本文没有与申请微信支付相关的内容(申请微信支付过于复杂…..) 本文前提： 已经申请好了对应的微信支付商户号，并且已经签约了对应的支付产品

在Java中，集成微信支付，十分的简单，主要分为如下几步

1. 导入依赖

2. 编写微信支付的配置

3. 编写下单，进行测试

一、导入依赖

  1. <dependency>
  2.   <groupId>com.github.wxpay</groupId>
  3.   <artifactId>wxpay-sdk</artifactId>
  4.   <version>0.0.3</version>
  5. </dependency>

二、编写微信支付的配置

这里，通过一个配置类，读取application.yml 中的配置，再通过 @Configuration+@Bean的方式，注入到容器中。

  1. public class WxPayScanConfig implements WXPayConfig {
  3.     private PayInfoConfig payInfoConfig;
  5.     private byte[] certData;
  6.     /**
  7.      * 使用类加载的方式，取出证书，否则，当发布打成Jar包的时候，会读取不到Jar包中的东西 
  8.      */
  9.     public WxPayScanConfig(PayInfoConfig payInfoConfig) {
  10.         this.payInfoConfig = payInfoConfig;
  11.         try {
  12.             InputStream certStream = this.getClass().getResourceAsStream("/apiclient_cert.p12");
  13.             this.certData = new byte[certStream.available()];
  14.             certStream.read(this.certData);
  15.             certStream.close();
  16.         } catch (IOException e) {
  17.             e.printStackTrace();
  18.         }
  19.     }
  21.     @Override
  22.     public String getAppID() {
  23.         return payInfoConfig.getWxpay().getAppId();
  24.     }
  26.     @Override
  27.     public String getMchID() {
  28.         return payInfoConfig.getWxpay().getMchId();
  29.     }
  31.     @Override
  32.     public String getKey() {
  33.         return payInfoConfig.getWxpay().getMchKey();
  34.     }
  36.     @Override
  37.     public InputStream getCertStream() {
  38.         return new ByteArrayInputStream(this.certData);
  39.     }
  41.     @Override
  42.     public int getHttpConnectTimeoutMs() {
  43.         return 8000;
  44.     }
  46.     @Override
  47.     public int getHttpReadTimeoutMs() {
  48.         return 100000;
  49.     }
  50. }

