编程语言
首页 > 编程语言> > java微信公众号JSAPI支付以及所遇到的坑

java微信公众号JSAPI支付以及所遇到的坑

作者:互联网

上周做了个支付宝微信扫码支付,今天总结一下。微信相比支付宝要麻烦许多

由于涉及到代理商,没办法,让我写个详细的申请流程,懵逼啊。

笔记地址 http://note.youdao.com/noteshare?id=269ddffb1f95e69eafb281d054f9ff25&sub=82AACBC2E6814133938D407BD3FF4737

先梳理下流程,对应的文档

微信统一下单 H5页面调起微信支付 官方javademo

要实现微信支付需要四个参数(需要企业认证,就不说了)

商户平台  商户号ID,也就是商户号。  KEY,也就是API秘钥。 公众平台  AppID  AppSecret

梳理完之后,开始操作吧

第一步:参数准备和环境配置

上面的四大参数只有商户key相对比较麻烦

  商户平台

  公众平台

 

四大参数准备齐以及环境配置好开始第二步了。

 

第二步:开发流程

参考开发流程

 

必须的参数有

 appid APPID (已有)  mch_id 商户ID (已有) nonce_str 随机字符串 sign 签名 body 所支付的名称 out_trade_no 咱们自己所提供的订单号,需要唯一 total_fee 支付金额spbill_create_ip IP地址 notify_url 回调地址 trade_type 支付类型 openid 支付人的微信公众号对应的唯一标识

 

官方就是官方,看着就是费劲,大白话听着多爽

陈海洋:

  需要codeid,文档地址 https://qydev.weixin.qq.com/wiki/index.php?title=OAuth%E9%AA%8C%E8%AF%81%E6%8E%A5%E5%8F%A3 。   根据codeid来获取openid   根据openid来获取prepare_id   进行下单操作。js调起微信支付

操作1,用户授权获取code

https://open.weixin.qq.com/connect/oauth2/authorize?appid=APPID&redirect_uri=REDIRECT_URI&response_type=code&scope=SCOPE&state=STATE#wechat_redirect

注意点 redirect_url需要经过encodeURI编码。

可以使用 js内置的函数encodeURIComponent('http://www.baidu.com')来进行编码操作

我第一反应在想,为什么需要进行url编码,因为这个redirect_uri是作为参数来传递的。

之后就会重定向到你设置的url上面,并且携带code参数,我的后台是这么接收的

ok,code获取完毕

操作2,get请求接口对返回的string进行json解析获取到openid

操作3,post请求发送xml数据返回xml数据,通过官方下载的工具类实现xml转map获取预支付id

操作4,封装jsapi需要的

 

在微信浏览器里面打开H5网页中执行JS调起支付。接口输入输出数据格式为JSON。

ok,到此结束,微信支付成功调起。

 

需要注意的地方。

微信回调到时候会携带xml数据,这个时候并不能用参数接收,而应该是使用流来接收。

 

贴出完整代码,记录下

后台java代码

 

 

/**
 * 
 */
package com.wxpay.config;

import java.io.IOException;
import java.io.InputStream;
import java.math.BigDecimal;
import java.net.URI;
import java.nio.charset.Charset;
import java.util.Date;
import java.util.HashMap;
import java.util.Iterator;
import java.util.List;
import java.util.Map;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.apache.commons.lang.StringUtils;
import org.apache.commons.lang.time.DateFormatUtils;
import org.junit.Test;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.http.converter.StringHttpMessageConverter;
import org.springframework.stereotype.Controller;
import org.springframework.ui.Model;
import org.springframework.ui.ModelMap;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.ResponseBody;
import org.springframework.web.client.RestTemplate;

import com.alibaba.fastjson.JSONObject;
import com.alipay.api.AlipayApiException;
import com.alipay.api.AlipayClient;
import com.alipay.api.DefaultAlipayClient;
import com.alipay.api.internal.util.AlipaySignature;
import com.alipay.api.request.AlipayTradeWapPayRequest;
import com.alipay.api.response.AlipayTradeWapPayResponse;
import com.alipay.config.AlipayConfig;
import com.jeecms.cms.entity.main.CmsSite;
import com.jeecms.cms.ext.aworder.entiry.CmsAWOrder;
import com.jeecms.cms.ext.aworder.service.CmsAWOrderService;
import com.jeecms.cms.ext.crm.entity.CmsCrm;
import com.jeecms.cms.ext.crm.service.CmsCrmMng;
import com.jeecms.cms.web.CmsUtils;
import com.jeecms.cms.web.FrontUtils;
import com.wxpay.util.WXPayUtil;

