18 changed files with 922 additions and 118 deletions
Split View
Diff Options
-
+1 -1admin-hanhai-vue/.env.development
-
+1 -1admin-hanhai-vue/.env.production
-
+63 -82jeecg-boot-base/jeecg-boot-base-core/src/main/java/org/jeecg/modules/cityMoneyLog/controller/CityMoneyLogController.java
-
+5 -0jeecg-boot-base/jeecg-boot-base-core/src/main/java/org/jeecg/modules/cityMoneyLog/entity/CityMoneyLog.java
-
+234 -0jeecg-boot-base/jeecg-boot-base-core/src/main/java/org/jeecg/modules/cityMoneyLog/resp/TransferToUser.java
-
+381 -0jeecg-boot-base/jeecg-boot-base-core/src/main/java/org/jeecg/modules/cityMoneyLog/resp/WXPayUtility.java
-
+6 -3jeecg-boot-module-system/src/main/java/org/jeecg/modules/api/service/CashoutService.java
-
+7 -0jeecg-boot-module-system/src/main/java/org/jeecg/modules/api/service/LoginApiService.java
-
+4 -1jeecg-boot-module-system/src/main/java/org/jeecg/modules/api/service/YaoDuApiService.java
-
+43 -3jeecg-boot-module-system/src/main/java/org/jeecg/modules/api/service/impl/CashoutServiceImpl.java
-
+80 -0jeecg-boot-module-system/src/main/java/org/jeecg/modules/api/service/impl/LoginApiServiceImpl.java
-
+61 -13jeecg-boot-module-system/src/main/java/org/jeecg/modules/api/service/impl/YaoDuApiServiceImpl.java
-
+14 -6jeecg-boot-module-system/src/main/java/org/jeecg/modules/api/yaoduapi/CashoutController.java
-
+10 -2jeecg-boot-module-system/src/main/java/org/jeecg/modules/api/yaoduapi/YaoDuApiTokenController.java
-
+6 -0jeecg-boot-module-system/src/main/java/org/jeecg/modules/api/yaoduapi/YaoDuLoginController.java
-
+3 -3jeecg-boot-module-system/src/main/java/org/jeecg/modules/transferTest/TransferToUser.java
-
+2 -2jeecg-boot-module-system/src/main/java/org/jeecg/modules/transferTest/test.java
-
+1 -1jeecg-boot-module-system/src/main/resources/application-dev.yml
+ 1
- 1
admin-hanhai-vue/.env.development
View File
+ 1
- 1
admin-hanhai-vue/.env.production
View File
| @ -1,4 +1,4 @@ | |||
| NODE_ENV=production | |||
| VUE_APP_API_BASE_URL=http://localhost:8081/api/ | |||
| VUE_APP_API_BASE_URL=https://admin.hhlm1688.com/api/ | |||
| VUE_APP_CAS_BASE_URL=http://localhost:8888/cas | |||
| VUE_APP_ONLINE_BASE_URL=http://fileview.jeecg.com/onlinePreview | |||
+ 63
- 82
jeecg-boot-base/jeecg-boot-base-core/src/main/java/org/jeecg/modules/cityMoneyLog/controller/CityMoneyLogController.java
View File
+ 5
- 0
jeecg-boot-base/jeecg-boot-base-core/src/main/java/org/jeecg/modules/cityMoneyLog/entity/CityMoneyLog.java
View File
+ 234
- 0
jeecg-boot-base/jeecg-boot-base-core/src/main/java/org/jeecg/modules/cityMoneyLog/resp/TransferToUser.java
View File
| @ -0,0 +1,234 @@ | |||
| package org.jeecg.modules.cityMoneyLog.resp; | |||
| import com.baomidou.mybatisplus.core.toolkit.IdWorker; | |||
| import com.google.gson.annotations.SerializedName; | |||
| import io.swagger.util.Json; | |||
| import lombok.Data; | |||
| import okhttp3.*; | |||
| import org.jeecg.modules.cityMoneyLog.entity.CityMoneyLog; | |||
| import org.jeecg.modules.cityMoneyLog.resp.WXPayUtility; | |||
| import org.jeecg.modules.cityMoneyLog.service.ICityMoneyLogService; | |||
| import org.springframework.beans.factory.annotation.Autowired; | |||