三、编写下单

3.1 编写支付工具类 WxPayUtil

  1. @Slf4j
  2. @Component
  3. public class WxPayUtil {
  5.     @Autowired
  6.     private WXPay wxPay;
  7.     @Autowired
  8.     private PayInfoConfig payInfoConfig;
  9.     @Autowired
  10.     private PayCommonUtil payCommonUtil;
  12.     public Map<String,String> appNotify(String body,String price){
  13.         SortedMap<String, String> data = new TreeMap<>();
  15.         String outTradeNo = getRandomString(32);
  16.         data.put("body", body);
  17.         data.put("out_trade_no", outTradeNo);
  18.         data.put("total_fee", price);
  19.         data.put("spbill_create_ip", "58.23.48.202");
  20.         data.put("notify_url", "http://localhost:8080/");
  21.         data.put("trade_type", "APP");
  22.         Map<String, String> resp = null;
  23.         try {
  24.             resp = wxPay.unifiedOrder(data);
  25.             resp.put("out_trade_no",outTradeNo);
  26.         } catch (Exception e) {
  27.             log.info("微信支付出现错误!" +e.getMessage());
  28.             e.printStackTrace();
  29.         }
  30.         return resp;
  31.     }
  33.     public Map<String,String> refund(String outTradeNo){
  34.         SortedMap<String,String> data = new TreeMap<>();
  35.         data.put("appid", payInfoConfig.getWxpay().getAppId());
  36.         data.put("mch_id", payInfoConfig.getWxpay().getMchId());
  37.         data.put("nonce_str", getRandomString(32));
  38.         data.put("out_trade_no",outTradeNo);
  39.         data.put("out_refund_no", getRandomString(32));
  40.         Map<String, String> orderQuery = queryOrder(outTradeNo);
  41.         data.put("total_fee",orderQuery.get("total_fee"));
  42.         data.put("refund_fee",orderQuery.get("total_fee"));
  43.         data.put("sign", payCommonUtil.createSign("UTF-8",data));
  44.         try {
  45.             Map<String, String> resp = wxPay.refund(data);
  46.             System.out.println(resp);
  47.             return resp;
  48.         } catch (Exception e) {
  49.             e.printStackTrace();
  50.         }
  51.         return null;
  52.     }
  54.     public Map<String,String> queryRefund(String outTradeNo){
  55.         Map<String, String> data = new HashMap<>(0);
  56.         data.put("out_trade_no", outTradeNo);
  57.         try {
  58.             return wxPay.refundQuery(data);
  59.         } catch (Exception e) {
  60.             e.printStackTrace();
  61.         }
  62.         return null;
  63.     }
  65.     /**
  66.      * 获取app二次签名数据
  67.      * @param resp 微信统一下单之后返回的data
  68.      * @return Map<String,String>
  69.      */
  70.     public Map<String,String> appPaySignDouble(Map<String,String> resp){
  71.         log.info("response=" + resp);
  72.         SortedMap<String, String> signParam = new TreeMap<>();
  73.         //app_id
  74.         String prepayid = resp.get("prepay_id");
  75.         signParam.put("appid", resp.get("appid"));
  76.         signParam.put("partnerid", resp.get("mch_id"));
  77.         signParam.put("prepayid", prepayid);
  78.         signParam.put("package", "Sign=WXPay");
  79.         signParam.put("noncestr", resp.get("nonce_str"));
  80.         //北京时间时间戳
  81.         signParam.put("timestamp", System.currentTimeMillis()/1000 + "");
  82.         signParam.put("paySign", payCommonUtil.createSign("UTF-8", signParam));
  83.         signParam.put("outTradeNo",resp.get("out_trade_no"));
  84.         return signParam;
  85.     }
  87.     public Map<String,String> queryOrder(String outTradeNo){
  88.         Map<String, String> data = new HashMap<>(0);
  89.         data.put("out_trade_no", outTradeNo);
  90.         try {
  91.             return wxPay.orderQuery(data);
  92.         } catch (Exception e) {
  93.             e.printStackTrace();
  94.         }
  95.         return null;
  96.     }
  98.     public String getRandomString(int length){
  99.         //定义一个字符串（A-Z，a-z，0-9）即62位；
  100.         String str="zxcvbnmlkjhgfdsaqwertyuiopQWERTYUIOPASDFGHJKLZXCVBNM1234567890";
  101.         //由Random生成随机数
  102.         Random random=new Random();
  103.         StringBuffer sb=new StringBuffer();
  104.         //长度为几就循环几次
  105.         for(int i=0; i<length; ++i){
  106.             //产生0-61的数字
  107.             int number=random.nextInt(62);
  108.             //将产生的数字通过length次承载到sb中
  109.             sb.append(str.charAt(number));
  110.         }
  111.         //将承载的字符转换成字符串
  112.         return sb.toString();
  113.     }
  114. }

