微信APP支付-java后台实现

不说废话，直接上代码

先是工具类（注意签名时要排序）：

import java.io.BufferedReader;
import java.io.ByteArrayInputStream;
import java.io.File;
import java.io.FileInputStream;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.io.OutputStream;
import java.net.ConnectException;
import java.net.HttpURLConnection;
import java.net.URL;
import java.security.KeyStore;
import java.util.ArrayList;
import java.util.Collections;
import java.util.Iterator;
import java.util.List;
import java.util.Map;
import java.util.Random;
import java.util.Set;
import java.util.SortedMap;
import java.util.TreeMap;

import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLContext;

import org.apache.http.Consts;
import org.apache.http.HttpEntity;
import org.apache.http.client.methods.CloseableHttpResponse;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
import org.apache.http.entity.StringEntity;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.ssl.SSLContexts;
import org.apache.http.util.EntityUtils;
import org.jdom.Document;
import org.jdom.Element;
import org.jdom.input.SAXBuilder;

import com.system.property.WXProperty;
import com.system.util.Tools;

public class PayCommonUtil {
    
    
    /**
       * post请求并得到返回结果
       * @param requestUrl
       * @param requestMethod
       * @param output
       * @return
       */
      public static String httpsRequest21(String requestUrl, String requestMethod, String output) {
        try{
          URL url = new URL(requestUrl);
          HttpsURLConnection connection = (HttpsURLConnection) url.openConnection();
          connection.setDoOutput(true);
          connection.setDoInput(true);
          connection.setUseCaches(false);
          connection.setRequestMethod(requestMethod);
          if (null != output) {
            OutputStream outputStream = connection.getOutputStream();
            outputStream.write(output.getBytes("UTF-8"));
            outputStream.close();
          }
          // 从输入流读取返回内容
          InputStream inputStream = connection.getInputStream();
          InputStreamReader inputStreamReader = new InputStreamReader(inputStream, "utf-8");
          BufferedReader bufferedReader = new BufferedReader(inputStreamReader);
          String str = null;
          StringBuffer buffer = new StringBuffer();
          while ((str = bufferedReader.readLine()) != null) {
            buffer.append(str);
          }
          bufferedReader.close();
          inputStreamReader.close();
          inputStream.close();
          inputStream = null;
          connection.disconnect();
          return buffer.toString();
        }catch(Exception ex){
          ex.printStackTrace();
        }

        return "";
      }
    

    // 随机字符串生成
    public static String getRandomString(int length) { // length表示生成字符串的长度
        String base = "abcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ";
        Random random = new Random();
        StringBuffer sb = new StringBuffer();
        for (int i = 0; i < length; i++) {
            int number = random.nextInt(base.length());
            sb.append(base.charAt(number));
        }
        return sb.toString();
    }

    // 请求xml组装
    public static String getRequestXml(SortedMap<String, Object> parameters) {
        StringBuffer sb = new StringBuffer();
        sb.append("<xml>");
        Set es = parameters.entrySet();
        
        Iterator it = es.iterator();
        while (it.hasNext()) {
            Map.Entry entry = (Map.Entry) it.next();
            String key = (String) entry.getKey();
            // String value = (String) entry.getValue();
            Object value = entry.getValue();
            // || "body".equalsIgnoreCase(key) || "sign".equalsIgnoreCase(key)
            if ("attach".equalsIgnoreCase(key) || "body".equalsIgnoreCase(key) || "sign".equalsIgnoreCase(key)) {
                sb.append("<" + key + ">" + "<![CDATA[" + value + "]]></" + key + ">");
            } else {
                sb.append("<" + key + ">" + value + "</" + key + ">");
            }
        }
        sb.append("</xml>");
        return sb.toString();
    }


