script>
    <script src="cryptojs/sha256.js"></script>
    <script src="cryptojs/hmac-sha256.js"></script>
    <script src="cryptojs/enc-base64.js"></script>