其中用到的工具类：

PayCommonUtil 主要作用为生成签名以及解析xml

  1. @Component
  2. public class PayCommonUtil {
  3.     @Autowired
  4.     private PayInfoConfig payInfoConfig;
  6.     /**
  7.      * 定义签名，微信根据参数字段的ASCII码值进行排序 加密签名,故使用SortMap进行参数排序
  8.      * @param characterEncoding 字符编码
  9.      * @param parameters 需要签名的参数
  10.      * @return sign string。class
  11.      */
  12.     public String createSign(String characterEncoding,SortedMap<String,String> parameters){
  13.         StringBuilder sb = new StringBuilder();
  14.         Set<Map.Entry<String, String>> es = parameters.entrySet();
  15.         for (Map.Entry<String, String> entry : es) {
  16.             String k = entry.getKey();
  17.             Object v = entry.getValue();
  18.             if (null != v && !"".equals(v)
  19.                     && !"sign".equals(k) && !"key".equals(k)) {
  20.                 sb.append(k).append("=").append(v).append("&");
  21.             }
  22.         }
  23.         //最后加密时添加商户密钥，由于key值放在最后，所以不用添加到SortMap里面去，单独处理，编码方式采用UTF-8
  24.         sb.append("key=").append(payInfoConfig.getWxpay().getMchKey());
  25.         return MD5Util.MD5Encode(sb.toString(), characterEncoding).toUpperCase();
  26.     }
  28.     /**
  29.      * 将封装好的参数转换成Xml格式类型的字符串
  30.      * @param parameters 封装好的参数
  31.      * @return String xml类型的字符串
  32.      */
  33.     public String getRequestXml(SortedMap<String,String> parameters){
  34.         StringBuilder sb = new StringBuilder();
  35.         sb.append("<xml>");
  36.         Set<Map.Entry<String, String>> es = parameters.entrySet();
  37.         for (Map.Entry<String, String> entry : es) {
  38.             String k = entry.getKey();
  39.             String v = entry.getValue();
  40.             if ("sign".equalsIgnoreCase(k)) {
  42.             } else if ("attach".equalsIgnoreCase(k) || "body".equalsIgnoreCase(k)) {
  43.                 sb.append("<").append(k).append(">").append("<![CDATA[").append(v).append("]]></").append(k).append(">");
  44.             } else {
  45.                 sb.append("<").append(k).append(">").append(v).append("</").append(k).append(">");
  46.             }
  47.         }
  48.         sb.append("<" + "sign" + ">" + "<![CDATA[").append(parameters.get("sign")).append("]]></").append("sign").append(">");
  49.         sb.append("</xml>");
  50.         return sb.toString();
  51.     }
  52.     /**
  53.      * 验证回调签名
  54.      * @return Boolean， 是否正确
  55.      */
  56.     public boolean isTenpaySign(Map<String, String> map) {
  57.         String characterEncoding="utf-8";
  58.         String charset = "utf-8";
  59.         String signFromAPIResponse = map.get("sign");
  60.         if (signFromAPIResponse == null || "".equals(signFromAPIResponse)) {
  61.             System.out.println("API返回的数据签名数据不存在，有可能被第三方篡改!!!");
  62.             return false;
  63.         }
  64.         System.out.println("服务器回包里面的签名是:" + signFromAPIResponse);
  65.         //过滤空 设置 TreeMap
  66.         SortedMap<String,String> packageParams = new TreeMap<>();
  68.         for (String parameter : map.keySet()) {
  69.             String parameterValue = map.get(parameter);
  70.             String v = "";
  71.             if (null != parameterValue) {
  72.                 v = parameterValue.trim();
  73.             }
  74.             packageParams.put(parameter, v);
  75.         }
  77.         StringBuilder sb = new StringBuilder();
  78.         Set<Map.Entry<String, String>> es = packageParams.entrySet();
  80.         for (Object e1 : es) {
  81.             @SuppressWarnings("unchecked")
  82.             Map.Entry<String, String> entry = (Map.Entry<String, String>) e1;
  83.             String k = entry.getKey();
  84.             String v = entry.getValue();
  85.             if (!"sign".equals(k) && null != v && !"".equals(v)) {
  86.                 sb.append(k).append("=").append(v).append("&");
  87.             }
  88.         }
  89.         sb.append("key=").append(payInfoConfig.getWxpay().getMchKey());
  91.         //将API返回的数据根据用签名算法进行计算新的签名，用来跟API返回的签名进行比较
  92.         //算出签名
  93.         String resultSign = "";
  94.         String tobesign = sb.toString();
  96.         if (null == charset || "".equals(charset)) {
  97.             resultSign = MD5Util.MD5Encode(tobesign, characterEncoding).toUpperCase();
  98.         }else{
  99.             try{
  100.                 resultSign = MD5Util.MD5Encode(tobesign, characterEncoding).toUpperCase();
  101.             }catch (Exception e) {
  102.                 resultSign = MD5Util.MD5Encode(tobesign, characterEncoding).toUpperCase();
  103.             }
  104.         }
  106.         String tenpaySign = (packageParams.get("sign")).toUpperCase();
  107.         return tenpaySign.equals(resultSign);
  108.     }
  110.     public String httpsRequest(String requestUrl, String requestMethod, String outputStr)
  111.     {
  112.         try
  113.         {
  114.             // 创建SSLContext对象，并使用我们指定的信任管理器初始化
  115.             TrustManager[] tm =
  116.                     { null };
  117.             SSLContext sslContext = SSLContext.getInstance("SSL", "SunJSSE");
  118.             sslContext.init(null, tm, new java.security.SecureRandom());
  119.             // 从上述SSLContext对象中得到SSLSocketFactory对象
  120.             SSLSocketFactory ssf = sslContext.getSocketFactory();
  121.             URL url = new URL(requestUrl);
  122.             HttpsURLConnection conn = (HttpsURLConnection) url.openConnection();
  123.             conn.setDoOutput(true);
  124.             conn.setDoInput(true);
  125.             conn.setUseCaches(false);
  126.             // 设置请求方式（GET/POST）
  127.             conn.setRequestMethod(requestMethod);
  128.             conn.setRequestProperty("content-type", "application/x-www-form-urlencoded");
  129.             // 当outputStr不为null时向输出流写数据
  130.             if (null != outputStr)
  131.             {
  132.                 OutputStream outputStream = conn.getOutputStream();
  133.                 // 注意编码格式
  134.                 outputStream.write(outputStr.getBytes(StandardCharsets.UTF_8));
  135.                 outputStream.close();
  136.             }
  137.             // 从输入流读取返回内容
  138.             InputStream inputStream = conn.getInputStream();
  139.             InputStreamReader inputStreamReader = new InputStreamReader(inputStream, StandardCharsets.UTF_8);
  140.             BufferedReader bufferedReader = new BufferedReader(inputStreamReader);
  141.             String str = null;
  142.             StringBuilder buffer = new StringBuilder();
  143.             while ((str = bufferedReader.readLine()) != null)
  144.             {
  145.                 buffer.append(str);
  146.             }
  147.             // 释放资源
  148.             bufferedReader.close();
  149.             inputStreamReader.close();
  150.             inputStream.close();
  151.             inputStream = null;
  152.             conn.disconnect();
  153.             return buffer.toString();
  154.         } catch (ConnectException ce) {
  155.             // log.error("连接超时：{}", ce);
  156.         } catch (Exception e) {
  157.         }
  158.         return null;
  159.     }
  160. }