    // 生成签名
    public static String createSign(String characterEncoding, SortedMap<String, Object> parameterMap) {
        if (parameterMap == null) {
            return null;
        }
        StringBuffer sb = new StringBuffer();
        List<String> keys = new ArrayList<>(parameterMap.keySet());
        Collections.sort(keys);

        for (int i = 0; i < keys.size(); i++) {
            String key = keys.get(i);
            // String value = (String) parameters.get(key);
            Object value = parameterMap.get(key);
            // if (Tools.notEmpty(value)) {
            sb.append((i == 0 ? "" : "&") + key + "=" + value);
            // }
        }
        sb.append("&key=" + WXProperty.get("API_KEY"));
        System.out.println("【生成签名   】" + sb.toString());
        String sign = MD5Util.MD5Encode(sb.toString(), characterEncoding).toUpperCase();
        return sign;
    }


    // 微信支付请求
    public static String httpsRequest(String requestUrl, String requestMethod, String outputStr) {
        try {
            URL url = new URL(requestUrl);
            HttpURLConnection conn = (HttpURLConnection) url.openConnection();
            conn.setDoOutput(true);
            conn.setDoInput(true);
            conn.setUseCaches(false);
            // 设置请求方式（GET/POST）
            conn.setRequestMethod(requestMethod);
            conn.setRequestProperty("content-type", "application/x-www-form-urlencoded");
            // 当outputStr不为null时向输出流写数据
            if (null != outputStr) {
                OutputStream outputStream = conn.getOutputStream();
                // 注意编码格式
                outputStream.write(outputStr.getBytes("UTF-8"));
                outputStream.close();
            }
            // 从输入流读取返回内容
            InputStream inputStream = conn.getInputStream();
            InputStreamReader inputStreamReader = new InputStreamReader(inputStream, "utf-8");
            BufferedReader bufferedReader = new BufferedReader(inputStreamReader);
            String str;
            StringBuffer buffer = new StringBuffer();
            while ((str = bufferedReader.readLine()) != null) {
                buffer.append(str);
            }
            // 释放资源
            bufferedReader.close();
            inputStreamReader.close();
            inputStream.close();
            conn.disconnect();
            return buffer.toString();
        } catch (ConnectException ce) {
            System.out.println("连接超时：" + ce);
        } catch (Exception e) {
            System.out.println("https请求异常" + e);
        }
        return null;
    }

    // 退款的请求方法
    public static String httpsRequest2(String requestUrl, String requestMethod, String outputStr) throws Exception {
        KeyStore keyStore = KeyStore.getInstance("PKCS12");
        StringBuilder res = new StringBuilder("");
        FileInputStream instream = new FileInputStream(new File("/home/apiclient_cert.p12"));
        try {
            keyStore.load(instream, "".toCharArray());
        } finally {
            instream.close();
        }

        // Trust own CA and all self-signed certs
        SSLContext sslcontext = SSLContexts.custom().loadKeyMaterial(keyStore, "1313329201".toCharArray()).build();
        // Allow TLSv1 protocol only
        SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslcontext, new String[] { "TLSv1" }, null,
                SSLConnectionSocketFactory.BROWSER_COMPATIBLE_HOSTNAME_VERIFIER);
        CloseableHttpClient httpclient = HttpClients.custom().setSSLSocketFactory(sslsf).build();
        try {

            HttpPost httpost = new HttpPost("https://api.mch.weixin.qq.com/secapi/pay/refund");
            httpost.addHeader("Connection", "keep-alive");
            httpost.addHeader("Accept", "*/*");
            httpost.addHeader("Content-Type", "application/x-www-form-urlencoded; charset=UTF-8");
            httpost.addHeader("Host", "api.mch.weixin.qq.com");
            httpost.addHeader("X-Requested-With", "XMLHttpRequest");
            httpost.addHeader("Cache-Control", "max-age=0");
            httpost.addHeader("User-Agent", "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0) ");
            StringEntity entity2 = new StringEntity(outputStr, Consts.UTF_8);
            httpost.setEntity(entity2);
            System.out.println("executing request" + httpost.getRequestLine());

            CloseableHttpResponse response = httpclient.execute(httpost);

            try {
                HttpEntity entity = response.getEntity();

                System.out.println("----------------------------------------");
                System.out.println(response.getStatusLine());
                if (entity != null) {
                    System.out.println("Response content length: " + entity.getContentLength());
                    BufferedReader bufferedReader = new BufferedReader(new InputStreamReader(entity.getContent()));
                    String text = "";
                    res.append(text);
                    while ((text = bufferedReader.readLine()) != null) {
                        res.append(text);
                        System.out.println(text);
                    }

