springboot支付宝APP支付与退款

淩亂°似流年 2023-06-30 01:46 57阅读 0赞

pom依赖：

<dependency>
                <groupId>com.alipay.sdk</groupId>
                <artifactId>alipay-sdk-java</artifactId>
                <version>4.8.73.ALL</version>
            </dependency>

application.yml配置：

ali-pay:
      app-id: 
      private-key: 
      app-cert-path: classpath:cert/appCertPublicKey_xxx.crt
      alipay-cert-path: classpath:cert/alipayCertPublicKey_RSA2.crt
      alipay-root-cert-path: classpath:cert/alipayRootCert.crt
      notify-url: http://xxx.xxx.com:8080/pay/alipay/notify

读取配置信息，初始化配置，两个文件：

@Configuration
    @ConfigurationProperties(prefix = "ali-pay")
    @Data
    public class AliPayProperties {
    
        private String appId;
    
        private String privateKey;
    
        private String notifyUrl;
    
        private String appCertPath;
    
        private String alipayCertPath;
    
        private String alipayRootCertPath;
    }

@Configuration
    public class AliPayConfig {
    
        private final AliPayProperties properties;
    
        public AliPayConfig(AliPayProperties properties) {
            this.properties = properties;
        }
    
        @Bean
        public AlipayClient alipayClient() throws AlipayApiException, FileNotFoundException {
    
            CertAlipayRequest certAlipayRequest = new CertAlipayRequest();
            certAlipayRequest.setServerUrl("https://openapi.alipay.com/gateway.do");
            certAlipayRequest.setAppId(properties.getAppId());
            certAlipayRequest.setPrivateKey(properties.getPrivateKey());
            certAlipayRequest.setFormat("json");
            certAlipayRequest.setCharset(AlipayConstants.CHARSET_UTF8);
            certAlipayRequest.setSignType(AlipayConstants.SIGN_TYPE_RSA2);
            certAlipayRequest.setCertPath(ResourceUtils.getFile(properties.getAppCertPath()).getAbsolutePath());
            certAlipayRequest.setAlipayPublicCertPath(ResourceUtils.getFile(properties.getAlipayCertPath()).getAbsolutePath());
            certAlipayRequest.setRootCertPath(ResourceUtils.getFile(properties.getAlipayRootCertPath()).getAbsolutePath());
            return new DefaultAlipayClient(certAlipayRequest);
    
        }
    }

支付宝支付/退款/查询：

/**
         * 支付宝预支付
         * @param body
         * @return
         */
        public String aliPrepay(PayRequest body) {
    
            // TODO 先保存支付请求历史记录
    
            AlipayTradeAppPayRequest request = new AlipayTradeAppPayRequest();
            AlipayTradeAppPayModel model = new AlipayTradeAppPayModel();
            model.setBody(body.getBody());
            model.setSubject(body.getSubject());
            model.setOutTradeNo(body.getPaySn());
            model.setTimeoutExpress("30m"); // 非必填
            model.setTotalAmount(body.getTotalFee().toString());
            model.setPassbackParams(body.getAttach()); // 非必填
            request.setBizModel(model);
            request.setNotifyUrl(aliPayProperties.getNotifyUrl());
            try {
                //这里和普通的接口调用不同，使用的是sdkExecute
                AlipayTradeAppPayResponse response = alipayClient.sdkExecute(request);
                //就是orderString 可以直接给客户端请求，无需再做处理。
                String returnBody = response.getBody();
                return returnBody;
            } catch (AlipayApiException e) {
                e.printStackTrace();
                log.error("aliPrepay", e);
            }
    
            return null;
        }
    
        /**
         * 支付宝通知回调处理
         * @param request
         * @return
         */
        public String aliPayNotify(HttpServletRequest request) {
            Map<String, String[]> requestParams = request.getParameterMap();
            Map<String, String> params = new HashMap<>(requestParams.size());
    
            for (String key : requestParams.keySet()) {
                String[] values = requestParams.get(key);
                String valueStr = "";
                for (int i = 0; i < values.length; i++) {
                    valueStr = (i == values.length - 1) ? valueStr + values[i]
                            : valueStr + values[i] + ",";
                }
                params.put(key, valueStr);
            }
    