| import org.springframework.format.annotation.DateTimeFormat; | |||
| import org.springframework.stereotype.Component; | |||
| import org.springframework.stereotype.Service; | |||
| import java.io.IOException; | |||
| import java.io.UncheckedIOException; | |||
| import java.security.PrivateKey; | |||
| import java.security.PublicKey; | |||
| import java.util.ArrayList; | |||
| import java.util.List; | |||
| /** | |||
| * 发起转账 | |||
| */ | |||
| public class TransferToUser { | |||
| private static String HOST = "https://api.mch.weixin.qq.com"; | |||
| private static String METHOD = "POST"; | |||
| private static String PATH = "/v3/fund-app/mch-transfer/transfer-bills"; | |||
| public TransferToUserResponse run(Long transfer_amount,String openid,String user_name,String waterId){ | |||
| String mchid = "1673516176"; | |||
| String certiticateSerialNo ="525CDBD76E640EFB008288572C97D2715F3F18B2"; | |||
| String privateKeyFilePath = "/jeecg-boot-module-system/src/main/resources/apiclient_key_yaodu.pem"; | |||
| String wechatPayPublicKeyId = "PUB_KEY_ID_0116735161762025040100448900000949"; | |||
| String wechatPayPublicKeyFilePaht = "/jeecg-boot-module-system/src/main/resources/pub_key_yaodu.pem"; | |||
| TransferToUser client = new TransferToUser( | |||
| mchid, // 商户号，是由微信支付系统生成并分配给每个商户的唯一标识符，商户号获取方式参考 https://pay.weixin.qq.com/doc/v3/merchant/4013070756 | |||
| certiticateSerialNo, // 商户API证书序列号，如何获取请参考 https://pay.weixin.qq.com/doc/v3/merchant/4013053053 | |||
| privateKeyFilePath, // 商户API证书私钥文件路径，本地文件路径 | |||
| wechatPayPublicKeyId, // 微信支付公钥ID，如何获取请参考 https://pay.weixin.qq.com/doc/v3/merchant/4013038816 | |||
| wechatPayPublicKeyFilePaht // 微信支付公钥文件路径，本地文件路径 | |||
| ); | |||
| String appid = "wxa4d29e67e8a58d38"; | |||
| String notifyUrl = "https://admin.hhlm1688.com/api/cashout/cashoutNotify"; | |||
| TransferToUserRequest request = new TransferToUserRequest(); | |||
| request.appid = appid; | |||
| String idStr = "H" + IdWorker.getIdStr(); | |||
| request.out_bill_no = idStr; | |||
| request.transfer_scene_id = "1005";//只开通了佣金报酬 | |||
| request.openid = openid; | |||
| request.user_name = client.encrypt(user_name); | |||
| request.transfer_amount = transfer_amount; | |||
| request.transfer_remark = "佣金报酬"; | |||
| request.notify_url = notifyUrl; | |||
| request.userRecvPerception = "劳务报酬"; // 修改用户收款感知描述 | |||
| request.transferSceneReportInfos = new ArrayList<>(); | |||
| { | |||
| TransferSceneReportInfo item0 = new TransferSceneReportInfo(); | |||
| item0.infoType = "岗位类型";//固定 | |||
| item0.infoContent = "外卖员";//只开通了佣金报酬 | |||
| request.transferSceneReportInfos.add(item0); | |||
| TransferSceneReportInfo item1 = new TransferSceneReportInfo(); | |||
| item1.infoType = "报酬说明";//固定 | |||
| item1.infoContent = "高温补贴";//只开通了佣金报酬 | |||
| request.transferSceneReportInfos.add(item1); | |||
| }; | |||
| try { | |||
| TransferToUserResponse response = client.run(request); | |||
| // TODO: 请求成功，继续业务逻辑 | |||
| System.out.println(response); | |||
| return response; | |||
| } catch (WXPayUtility.ApiException e) { | |||
| // TODO: 请求失败，根据状态码执行不同的逻辑 | |||
| e.printStackTrace(); | |||
| } | |||
| return null; | |||
| } | |||