/**
 * @author chy
 *
 * 2019年1月15日-下午7:35:06
 */
@Controller
@RequestMapping("wxpay")
public class WxPayController {// 公众号id
    final static String APPID = "***ed9716263ff78b6";
    // 公众号秘钥
    final static String SECRET = "***2226ea83d7ef6eb799bd8b631ace0";
    // 商户号
    final static String MATCH_ID = "***0674102"; //商户号(财务)
    // 商户key
    final static String PATERNER_KEY = "***W3E4R5T6Y7U8I9O0P1Q2W3E4R5T6Y";//商户key(财务)
    
    // 微信通知的URL
    final static String W_NOTIFY_URL = "www.xinghengedu.com/notifyUrl.htm";
    // 支付宝return的URL
    final static String A_RETURN_URL = "www.xinghengedu.com/res/success.html";
    // 支付宝通知的URL
    final static String A_NOTIFY_URL = "www.xinghengedu.com/anotifyUrl.htm";
    
    // 获取openID的URL(微信)
    final static String GETOPENID_URL = "https://api.weixin.qq.com/sns/oauth2/access_token";
    // 获取预付款ID的URL(微信)
    final static String UNIFIEDORDER_URL = "https://api.mch.weixin.qq.com/pay/unifiedorder";
    
    final static String DESC = "星恒订单描述";
    
    final static String ZFB = "支付宝";
    final static String WX = "微信";
    
    @Autowired
    private CmsAWOrderService orderService;
    
    @Autowired
    private CmsCrmMng cmsCrmService;
    

    /**
     * 微信
     * @author chy
     * 2019年1月17日-下午2:14:31
     * @param code            微信必须的code码,需要用code码换取openid,之后需要openid来换取prepay_id。
     * @param totalFee        商品价格
     * @param username        代理商用户名
     * @return
     * @throws Exception 
     */
    @RequestMapping("order.htm")
    public String order(HttpServletRequest request,String code,String totalFee,String cmsId ,ModelMap retMap) throws Exception{
        System.out.println("***WxPayController.order()");
        //先校验金额,由于是double类型,校验相对复杂,涉及到小数点。
        String[] split = StringUtils.split(cmsId,",");
        Double verify = 0d;
        for (String string : split) {
            CmsCrm crm = cmsCrmService.findById(Integer.parseInt(string));
            verify += crm.getYifu();
        }
        // 判断需要都转化为分来进行判断
        if((int)(verify*100) != (int)(Double.parseDouble(totalFee)*100)){
            retMap.addAttribute("chymsg", "金额错误");
            return "/res/wxpay/codeDemo.html";
        }
        String orderNo = getOrderNo("W");// 生成订单id
        String getOpenIdparam= "appid="+APPID+"&secret="+SECRET+"&code="+code+"&grant_type=authorization_code";
        String getOpenIdUrl = GETOPENID_URL+"?"+getOpenIdparam;
        System.out.println("***getOpenId:"+getOpenIdUrl);
        RestTemplate rest = new RestTemplate();
        rest.getMessageConverters().add(0, new StringHttpMessageConverter(Charset.forName("UTF-8")));
        try {
            String resString = rest.getForObject(new URI(getOpenIdUrl), String.class);
            JSONObject opidJsonObject = JSONObject.parseObject(resString);
            System.out.println("***opidJsonObject:"+opidJsonObject);
            String openid = opidJsonObject.get("openid").toString();//获取到了openid
            Map<String, String> paramMap = new HashMap<String, String>();
            paramMap.put("appid", APPID);            //公众账号ID
            paramMap.put("mch_id", MATCH_ID);             //商户号
            paramMap.put("nonce_str", WXPayUtil.generateNonceStr());        //随机字符串
            paramMap.put("body", DESC);            //商品描述
            paramMap.put("out_trade_no", orderNo);    //商户订单号
            paramMap.put("total_fee", (int)(Double.parseDouble(totalFee)*100) +"");        //标价金额
            paramMap.put("spbill_create_ip", getIpAddress(request));//终端IP
            paramMap.put("notify_url", W_NOTIFY_URL);        //通知地址
            paramMap.put("trade_type", "JSAPI");    //交易类型
            paramMap.put("openid", openid);
            String sign = WXPayUtil.generateSignature(paramMap, PATERNER_KEY);
            paramMap.put("sign", sign);
            String mapToXml = WXPayUtil.mapToXml(paramMap);
            String postForObject = rest.postForObject(new URI(UNIFIEDORDER_URL), mapToXml, String.class);
            System.out.println("***postForObject:"+postForObject);
            String prepayId = "";//预支付id
            if (postForObject.indexOf("SUCCESS") != -1) {  
                Map<String, String> map = WXPayUtil.xmlToMap(postForObject);  
                prepayId = (String) map.get("prepay_id");  
            }
            Map<String, String> payMap = new HashMap<String, String>();
            payMap.put("appId", APPID);  
            payMap.put("timeStamp", WXPayUtil.getCurrentTimestamp()+"");  
            payMap.put("nonceStr", WXPayUtil.generateNonceStr());  
            payMap.put("signType", "MD5");  
            payMap.put("package", "prepay_id=" + prepayId);  
            String paySign = WXPayUtil.generateSignature(payMap, PATERNER_KEY);  
            payMap.put("paySign", paySign);
            payMap.put("pack", "prepay_id=" + prepayId);
            retMap.addAttribute("data", payMap);
            
