Java 开源生鲜电商平台 - 支付模块的设计与架构 (源码可下载）
/**
服务器通知地址
*/
private static final String NOTIFY_URL="";
/*待支付/
private static final int PAY_LOGS_READY=0;
@Autowired
private OrderInfoService orderInfoService;
@Autowired
private BuyerService buyerService;
@Autowired
private PayLogsService payLogsService;/**
APP 端请求调用支付宝
@param request
@param response
@return
*/
@RequestMapping(value="/alipay/invoke",method={RequestMethod.GET,RequestMethod.POST})
public JsonResult alipayInvoke(HttpServletRequest req, HttpServletResponse resp)
{
String result="";
try
{
/*订单号/
String orderNumber=this.getNotNull("orderNumber", req);
/*金额/
String money=this.getNotNull("money", req);
/*优惠券 id/
String couponReceiveId = req.getParameter("couponReceiveId");
if(StringUtils.isBlank(orderNumber) || StringUtils.isBlank(money))
{
return new JsonResult(JsonResultCode.FAILURE,"请求参数有误,请稍后重试","");
}
//对比金额
OrderInfo orderInfo=this.orderInfoService.getOrderInfoByOrderNumber(orderNumber);
if(orderInfo==null)
{
return new JsonResult(JsonResultCode.FAILURE,"订单号不存在，请稍后重试","");
}
//获取订单的金额
BigDecimal orderAmount=orderInfo.getOrderAmount();
//减余额
Long buyerId=orderInfo.getBuyerId();
Buyer buyer=this.buyerService.getBuyerById(buyerId);
//用户余额
BigDecimal balanceMoney=buyer.getBalanceMoney();
//计算最终需要给支付宝的金额
BigDecimal payAmount=orderAmount.subtract(balanceMoney);
//买家支付时抵扣优惠券
if(StringUtils.isNotBlank(couponReceiveId)){
Long id = Long.parseLong(couponReceiveId);
payAmount = couponReceiveService.deductionCouponMoney(id, orderNumber, payAmount);
}
logger.info("[AlipayController][alipayInvoke] orderNumber:" +orderNumber +" money:" +money+" orderAmount:"+orderAmount+" balanceMoney:"+balanceMoney+" payAmount:" +payAmount);
//考虑重复订单的问题，会产生重复日志
PayLogs payLogs=this.payLogsService.getPayLogsByOrderNumber(orderNumber);
if(payLogs==null)
{
//创建订单日志
PayLogs logs=new PayLogs();
logs.setUserId(buyerId);
logs.setOrderId(orderInfo.getOrderId());
logs.setOrderNumber(orderNumber);
logs.setOrderAmount(payAmount);
logs.setStatus(PAY_LOGS_READY);
logs.setCreateTime(new Date());
int payLogsResult=payLogsService.addPayLogs(logs);
logger.info("[AlipayController][alipayInvoke] 创建订单日志结果:" + (payLogsResult>0));
}else
{
logger.info("[AlipayController][alipayInvoke] 创建重复订单");
}
AlipayClient alipayClient = new DefaultAlipayClient("https://openapi.alipay.com/gateway.do","","", "json","UTF-8","","RSA2");
AlipayTradeAppPayRequest request = new AlipayTradeAppPayRequest();
AlipayTradeAppPayModel model = new AlipayTradeAppPayModel();
model.setBody("");
model.setSubject("xxx");
model.setOutTradeNo(orderNumber);
model.setTimeoutExpress("15m");
model.setTotalAmount(payAmount.toString());
model.setProductCode("QUICK_MSECURITY_PAY");
request.setBizModel(model);
request.setNotifyUrl(NOTIFY_URL);
AlipayTradeAppPayResponse response = alipayClient.sdkExecute(request);
result=response.getBody();
logger.info("[AlipayController][alipayNotify] result: " +result);
} catch (AlipayApiException ex)
{
logger.error("[AlipayController][alipayNotify] exception:",ex);
return new JsonResult(JsonResultCode.FAILURE,"系统错误,请稍后重试","");
}
return new JsonResult(JsonResultCode.SUCCESS,"操作成功",result);
}
}
支付宝服务端回调代码
import java.io.IOException;
import java.math.BigDecimal;
import java.util.Date;
import java.util.Enumeration;
import java.util.HashMap;
import java.util.Iterator;
import java.util.Map;
import javax.servlet.ServletOutputStream;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import org.apache.commons.lang3.StringUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import com.alipay.api.AlipayApiException;
import com.alipay.api.internal.util.AlipaySignature;
/**
alipay 支付宝服务端回调
