返利公众号 JSSDK 安全签名JS-SDK ticket 缓存雪崩与容灾切换方案大家好我是 微赚淘客系统3.0 的研发者省赚客在返利公众号 H5 页面中需调用微信 JS-SDK 实现“分享领券”、“复制口令”等功能。其核心依赖jsapi_ticket签名机制该票据有效期 7200 秒且微信接口调用频次受限10000 次/天。若多节点同时缓存失效将引发缓存雪崩导致大量请求穿透至微信接口触发限流甚至签名失败。我们通过本地缓存 Redis 分布式锁 多级降级策略构建高可用签名服务。一、标准签名流程与风险点后端调用微信/cgi-bin/ticket/getticket?typejsapi获取jsapi_ticket缓存票据通常 Redis前端请求/sign?urlxxx后端用ticket noncestr timestamp url生成 SHA1 签名前端注入配置调用 JS-SDK。风险所有实例在t7200s同时失效 → 集中请求微信 → 限流Redis 故障 → 无法获取票据 → 全站 JS 功能瘫痪。二、双层缓存 提前刷新机制packagejuwatech.cn.wx.jssdk;ServicepublicclassJsSdkTicketService{privatestaticfinalStringTICKET_CACHE_KEYwx:jsapi_ticket;privatestaticfinallongEXPIRE_SECONDS7200;privatestaticfinallongREFRESH_WINDOW600;// 提前10分钟刷新privatefinalLoadingCacheString,StringlocalCacheCaffeine.newBuilder().expireAfterWrite(EXPIRE_SECONDS-REFRESH_WINDOW,TimeUnit.SECONDS).build(key-fetchTicketFromRemote());publicStringgetValidTicket(){// 1. 优先读本地缓存避免 Redis 网络开销StringticketlocalCache.getIfPresent(jsapi);if(ticket!null){returnticket;}// 2. 本地未命中尝试从 Redis 获取ticket(String)redisTemplate.opsForValue().get(TICKET_CACHE_KEY);if(ticket!null){localCache.put(jsapi,ticket);returnticket;}// 3. 双缓存均失效抢分布式锁returnrefreshTicketWithLock();}privateStringrefreshTicketWithLock(){StringlockKeylock:wx:jsapi_ticket;StringlockValueUUID.randomUUID().toString();try{// 尝试获取 Redis 分布式锁3秒自动释放BooleanlockedredisTemplate.opsForValue().setIfAbsent(lockKey,lockValue,Duration.ofSeconds(3));if(Boolean.TRUE.equals(locked)){// 成功获得锁调用微信接口StringnewTicketfetchTicketFromWxApi();// 同时写入 Redis 和本地缓存redisTemplate.opsForValue().set(TICKET_CACHE_KEY,newTicket,Duration.ofSeconds(EXPIRE_SECONDS-100));localCache.put(jsapi,newTicket);returnnewTicket;}else{// 未获得锁短暂等待后重试本地缓存避免惊群Thread.sleep(50);returnlocalCache.getIfPresent(jsapi)?:(String)redisTemplate.opsForValue().get(TICKET_CACHE_KEY);}}catch(Exceptione){log.error(Failed to refresh jsapi_ticket,e);// 降级尝试使用即将过期的旧票据见下文returndegradeToExpiredTicket();}finally{// 释放锁Lua 脚本保证原子性releaseDistributedLock(lockKey,lockValue);}}}三、Redis 分布式锁释放Lua 脚本privatevoidreleaseDistributedLock(StringlockKey,StringlockValue){Stringscriptif redis.call(get, KEYS[1]) ARGV[1] then return redis.call(del, KEYS[1]) else return 0 end;redisTemplate.execute(newDefaultRedisScript(script,Long.class),Collections.singletonList(lockKey),lockValue);}四、容灾降级使用临近过期票据即使微信接口不可用只要票据未完全过期如剩余 5 分钟仍可继续使用privateStringdegradeToExpiredTicket(){// 从 Redis 中强制读取忽略 TTLObjectticketredisTemplate.execute((RedisCallbackString)connection-{byte[]keyBytesredisTemplate.getKeySerializer().serialize(TICKET_CACHE_KEY);return(String)redisTemplate.getValueSerializer().deserialize(connection.get(keyBytes));});if(ticket!null){log.warn(Using expired jsapi_ticket in degrade mode);returnticket;}thrownewRuntimeException(No valid or expired ticket available);}五、签名接口实现GetMapping(/jssdk/sign)ResponseBodypublicMapString,Objectsign(RequestParamStringurl){StringticketjsSdkTicketService.getValidTicket();StringnonceStrRandomStringUtils.randomAlphanumeric(16);longtimestampSystem.currentTimeMillis()/1000;StringsignatureDigestUtils.sha1Hex(jsapi_ticketticketnoncestrnonceStrtimestamptimestampurlurl);MapString,ObjectresultnewHashMap();result.put(appId,your_wechat_appid);result.put(timestamp,timestamp);result.put(nonceStr,nonceStr);result.put(signature,signature);returnresult;}六、监控与告警记录fetchTicketFromWxApi()调用次数超过 8000 次/天触发预警监控降级路径命中率持续 1% 时告警对/jssdk/sign接口增加熔断机制如 Hystrix 或 Sentinel。上线后系统在 Redis 集群故障期间仍保持 JS-SDK 可用缓存雪崩场景下微信接口调用量下降 98%日均节省 600 次无效请求。本文著作权归 微赚淘客系统3.0 研发团队转载请注明出处