4 changed files with 298 additions and 18 deletions
Unified View
Diff Options
-
4dating-agency-mall-server/src/main/java/com/qniao/dam/application/service/paymentchannelorder/PaymentChannelOrderApplicationService.java
-
3dating-agency-mall-server/src/main/java/com/qniao/dam/application/service/paymentchannelorder/processor/IChannelPayService.java
-
80dating-agency-mall-server/src/main/java/com/qniao/dam/application/service/paymentchannelorder/processor/wechat/WeChatPayProcessor.java
-
229dating-agency-mall-server/src/main/java/com/qniao/dam/application/service/paymentchannelorder/processor/wechat/utils/WXPayV3Util.java
@ -0,0 +1,229 @@ |
|||||
|
package com.qniao.dam.application.service.paymentchannelorder.processor.wechat.utils; |
||||
|
|
||||
|
import com.alibaba.fastjson.JSONObject; |
||||
|
import com.qniao.framework.exception.BizException; |
||||
|
import com.wechat.pay.contrib.apache.httpclient.WechatPayHttpClientBuilder; |
||||
|
import com.wechat.pay.contrib.apache.httpclient.auth.PrivateKeySigner; |
||||
|
import com.wechat.pay.contrib.apache.httpclient.auth.Verifier; |
||||
|
import com.wechat.pay.contrib.apache.httpclient.auth.WechatPay2Credentials; |
||||
|
import com.wechat.pay.contrib.apache.httpclient.cert.CertificatesManager; |
||||
|
import com.wechat.pay.contrib.apache.httpclient.util.PemUtil; |
||||
|
import lombok.extern.slf4j.Slf4j; |
||||
|
import org.apache.commons.io.FileUtils; |
||||
|
import org.apache.http.HttpEntity; |
||||
|
import org.apache.http.HttpResponse; |
||||
|
import org.apache.http.client.methods.HttpPost; |
||||
|
import org.apache.http.entity.StringEntity; |
||||
|
import org.apache.http.impl.client.CloseableHttpClient; |
||||
|
import org.apache.http.util.EntityUtils; |
||||
|
import org.springframework.beans.factory.annotation.Value; |
||||
|
import org.springframework.stereotype.Component; |
||||
|
import org.springframework.util.Base64Utils; |
||||
|
|
||||
|
import java.io.*; |
||||
|
import java.net.URISyntaxException; |
||||
|
import java.nio.charset.StandardCharsets; |
||||
|
import java.nio.file.Files; |
||||
|
import java.nio.file.Paths; |
||||
|
import java.security.*; |
||||
|
import java.security.cert.X509Certificate; |
||||
|
import java.security.spec.InvalidKeySpecException; |
||||
|
import java.security.spec.PKCS8EncodedKeySpec; |
||||
|
import java.util.ArrayList; |
||||
|
import java.util.Base64; |
||||
|
import java.util.stream.Collectors; |
||||
|
import java.util.stream.Stream; |
||||
|
|
||||
|
@Component |
||||
|
@Slf4j |
||||
|
public class WXPayV3Util { |
||||
|
|
||||
|
public static final String api_v3_placeAnOrder_url = "https://api.mch.weixin.qq.com/v3/pay/transactions/jsapi"; |
||||
|
|
||||
|
public static final String api_v3_refund_url = "https://api.mch.weixin.qq.com/v3/refund/domestic/refunds"; |
||||
|
|
||||
|
private static CertificatesManager certificatesManager; |
||||
|
|
||||
|
private String APPLICATION_JSON = "application/json"; |
||||
|
// 你的商户私钥 |
||||
|
private String privateKey; |
||||
|
// 你的微信支付平台证书 |
||||
|
private String certificate; |
||||
|
|
||||
|
private CloseableHttpClient httpClient; |
||||
|
|
||||
|
private Verifier verifier; |
||||
|
|
||||
|
@Value("${weixin.mchid}") |
||||
|
private String mchId; |
||||
|
|
||||
|
@Value("${weixin.apiV3Key}") |
||||
|
private String v3Key; |
||||
|
|
||||
|
@Value("${weixin.mchSerialNo}") |
||||
|
private String mchSerialNo; |
||||
|
|
||||
|