参考文档：https://docs.open.alipay.com/204/105301/
对于 App 支付产生的交易，支付宝会根据原始支付 API 中传入的异步通知地址 notify_url，通过 POST 请求的形式将支付结果作为参数通知到商户系统。
*/
@Controller
@RequestMapping("/buyer")
public class AlipayNotifyController extends BaseController {
private static final Logger logger = LoggerFactory.getLogger(AlipayNotifyController.class);
private static final String ALIPAYPUBLICKEY = "";
private static final String CHARSET = "UTF-8";
/*支付成功/
private static final int PAY_LOGS_SUCCESS=1;
@Autowired
private OrderInfoService orderInfoService;
@RequestMapping(value = "/alipay/notify", method = { RequestMethod.GET, RequestMethod.POST })
public void alipayNotify(HttpServletRequest request, HttpServletResponse response) throws IOException
{
String url=request.getRequestURL().toString();
logger.info("AlipayNotifyController.alipayNotify.s+tart");
logger.info("[AlipayNotifyController][alipayNotify] url:" +url);
ServletOutputStream out = response.getOutputStream();
//支付宝交易号
String alipayTradeNo=this.getNotNull("trade_no", request);
//商户订单号
String outerTradeNo=this.getNotNull("out_trade_no", request);
//买家支付宝用户号
String buyerId=this.getNotNull("buyer_id", request);
//买家支付宝账号
String buyerLogonId=this.getNotNull("buyer_logon_id", request);
//交易状态
String tradeStatus=this.getNotNull("trade_status", request);
//订单金额,精确到小数点后 2 位
String money=getNotNull("total_amount", request);
logger.info("[AlipayNotifyController][alipayNotify] tradeStatus:" +tradeStatus+" money:"+money);
StringBuffer buf = new StringBuffer();
if (request.getMethod().equalsIgnoreCase("POST"))
{
Enumeration<String> em = request.getParameterNames();
for (; em.hasMoreElements();)
{
Object o = em.nextElement();
buf.append(o).append("=").append(request.getParameter(o.toString())).append(",");
}
logger.info("回调 method:post]http://" + request.getServerName() + request.getServletPath() + " [<prams:" + buf + ">]");
} else
{
buf.append(request.getQueryString());
logger.info("回调 method:get]http://" + request.getServerName() + request.getServletPath() + "?" + request.getQueryString());
}
//检验支付宝参数
if(!verifyAlipay(request))
{
out.print("fail");
return;
}
//交易成功
if("TRADE_SUCCESS".equalsIgnoreCase(tradeStatus))
{
try
{
if(StringUtils.isNotBlank(outerTradeNo))
{
//查询当前订单信息
OrderInfo info=this.orderInfoService.getOrderInfoByOrderNumber(outerTradeNo);
if(info==null)
{
logger.error("[AlipayNotifyController][alipayNotify] info:" +info);
out.print("fail");
return;
}
//订单信息
OrderInfo orderInfo=new OrderInfo();
orderInfo.setOrderNumber(outerTradeNo);
orderInfo.setCardCode("alipay");
orderInfo.setCardName("支付宝");
orderInfo.setCardNumber(buyerLogonId);
orderInfo.setCardOwner(buyerId);
orderInfo.setPayTime(new Date());
orderInfo.setOuterTradeNo(alipayTradeNo);
orderInfo.setPayStatus(PayStatus.PAY_SUCCESS);
orderInfo.setTradeStatus(TradeStatus.TRADE_PROGRESS);
orderInfo.setPayAmount(new BigDecimal(money));
orderInfo.setBuyerId(info.getBuyerId());
//付款日志
PayLogs payLogs=new PayLogs();
payLogs.setOrderNumber(outerTradeNo);
payLogs.setOuterTradeNo(alipayTradeNo);
payLogs.setStatus(PAY_LOGS_SUCCESS);
orderInfoService.payReturn(orderInfo,payLogs);
out.print("success");
return;
}
}catch(Exception ex)
{
logger.error("[AlipayNotifyController][payReturn] 出现了异常:",ex);
out.print("success");
return;
}
}else
{
out.print("fail");
return;
}
}
/**
检验支付宝
@param request
@return
*/
@SuppressWarnings("rawtypes")
public boolean verifyAlipay(HttpServletRequest request)
{
boolean flag=true;
// 获取支付宝 POST 过来反馈信息
Map<String, String> params = new HashMap<String, String>();
Map requestParams = request.getParameterMap();
for (Iterator iter = requestParams.keySet().iterator(); iter.
