隨著網(wǎng)絡(luò)編程的飛速成長(zhǎng)儿普，網(wǎng)絡(luò)平臺(tái)的高頻使用援制，當(dāng)然就涉及到支付的功能。現(xiàn)在兩支付渠道巨頭（微信胚委，支付寶）课竣，作為寫程序的我們嘉赎，當(dāng)然會(huì)遇到公司需要對(duì)接此類業(yè)務(wù)的需求。
今天我們就來講講 ：app的微信支付Java實(shí)現(xiàn)
image.png
首先我們需要拿到微信的商戶號(hào)于樟，appid公条，秘鑰等信息。在微信支付自己賬號(hào)下獲取迂曲。
之后我們查看微信支付統(tǒng)一下單的api接口文檔靶橱。
https://pay.weixin.qq.com/wiki/doc/api/app/app.php?chapter=9_1
具體中文注釋查看此網(wǎng)站，我們看一下xml的demo
image.png
具體流程：
1:appid,mch_id（商戶號(hào)）,nonce_str(隨機(jī)字字符串),body(內(nèi)容),out_trade_no(商戶訂單號(hào)),fee_type(貨幣類型),total_fee(總金額),spbill_create_ip （終端IP:一般為服務(wù)器本機(jī):127.0.0.1）,notify_url(回調(diào)url),trade_type(交易類型:APP)這些參數(shù)生成簽名（參數(shù)具體注釋參看上面的網(wǎng)址）奢米，將生成的簽名連同這些參數(shù)一起生成xml報(bào)文請(qǐng)求統(tǒng)一下單api
2:統(tǒng)一下單api成功后會(huì)返回prepayid(預(yù)支付交易會(huì)話標(biāo)識(shí))抓韩，將prepayid,appid,partnerid(商戶號(hào)),package(Sign=WXPay),noncestr,timestamp參數(shù)再次進(jìn)行簽名，再將簽名鬓长，連同這些參數(shù)發(fā)送到app端供其調(diào)用完成谒拴。
流程比較啰嗦，上代碼涉波。
首先是一些工具類：
1: 自己微信支付基本信息類
public class ConfigUtil {
/**
* 服務(wù)號(hào)相關(guān)信息
*/
public final static String APPID = "";//服務(wù)號(hào)的應(yīng)用號(hào)
public final static String MCH_ID = "";//商戶號(hào)
public final static String API_KEY = "";//API密鑰
public final static String SIGN_TYPE = "MD5";//簽名加密方式
public final static String UNIFIED_ORDER_URL = "https://api.mch.weixin.qq.com/pay/unifiedorder";//請(qǐng)求下單的http
}
2 :簽名類 utf-8格式
public static String createSign(String characterEncoding, SortedMap<Object, Object> parameters) {
StringBuffer sb = new StringBuffer();
Set es = parameters.entrySet();
Iterator it = es.iterator();
while (it.hasNext()) {
Map.Entry entry = (Map.Entry) it.next();
String k = (String) entry.getKey();
Object v = entry.getValue();
if (null != v && !"".equals(v)
&& !"sign".equals(k) && !"key".equals(k)) {
sb.append(k + "=" + v + "&");
}
}
sb.append("key=" + ConfigUtil.API_KEY);
String sign = MD5Util.MD5Encode(sb.toString(), characterEncoding).toUpperCase();
return sign;
}
3：將map數(shù)組拼裝成xml
public static String getRequestXml(SortedMap<Object, Object> parameters) {
StringBuffer sb = new StringBuffer();
sb.append("<xml>");
Set es = parameters.entrySet();
Iterator it = es.iterator();
while (it.hasNext()) {
Map.Entry entry = (Map.Entry) it.next();
String k = (String) entry.getKey();
String v = (String) entry.getValue();
if ("attach".equalsIgnoreCase(k) || "body".equalsIgnoreCase(k)) {
sb.append("<" + k + ">" + "<![CDATA[" + v + "]]></" + k + ">");
} else {
sb.append("<" + k + ">" + v + "</" + k + ">");
}
}
sb.append("</xml>");
return sb.toString();
}
4: SSL協(xié)議發(fā)起http請(qǐng)求
/**
* 發(fā)送https請(qǐng)求
*
* @param requestUrl 請(qǐng)求地址
* @param requestMethod 請(qǐng)求方式（GET英上、POST）
* @param outputStr 提交的數(shù)據(jù)
* @return 返回微信服務(wù)器響應(yīng)的信息
*/
public static String httpsRequest(String requestUrl, String requestMethod, String outputStr) {
try {
// 創(chuàng)建SSLContext對(duì)象，并使用我們指定的信任管理器初始化