                }
                EntityUtils.consume(entity);
            } finally {
                response.close();
            }
        } finally {
            httpclient.close();
        }
        return res.toString();

    }

    // xml解析
    public static SortedMap<String, Object> doXMLParse(String strxml){
        strxml = strxml.replaceFirst("encoding=".*"", "encoding="UTF-8"");

        if (null == strxml || "".equals(strxml)) {
            return null;
        }

        SortedMap<String, Object> m = new TreeMap<>();

        InputStream in;
        try {
            in = new ByteArrayInputStream(strxml.getBytes("UTF-8"));
            SAXBuilder builder = new SAXBuilder();
            Document doc = builder.build(in);
            Element root = doc.getRootElement();
            List list = root.getChildren();
            Iterator it = list.iterator();
            while (it.hasNext()) {
                Element e = (Element) it.next();
                String k = e.getName();
                String v = "";
                List children = e.getChildren();
                if (children.isEmpty()) {
                    v = e.getTextNormalize();
                } else {
                    v = getChildrenText(children);
                }

                m.put(k, v);
            }

            // 关闭流
            in.close();
        } catch (Exception e1) {
            e1.printStackTrace();
        }

        return m;
    }

    public static String getChildrenText(List children) {
        StringBuffer sb = new StringBuffer();
        if (!children.isEmpty()) {
            Iterator it = children.iterator();
            while (it.hasNext()) {
                Element e = (Element) it.next();
                String name = e.getName();
                String value = e.getTextNormalize();
                List list = e.getChildren();
                sb.append("<" + name + ">");
                if (!list.isEmpty()) {
                    sb.append(getChildrenText(list));
                }
                sb.append(value);
                sb.append("</" + name + ">");
            }
        }

        return sb.toString();
    }
    
    /**
     * 验证微信回调签名
      * @Description
      * @Author zhaozhenhua
      * @date   2018年5月10日
      * @param pd
      * @return
      * @throws Exception
     */
    public static boolean checkWXSign(SortedMap<String, Object> receiveMap) {
        String signFromAPIResponse = (String) receiveMap.get("sign");
        if (Tools.isEmpty(signFromAPIResponse)) {
            System.out.println("API返回的数据签名数据不存在，有可能被第三方篡改!!!");
            return false;
        }
        //清掉返回数据对象里面的Sign数据（不能把这个数据也加进去进行签名），然后用签名算法进行签名
        receiveMap.remove("sign");
        String responseSign = createSign("utf-8", receiveMap);
        if (!responseSign.equals(signFromAPIResponse)) {
            //签名验不过，表示这个API返回的数据有可能已经被篡改了
            System.out.println("API返回的数据签名验证不通过，有可能被第三方篡改!!! responseSign生成的签名为" + responseSign);
            return false;
        }

        System.out.println("服务器回包里面的签名是:" + signFromAPIResponse);
        return true;
    }
    
}

配置文件信息读取：

import java.io.FileNotFoundException;
import java.io.IOException;
import java.io.InputStream;
import java.util.Properties;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

public class WXProperty {
    private static final Logger logger = LoggerFactory.getLogger(WXProperty.class);

    
    private static Properties props;
    static{
        loadProps();
    }

    synchronized static private void loadProps(){
        props = new Properties();
        InputStream in = null;

        try {
            in = WXProperty.class.getClassLoader().getResourceAsStream("wxinfo.properties");          
            props.load(in);
        } catch (FileNotFoundException e) {
            logger.error("payment.properties文件未找到");
        } catch (IOException e) {
            logger.error("出现IOException");
        } finally {
            try {
                if(null != in) {
                    in.close();
                }
            } catch (IOException e) {
                logger.error("payment.properties文件流关闭出现异常");
            }
        }
    }

    //读取key对应的value
    public static String get(String key){
        if(null == props) {
            loadProps();
        }
        return props.getProperty(key);
    }