hasNext();) {
String name = (String) iter.next();
String[] values = (String[]) requestParams.get(name);
String valueStr = "";
for (int i = 0; i < values.length; i++) {
valueStr = (i == values.length - 1) ? valueStr + values[i] : valueStr + values[i] + ",";
}
params.put(name, valueStr);
}
try
{
flag= AlipaySignature.rsaCheckV1(params, ALIPAYPUBLICKEY, CHARSET, "RSA2");
} catch (AlipayApiException e) {
e.printStackTrace();
flag=false;
}
return flag;
}
}
APP 支付成功后，其实支付宝或者微信都会告诉你是否成功，只是这种通知是不可靠的，最可靠的的一种方式是支付宝或者微信的服务端回调。
根据回调处理相关的业务。
相应的微信回调代码如下：（注意，这个业务模块属于买家。）
APP 调用微信：
/***
APP 端调用请求微信
*/
@RestController
@RequestMapping("/buyer")
public class WeiXinController extends BaseController
{
private static final Logger logger = LoggerFactory.getLogger(WeiXinController.class);
/*待支付/
private static final int PAY_LOGS_READY=0;
@Autowired
private OrderInfoService orderInfoService;
@Autowired
private BuyerService buyerService;
@Autowired
private PayLogsService payLogsService;
@Autowired
private CouponReceiveService couponReceiveService;
/**
APP 端请求调用微信
@param request
@param response
@return
*/
@RequestMapping(value="/weixin/invoke",method={RequestMethod.GET,RequestMethod.POST})
public JsonResult weixinInvoke(HttpServletRequest req, HttpServletResponse resp)
{
try
{
/*订单号/
String orderNumber=this.getNotNull("orderNumber", req);
/*金额/
String money=this.getNotNull("money", req);
/*优惠券 id/
String couponReceiveId = req.getParameter("couponReceiveId");
if(StringUtils.isBlank(orderNumber) || StringUtils.isBlank(money))
{
return new JsonResult(JsonResultCode.FAILURE,"请求参数有误,请稍后重试","");
}
//对比金额
OrderInfo orderInfo=this.orderInfoService.getOrderInfoByOrderNumber(orderNumber);
if(orderInfo==null)
{
return new JsonResult(JsonResultCode.FAILURE,"订单号不存在，请稍后重试","");
}
//获取订单的金额
BigDecimal orderAmount=orderInfo.getOrderAmount();
//减余额
Long buyerId=orderInfo.getBuyerId();
Buyer buyer=this.buyerService.getBuyerById(buyerId);
//用户余额
BigDecimal balanceMoney=buyer.getBalanceMoney();
//计算最终需要给微信的金额
BigDecimal payAmount=orderAmount.subtract(balanceMoney);
//买家支付时抵扣优惠券
if(StringUtils.isNotBlank(couponReceiveId)){
Long id = Long.parseLong(couponReceiveId);
payAmount = couponReceiveService.deductionCouponMoney(id, orderNumber, payAmount);
}
logger.info("[WeiXinController][weixinInvoke] orderNumber:" +orderNumber +" money:" +money+" orderAmount:"+orderAmount+" balanceMoney:"+balanceMoney+" payAmount:" +payAmount);
//考虑重复订单的问题，会产生重复日志
PayLogs payLogs=this.payLogsService.getPayLogsByOrderNumber(orderNumber);
if(payLogs==null)
{
//创建订单日志
PayLogs logs=new PayLogs();
logs.setUserId(buyerId);
logs.setOrderId(orderInfo.getOrderId());
logs.setOrderNumber(orderNumber);
logs.setOrderAmount(payAmount);
logs.setStatus(PAY_LOGS_READY);
logs.setCreateTime(new Date());
int payLogsResult=payLogsService.addPayLogs(logs);
logger.info("[WeiXinController][weixinInvoke] 创建订单日志结果:" + (payLogsResult>0));
}else
{
logger.info("[WeiXinController][weixinInvoke] 创建重复订单");
}
//微信开始
SortedMap<Object,Object> paramMap = new TreeMap<Object,Object>();
paramMap.put("appid", WeiXinUtil.APPID);
paramMap.put("mch_id", WeiXinUtil.MCHID);
String nonceStr=RandomUtil.generateString(8);
// 随机字符串
paramMap.put("nonce_str", nonceStr);
paramMap.put("body","魔笛食材");// 商品描述
paramMap.put("out_trade_no", orderNumber);// 商户订单编号
paramMap.put("total_fee",Math.round(payAmount.doubleValue()*100));
//IP 地址
String ip=IpUtils.getIpAddr(req);
paramMap.put("spbill_create_ip",ip);
paramMap.put("notify_url", WeiXinUtil.NOTIFYURL);// 回调地址
paramMap.put("trade_type",WeiXinUtil.TRADETYPE);// 交易类型 APP
String sign=createSign(paramMap);
paramMap.put("sign", sign);// 数字签证
logger.info("weixin 支付请求 IP:" +ip+ " sign:" +sign);
String xml = getRequestXML(paramMap);
String content = HttpClientUtil.getInstance().sendHttpPost(WeiXinUtil.URL,xml,"UTF-8");
logger.info("weixin 支付请求的内容 content:" +content);
JSONObject jsonObject = JSONObject.fromObject(XmltoJsonUtil.xml2JSON(content));
JSONObject resultXml = jsonObject.getJSONObject("xml");
//返回的编码
JSONArray returnCodeArray =resultXml.getJSONArray("return_code");
//返回的消息
JSONArray returnMsgArray =resultXml.getJSONArray("return_msg");
//结果编码
JSONArray resultCodeArray =resultXml.getJSONArray("result_code");
String returnCode= (String)returnCodeArray.get(0);
String returnMsg= (String)returnMsgArray.get(0);
还未添加个人签名 2021.03.18 加入
还未添加个人简介
评论