TrustManager[] tm = {new MyX509TrustManager()};
SSLContext sslContext = SSLContext.getInstance("SSL", "SunJSSE");
sslContext.init(null, tm, new java.security.SecureRandom());
// 從上述SSLContext對(duì)象中得到SSLSocketFactory對(duì)象
SSLSocketFactory ssf = sslContext.getSocketFactory();
URL url = new URL(requestUrl);
HttpsURLConnection conn = (HttpsURLConnection) url.openConnection();
//conn.setSSLSocketFactory(ssf);
conn.setDoOutput(true);
conn.setDoInput(true);
conn.setUseCaches(false);
// 設(shè)置請(qǐng)求方式（GET/POST）
conn.setRequestMethod(requestMethod);
conn.setRequestProperty("content-type", "application/x-www-form-urlencoded");
// 當(dāng)outputStr不為null時(shí)向輸出流寫數(shù)據(jù)
if (null != outputStr) {
OutputStream outputStream = conn.getOutputStream();
// 注意編碼格式
outputStream.write(outputStr.getBytes("UTF-8"));
outputStream.close();
}
// 從輸入流讀取返回內(nèi)容
InputStream inputStream = conn.getInputStream();
InputStreamReader inputStreamReader = new InputStreamReader(inputStream, "UTF-8");
BufferedReader bufferedReader = new BufferedReader(inputStreamReader);
String str = null;
StringBuffer buffer = new StringBuffer();
while ((str = bufferedReader.readLine()) != null) {
buffer.append(str);
}
// 釋放資源
bufferedReader.close();
inputStreamReader.close();
inputStream.close();
inputStream = null;
conn.disconnect();
return buffer.toString();
} catch (ConnectException ce) {
// log.error("連接超時(shí)：{}", ce);
} catch (Exception e) {
// log.error("https請(qǐng)求異常：{}", e);
}
return null;
}
5：生成隨機(jī)字符串
public static String CreateNoncestr() {
String chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
String res = "";
for (int i = 0; i < 16; i++) {
Random rd = new Random();
res += chars.charAt(rd.nextInt(chars.length() - 1));
}
return res;
}
6 將返回的xml 轉(zhuǎn)換成map數(shù)組
import java.io.ByteArrayInputStream;
import java.io.IOException;
import java.io.InputStream;
import java.util.HashMap;
import java.util.Iterator;
import java.util.List;
import java.util.Map;
import org.jdom.Document;
import org.jdom.Element;
import org.jdom.JDOMException;
import org.jdom.input.SAXBuilder;
public class XMLUtil {
/**
* 解析xml,返回第一級(jí)元素鍵值對(duì)啤覆。如果第一級(jí)元素有子節(jié)點(diǎn)苍日，則此節(jié)點(diǎn)的值是子節(jié)點(diǎn)的xml數(shù)據(jù)。
*
* @param strxml
* @return
* @throws JDOMException
* @throws IOException
*/
public static Map doXMLParse(String strxml) throws JDOMException, IOException {
strxml = strxml.replaceFirst("encoding=\".*\"", "encoding=\"UTF-8\"");
if (null == strxml || "".equals(strxml)) {
return null;
}
Map m = new HashMap();
InputStream in = new ByteArrayInputStream(strxml.getBytes("UTF-8"));
SAXBuilder builder = new SAXBuilder();
Document doc = builder.build(in);
Element root = doc.getRootElement();
List list = root.getChildren();
Iterator it = list.iterator();
while (it.hasNext()) {
Element e = (Element) it.next();
String k = e.getName();
String v = "";