@Value("${weixin.privateKeyPath}") |
||||
|
private String privateKeyPath; |
||||
|
|
||||
|
@Value("${weixin.platformCertPath}") |
||||
|
private String platformCertPath; |
||||
|
|
||||
|
public void setup() throws Exception { |
||||
|
// 获取商户 |
||||
|
try { |
||||
|
InputStream apiClientKey = Files.newInputStream(new File(privateKeyPath).toPath()); |
||||
|
File appKey = new File("/tmp/apiclient_key_temp.crt"); |
||||
|
FileUtils.copyInputStreamToFile(apiClientKey, appKey); |
||||
|
|
||||
|
InputStream wechatPayKey = Files.newInputStream(new File(platformCertPath).toPath()); |
||||
|
File appCert = new File("/tmp/wechatpay_cert_temp.crt"); |
||||
|
FileUtils.copyInputStreamToFile(wechatPayKey, appCert); |
||||
|
|
||||
|
this.privateKey = WXPayV3Util.getPrivateKeyStr(appKey.getAbsolutePath()); |
||||
|
this.certificate = WXPayV3Util.getPrivateKeyStr(appCert.getAbsolutePath()); |
||||
|
|
||||
|
PrivateKey merchantPrivateKey = PemUtil.loadPrivateKey(privateKey); |
||||
|
|
||||
|
certificatesManager = CertificatesManager.getInstance(); |
||||
|
// 向证书管理器增加需要自动更新平台证书的商户信息 |
||||
|
certificatesManager.putMerchant(mchId, new WechatPay2Credentials(mchId, |
||||
|
new PrivateKeySigner(mchSerialNo, merchantPrivateKey)), |
||||
|
v3Key.getBytes(StandardCharsets.UTF_8)); |
||||
|
// 从证书管理器中获取verifier |
||||
|
verifier = certificatesManager.getVerifier(mchId); |
||||
|
|
||||
|
X509Certificate wechatPayCertificate = PemUtil.loadCertificate( |
||||
|
new ByteArrayInputStream(certificate.getBytes(StandardCharsets.UTF_8))); |
||||
|
|
||||
|
ArrayList<X509Certificate> listCertificates = new ArrayList<>(); |
||||
|
listCertificates.add(wechatPayCertificate); |
||||
|
|
||||
|
WechatPayHttpClientBuilder builder = WechatPayHttpClientBuilder.create() |
||||
|
.withMerchant(mchId, mchSerialNo, merchantPrivateKey) |
||||
|
.withWechatPay(listCertificates); |
||||
|
httpClient = builder.build(); |
||||
|
} catch (IOException e) { |
||||
|
log.error("setup IOException " + e.getMessage(), e); |
||||
|
throw new BizException("IO异常：" + e.getMessage()); |
||||
|
} catch (NoSuchAlgorithmException e) { |
||||
|
log.error("setup NoSuchAlgorithmException " + e.getMessage(), e); |
||||
|
throw new BizException("未找到配置文件：" + e.getMessage()); |
||||
|
} catch (InvalidKeySpecException e) { |
||||
|
log.error("InvalidKeySpecException " + e.getMessage(), e); |
||||
|
throw new BizException("key生成异常：" + e.getMessage()); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
|
||||
|
/** |
||||
|
* api_v3下单 |
||||
|
* |
||||
|
* @param body 请求体JSON字符串 |
||||
|
* @return |
||||
|
* @throws IOException |
||||
|
* @throws NoSuchAlgorithmException |
||||
|
* @throws InvalidKeySpecException |
||||
|
*/ |
||||
|
public JSONObject doPostWeiXinV3(String url, String body) throws Exception { |
||||
|
if (httpClient == null) { |
||||
|
setup(); |
||||
|
} |
||||
|
HttpPost httpPost = new HttpPost(url); |
||||
|
httpPost.addHeader("Content-Type", "application/json;chartset=utf-8"); |
||||
|
httpPost.addHeader("Accept", "application/json"); |
||||
|
try { |
||||
|
if (body == null) { |
||||
|
throw new IllegalArgumentException("data参数不能为空"); |
||||
|
} |
||||
|
StringEntity stringEntity = new StringEntity(body, "utf-8"); |
||||
|
httpPost.setEntity(stringEntity); |
||||
|
// 直接执行execute方法，官方会自动处理签名和验签，并进行证书自动更新 |
||||
|
HttpResponse httpResponse = httpClient.execute(httpPost); |
||||
|
HttpEntity httpEntity = httpResponse.getEntity(); |
||||
|
|
||||
|