| public TransferToUserResponse run(TransferToUserRequest request) { | |||
| String uri = PATH; | |||
| String reqBody = WXPayUtility.toJson(request); | |||
| // String reqBody = Json.pretty(request); | |||
| System.out.println("reqBody========================="); | |||
| System.out.println(reqBody); | |||
| Request.Builder reqBuilder = new Request.Builder().url(HOST + uri); | |||
| reqBuilder.addHeader("Accept", "application/json"); | |||
| reqBuilder.addHeader("Wechatpay-Serial", wechatPayPublicKeyId); | |||
| reqBuilder.addHeader("Authorization", WXPayUtility.buildAuthorization(mchid, certificateSerialNo,privateKey, METHOD, uri, reqBody)); | |||
| reqBuilder.addHeader("Content-Type", "application/json"); | |||
| RequestBody requestBody = RequestBody.create(MediaType.parse("application/json; charset=utf-8"), reqBody); | |||
| reqBuilder.method(METHOD, requestBody); | |||
| Request httpRequest = reqBuilder.build(); | |||
| // 发送HTTP请求 | |||
| OkHttpClient client = new OkHttpClient.Builder().build(); | |||
| try (Response httpResponse = client.newCall(httpRequest).execute()) { | |||
| String respBody = WXPayUtility.extractBody(httpResponse); | |||
| if (httpResponse.code() >= 200 && httpResponse.code() < 300) { | |||
| // 2XX 成功，验证应答签名 | |||
| WXPayUtility.validateResponse(this.wechatPayPublicKeyId, this.wechatPayPublicKey, | |||
| httpResponse.headers(), respBody); | |||
| // 从HTTP应答报文构建返回数据 | |||
| TransferToUserResponse transferToUserResponse = WXPayUtility.fromJson(respBody, TransferToUserResponse.class); | |||
| System.out.println("transferToUserResponse========================="); | |||
| System.out.println(Json.pretty(transferToUserResponse)); | |||
| return transferToUserResponse; | |||
| } else { | |||
| throw new WXPayUtility.ApiException(httpResponse.code(), respBody, httpResponse.headers()); | |||
| } | |||
| } catch (IOException e) { | |||
| throw new UncheckedIOException("Sending request to " + uri + " failed.", e); | |||
| } | |||
| } | |||
| private final String mchid; | |||
| private final String certificateSerialNo; | |||
| private final PrivateKey privateKey; | |||
| private final String wechatPayPublicKeyId; | |||
| private final PublicKey wechatPayPublicKey; | |||
| public TransferToUser(String mchid, String certificateSerialNo, String privateKeyFilePath, String wechatPayPublicKeyId, String wechatPayPublicKeyFilePath) { | |||
| this.mchid = mchid; | |||
| this.certificateSerialNo = certificateSerialNo; | |||
| this.privateKey = WXPayUtility.loadPrivateKeyFromPath(privateKeyFilePath); | |||
| this.wechatPayPublicKeyId = wechatPayPublicKeyId; | |||
| this.wechatPayPublicKey = WXPayUtility.loadPublicKeyFromPath(wechatPayPublicKeyFilePath); | |||
| } | |||
| public String encrypt(String plainText) { | |||
| return WXPayUtility.encrypt(this.wechatPayPublicKey, plainText); | |||
| } | |||
| @Data | |||
| public static class TransferToUserResponse { | |||
| @SerializedName("out_bill_no") | |||
| public String outBillNo; | |||
| @SerializedName("transfer_bill_no") | |||
| public String transferBillNo; | |||
| @SerializedName("create_time") | |||
| public String createTime; | |||
| @SerializedName("state") | |||