}

配置文件（前三个配置为微信申请APP支付通过后给的，而回调地址是自己定义的，在微信统一下单成功后会随着相应信息返回给前端，前端处理成功后执行这个回调接口）：

#服务号的应用ID
APP_ID = XXXXXX
#商户号
MCH_ID = XXXXXXX
#API密钥（前三个为微信申请获得）
API_KEY = XXXXXXX
#签名加密方式
SIGN_TYPE = MD5
#微信支付证书名称
CERT_PATH = XXXXX
#微信回调地址(自己定义)
notify_url = XXXXX/success

MD5加密方法：

public class MD5Util {

    private static String byteArrayToHexString(byte b[]) {
        StringBuffer resultSb = new StringBuffer();
        for (int i = 0; i < b.length; i++)
            resultSb.append(byteToHexString(b[i]));

        return resultSb.toString();
    }

    private static String byteToHexString(byte b) {
        int n = b;
        if (n < 0)
            n += 256;
        int d1 = n / 16;
        int d2 = n % 16;
        return hexDigits[d1] + hexDigits[d2];
    }

    public static String MD5Encode(String origin, String charsetname) {
        String resultString = null;
        try {
            resultString = new String(origin);
            MessageDigest md = MessageDigest.getInstance("MD5");
            if (charsetname == null || "".equals(charsetname))
                resultString = byteArrayToHexString(md.digest(resultString.getBytes()));
            else
                resultString = byteArrayToHexString(md.digest(resultString.getBytes(charsetname)));
        } catch (Exception exception) {
        }
        return resultString;
    }

    private static final String hexDigits[] = { "0", "1", "2", "3", "4", "5", "6", "7", "8", "9", "a", "b", "c", "d", "e", "f" };
}

微信支付统一下单接口封装的方法：

public synchronized static SortedMap<String, Object> weixinPrePay (PageData pd) throws JDOMException, IOException{
        Map<String,String> returnMap = new HashMap<>();
            String trade_no = (String) pd.get("ORDERNUMBER");
            //支付金额
            BigDecimal totalAmount =  new BigDecimal((String)pd.get("ORDERMONEY"));
            //描述（以商品标题做为描述）
            String description = "XXXX："+trade_no;
            //预支付
            SortedMap<String, Object> parameterMap = new TreeMap<String, Object>();  
             parameterMap.put("appid", WXProperty.get("APP_ID"));  
             parameterMap.put("mch_id", WXProperty.get("MCH_ID"));  
             parameterMap.put("nonce_str", PayCommonUtil.getRandomString(32));  
             parameterMap.put("body", description);
             parameterMap.put("out_trade_no", trade_no);
             parameterMap.put("fee_type", "CNY");  
             BigDecimal total = totalAmount.multiply(new BigDecimal(100));  
             //parameterMap.put("total_fee", total.intValue()+"");  
             parameterMap.put("total_fee", 1+"");  
             parameterMap.put("spbill_create_ip", pd.get("spbillCreateIp"));  
             parameterMap.put("notify_url", WXProperty.get("notify_url"));
             parameterMap.put("trade_type", "APP");
             parameterMap.put("sign_type", "MD5");
             parameterMap.put("attach", pd.get("ORDERTYPE"));//附加数据
             String sign = PayCommonUtil.createSign("UTF-8", parameterMap) ;
             parameterMap.put("sign", sign);
             
             String requestXML = PayCommonUtil.getRequestXml(parameterMap);
             
             System.out.println("【转换为xml格式的参数】   "+requestXML);  
             String resultXML = PayCommonUtil.httpsRequest(  
                     "https://api.mch.weixin.qq.com/pay/unifiedorder","POST", requestXML); 
             
             System.out.println("【返回的XML】 " + resultXML);
             Map mapResult = PayCommonUtil.doXMLParse(resultXML);
            String returnCode = (String) mapResult.get("return_code");
             System.out.println("【返回内容   】   "+returnCode);  
            if("SUCCESS".equals(returnCode)){
                String resultCode = (String) mapResult.get("result_code");
                if("SUCCESS".equals(resultCode)){
                    String prepay_id = (String) mapResult.get("prepay_id");
                    