List children = e.getChildren();
if (children.isEmpty()) {
v = e.getTextNormalize();
} else {
v = XMLUtil.getChildrenText(children);
}
m.put(k, v);
}
//關(guān)閉流
in.close();
return m;
}
/**
* 獲取子結(jié)點(diǎn)的xml
*
* @param children
* @return String
*/
public static String getChildrenText(List children) {
StringBuffer sb = new StringBuffer();
if (!children.isEmpty()) {
Iterator it = children.iterator();
while (it.hasNext()) {
Element e = (Element) it.next();
String name = e.getName();
String value = e.getTextNormalize();
List list = e.getChildren();
sb.append("<" + name + ">");
if (!list.isEmpty()) {
sb.append(XMLUtil.getChildrenText(list));
}
sb.append(value);
sb.append("</" + name + ">");
}
}
return sb.toString();
}
}
7.MD5的工具類
import java.security.MessageDigest;
public class MD5Util {
private static String byteArrayToHexString(byte b[]) {
StringBuffer resultSb = new StringBuffer();
for (int i = 0; i < b.length; i++)
resultSb.append(byteToHexString(b[i]));
return resultSb.toString();
}
private static String byteToHexString(byte b) {
int n = b;
if (n < 0)
n += 256;
int d1 = n / 16;
int d2 = n % 16;
return hexDigits[d1] + hexDigits[d2];
}
public static String MD5Encode(String origin, String charsetname) {
String resultString = null;
try {
resultString = new String(origin);
MessageDigest md = MessageDigest.getInstance("MD5");
if (charsetname == null || "".equals(charsetname))
resultString = byteArrayToHexString(md.digest(resultString
.getBytes()));
else
resultString = byteArrayToHexString(md.digest(resultString
.getBytes(charsetname)));
} catch (Exception exception) {
}
return resultString;
}
private static final String hexDigits[] = {"0", "1", "2", "3", "4", "5",
"6", "7", "8", "9", "a", "b", "c", "d", "e", "f"};
}
8.是否簽名正確,規(guī)則是:按參數(shù)名稱a-z排序,遇到空值的參數(shù)不參加簽名
/**
* 是否簽名正確,規(guī)則是:按參數(shù)名稱a-z排序,遇到空值的參數(shù)不參加簽名窗声。
*
* @return boolean
*/
public static boolean isTenpaySign(String characterEncoding, SortedMap<Object, Object> packageParams) {
StringBuffer sb = new StringBuffer();
Set es = packageParams.entrySet();
Iterator it = es.iterator();
while (it.hasNext()) {
Map.Entry entry = (Map.Entry) it.next();
String k = (String) entry.getKey();
String v = (String) entry.getValue();
if (!"sign".equals(k) && null != v && !"".equals(v)) {
sb.append(k + "=" + v + "&");
}
}
sb.append("key=" + ConfigUtil.API_KEY);
//算出摘要
String mysign = MD5Util.MD5Encode(sb.toString(), characterEncoding).toLowerCase();
String tenpaySign = ((String) packageParams.get("sign")).toLowerCase();
//System.out.println(tenpaySign + " " + mysign);
return tenpaySign.equals(mysign);
}
9 信任管理器
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import javax.net.ssl.X509TrustManager;
/**
* 信任管理器
*/
public class MyX509TrustManager implements X509TrustManager {
// 檢查客戶端證書
public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
}
// 檢查服務(wù)器端證書