| public TransferBillStatus state; | |||
| @SerializedName("package_info") | |||
| public String packageInfo; | |||
| } | |||
| public enum TransferBillStatus { | |||
| @SerializedName("ACCEPTED") | |||
| ACCEPTED, | |||
| @SerializedName("PROCESSING") | |||
| PROCESSING, | |||
| @SerializedName("WAIT_USER_CONFIRM") | |||
| WAIT_USER_CONFIRM, | |||
| @SerializedName("TRANSFERING") | |||
| TRANSFERING, | |||
| @SerializedName("SUCCESS") | |||
| SUCCESS, | |||
| @SerializedName("FAIL") | |||
| FAIL, | |||
| @SerializedName("CANCELING") | |||
| CANCELING, | |||
| @SerializedName("CANCELLED") | |||
| CANCELLED | |||
| } | |||
| public static class TransferSceneReportInfo { | |||
| @SerializedName("info_type") | |||
| public String infoType; | |||
| @SerializedName("info_content") | |||
| public String infoContent; | |||
| } | |||
| public static class TransferToUserRequest { | |||
| @SerializedName("appid") | |||
| public String appid; | |||
| @SerializedName("out_bill_no") | |||
| // public String outBillNo; | |||
| public String out_bill_no; | |||
| @SerializedName("transfer_scene_id") | |||
| // public String transferSceneId; | |||
| public String transfer_scene_id; | |||
| @SerializedName("openid") | |||
| public String openid; | |||
| @SerializedName("user_name") | |||
| // public String userName; | |||
| public String user_name; | |||
| @SerializedName("transfer_amount") | |||
| // public Long transferAmount; | |||
| public Long transfer_amount; | |||
| @SerializedName("transfer_remark") | |||
| // public String transferRemark; | |||
| public String transfer_remark; | |||
| @SerializedName("notify_url") | |||
| // public String notifyUrl; | |||
| public String notify_url; | |||
| @SerializedName("user_recv_perception") | |||
| public String userRecvPerception; | |||
| @SerializedName("transfer_scene_report_infos") | |||
| public List<TransferSceneReportInfo> transferSceneReportInfos; | |||
| } | |||
| } | |||
+ 381
- 0
jeecg-boot-base/jeecg-boot-base-core/src/main/java/org/jeecg/modules/cityMoneyLog/resp/WXPayUtility.java
View File
| @ -0,0 +1,381 @@ | |||
| package org.jeecg.modules.cityMoneyLog.resp; | |||
| import com.google.gson.*; | |||
| import com.google.gson.annotations.Expose; | |||
| import okhttp3.Headers; | |||
| import okhttp3.Response; | |||
| import okio.BufferedSource; | |||
| import javax.crypto.BadPaddingException; | |||
| import javax.crypto.Cipher; | |||
| import javax.crypto.IllegalBlockSizeException; | |||
| import javax.crypto.NoSuchPaddingException; | |||
| import java.io.IOException; | |||
| import java.io.UncheckedIOException; | |||
| import java.io.UnsupportedEncodingException; | |||
| import java.net.URLEncoder; | |||
| import java.nio.charset.StandardCharsets; | |||
| import java.nio.file.Files; | |||
| import java.nio.file.Paths; | |||
| import java.security.*; | |||
| import java.security.spec.InvalidKeySpecException; | |||
| import java.security.spec.PKCS8EncodedKeySpec; | |||
| import java.security.spec.X509EncodedKeySpec; | |||
| import java.time.DateTimeException; | |||
| import java.time.Duration; | |||
| import java.time.Instant; | |||
| import java.util.Base64; | |||
| import java.util.Map; | |||