            //进行微信生成订单操作
            // 对中间表插入数据,如果传入多个crmid,那就是多对一。否则就是一对一,多对多目前没有这种情况。
            for (String string : split) {
                CmsCrm crm = cmsCrmService.findById(Integer.parseInt(string));
                orderService.insertCmsIdAndOrderId(crm.getId(),orderNo);
                System.out.println("中间表数据插入完毕。");
            }
            // 对订单表插入数据
            CmsAWOrder order = new CmsAWOrder();
            order.setOrderNo(orderNo);
            order.setRelateId(cmsId);
            order.setPrice(Double.parseDouble(totalFee));
            order.setTotal(Double.parseDouble(totalFee)); // 由于传过来的是分,需要转化为元
            order.setStatus(1);
            order.setProduct(DESC);
            order.setCreateTime(new Date());
            order.setSource(WX);
            orderService.save(order);
            System.out.println("***微信创建订单成功");
        } catch (Exception e) {
            retMap.put("code", "500");
            retMap.put("msg", e.getStackTrace());
            e.printStackTrace();
        } 
        return "/res/wxpay/codeDemo.html";
    }
    
    
    /**
     * 支付宝,测试可以使用支付宝做测试,毕竟比较简单。
     * @author chy
     * 2019年1月17日-下午2:14:15
     * @param totalFee    商品价格
     * @param username    代理商用户名
     * @return
     * @throws AlipayApiException
     */
    @RequestMapping("aorder.htm")
    public String order(HttpServletRequest request,HttpServletResponse httpResponse,Model model,String totalFee,String cmsId) throws AlipayApiException{
        CmsSite site = CmsUtils.getSite(request);
        System.out.println("---WxPayController.order()");
        String[] split = StringUtils.split(cmsId,",");
        Double verify = 0d;
        for (String string : split) {
            CmsCrm crm = cmsCrmService.findById(Integer.parseInt(string));
            verify += crm.getYifu();
        }
        // 判断需要都转化为分来进行判断
        if((int)(verify*100) != (int)(Double.parseDouble(totalFee)*100)){
            model.addAttribute("chymsg", "金额错误");
            return FrontUtils.getTplPath(request, site.getSolutionPath(), "common", "tpl.alipayapi");
        }
        
