官方文档
https://pay.weixin.qq.com/static/product/product_intro.shtml?name=app
开发之前建议先梳理下官方文档提供的业务流程
业务流程图
开发前准备
appId:应用id
mchId:商户号
apiKey:api密钥
以上参数参考https://pay.weixin.qq.com/wiki/doc/apiv3/open/pay/chapter2_5_1.shtml
如需退款等接口参考https://pay.weixin.qq.com/wiki/doc/apiv3/open/pay/chapter2_5_3.shtml
1.创建订单
1.1支付config
import lombok.Data;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.context.annotation.PropertySource;
import org.springframework.stereotype.Component;
/**
* 微信支付配置类
*/
@Component
@PropertySource(value = {"classpath:wechatpay.properties"})
@Data
public class WeChatPayConfig {
/**
* 应用ID
*/
@Value("${wxappId}")
public String appId;
/**
* 商户号
*/
@Value("${mchId}")
public String mchId;
/**
* api 密钥
*/
@Value("${apiKey}")
public String apiKey;
/**
* 异步通知地址
*/
@Value("${wxnotifyUrl}")
public String notifyUrl;
@Value("${placeUrl}")
public String placeUrl;
}
1.2 工具类
import org.apache.http.HttpResponse;
import org.apache.http.client.HttpClient;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.entity.StringEntity;
import org.apache.http.impl.client.HttpClients;
import org.jdom.Document;
import org.jdom.Element;
import org.jdom.JDOMException;
import org.jdom.input.SAXBuilder;
import javax.servlet.http.HttpServletRequest;
import java.io.*;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.util.*;
public class WeChatUtil {
/**
* 第一次签名
*
* @param parameters 数据为服务器生成，下单时必须的字段排序签名
* @param key
* @return
*/
public static String createSign(SortedMap<String, Object> parameters, String key) {
StringBuffer sb = new StringBuffer();
Set es = parameters.entrySet();//所有参与传参的参数按照accsii排序（升序）
Iterator it = es.iterator();
while (it.hasNext()) {
Map.Entry entry = (Map.Entry) it.next();
String k = (String) entry.getKey();
Object v = entry.getValue();
if (null != v && !"".equals(v)
&& !"sign".equals(k) && !"key".equals(k)) {
sb.append(k + "=" + v + "&");
}
}
sb.append("key=" + key);
return encodeMD5(sb.toString());
}
/**
* MD5 签名
*
* @param str
* @return 签名后的字符串信息
*/
public static String encodeMD5(String str) {
try {
MessageDigest messageDigest = MessageDigest.getInstance("MD5");
byte[] inputByteArray = (str).getBytes();
messageDigest.update(inputByteArray);
byte[] resultByteArray = messageDigest.digest();
return byteArrayToHex(resultByteArray);
} catch (NoSuchAlgorithmException e) {
return null;
}
}
// 辅助 encodeMD5 方法实现
private static String byteArrayToHex(byte[] byteArray) {
char[] hexDigits = {'0', '1', '2', '3', '4', '5', '6', '7', '8', '9', 'A', 'B', 'C', 'D', 'E', 'F'};
char[] resultCharArray = new char[byteArray.length * 2];
int index = 0;
for (byte b : byteArray) {
resultCharArray[index++] = hexDigits[b >>> 4 & 0xf];
resultCharArray[index++] = hexDigits[b & 0xf];
}
// 字符数组组合成字符串返回
return new String(resultCharArray);
}
/**
* 执行 POST 方法的 HTTP 请求
*
* @param url
* @param parameters
* @return
* @throws IOException
*/
public static String executeHttpPost(String url, SortedMap<String, Object> parameters) throws IOException {
HttpClient client = HttpClients.createDefault();
HttpPost request = new HttpPost(url);
request.setHeader("Content-type", "application/xml");
request.setHeader("Accept", "application/xml");
request.setEntity(new StringEntity(transferMapToXml(parameters), "UTF-8"));
HttpResponse response = client.execute(request);
return readResponse(response);
}
/**
* 将 Map 转化为 XML
*
* @param map
* @return
*/
public static String transferMapToXml(SortedMap<String, Object> map) {