| import java.util.Objects; | |||
| public class WXPayUtility { | |||
| private static final Gson gson = new GsonBuilder() | |||
| .disableHtmlEscaping() | |||
| .addSerializationExclusionStrategy(new ExclusionStrategy() { | |||
| @Override | |||
| public boolean shouldSkipField(FieldAttributes fieldAttributes) { | |||
| final Expose expose = fieldAttributes.getAnnotation(Expose.class); | |||
| return expose != null && !expose.serialize(); | |||
| } | |||
| @Override | |||
| public boolean shouldSkipClass(Class<?> aClass) { | |||
| return false; | |||
| } | |||
| }) | |||
| .addDeserializationExclusionStrategy(new ExclusionStrategy() { | |||
| @Override | |||
| public boolean shouldSkipField(FieldAttributes fieldAttributes) { | |||
| final Expose expose = fieldAttributes.getAnnotation(Expose.class); | |||
| return expose != null && !expose.deserialize(); | |||
| } | |||
| @Override | |||
| public boolean shouldSkipClass(Class<?> aClass) { | |||
| return false; | |||
| } | |||
| }) | |||
| .create(); | |||
| private static final char[] SYMBOLS = | |||
| "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ".toCharArray(); | |||
| private static final SecureRandom random = new SecureRandom(); | |||
| /** | |||
| * 将 Object 转换为 JSON 字符串 | |||
| */ | |||
| public static String toJson(Object object) { | |||
| return gson.toJson(object); | |||
| } | |||
| /** | |||
| * 将 JSON 字符串解析为特定类型的实例 | |||
| */ | |||
| public static <T> T fromJson(String json, Class<T> classOfT) throws JsonSyntaxException { | |||
| return gson.fromJson(json, classOfT); | |||
| } | |||
| /** | |||
| * 从公私钥文件路径中读取文件内容 | |||
| * | |||
| * @param keyPath 文件路径 | |||
| * @return 文件内容 | |||
| */ | |||
| private static String readKeyStringFromPath(String keyPath) { | |||
| try { | |||
| return new String(Files.readAllBytes(Paths.get(keyPath)), StandardCharsets.UTF_8); | |||
| } catch (IOException e) { | |||
| throw new UncheckedIOException(e); | |||
| } | |||
| } | |||
| /** | |||
| * 读取 PKCS#8 格式的私钥字符串并加载为私钥对象 | |||
| * | |||
| * @param keyString 私钥文件内容，以 -----BEGIN PRIVATE KEY----- 开头 | |||
| * @return PrivateKey 对象 | |||
| */ | |||
| public static PrivateKey loadPrivateKeyFromString(String keyString) { | |||
| try { | |||
| keyString = keyString.replace("-----BEGIN PRIVATE KEY-----", "") | |||
| .replace("-----END PRIVATE KEY-----", "") | |||
| .replaceAll("\\s+", ""); | |||
| return KeyFactory.getInstance("RSA").generatePrivate( | |||
| new PKCS8EncodedKeySpec(Base64.getDecoder().decode(keyString))); | |||
| } catch (NoSuchAlgorithmException e) { | |||
| throw new UnsupportedOperationException(e); | |||
| } catch (InvalidKeySpecException e) { | |||
| throw new IllegalArgumentException(e); | |||
| } | |||
| } | |||
| /** | |||
| * 从 PKCS#8 格式的私钥文件中加载私钥 | |||
| * | |||
| * @param keyPath 私钥文件路径 | |||
| * @return PrivateKey 对象 | |||
| */ | |||
| public static PrivateKey loadPrivateKeyFromPath(String keyPath) { | |||
| return loadPrivateKeyFromString(readKeyStringFromPath(keyPath)); | |||
| } | |||
| /** | |||
| * 读取 PKCS#8 格式的公钥字符串并加载为公钥对象 | |||
| * | |||
| * @param keyString 公钥文件内容，以 -----BEGIN PUBLIC KEY----- 开头 | |||
| * @return PublicKey 对象 | |||