            try {
                // alipaypublickey是支付宝的公钥
                boolean signVerified = AlipaySignature.rsaCertCheckV1(params,
                        ResourceUtils.getFile(aliPayProperties.getAlipayCertPath()).getAbsolutePath(),
                        AlipayConstants.CHARSET_UTF8, AlipayConstants.SIGN_TYPE_RSA2);
    
                if (!signVerified) {
                    log.info("支付宝支付-通知回调签名认证失败");
                    return "failure";
                }
                // 按照支付结果异步通知中的描述，对支付结果中的业务内容进行1\2\3\4二次校验，
                /* 1、商户需要验证该通知数据中的out_trade_no是否为商户系统中创建的订单号，
                 * 2、判断total_amount是否确实为该订单的实际金额（即商户订单创建时的金额），
                 * 3、校验通知中的seller_id（或者seller_email)是否为out_trade_no这笔单据的对应的操作方（有的时候，一个商户可能有多个seller_id/seller_email），可根据实际情况省略
                 * 4、验证app_id是否为该商户本身。上述1、2、3、4有任何一个验证不通过，则表明本次通知是异常通知，务必忽略。
                 * 在上述验证通过后商户必须根据支付宝不同类型的业务通知，正确的进行不同的业务处理，并且过滤重复的通知结果数据。
                 * 在支付宝的业务通知中，只有交易通知状态为TRADE_SUCCESS或TRADE_FINISHED时，支付宝才会认定为买家付款成功。*/
    
                // 1，2，3，省略；4、验证app_id是否为该商户本身。
                if (!params.get("app_id").equals(aliPayProperties.getAppId())) {
                    throw new AlipayApiException("app_id不一致");
                }
    
                String tradeStatus = (String) params.get("tradeStatus");
                // 支付成功
                if (tradeStatus.equals(AliPayTradeStatus.TRADE_SUCCESS.name())
                        || tradeStatus.equals(AliPayTradeStatus.TRADE_FINISHED.name())) {
                    // 支付成功业务处理
    
                } else {
                    // 支付失败
                }
                return "success";
    
            } catch (AlipayApiException e) {
                log.error("支付宝支付-失败", e);
                return "failure";
            } catch (FileNotFoundException e) {
                log.error("支付宝支付-公钥文件不存在", e);
                return "failure";
            }
        }
    
        /**
         * 支付宝支付订单查询
         * @param tradeNo      支付宝订单号
         * @param paySn        本地支付流水号
         * @return
         */
        public String aliOrderQuery(String tradeNo, String paySn) {
            AlipayTradeQueryRequest request = new AlipayTradeQueryRequest();
            AlipayTradeQueryModel model = new AlipayTradeQueryModel();
            model.setTradeNo(tradeNo);
            model.setOutTradeNo(paySn);
            request.setBizModel(model);
            AlipayTradeQueryResponse response;
            try {
                response = alipayClient.execute(request);
                if (!"10000".equals(response.getCode())) {
                    throw new AlipayApiException("支付宝支付-查询失败！");
                }
            } catch (AlipayApiException e) {
                log.error("支付宝支付-查询失败", e);
                // 失败
            }
    
            if (!"TRADE_SUCCESS".equals(response.getTradeStatus())) {
    
                // 失败
            }
            // 成功
            response.getTradeStatus();
            response.getTradeNo();
            response.getOutTradeNo();
            response.getTotalAmount();
            response.getSendPayDate();
        }
    
        /**
         * 支付宝退款
         * @param body
         * @return
         */
        private String aliRefund(RefundRequest body) {
            AlipayTradeRefundRequest refundRequest = new AlipayTradeRefundRequest();
            AlipayTradeRefundModel model = new AlipayTradeRefundModel();
            model.setOutTradeNo(body.getPaySerial());
            model.setRefundAmount(body.getPayAmount().toString());
            model.setRefundReason("商品退款");
            refundRequest.setBizModel(model);
    
            try {
                AlipayTradeRefundResponse response = alipayClient.certificateExecute(refundRequest);
    
                if (response.isSuccess() && response.getFundChange().equalsIgnoreCase("Y")) {
                    // 成功
                } else {
                    // 失败
                }
            } catch (AlipayApiException e) {
                e.printStackTrace();
                log.error(" - aliRefund - ", e);
            }
        }