        System.out.println("***zfbtotalFee:"+totalFee);
        AlipayClient alipayClient = new DefaultAlipayClient(AlipayConfig.gatewayUrl, AlipayConfig.app_id,AlipayConfig.merchant_private_key, "json", "UTF-8", AlipayConfig.alipay_public_key,AlipayConfig.sign_type);
        AlipayTradeWapPayRequest alipayRequest = new AlipayTradeWapPayRequest();//创建API对应的request
        alipayRequest.setReturnUrl(A_RETURN_URL);
        alipayRequest.setNotifyUrl(A_NOTIFY_URL);
        String out_trade_no = getOrderNo("A");
        alipayRequest.setBizContent("{" +
                "\"out_trade_no\":\""+out_trade_no+"\"," +
                "\"total_amount\":"+totalFee+"," +
                "\"product_code\":\"QUICK_WAP_WAY\","+
                "\"hb_fq_num\":\"3\","+
                "\"hb_fq_seller_percent\":\"0\","+
                "\"subject\":\""+DESC+"\"" +
                "}");
        AlipayTradeWapPayResponse response = alipayClient.pageExecute(alipayRequest);
        model.addAttribute("results", response.getBody());
        System.out.println("results"+response.getBody());
        //进行支付宝生成订单操作
        // 对中间表插入数据,如果传入多个crmid,那就是多对一。否则就是一对一,多对多目前没有这种情况。
        for (String string : split) {
            CmsCrm crm = cmsCrmService.findById(Integer.parseInt(string));
            orderService.insertCmsIdAndOrderId(crm.getId(),out_trade_no);
            System.out.println("中间表数据插入完毕。");
        }
        // 对订单表插入数据
        CmsAWOrder order = new CmsAWOrder();
        order.setOrderNo(out_trade_no);
        order.setRelateId(cmsId);
        order.setPrice(Double.parseDouble(totalFee));
        order.setTotal(Double.parseDouble(totalFee)); // 由于传过来的是分,需要转化为元
        order.setStatus(1);
        order.setProduct(DESC);
        order.setCreateTime(new Date());
        order.setSource(ZFB);
        orderService.save(order);
        System.out.println("***支付宝创建订单成功");
        return FrontUtils.getTplPath(request, site.getSolutionPath(), "common", "tpl.alipayapi");
    }
    
    
    // 业务操作
    public void operation(String oderNo,String zfType){
        CmsAWOrder order = orderService.findByProperty("orderNo", oderNo);
        // 由于会重复通知(自己没有处理好),所以直接判断订单状态如果修改的话不进行操作。
        if(!new Integer(2).equals(order.getStatus())){
            order.setStatus(2);//设置为支付成功
            order.setPayTime(new Date());
            List<Integer> cmsId = orderService.findMiddleByOrderId(oderNo);
            System.out.println(cmsId);
            for (Integer string : cmsId) {
                CmsCrm cmsCrm = cmsCrmService.findById(string);
                System.out.println("ali_cmsId:"+string);
                System.out.println("cmsCrm:"+cmsCrm);
                if("尾款".equals(cmsCrm.getPayMessage()) || cmsCrm.getYingfu().equals(cmsCrm.getYifu())){
                    cmsCrm.setPaystatus("全部到帐");
                    if(isNumber(cmsCrm.getAddress())){
                        CmsCrm cmsCrm2 = cmsCrmService.findById(Integer.parseInt(cmsCrm.getAddress()));
                        cmsCrm2.setPaystatus("全部到帐");
                        cmsCrm2.setCwjingbanren("自动对账_"+zfType);
                        cmsCrm2.setDuizhangtime(new Date());
                        cmsCrmService.save(cmsCrm2);
                    }
//                    }else if(cmsCrm.getYingfu().equals(cmsCrm.getYifu())){
//                        cmsCrm.setPaystatus("全部到帐");
                }else{
                    cmsCrm.setPaystatus("预付款已到帐");
                }
                cmsCrm.setCwjingbanren("自动对账_"+zfType);
                cmsCrm.setDuizhangtime(new Date());
                cmsCrmService.save(cmsCrm);//开课
                cmsCrmService.kaike(cmsCrm);//保存
            }
            orderService.update(order);
            System.out.println(zfType+"支付通知结束");
        }
    }
    