| */ | |||
| public static PublicKey loadPublicKeyFromString(String keyString) { | |||
| try { | |||
| keyString = keyString.replace("-----BEGIN PUBLIC KEY-----", "") | |||
| .replace("-----END PUBLIC KEY-----", "") | |||
| .replaceAll("\\s+", ""); | |||
| return KeyFactory.getInstance("RSA").generatePublic( | |||
| new X509EncodedKeySpec(Base64.getDecoder().decode(keyString))); | |||
| } catch (NoSuchAlgorithmException e) { | |||
| throw new UnsupportedOperationException(e); | |||
| } catch (InvalidKeySpecException e) { | |||
| throw new IllegalArgumentException(e); | |||
| } | |||
| } | |||
| /** | |||
| * 从 PKCS#8 格式的公钥文件中加载公钥 | |||
| * | |||
| * @param keyPath 公钥文件路径 | |||
| * @return PublicKey 对象 | |||
| */ | |||
| public static PublicKey loadPublicKeyFromPath(String keyPath) { | |||
| return loadPublicKeyFromString(readKeyStringFromPath(keyPath)); | |||
| } | |||
| /** | |||
| * 创建指定长度的随机字符串，字符集为[0-9a-zA-Z]，可用于安全相关用途 | |||
| */ | |||
| public static String createNonce(int length) { | |||
| char[] buf = new char[length]; | |||
| for (int i = 0; i < length; ++i) { | |||
| buf[i] = SYMBOLS[random.nextInt(SYMBOLS.length)]; | |||
| } | |||
| return new String(buf); | |||
| } | |||
| /** | |||
| * 使用公钥按照 RSA_PKCS1_OAEP_PADDING 算法进行加密 | |||
| * | |||
| * @param publicKey 加密用公钥对象 | |||
| * @param plaintext 待加密明文 | |||
| * @return 加密后密文 | |||
| */ | |||
| public static String encrypt(PublicKey publicKey, String plaintext) { | |||
| final String transformation = "RSA/ECB/OAEPWithSHA-1AndMGF1Padding"; | |||
| try { | |||
| Cipher cipher = Cipher.getInstance(transformation); | |||
| cipher.init(Cipher.ENCRYPT_MODE, publicKey); | |||
| return Base64.getEncoder().encodeToString(cipher.doFinal(plaintext.getBytes(StandardCharsets.UTF_8))); | |||
| } catch (NoSuchAlgorithmException | NoSuchPaddingException e) { | |||
| throw new IllegalArgumentException("The current Java environment does not support " + transformation, e); | |||
| } catch (InvalidKeyException e) { | |||
| throw new IllegalArgumentException("RSA encryption using an illegal publicKey", e); | |||
| } catch (BadPaddingException | IllegalBlockSizeException e) { | |||
| throw new IllegalArgumentException("Plaintext is too long", e); | |||
| } | |||
| } | |||
| /** | |||
| * 使用私钥按照指定算法进行签名 | |||
| * | |||
| * @param message 待签名串 | |||
| * @param algorithm 签名算法，如 SHA256withRSA | |||
| * @param privateKey 签名用私钥对象 | |||
| * @return 签名结果 | |||
| */ | |||
| public static String sign(String message, String algorithm, PrivateKey privateKey) { | |||
| byte[] sign; | |||
| try { | |||
| Signature signature = Signature.getInstance(algorithm); | |||
| signature.initSign(privateKey); | |||
| signature.update(message.getBytes(StandardCharsets.UTF_8)); | |||
| sign = signature.sign(); | |||
| } catch (NoSuchAlgorithmException e) { | |||
| throw new UnsupportedOperationException("The current Java environment does not support " + algorithm, e); | |||
| } catch (InvalidKeyException e) { | |||
| throw new IllegalArgumentException(algorithm + " signature uses an illegal privateKey.", e); | |||
| } catch (SignatureException e) { | |||
| throw new RuntimeException("An error occurred during the sign process.", e); | |||