public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
}
// 返回受信任的X509證書數(shù)組
public X509Certificate[] getAcceptedIssuers() {
return null;
}
}
基本工具類都在這里相恃，接下來就是下單的controller類,
因?yàn)楹袠I(yè)務(wù)邏輯的代碼就不上了，直接貼下單的那部分
//測(cè)試環(huán)境
//微信默認(rèn)從單位為分笨觅，所以用此方法將單位調(diào)整成元
int price100 = new BigDecimal(price).multiply(new BigDecimal(100)).intValue();
SortedMap<Object, Object> parameters = new TreeMap<Object, Object>();
parameters.put("appid", ConfigUtil.APPID);
parameters.put("mch_id", ConfigUtil.MCH_ID);
parameters.put("nonce_str", noPayOrder.getWxOutTradeNo());
parameters.put("body", message);
parameters.put("out_trade_no", UUID.randomUUID().toString().substring(0, 15)); //訂單id
parameters.put("fee_type", "CNY");
parameters.put("total_fee", String.valueOf(price100));
parameters.put("spbill_create_ip", "127.0.0.1");
parameters.put("notify_url", returnUrl);
parameters.put("trade_type", "APP");
//設(shè)置簽名
String sign = PayCommonUtil.createSign("UTF-8", parameters);
parameters.put("sign", sign);
//封裝請(qǐng)求參數(shù)結(jié)束
String requestXML = PayCommonUtil.getRequestXml(parameters);
//調(diào)用統(tǒng)一下單接口
String result = PayCommonUtil.httpsRequest(ConfigUtil.UNIFIED_ORDER_URL, "POST", requestXML);
System.out.println("\n" + result);
try {
/**統(tǒng)一下單接口返回正常的prepay_id拦耐，再按簽名規(guī)范重新生成簽名后，將數(shù)據(jù)傳輸給APP见剩。參與簽名的字段名為appId杀糯，partnerId，prepayId苍苞，nonceStr固翰，timeStamp，package。注意：package的值格式為Sign=WXPay**/
Map<String, String> map = XMLUtil.doXMLParse(result);
SortedMap<Object, Object> parameterMap2 = new TreeMap<Object, Object>();
parameterMap2.put("appid", ConfigUtil.APPID);
parameterMap2.put("partnerid", ConfigUtil.MCH_ID);
parameterMap2.put("prepayid", map.get("prepay_id"));
parameterMap2.put("package", "Sign=WXPay");
parameterMap2.put("noncestr", PayCommonUtil.CreateNoncestr());
//本來生成的時(shí)間戳是13位骂际，但是ios必須是10位疗琉，所以截取了一下
parameterMap2.put("timestamp", Long.parseLong(String.valueOf(System.currentTimeMillis()).toString().substring(0, 10)));
String sign2 = PayCommonUtil.createSign("UTF-8", parameterMap2);
parameterMap2.put("sign", sign2);//此 parameterMap2內(nèi)容送到ios調(diào)用就可以了
/* landlordNew.setWxSign(sign2);
this.landlordNewService.update(landlordNew);*/
resultMap.put("code", "200");
resultMap.put("msg", parameterMap2);
} catch (JDOMException e) {
e.printStackTrace();
} catch (IOException e) {
e.printStackTrace();
}
}
將最后生成的parameterMap2內(nèi)容送到ios調(diào)用就完成支付調(diào)用。
好了支付調(diào)用成功了歉铝，用戶付完款肯定是需要回調(diào)來完成支付成功后的業(yè)務(wù)邏輯了（用戶成功支付后没炒，微信會(huì)主動(dòng)調(diào)用我們預(yù)先設(shè)置好的url（需要外網(wǎng)鏈接），同時(shí)微信會(huì)將：商戶訂單號(hào),微信支付訂單號(hào)發(fā)送給我們犯戏，我們可以通過這些來完成業(yè)務(wù)邏輯）下面為回調(diào)接口代碼：
/**
* 微信異步通知 （簽約支付）
*/
@RequestMapping("/wxNotifySignContract")
public void wxNotifySignContract(HttpServletRequest request, HttpServletResponse response) throws IOException, JDOMException {
try {
//讀取參數(shù)
InputStream inputStream;
StringBuffer sb = new StringBuffer();
