package com.dy.pipIrrWechat.wechatpay; import com.alibaba.fastjson2.JSON; import com.alibaba.fastjson2.JSONObject; import com.dy.common.webUtil.BaseResponse; import com.dy.common.webUtil.BaseResponseUtils; import com.dy.common.webUtil.ResultCodeMsg; import com.dy.pipIrrGlobal.pojoSe.*; import com.dy.pipIrrGlobal.voSe.VoClient; import com.dy.pipIrrWechat.result.WechatResultCode; import com.dy.pipIrrWechat.util.AesUtil; import com.dy.pipIrrWechat.util.PayHelper; import com.dy.pipIrrWechat.util.RestTemplateUtil; import com.dy.pipIrrWechat.virtualCard.VirtualCardSv; import com.dy.pipIrrWechat.virtualCard.dto.DtoVirtualCard; import com.dy.pipIrrWechat.virtualCard.enums.LastOperateENUM; import com.dy.pipIrrWechat.virtualCard.enums.RefundItemStateENUM; import com.dy.pipIrrWechat.wechatpay.dto.Code2Session; import com.dy.pipIrrWechat.wechatpay.dto.DtoOrder; import com.dy.pipIrrWechat.wechatpay.dto.NotifyResource; import com.dy.pipIrrWechat.wechatpay.dto.OrderNotify; import com.dy.pipIrrWechat.wechatpay.enums.RefundStatusENUM; import io.swagger.v3.oas.annotations.Operation; import io.swagger.v3.oas.annotations.media.Content; import io.swagger.v3.oas.annotations.media.Schema; import io.swagger.v3.oas.annotations.responses.ApiResponse; import io.swagger.v3.oas.annotations.responses.ApiResponses; import io.swagger.v3.oas.annotations.tags.Tag; import jakarta.servlet.http.HttpServletRequest; import jakarta.servlet.http.HttpServletResponse; import jakarta.validation.Valid; import lombok.RequiredArgsConstructor; import lombok.extern.slf4j.Slf4j; import org.springframework.http.HttpHeaders; import org.springframework.http.MediaType; import org.springframework.transaction.annotation.Transactional; import org.springframework.validation.BindingResult; import org.springframework.web.bind.annotation.*; import javax.crypto.NoSuchPaddingException; import java.io.BufferedReader; import java.io.IOException; import java.security.GeneralSecurityException; import java.security.InvalidKeyException; import java.security.NoSuchAlgorithmException; import java.security.SignatureException; import java.security.spec.InvalidKeySpecException; import java.text.SimpleDateFormat; import java.util.Date; import java.util.HashMap; import java.util.Map; import java.util.Objects; /** * @author ZhuBaoMin * @date 2024-07-16 15:05 * @LastEditTime 2024-07-16 15:05 * @Description */ @Slf4j @Tag(name = "微信支付管理", description = "微信支付各种操作") @RestController @RequestMapping(path="payment") @RequiredArgsConstructor public class PaymentCtrl { private final PaymentSv paymentSv; private final RestTemplateUtil restTemplateUtil; private final PayHelper payHelper; private final VirtualCardSv virtualCardSv; private final String privateCertFileName = com.dy.pipIrrWechat.wechatpay.PayInfo.privateCertFileName; private final String appid = com.dy.pipIrrWechat.wechatpay.PayInfo.appid; private final String secret = com.dy.pipIrrWechat.wechatpay.PayInfo.secret; private final String mchid = com.dy.pipIrrWechat.wechatpay.PayInfo.mchid; private final String schema = com.dy.pipIrrWechat.wechatpay.PayInfo.schema; private final String signType = com.dy.pipIrrWechat.wechatpay.PayInfo.signType; private final String description = com.dy.pipIrrWechat.wechatpay.PayInfo.description; private final String loginUrl = com.dy.pipIrrWechat.wechatpay.PayInfo.loginUrl; private final String notifyUrl = com.dy.pipIrrWechat.wechatpay.PayInfo.notifyUrl; private final String grantType = com.dy.pipIrrWechat.wechatpay.PayInfo.grantType; // 平台证书公钥 private final Map CERTIFICATE_MAP = new HashMap(); /** * 登录凭证校验，农户绑定账号逻辑包含登录凭证校验，此接口作废 * @param code2Session 登录凭证校验传入对象 * @param