| } | |||
| return Base64.getEncoder().encodeToString(sign); | |||
| } | |||
| /** | |||
| * 使用公钥按照特定算法验证签名 | |||
| * | |||
| * @param message 待签名串 | |||
| * @param signature 待验证的签名内容 | |||
| * @param algorithm 签名算法，如：SHA256withRSA | |||
| * @param publicKey 验签用公钥对象 | |||
| * @return 签名验证是否通过 | |||
| */ | |||
| public static boolean verify(String message, String signature, String algorithm, | |||
| PublicKey publicKey) { | |||
| try { | |||
| Signature sign = Signature.getInstance(algorithm); | |||
| sign.initVerify(publicKey); | |||
| sign.update(message.getBytes(StandardCharsets.UTF_8)); | |||
| return sign.verify(Base64.getDecoder().decode(signature)); | |||
| } catch (SignatureException e) { | |||
| return false; | |||
| } catch (InvalidKeyException e) { | |||
| throw new IllegalArgumentException("verify uses an illegal publickey.", e); | |||
| } catch (NoSuchAlgorithmException e) { | |||
| throw new UnsupportedOperationException("The current Java environment does not support" + algorithm, e); | |||
| } | |||
| } | |||
| /** | |||
| * 根据微信支付APIv3请求签名规则构造 Authorization 签名 | |||
| * | |||
| * @param mchid 商户号 | |||
| * @param certificateSerialNo 商户API证书序列号 | |||
| * @param privateKey 商户API证书私钥 | |||
| * @param method 请求接口的HTTP方法，请使用全大写表述，如 GET、POST、PUT、DELETE | |||
| * @param uri 请求接口的URL | |||
| * @param body 请求接口的Body | |||
| * @return 构造好的微信支付APIv3 Authorization 头 | |||
| */ | |||
| public static String buildAuthorization(String mchid, String certificateSerialNo, | |||
| PrivateKey privateKey, | |||
| String method, String uri, String body) { | |||
| String nonce = createNonce(32); | |||
| long timestamp = Instant.now().getEpochSecond(); | |||
| String message = String.format("%s\n%s\n%d\n%s\n%s\n", method, uri, timestamp, nonce, | |||
| body == null ? "" : body); | |||
| String signature = sign(message, "SHA256withRSA", privateKey); | |||
| return String.format( | |||
| "WECHATPAY2-SHA256-RSA2048 mchid=\"%s\",nonce_str=\"%s\",signature=\"%s\"," + | |||
| "timestamp=\"%d\",serial_no=\"%s\"", | |||
| mchid, nonce, signature, timestamp, certificateSerialNo); | |||
| } | |||
| /** | |||
| * 对参数进行 URL 编码 | |||
| * | |||
| * @param content 参数内容 | |||
| * @return 编码后的内容 | |||
| */ | |||
| public static String urlEncode(String content) { | |||
| try { | |||
| return URLEncoder.encode(content, StandardCharsets.UTF_8.name()); | |||
| } catch (UnsupportedEncodingException e) { | |||
| throw new RuntimeException(e); | |||
| } | |||
| } | |||
| /** | |||
| * 对参数Map进行 URL 编码，生成 QueryString | |||
| * | |||
| * @param params Query参数Map | |||
| * @return QueryString | |||
| */ | |||
| public static String urlEncode(Map<String, Object> params) { | |||
| if (params == null || params.isEmpty()) { | |||
| return ""; | |||
| } | |||
| int index = 0; | |||
| StringBuilder result = new StringBuilder(); | |||
| for (Map.Entry<String, Object> entry : params.entrySet()) { | |||
| result.append(entry.getKey()) | |||
| .append("=") | |||
| .append(urlEncode(entry.getValue().toString())); | |||
| index++; | |||
| if (index < params.size()) { | |||
| result.append("&"); | |||
| } | |||
| } | |||
| return result.toString(); | |||