    
    /**
     * 微信异步回调通知
     * @param request
     * @param response
     * @return
     */
    @ResponseBody
    @RequestMapping("notifyUrl.htm")
    public Map<String, Object> notifyUrl(HttpServletRequest request,HttpServletResponse response){
        System.out.println("**WxPayController.notifyUrl()");
        Map<String, Object> retMap = new HashMap<String, Object>();
        retMap.put("code", 200);
        InputStream is = null;
        try {
            is = request.getInputStream();//获取请求的流信息(这里是微信发的xml格式所有只能使用流来读)
            String xml = WXPayUtil.inputStream2String(is, "UTF-8");
            System.out.println("***xml:"+xml);
            Map<String, String> notifyMap = WXPayUtil.xmlToMap(xml);//将微信发的xml转map
            System.out.println("***notifyMap:"+notifyMap);
            if(notifyMap.get("return_code").equals("SUCCESS")){  
                if(notifyMap.get("result_code").equals("SUCCESS")){  
                    String ordersSn = notifyMap.get("out_trade_no");//商户订单号 
                    String amountpaid = notifyMap.get("total_fee");//实际支付的订单金额:单位 分
                    BigDecimal amountPay = (new BigDecimal(amountpaid).divide(new BigDecimal("100"))).setScale(2);//将分转换成元-实际支付金额:元
                    System.out.println("***notifyUrl.htm data:"+ordersSn+"---"+amountPay);
                    
                    // 进行业务逻辑操作
                    operation(ordersSn, WX);
                }  
            }
            //告诉微信服务器收到信息了,不要在调用回调action了========这里很重要回复微信服务器信息用流发送一个xml即可
            response.getWriter().write("<xml><return_code><![CDATA[SUCCESS]]></return_code></xml>");  
            is.close();
        } catch (Exception e) {
            e.printStackTrace();
        }
        return retMap;
    }
    
    
    
    @ResponseBody
    @RequestMapping("anotifyUrl.htm")
    public Map<String, Object> anotifyUrl(HttpServletRequest request){
        System.out.println("***WxPayController.anotifyUrl()");
        Map<String, Object> retMap = new HashMap<String, Object>();
        retMap.put("code", 200);
        //进行验证操作
        Map<String, String> params = new HashMap<String, String>();
        Map requestParams = request.getParameterMap();
        System.out.println("***requestParams:"+requestParams);
        for (Iterator iter = requestParams.keySet().iterator(); iter.hasNext();) {
            String name = (String) iter.next();
            System.out.println("___________name:"+name);
            String[] values = (String[]) requestParams.get(name);
            String valueStr = "";
            for (int i = 0; i < values.length; i++)
                valueStr = (i == values.length - 1) ? valueStr + values[i] : valueStr + values[i] + ",";
            params.put(name, valueStr);
        }
        String trade_status = request.getParameter("trade_status");
        boolean signVerified;
        try {
            signVerified = AlipaySignature.rsaCheckV1(params, AlipayConfig.alipay_public_key, AlipayConfig.charset, AlipayConfig.sign_type);
            if(signVerified){//验证成功
                System.out.println("***支付宝验证成功");
                if (trade_status.equals("TRADE_FINISHED") || trade_status.equals("TRADE_SUCCESS")) {
                    System.out.println("***判断成功");
                    
                    // 进行业务逻辑操作
                    String out_trade_no = request.getParameter("out_trade_no");
                    operation(out_trade_no, ZFB);
                }
            } else {
                System.out.println("***验证错误");
            }
        } catch (AlipayApiException e) {
            e.printStackTrace();
        }
        return retMap;
    }
    
    
    
    // 获取订单id 规则:当前日期_uuid(17位,总共32位) 支付宝64位。
    public static String getOrderNo(String type){
        return DateFormatUtils.format(new Date(), "yyyyMMddHHmmss")+"_"+type+"_"+WXPayUtil.generateNonceStr().substring(0, 15);
    }
    