bindingResult * @return * @throws Exception */ @Operation(summary = "登录凭证校验", description = "登录凭证校验") @ApiResponses(value = { @ApiResponse( responseCode = ResultCodeMsg.RsCode.SUCCESS_CODE, description = "操作结果：true：成功，false：失败（BaseResponse.content）", content = {@Content(mediaType = MediaType.APPLICATION_JSON_VALUE, schema = @Schema(implementation = Boolean.class))} ) }) @PostMapping(path = "getSessionId") @Transactional(rollbackFor = Exception.class) public BaseResponse getSessionId(@RequestBody @Valid Code2Session code2Session, BindingResult bindingResult) throws Exception { if(bindingResult != null && bindingResult.hasErrors()){ return BaseResponseUtils.buildFail(Objects.requireNonNull(bindingResult.getFieldError()).getDefaultMessage()); } String phoneNumber = code2Session.getPhoneNumber(); String jsCode = code2Session.getJs_code(); Map queryParams = new HashMap<>(); queryParams.put("appid", appid); queryParams.put("secret", secret); queryParams.put("js_code", jsCode); queryParams.put("grant_type", grantType); Map headerParams = new HashMap<>(); JSONObject job = restTemplateUtil.get(loginUrl, queryParams, headerParams); if(job.getLong("errcode") != null && job.getLong("errcode") >= -1) { return BaseResponseUtils.buildFail("登录凭证校验失败"); } String openid = job.getString("openid"); String sessionKey = job.getString("session_key"); Long clientId = paymentSv.getClientIdByPhone(phoneNumber); String SessionId = ""; if(clientId != null) { // 添加微信用户账户记录 SeOpenId seOpenId = new SeOpenId(); seOpenId.setClientId(clientId); seOpenId.setOpenId(openid); seOpenId.setSessionKey(sessionKey); seOpenId.setCreateTime(new Date()); Long rec = paymentSv.addOpenId(seOpenId); if(rec != null) { SessionId = String.valueOf(rec); } return BaseResponseUtils.buildSuccess(SessionId); } else { return BaseResponseUtils.buildError(WechatResultCode.PHONE_NUMBER_IS_ERROR.getMessage()); } } /** * 下载微信支付平台证书 测试完废除 * @return * @throws Exception */ @Operation(summary = "下载平台证书", description = "下载平台证书") @ApiResponses(value = { @ApiResponse( responseCode = ResultCodeMsg.RsCode.SUCCESS_CODE, description = "操作结果：true：成功，false：失败（BaseResponse.content）", content = {@Content(mediaType = MediaType.APPLICATION_JSON_VALUE, schema = @Schema(implementation = Boolean.class))} ) }) @GetMapping(path = "certificates") @Transactional(rollbackFor = Exception.class) public BaseResponse certificates() throws Exception { String method = "GET"; String httpUrl = "/v3/certificates"; String nonceStr = payHelper.generateRandomString(); Long timestamp = System.currentTimeMillis() / 1000; String header = schema + " " + payHelper.getToken(method, httpUrl, "", nonceStr, timestamp, privateCertFileName); Map headers = new HashMap<>(); headers.put("Authorization", header); headers.put("Accept", "application/json"); JSONObject job_result = restTemplateUtil.getHeaders(com.dy.pipIrrWechat.wechatpay.PayInfo.certificates,null, headers); JSONObject job_headers = job_result.getJSONObject("headers"); String wechatpayNonce = job_headers.getJSONArray("Wechatpay-Nonce").getString(0); String wechatpaySerial = job_headers.getJSONArray("Wechatpay-Serial").getString(0); String wechatpaySignature = job_headers.getJSONArray("Wechatpay-Signature").getString(0); String wechatpaySignatureType = job_headers.getJSONArray("Wechatpay-Signature-Type").getString(0); String wechatpayTimestamp = job_headers.getJSONArray("Wechatpay-Timestamp").getString(0); JSONObject job_body = job_result.getJSONObject("body"); // 构造验签名串 String signatureStr = payHelper.responseSign(wechatpayTimestamp, wechatpayNonce, job_body.toJSONString()); // 验证签名 Boolean valid = payHelper.responseSignVerify(wechatpaySerial, signatureStr, wechatpaySignature); return BaseResponseUtils.buildSuccess(); } /** * JSAPI下单 * @param order 下单请求对象，包含需要传入的参数 * @param bindingResult * @return 预支付交易会话标识（有效期2小时） */ @PostMapping(path = "placeOrder") @Transactional(rollbackFor = Exception.class) public BaseResponse placeOrder(@RequestBody @Valid DtoOrder order, BindingResult bindingResult) throws NoSuchPaddingException, NoSuchAlgorithmException, InvalidKeySpecException, IOException, SignatureException, InvalidKeyException { if(bindingResult != null && bindingResult.hasErrors()){ return BaseResponseUtils.buildFail(Objects.requireNonNull(bindingResult.getFieldError()).getDefaultMessage()); } // 接收参数：登录态ID、虚拟卡ID、充值金额（分） Long sessionId = order.getSessionId(); Long virtualId = order.getVcId(); Integer rechargeAmount = order.getRechargeAmount(); String prepayId = ""; SeOpenId po = paymentSv.selectOne(sessionId); if(po == null) { return BaseResponseUtils.buildErrorMsg(WechatResultCode.SESSION_ID_ERROR.getMessage()); } String openid = po.getOpenId(); SeVirtualCard seVirtualCard = virtualCardSv.selectVirtuCardById(virtualId); if(seVirtualCard == null) { return BaseResponseUtils.buildErrorMsg(WechatResultCode.VIRTUAL_CARD_NOT_EXIST.getMessage()); } Long clientId = seVirtualCard.getClientId(); VoClient voClient = paymentSv.getOneClient(clientId); if(voClient == null) { return BaseResponseUtils.buildErrorMsg(WechatResultCode.VIRTUAL_CARD_CLIENT_NOT_EXIST.getMessage()); } String clientNum = voClient.getClientNum(); // 生成订单号并添加充值记录 SimpleDateFormat dateFormat = new SimpleDateFormat("yyyyMMddHHmmssSSS"); String orderNumber = clientNum + dateFormat.format(new Date()); // 生成虚拟卡充值记录（部分字段） DtoVirtualCard virtualCard = new DtoVirtualCard(); virtualCard.setVirtualId(virtualId); virtualCard.setClientId(clientId); virtualCard.setOrderNumber(orderNumber); virtualCard.setRechargeAmount(rechargeAmount); BaseResponse result = virtualCardSv.insertVCRecharge(virtualCard); if(!result.getCode().equals("0001")) { return BaseResponseUtils.buildErrorMsg(WechatResultCode.RECHARGE_ADD_FAIL.getMessage()); } JSONObject job_body = new JSONObject(); job_body.put("appid", appid); job_body.put("mchid", mchid); job_body.put("description", description); job_body.put("out_trade_no", orderNumber); job_body.put("notify_url", notifyUrl); //订单金额 JSONObject job_amount = new JSONObject(); job_amount.put("total", rechargeAmount); job_amount.put("currency", "CNY"); job_body.put("amount", job_amount); //支付者 JSONObject job_payer = new JSONObject(); job_payer.put("openid", openid); job_body.put("payer", job_payer); // 获取随机串和时间戳 String nonceStr = payHelper.generateRandomString(); Long timestamp = System.currentTimeMillis() / 1000; String method = "POST"; String httpUrl = "/v3/pay/transactions/jsapi"; String body = job_body.toJSONString(); String header = schema + " " + payHelper.getToken(method, httpUrl, body, nonceStr, timestamp, privateCertFileName); Map headers = new HashMap<>(); headers.put("Authorization", header); headers.put("Accept", "application/json"); headers.put("Content-Type", "application/json"); // 暂时注释掉，认证通过后再放开 JSONObject job_result = restTemplateUtil.post(com.dy.pipIrrWechat.wechatpay.PayInfo.orderUrl, body, headers); if(job_result == null) { return BaseResponseUtils.buildFail(WechatResultCode.RECHARGE_ADD_FAIL.getMessage()); } return BaseResponseUtils.buildSuccess(job_result) ; } /** * 再次签名 * @param prepayId 预支付交易会话标识 * @return 小程序调起支付参数 * @throws Exception */ @Operation(summary = "再次签名", description = "再次签名") @ApiResponses(value = { @ApiResponse( responseCode = ResultCodeMsg.RsCode.SUCCESS_CODE, description = "操作结果：true：成功，false：失败（BaseResponse.content）", content = {@Content(mediaType = MediaType.APPLICATION_JSON_VALUE, schema = @Schema(implementation = Boolean.class))} ) }) @GetMapping(path = "/signAgain") @Transactional(rollbackFor = Exception.class) public BaseResponse signAgain(@RequestParam("prepayId") String prepayId) throws Exception { // 获取随机串和时间戳，放在此处以保证 String appid = com.dy.pipIrrWechat.wechatpay.PayInfo.appid; String timeStamp = String.valueOf(System.currentTimeMillis() / 1000); String nonceStr = payHelper.generateRandomString(); String pkg = "prepay_id=" + prepayId; String message = payHelper.buildMessage_signAgain(appid, timeStamp, nonceStr, pkg); String paySign = payHelper.sign(message.getBytes("utf-8"), privateCertFileName); JSONObject job_result = new JSONObject(); job_result.put("timeStamp", timeStamp); job_result.put("nonceStr", nonceStr); job_result.put("package", pkg); job_result.put("signType", signType); job_result.put("paySign", paySign); return BaseResponseUtils.buildSuccess(job_result) ; } /** * 支付通知/退款结果通知 * @param headers * @param request * @param response * @return * @throws IOException * @throws GeneralSecurityException */ @Operation(summary = "支付通知", description = "支付通知") @ApiResponses(value = { @ApiResponse( responseCode = ResultCodeMsg.RsCode.SUCCESS_CODE, description = "操作结果：true：成功，false：失败（BaseResponse.content）", content = {@Content(mediaType = MediaType.APPLICATION_JSON_VALUE, schema = @Schema(implementation = Boolean.class))} ) }) @PostMapping(path = "orderNotify", consumes = MediaType.APPLICATION_JSON_VALUE) @Transactional(rollbackFor = Exception.class) public JSONObject orderNotify(@RequestHeader HttpHeaders headers, HttpServletRequest request, HttpServletResponse response) throws IOException, GeneralSecurityException { JSONObject result = new JSONObject(); /** * 1.验签处理 * 从header中取出4个子参数 * 验时间差，超过5分钟的不处理 * 验证签名 * 验证书序列号，必须与某一个证书的序列号一致 */ String wechatpayNonce = String.valueOf(headers.get("Wechatpay-Nonce").get(0)); String wechatpaySerial = String.valueOf(headers.get("Wechatpay-Serial").get(0)); String wechatpaySignature = String.valueOf(headers.get("Wechatpay-Signature").get(0)); String wechatpayTimestamp = String.valueOf(headers.get("Wechatpay-Timestamp").get(0)); // 获取body内容 BufferedReader reader = request.getReader(); StringBuilder stringBuilder = new StringBuilder(); String line; while ((line = reader.readLine()) != null) { stringBuilder.append(line); } String bodyStr = stringBuilder.toString(); // body转对象 OrderNotify orderNotify = JSON.parseObject(bodyStr, OrderNotify.class); // 验时间戳，时间差大于5分钟的拒绝 Long timeDiff = (System.currentTimeMillis() / 1000 - Long.parseLong(wechatpayTimestamp))/60; if(timeDiff > 5) { response.setStatus(500); result.put("code", "FAIL"); result.put("message", "失败"); return result; } // 构造验签名串 String signatureStr = payHelper.responseSign(wechatpayTimestamp, wechatpayNonce, bodyStr); // 验证签名 Boolean valid = payHelper.responseSignVerify(wechatpaySerial, signatureStr, wechatpaySignature); if(!valid) { response.setStatus(500); result.put("code", "FAIL"); result.put("message", "失败"); return result; } // 序列号验证要放在验签后，因为验签时可能会下载新的证书 boolean SerialIsValid = false; for (String key : payHelper.CERTIFICATE_MAP.keySet()) { if(key.equals(wechatpaySerial)) { SerialIsValid = true; } } if(!SerialIsValid) { response.setStatus(500); result.put("code", "FAIL"); result.put("message", "失败"); return result; } // 解密处理 String eventType = orderNotify.getEvent_type(); if(eventType != null && eventType.equals("TRANSACTION.SUCCESS")) { // 支付成功回调 /** * 支付成功的回调 * 取出通知数据对象，继而取出解密所需的associatedData和nonce，以及密文ciphertext * 解密ciphertext得到 */ NotifyResource