| } | |||
| /** | |||
| * 从应答中提取 Body | |||
| * | |||
| * @param response HTTP 请求应答对象 | |||
| * @return 应答中的Body内容，Body为空时返回空字符串 | |||
| */ | |||
| public static String extractBody(Response response) { | |||
| if (response.body() == null) { | |||
| return ""; | |||
| } | |||
| try { | |||
| BufferedSource source = response.body().source(); | |||
| return source.readUtf8(); | |||
| } catch (IOException e) { | |||
| throw new RuntimeException(String.format("An error occurred during reading response body. Status: %d", response.code()), e); | |||
| } | |||
| } | |||
| /** | |||
| * 根据微信支付APIv3应答验签规则对应答签名进行验证，验证不通过时抛出异常 | |||
| * | |||
| * @param wechatpayPublicKeyId 微信支付公钥ID | |||
| * @param wechatpayPublicKey 微信支付公钥对象 | |||
| * @param headers 微信支付应答 Header 列表 | |||
| * @param body 微信支付应答 Body | |||
| */ | |||
| public static void validateResponse(String wechatpayPublicKeyId, PublicKey wechatpayPublicKey, | |||
| Headers headers, | |||
| String body) { | |||
| String timestamp = headers.get("Wechatpay-Timestamp"); | |||
| try { | |||
| Instant responseTime = Instant.ofEpochSecond(Long.parseLong(timestamp)); | |||
| // 拒绝过期请求 | |||
| if (Duration.between(responseTime, Instant.now()).abs().toMinutes() >= 5) { | |||
| throw new IllegalArgumentException( | |||
| String.format("Validate http response,timestamp[%s] of httpResponse is expires, " | |||
| + "request-id[%s]", | |||
| timestamp, headers.get("Request-ID"))); | |||
| } | |||
| } catch (DateTimeException | NumberFormatException e) { | |||
| throw new IllegalArgumentException( | |||
| String.format("Validate http response,timestamp[%s] of httpResponse is invalid, " + | |||
| "request-id[%s]", timestamp, | |||
| headers.get("Request-ID"))); | |||
| } | |||
| String message = String.format("%s\n%s\n%s\n", timestamp, headers.get("Wechatpay-Nonce"), | |||
| body == null ? "" : body); | |||
| String serialNumber = headers.get("Wechatpay-Serial"); | |||
| if (!Objects.equals(serialNumber, wechatpayPublicKeyId)) { | |||
| throw new IllegalArgumentException( | |||
| String.format("Invalid Wechatpay-Serial, Local: %s, Remote: %s", wechatpayPublicKeyId, | |||
| serialNumber)); | |||
| } | |||
| String signature = headers.get("Wechatpay-Signature"); | |||
| boolean success = verify(message, signature, "SHA256withRSA", wechatpayPublicKey); | |||
| if (!success) { | |||
| throw new IllegalArgumentException( | |||
| String.format("Validate response failed,the WechatPay signature is incorrect.%n" | |||
| + "Request-ID[%s]\tresponseHeader[%s]\tresponseBody[%.1024s]", | |||
| headers.get("Request-ID"), headers, body)); | |||
| } | |||
| } | |||
| /** | |||
| * 微信支付API错误异常，发送HTTP请求成功，但返回状态码不是 2XX 时抛出本异常 | |||
| */ | |||
| public static class ApiException extends RuntimeException { | |||
| public final int statusCode; | |||
| public final String body; | |||
| public final Headers headers; | |||
| public ApiException(int statusCode, String body, Headers headers) { | |||
| super(String.format("微信支付API访问失败，StatusCode: %s, Body: %s", statusCode, body)); | |||
| this.statusCode = statusCode; | |||
| this.body = body; | |||
| this.headers = headers; | |||
| } | |||
| } | |||
| } | |||