    // 获取请求主机IP地址,如果通过代理进来,则透过防火墙获取真实IP地址  
    public final static String getIpAddress(HttpServletRequest request) throws IOException {
        String ip = request.getHeader("X-Forwarded-For");
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
            if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
                ip = request.getHeader("Proxy-Client-IP");
            }
            if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
                ip = request.getHeader("WL-Proxy-Client-IP");
            }
            if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
                ip = request.getHeader("HTTP_CLIENT_IP");
            }
            if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
                ip = request.getHeader("HTTP_X_FORWARDED_FOR");
            }
            if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
                ip = request.getRemoteAddr();
            }
        } else if (ip.length() > 15) {
            String[] ips = ip.split(",");
            for (int index = 0; index < ips.length; index++) {
                String strIp = (String) ips[index];
                if (!("unknown".equalsIgnoreCase(strIp))) {
                    ip = strIp;
                    break;
                }
            }
        }
        return ip;
    }

    public boolean isNumber(String string){
        String str = String.valueOf(string);
        String regex = "^[1-9]\\d*$";
        return str.matches(regex);
    }

}

 

 

 

 

前端html代码(两个页面,集成了支付宝支付,微信怕因为code失效问题,解决方式重新添加了一个html)

cmsDemo.html

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
    <title>支付</title>
    <link rel="stylesheet" href="https://cdn.bootcss.com/bootstrap/4.0.0/css/bootstrap.min.css" integrity="sha384-Gn5384xqQ1aoWXA+058RXPxPg6fy4IWvTNh0E263XmFcJlSAwiGgFAW/dAiS6JXm" crossorigin="anonymous">
<style>
body{background-color:#efeff4;}
.main{padding:15px;height:100vh;}
.mobile-box{padding:30px;background-color:#fff;}
.mobile-top h2{font-size:18px;color:#000;}
.mobile-content h3 img{margin-right:5px;}
.mobile-content h3{font-size:14px;color:#b******2;}
.input-num{border-bottom: 1px solid #dcdcdc;margin-bottom: 5vh;padding-top: 5vh;}
.input-num .tit{font-size:16px;color:#999;}
.input-num .pay{position:relative;line-height: 50px;margin:10px 0;}
.input-num .pay input{padding-left: 30px;line-height: 50px;border:none;outline:none;}
.input-num .pay span.jinbi{font-weight:bold;color:#000;font-size:24px;position: absolute;left: 0;top: 0;}
.pay-click a.nopay{cursor: pointer;background-color: #a3dea3;color: #fff;width: 100%;display: block;border-radius: 5px;line-height: 50px;font-size: 20px;}
.pay-click a.pay{background-color:#1aac19;}
input[type=number] {-moz-appearance:textfield;}  
input[type=number]::-webkit-inner-spin-button,  
input[type=number]::-webkit-outer-spin-button {-webkit-appearance: none;  margin: 0;}
@media(min-width:720px){
.mobile-box{width:720px;margin:0 auto;}
}
</style>
</head>
<body>
<div class="main">
    <div class="mobile-box">
        <div class="mobile-top ">
            <div class="back">
                <i class="fa fa-angle-left fa-2x"></i>
            </div>
    
            <h2 class="top-center color21">北京星恒教育科技有限公司</h2>
    
            <div class="back"></div>
        </div>
        <div class="mobile-content">
            <h3 class="color21 font">
                <img src="http://img1.52mamahome.com/hotel/homes.png" class="mr10" alt="">北京星恒教育科技有限公司</h3>
            <div class="input-num">
                <div class="tit">金额</div>
                <div class="pay">
                    <span class="jinbi">¥</span>
                    <input type="number" class="w-100" id="totalFee" readonly="readonly">
                </div>
            </div>
            <p class="text-center pay pay-click" id="goPay" onclick="pay()
                

标签:java,String,微信,JSAPI,ip,import,com,order,out
来源: https://www.cnblogs.com/adolfmc/p/13694638.html