                    SortedMap<String, Object> finalpackage = new TreeMap<String, Object>();
                    finalpackage.put("appid", WXProperty.get("APP_ID"));
                    finalpackage.put("partnerid", WXProperty.get("MCH_ID"));
                    finalpackage.put("prepayid", prepay_id);
                    String noncestr = PayCommonUtil.getRandomString(32);
                    finalpackage.put("noncestr", noncestr);
                    String timestamp = String.valueOf(System.currentTimeMillis() / 1000);
                    finalpackage.put("timestamp", timestamp);
                    finalpackage.put("package", "Sign=WXPay");
                    sign = PayCommonUtil.createSign("UTF-8", finalpackage) ;
                    SortedMap<String, Object> returnmap = new TreeMap<String, Object>();
                    returnmap.put("appid", WXProperty.get("APP_ID"));
                    returnmap.put("partnerId", WXProperty.get("MCH_ID"));
                    returnmap.put("prepayId", prepay_id);
                    returnmap.put("nonceStr", noncestr);
                    returnmap.put("timeStamp", timestamp);
                    returnmap.put("package", "Sign=WXPay");
                    returnmap.put("sign", sign);
                    return returnmap;
                }else{
                    String errCodeDes = (String) mapResult.get("err_code_des");
                    returnMap.put("errCodeDes", errCodeDes);
                }
            }else{
                String returnMsg = (String) mapResult.get("return_msg");
                returnMap.put("returnMsg", returnMsg);
            }
            return null;
    }

微信支付回调地址：

 @RequestMapping(value = "/success")
         public String wxpaySucc(HttpServletRequest request){
             logger.info("微信支付回调");
             
             //商户处理后同步返回给微信参数：
             String xmlResultSuccess = "<xml>" + "<return_code><![CDATA[SUCCESS]]></return_code>" + "<return_msg><![CDATA[OK]]></return_msg>" + "</xml> ";
             String xmlResultFailure = "<xml>" + "<return_code><![CDATA[FAIL]]></return_code>" + "<return_msg><![CDATA[报文为空]]></return_msg>" + "</xml> ";
             
             SortedMap<String, Object> params = null;
            try {
                InputStream inStream = request.getInputStream();
                ByteArrayOutputStream outSteam = new ByteArrayOutputStream();
                byte[] buffer = new byte[1024];
                int len = 0;
                while ((len = inStream.read(buffer)) != -1) {
                    outSteam.write(buffer, 0, len);
                }
                String resultxml = new String(outSteam.toByteArray(), "utf-8");
                params =  PayCommonUtil.doXMLParse(resultxml);
                logger.info("微信回调的信息:解析XML得到key:value");
                for (Object b : params.keySet()) {
                    logger.info("key="+b+":"+"value="+params.get(b));
                }
                outSteam.close();
                inStream.close();
            } catch (Exception e) {
                e.printStackTrace();
                logger.info("回调xml解析失败");
            }
            //验证签名
             boolean signVerified = PayCommonUtil.checkWXSign(params);
             logger.info("验证签名:"+signVerified);
             if (!signVerified) {
                 // 支付失败，失败业务逻辑处理
                 //将订单状态设置为待支付
                 
                 return xmlResultFailure;
             } else {
                     String return_code = (String) params.get("return_code");//状态
                     String out_trade_no = (String) params.get("out_trade_no");//订单号
                     String ORDERTYPE = (String) params.get("attach");//商家数据包
                     System.out.println("订单号out_trade_no:"+out_trade_no);
                     
                     //防止微信重复通知
                     PageData pd = new PageData();
                     pd.put("ORDERNUMBER", out_trade_no);
                     try {
                        PageData payInfo = alipayInService.getPayInfo(pd);
                        if(payInfo != null){
                            return xmlResultSuccess;
                        }
                    } catch (Exception e1) {
                        e1.printStackTrace();
                    }
                     
                     if (return_code.equals("SUCCESS")) {
                         if (out_trade_no != null) {
                             //付款成功业务逻辑处理
                                    return xmlResultSuccess;
                                default:
                                    break;
                                }
                            } catch (Exception e) {
                                e.printStackTrace();
                            }
                         }
                     }else{
                         logger.info("微信手机支付回调失败订单号:{}"+out_trade_no);
                         return xmlResultFailure;
                     }
             }
            return null;
         }