StringBuffer sb = new StringBuffer();
sb.append("<xml>");
for (String key : map.keySet()) {
sb.append("<").append(key).append(">")
.append(map.get(key))
.append("</").append(key).append(">");
}
return sb.append("</xml>").toString();
}
/**
* 读取 response body 内容为字符串
*/
public static String readResponse(HttpResponse response) throws IOException {
BufferedReader in = new BufferedReader(
new InputStreamReader(response.getEntity().getContent()));
String result = new String();
String line;
while ((line = in.readLine()) != null) {
result += line;
}
return result;
}
/**
* 第二次签名
*
* @param result 数据为微信返回给服务器的数据（XML 的 String），再次签名后传回给客户端（APP）使用
* @param key 密钥
* @return
* @throws IOException
*/
public static Map createSign2(String result, String key) throws IOException {
SortedMap<String, Object> map = new TreeMap<>(transferXmlToMap(result));
Map app = new HashMap();
app.put("appid", map.get("appid"));
app.put("partnerid", map.get("mch_id"));
app.put("prepayid", map.get("prepay_id"));
app.put("package", "Sign=WXPay"); // 固定字段，保留，不可修改
app.put("noncestr", map.get("nonce_str"));
app.put("timestamp", new Date().getTime() / 1000); // 时间为秒，JDK 生成的是毫秒，故除以 1000
app.put("sign", createSign(new TreeMap<>(app), key));
return app;
}
/**
* 将 XML 转化为 map
*
* @param strxml
* @return
* @throws JDOMException
* @throws IOException
*/
public static Map transferXmlToMap(String strxml) throws IOException {
strxml = strxml.replaceFirst("encoding=\".*\"", "encoding=\"UTF-8\"");
if (null == strxml || "".equals(strxml)) {
return null;
}
Map m = new HashMap();
InputStream in = new ByteArrayInputStream(strxml.getBytes("UTF-8"));
SAXBuilder builder = new SAXBuilder();
Document doc = null;
try {
doc = builder.build(in);
} catch (JDOMException e) {
throw new IOException(e.getMessage()); // 统一转化为 IO 异常输出
}
// 解析 DOM
Element root = doc.getRootElement();
List list = root.getChildren();
Iterator it = list.iterator();
while (it.hasNext()) {
Element e = (Element) it.next();
String k = e.getName();
String v = "";
List children = e.getChildren();
if (children.isEmpty()) {
v = e.getTextNormalize();
} else {
v = getChildrenText(children);
}
m.put(k, v);
}
//关闭流
in.close();
return m;
}
// 辅助 transferXmlToMap 方法递归提取子节点数据
private static String getChildrenText(List<Element> children) {
StringBuffer sb = new StringBuffer();
if (!children.isEmpty()) {
Iterator<Element> it = children.iterator();
while (it.hasNext()) {
Element e = (Element) it.next();
String name = e.getName();
String value = e.getTextNormalize();
List<Element> list = e.getChildren();
sb.append("<" + name + ">");
if (!list.isEmpty()) {
sb.append(getChildrenText(list));
}
sb.append(value);
sb.append("</" + name + ">");
}
}
return sb.toString();
}
/**
* 验证签名是否正确
*
* @return boolean
* @throws Exception
*/
public static boolean checkSign(SortedMap<String, Object> parameters, String key) throws Exception {
String signWx = parameters.get("sign").toString();
if (signWx == null) return false;
parameters.remove("sign"); // 需要去掉原 map 中包含的 sign 字段再进行签名
String signMe = createSign(parameters, key);
return signWx.equals(signMe);
}
/**
* 读取 request body 内容作为字符串
*
* @param request
* @return
* @throws IOException
*/
public static String readRequest(HttpServletRequest request) throws IOException {
InputStream inputStream;
StringBuffer sb = new StringBuffer();
inputStream = request.getInputStream();
String str;
BufferedReader in = new BufferedReader(new InputStreamReader(inputStream, "UTF-8"));
while ((str = in.readLine()) != null) {