notifyResource = orderNotify.getResource(); String associatedData = notifyResource.getAssociated_data(); String nonce = notifyResource.getNonce(); String ciphertext = notifyResource.getCiphertext(); String resource = AesUtil.decryptToString(com.dy.pipIrrWechat.wechatpay.PayInfo.key.getBytes("utf-8"), associatedData.getBytes("utf-8"), nonce.getBytes("utf-8"), ciphertext); JSONObject job_resource = JSONObject.parseObject(resource); // 解密后取出：商户订单号、微信支付订单号、交易状态、支付完成时间 String out_trade_no = job_resource.getString("out_trade_no"); String transaction_id = job_resource.getString("transaction_id"); String trade_state = job_resource.getString("trade_state"); Date success_time = job_resource.getDate("success_time"); // 如果当前订单状态为未支付状态，则更新虚拟卡表及充值表响应字段 SeVcRecharge seVcRecharge = virtualCardSv.getVCRechargeByorderNumber(out_trade_no); if(seVcRecharge != null && seVcRecharge.getOrderState() == 1) { BaseResponse result_ = virtualCardSv.updateVCRecharge(out_trade_no, success_time); if(!result_.getCode().equals("0001")) { response.setStatus(500); result.put("code", "FAIL"); result.put("message", "失败"); return result; } } } else if(eventType != null && eventType.equals("REFUND.SUCCESS")) { // 退款成功后回调 /** * 退款成功的回调 * 取出通知数据对象，继而取出解密所需的associatedData和nonce，以及密文ciphertext * 解密ciphertext得到 */ NotifyResource notifyResource = orderNotify.getResource(); String associatedData = notifyResource.getAssociated_data(); String nonce = notifyResource.getNonce(); String ciphertext = notifyResource.getCiphertext(); String resource = AesUtil.decryptToString(PayInfo.key.getBytes("utf-8"), associatedData.getBytes("utf-8"), nonce.getBytes("utf-8"), ciphertext); JSONObject job_resource = JSONObject.parseObject(resource); // 解密后取出：商户订单员、微信支付订单号、交易状态、支付完成时间 String out_trade_no = job_resource.getString("out_trade_no"); String transaction_id = job_resource.getString("transaction_id"); String out_refund_no = job_resource.getString("out_refund_no"); String refund_status = job_resource.getString("refund_status"); Date success_time = job_resource.getDate("success_time"); if(!refund_status.equals("SUCCESS")) { response.setStatus(500); result.put("code", "FAIL"); result.put("message", "失败"); return result; } // 更新虚拟卡表及充值表响应字段 SeVcRefundItem seVcRefundItem = new SeVcRefundItem(); seVcRefundItem.setRefundTime(success_time); seVcRefundItem.setRefundStatus(RefundItemStateENUM.REFUNDED.getCode()); Integer rec = virtualCardSv.updateRefundItem(seVcRefundItem); if(rec == null && rec <= 0) { response.setStatus(500); result.put("code", "FAIL"); result.put("message", "失败"); return result; } // 根据退款单号反查退款ID，根据退款ID获取退款状态是未退款的记录数量，如果是0则说明全部退款完成，更新退款表状态为已退款，将退款后金额更新到虚拟卡表 /** * 根据退款通知接口返回的退款单号反查退款ID，查询该退款ID下未退款记录数量 * 如果结果为0，则该退款已经完成 * 1. 更新退款表状态为已退款 * 2. 将退款后余额更新到虚拟卡表中 */ Integer noRefundedCount = virtualCardSv.getNoRefundedCount(out_refund_no); if(noRefundedCount != null && noRefundedCount == 0) { // 获取退款对象并修改退款状态 Long refundId = virtualCardSv.getRefundIdByRefundNumber(out_refund_no); SeVcRefund seVcRefund = virtualCardSv.selectRefundByRefundId(refundId); seVcRefund.setRefundStatus(RefundStatusENUM.REFUNDED.getCode()); virtualCardSv.updateRefund(seVcRefund); // 获取虚拟卡对象并修改余额、最后操作、最后操作时间 Long vcId = seVcRefund.getVcId(); Double afterRefund = seVcRefund.getAfterRefund(); SeVirtualCard seVirtualCard = virtualCardSv.selectVirtuCardById(vcId); seVirtualCard.setMoney(afterRefund); seVirtualCard.setLastOperate(LastOperateENUM.REFUND.getCode()); seVirtualCard.setLastOperateTime(new Date()); virtualCardSv.updateVirtualCard(seVirtualCard); } } // 通知应答 response.setStatus(200); result.put("code", "SUCCESS"); result.put("message", "成功"); return result; } }