MD5Util 主要作用，用于数据的加密，默认方式为MD5加密

  1. public class MD5Util {
  3.    private static String byteArrayToHexString(byte b[]) {
  4.       StringBuffer resultSb = new StringBuffer();
  5.       for (int i = 0; i < b.length; i++)
  6.          resultSb.append(byteToHexString(b[i]));
  8.       return resultSb.toString();
  9.    }
  11.    private static String byteToHexString(byte b) {
  12.       int n = b;
  13.       if (n < 0)
  14.          n += 256;
  15.       int d1 = n / 16;
  16.       int d2 = n % 16;
  17.       return hexDigits[d1] + hexDigits[d2];
  18.    }
  20.    public static String MD5Encode(String origin, String charsetname) {
  21.       String resultString = null;
  22.       try {
  23.          resultString = new String(origin);
  24.          MessageDigest md = MessageDigest.getInstance("MD5");
  25.          if (charsetname == null || "".equals(charsetname))
  26.             resultString = byteArrayToHexString(md.digest(resultString
  27.                   .getBytes()));
  28.          else
  29.             resultString = byteArrayToHexString(md.digest(resultString
  30.                   .getBytes(charsetname)));
  31.       } catch (Exception exception) {
  32.       }
  33.       return resultString;
  34.    }
  36.    private static final String hexDigits[] = { "0", "1", "2", "3", "4", "5",
  37.          "6", "7", "8", "9", "a", "b", "c", "d", "e", "f" };
  38. }

3.2 编写Controller，调用封装的工具类方法

这里需要注意的是，需要进行两步操作，分别为

  • 统一下单（appNotify）
  • 二次签名（将统一下单中的一部分数据，进行二次的签名，详见 微信支付开发文档 ）

需要注意的是，wxpay和alipay不同的是，wxpay的price，是按照分来计算的(即1=1分，输入为100，代表收取1块钱)，且不能包含小数点，所以在传入值的时候，需要将Double强转成int

  1. @Autowired
  2. private WxPayUtil wxPayUtil;
  4. @GetMapping("/test")
  5. public ResponseModel test(String title, Double price) {
  6.     Map<String, String> response = wxPayUtil.appNotify(title, ((int)(price * 100)) + "");
  7.     Map<String, String> result = wxPayUtil.appPaySignDouble(response);
  8.     return ResponseModel.success("签名成功!", result);
  9. }

二次签名之后返回的数据如下所示

  1. {
  2.     "appid": "",
  3.     "noncestr": "s3rziO04IYbvhcvU",
  4.     "outTradeNo": "a14As0d1zqmnVWvN1FMriQmPNu3lPW5P",
  5.     "package": "Sign=WXPay",
  6.     "partnerid": "",
  7.     "paySign": "F549A5ADE9E767C49A8432AA2F9297E8",
  8.     "prepayid": "wx09165100326315c5XXXXXXXXXXXXXXXXXX",
  9.     "timestamp": "1599641460"
  10. },

如果，二次签名返回的数据中，都是不为null的，说明，有很大可能，是签名成功的，或者，可以通过 微信支付接口签名校验工具 来进行验证，如果验证成功，此时就靠前端朋友，来测试微信支付了，看能否成功了

如下，验证应该的sign值为 F549A5ADE9E767C49A8432AA2F9297E8，实际返回给前端的paySign也是 F549A5ADE9E767C49A8432AA2F9297E8，即代表签名成功，可以考虑发起支付了
image.png

四、APP进行支付测试

APP 端的测试，详见另一篇文章