sb.append(str);
}
in.close();
inputStream.close();
return sb.toString();
}
/**
* 微信回调接口成功返回值
* @return
*/
public static String success(){
return "<xml>\n" +
" <return_code><![CDATA[SUCCESS]]></return_code>\n" +
" <return_msg><![CDATA[OK]]></return_msg>\n" +
"</xml>";
}
/**
* 微信回调接口失败返回值
* @return
*/
public static String fail(){
return "<xml>\n" +
" <return_code><![CDATA[FAIL]]></return_code>\n" +
" <return_msg><![CDATA[]]></return_msg>\n" +
"</xml>";
}
1.3创建订单
import com.alibaba.fastjson.JSON;
import com.smt.amblyopia.nd.app.util.CommonUtil;
import com.smt.amblyopia.nd.app.util.WeChatUtil;
import com.smt.amblyopia.nd.comm.util.RandomUtils;
import lombok.extern.slf4j.Slf4j;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;
import javax.servlet.http.HttpServletRequest;
import java.io.IOException;
import java.math.BigDecimal;
import java.util.SortedMap;
import java.util.TreeMap;
@Component
@Slf4j
public class WeChatPay {
@Autowired
private WeChatPayConfig weChatPayConfig;
/**
*
* @param body 购买的商品名称 如：商品1 商品2
* @param outtradeno 订单号
* @param amount 商品价格
* @param request
* @return
* @throws IOException
*/
public String weChatCreateOrder(String body, String outtradeno, BigDecimal amount, HttpServletRequest request) throws IOException {
String ip = CommonUtil.getIpAddr(request);
SortedMap<String, Object> data = new TreeMap<>();
data.put("appid", weChatPayConfig.getAppId());//应用ID
data.put("mch_id", weChatPayConfig.getMchId());//商户号
data.put("device_info", "WEB"); // 默认 "WEB"
data.put("body", body);
data.put("nonce_str", RandomUtils.getRandomStr(10));//随机字符串data.put("trade_type" , "APP");//支付类型
data.put("notify_url", weChatPayConfig.getNotifyUrl());
data.put("out_trade_no", outtradeno);
data.put("total_fee", amount.longValue() + ""); //分
data.put("spbill_create_ip", ip);
data.put("trade_type", "APP");//支付类型
data.put("sign", WeChatUtil.createSign(data, weChatPayConfig.apiKey));//支付类型 ;
String result = WeChatUtil.executeHttpPost(weChatPayConfig.getPlaceUrl(), data); // 执行 HTTP 请求，获取接收的字符串（一段 XML）
String resp = JSON.toJSONString(WeChatUtil.createSign2(result, weChatPayConfig.apiKey));
return resp;
}
1.4 本地订单处理
订单创建成功，本地需要记录原始订单，根据回调接口的返回值，改变本地订单状态；
2.支付回调接口
2.1微信支付回调
import com.alibaba.fastjson.JSON;
import com.smt.amblyopia.nd.app.util.WeChatUtil;
import lombok.extern.slf4j.Slf4j;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.util.HashMap;
import java.util.Map;
import java.util.TreeMap;
@Component
@Slf4j
public class WeChatPay {
@Autowired
private WeChatPayConfig weChatPayConfig;
public Map<String, String> weChatCallBack(HttpServletRequest request, HttpServletResponse response) throws Exception {
Map<String, String> result = new HashMap<>();
// 预先设定返回的 response 类型为 xml
response.setHeader("Content-type", "application/xml");
// 读取参数，解析Xml为map
Map<String, String> map = WeChatUtil.transferXmlToMap(WeChatUtil.readRequest(request));
log.info("微信返回值转map:{}" , JSON.toJSONString(map));
// 转换为有序 map，判断签名是否正确
boolean isSignSuccess = WeChatUtil.checkSign(new TreeMap<String, Object>(map), weChatPayConfig.apiKey);
if (isSignSuccess) {
log.info("校验签名成功 isSignSuccess:{}" , isSignSuccess);
// 签名校验成功，说明是微信服务器发出的数据
String orderId = map.get("out_trade_no");
String returnCode = map.get("return_code");
result.put("orderId", orderId);
result.put("returnCode", returnCode);
//map.get("return_code").equals("SUCCESS")
return result;
}else{
return null;
}
}
2.2本地订单更新
通知应答
根据returnCode的值，更新本地订单状态；