if (httpResponse.getStatusLine().getStatusCode() == 200) { |
||||
|
String jsonResult = EntityUtils.toString(httpEntity); |
||||
|
return JSONObject.parseObject(jsonResult); |
||||
|
} else { |
||||
|
log.error("doPostWeiXinV3 status != 200, " + EntityUtils.toString(httpEntity)); |
||||
|
} |
||||
|
} catch (Exception e) { |
||||
|
log.error("doPostWeiXinV3 fail, " + e.getMessage(), e); |
||||
|
throw new BizException("微信支付异常：" + e.getMessage()); |
||||
|
} |
||||
|
return null; |
||||
|
} |
||||
|
|
||||
|
/** |
||||
|
* 获取私钥字符串。 |
||||
|
* |
||||
|
* @param filename 私钥文件路径 (required) |
||||
|
* @return 私钥对象 |
||||
|
*/ |
||||
|
public static String getPrivateKeyStr(String filename) throws IOException, NoSuchAlgorithmException, InvalidKeySpecException { |
||||
|
return new String(Files.readAllBytes(Paths.get(filename)), "UTF-8"); |
||||
|
} |
||||
|
|
||||
|
|
||||
|
/** |
||||
|
* V3 SHA256withRSA 签名. |
||||
|
* |
||||
|
* @param appId |
||||
|
* @param timestamp |
||||
|
* @param nonceStr |
||||
|
* @param prepayId |
||||
|
* @return |
||||
|
* @throws SignatureException |
||||
|
* @throws NoSuchAlgorithmException |
||||
|
* @throws IOException |
||||
|
* @throws InvalidKeySpecException |
||||
|
* @throws InvalidKeyException |
||||
|
* @throws URISyntaxException |
||||
|
*/ |
||||
|
public String sign(String appId, long timestamp, String nonceStr, String prepayId) throws SignatureException, NoSuchAlgorithmException, IOException, InvalidKeySpecException, InvalidKeyException, URISyntaxException { |
||||
|
String signatureStr = Stream.of(appId, String.valueOf(timestamp), nonceStr, prepayId) |
||||
|
.collect(Collectors.joining("\n", "", "\n")); |
||||
|
Signature sign = Signature.getInstance("SHA256withRSA"); |
||||
|
File file = copyTempFileByResourcePath(privateKeyPath); |
||||
|
sign.initSign(WXPayV3Util.getPrivateKey(file.getAbsolutePath())); |
||||
|
sign.update(signatureStr.getBytes(StandardCharsets.UTF_8)); |
||||
|
return Base64Utils.encodeToString(sign.sign()); |
||||
|
} |
||||
|
|
||||
|
/** |
||||
|
* 使用流获取resoucre下的文件（解决线上无法获取的问题） |
||||
|
* |
||||
|
* @param resourcePath 相对于resource目录的路径 |
||||
|
* @return |
||||
|
* @throws IOException |
||||
|
*/ |
||||
|
public File copyTempFileByResourcePath(String resourcePath) throws IOException { |
||||
|
InputStream inputStream = Files.newInputStream(new File(resourcePath).toPath()); |
||||
|
File file = new File("/tmp/apiclient_key_temp.crt"); |
||||
|
FileUtils.copyInputStreamToFile(inputStream, file); |
||||
|
return file; |
||||
|
} |
||||
|
|
||||
|
/** |
||||
|
* 获取私钥。 |
||||
|
* |
||||
|
* @param filename 私钥文件路径 (required) |
||||
|
* @return 私钥对象 |
||||
|
*/ |
||||
|
public static PrivateKey getPrivateKey(String filename) throws IOException { |
||||
|
String content = new String(Files.readAllBytes(Paths.get(filename)), "UTF-8"); |
||||
|
try { |
||||
|
String privateKey = content.replace("-----BEGIN PRIVATE KEY-----", "") |
||||
|
.replace("-----END PRIVATE KEY-----", "") |
||||
|
.replaceAll("\\s+", ""); |
||||
|
KeyFactory kf = KeyFactory.getInstance("RSA"); |
||||
|
return kf.generatePrivate( |
||||
|
new PKCS8EncodedKeySpec(Base64.getDecoder().decode(privateKey))); |
||||
|
} catch (NoSuchAlgorithmException e) { |
||||
|
throw new RuntimeException("当前Java环境不支持RSA", e); |
||||
|
} catch (InvalidKeySpecException e) { |
||||
|
throw new RuntimeException("无效的密钥格式"); |
||||
|
} |
||||
|
} |
||||
|
} |
||||
Write
Preview
Loading…
Cancel
Save