inputStream = request.getInputStream();
String s;
BufferedReader in = new BufferedReader(new InputStreamReader(inputStream, "UTF-8"));
while ((s = in.readLine()) != null) {
sb.append(s);
}
in.close();
inputStream.close();
//解析xml成map
Map<String, String> m = new HashMap<String, String>();
m = XMLUtil.doXMLParse(sb.toString());
for (Object keyValue : m.keySet()) {
System.out.println(keyValue + "=" + m.get(keyValue));
}
//過濾空 設(shè)置 TreeMap
SortedMap<Object, Object> packageParams = new TreeMap<Object, Object>();
Iterator it = m.keySet().iterator();
while (it.hasNext()) {
String parameter = (String) it.next();
String parameterValue = m.get(parameter);
String v = "";
if (null != parameterValue) {
v = parameterValue.trim();
}
packageParams.put(parameter, v);
}
//判斷簽名是否正確
String resXml = "";
if (PayCommonUtil.isTenpaySign("UTF-8", packageParams)) {
if ("SUCCESS".equals((String) packageParams.get("result_code"))) {
// 這里是支付成功
//////////執(zhí)行自己的業(yè)務(wù)邏輯////////////////
String appid = (String) packageParams.get("appid");//appid
String sign = (String) packageParams.get("sign");//簽名
String total_fee = (String) packageParams.get("total_fee");//總金額
String mch_id = (String) packageParams.get("mch_id"); //商戶號(hào)
String openid = (String) packageParams.get("openid"); //用戶標(biāo)識(shí)
//微信回調(diào) 商戶號(hào)回調(diào)的商戶訂單號(hào)是out_trade_no
//（需要唯一，同一個(gè)訂單號(hào)執(zhí)行下單接口會(huì)報(bào)錯(cuò)）拳话，這里筆者使用
//nonce_str作為訂單號(hào)先匪，后續(xù)還需要改動(dòng)。這個(gè)字段官方文檔解釋為隨機(jī)字
//符串弃衍，但后來發(fā)現(xiàn)回調(diào)的時(shí)候返回的nonce_str跟下單填進(jìn)去的nonce_str
//一致呀非，所以暫時(shí)用來當(dāng)訂單號(hào)了。）
String out_trade_no = (String) packageParams.get("nonce_str"); //商戶訂單號(hào)
String transaction_id = (String) packageParams.get("transaction_id"); //微信支付訂單號(hào)
this.contractpayReturn(appid, sign, total_fee, mch_id, openid, out_trade_no, transaction_id);
resXml = "<xml>" + "<return_code><![CDATA[SUCCESS]]></return_code>"
+ "<return_msg><![CDATA[OK]]></return_msg>" + "</xml> ";
} else {
logger.info("支付失敗,錯(cuò)誤信息：" + packageParams.get("err_code"));
resXml = "<xml>" + "<return_code><![CDATA[FAIL]]></return_code>"
+ "<return_msg><![CDATA[報(bào)文為空]]></return_msg>" + "</xml> ";
}
} else {
resXml = "<xml>" + "<return_code><![CDATA[FAIL]]></return_code>"
+ "<return_msg><![CDATA[通知簽名驗(yàn)證失敗]]></return_msg>" + "</xml> ";
logger.info("通知簽名驗(yàn)證失敗");
}
//------------------------------
//處理業(yè)務(wù)完畢
//------------------------------
BufferedOutputStream out = new BufferedOutputStream(
response.getOutputStream());
out.write(resXml.getBytes());
out.flush();
out.close();
logger.error("微信回調(diào)接口成功--------");
} catch (Exception ex) {
logger.error(ex.toString());
ExceptionUntil.setLogger(logger, ex);
logger.error("微信回調(diào)接口失敗--------");
}
如果覺得作者寫的文章對(duì)你有些用處镜盯，麻煩點(diǎn)個(gè)贊讓我知道一下哈岸裙，謝謝！速缆！
實(shí)現(xiàn)結(jié)果展示
image.png
image.png
image.png
image.png
