| package cc.mrbird.febs.pay.service.impl; | 
|   | 
| import cc.mrbird.febs.common.properties.XcxProperties; | 
| import cc.mrbird.febs.common.utils.AppContants; | 
| import cc.mrbird.febs.common.utils.SpringContextHolder; | 
| import cc.mrbird.febs.mall.entity.MallInvoice; | 
| import cc.mrbird.febs.mall.entity.MallOrderInfo; | 
| import cc.mrbird.febs.mall.entity.MallOrderItem; | 
| import cc.mrbird.febs.mall.mapper.MallInvoiceMapper; | 
| import cc.mrbird.febs.mall.mapper.MallOrderInfoMapper; | 
| import cc.mrbird.febs.mall.mapper.MallOrderItemMapper; | 
| import cc.mrbird.febs.pay.model.FPCertificateVo; | 
| import cc.mrbird.febs.pay.model.FPCertificates; | 
| import cc.mrbird.febs.pay.model.FPEncryptCertificate; | 
| import cc.mrbird.febs.pay.service.WxFaPiaoService; | 
| import cc.mrbird.febs.pay.util.JCEUtil; | 
| import cc.mrbird.febs.pay.util.RandomStringGenerator; | 
| import cn.hutool.core.collection.CollUtil; | 
| import cn.hutool.core.util.ObjectUtil; | 
| import cn.hutool.json.JSONObject; | 
| import cn.hutool.json.JSONUtil; | 
| import com.wechat.pay.contrib.apache.httpclient.util.AesUtil; | 
| import lombok.RequiredArgsConstructor; | 
| import lombok.extern.slf4j.Slf4j; | 
| import okhttp3.HttpUrl; | 
| import org.apache.http.HttpEntity; | 
| import org.apache.http.client.methods.CloseableHttpResponse; | 
| import org.apache.http.client.methods.HttpGet; | 
| import org.apache.http.client.methods.HttpPatch; | 
| import org.apache.http.client.methods.HttpPost; | 
| import org.apache.http.client.protocol.HttpClientContext; | 
| import org.apache.http.entity.StringEntity; | 
| import org.apache.http.impl.client.CloseableHttpClient; | 
| import org.apache.http.impl.client.HttpClients; | 
| import org.apache.http.message.BasicNameValuePair; | 
| import org.apache.http.util.EntityUtils; | 
| import org.springframework.core.io.ClassPathResource; | 
| import org.springframework.stereotype.Service; | 
| import org.springframework.util.Base64Utils; | 
| import org.springframework.web.bind.annotation.RequestBody; | 
|   | 
| import javax.servlet.http.HttpServletRequest; | 
| import java.io.*; | 
| import java.nio.charset.StandardCharsets; | 
| import java.security.*; | 
| import java.security.cert.CertificateFactory; | 
| import java.security.cert.X509Certificate; | 
| import java.security.spec.InvalidKeySpecException; | 
| import java.security.spec.PKCS8EncodedKeySpec; | 
| import java.text.ParseException; | 
| import java.text.SimpleDateFormat; | 
| import java.util.*; | 
| import java.util.stream.Collectors; | 
|   | 
| @Slf4j | 
| @Service | 
| @RequiredArgsConstructor | 
| public class WxFaPiaoServiceImpl implements WxFaPiaoService { | 
|   | 
|     private final MallOrderInfoMapper mallOrderInfoMapper; | 
|     private final MallOrderItemMapper mallOrderItemMapper; | 
|     private final MallInvoiceMapper mallInvoiceMapper; | 
|   | 
|     private final XcxProperties xcxProperties = SpringContextHolder.getBean(XcxProperties.class); | 
|   | 
|     @Override | 
|     public String createAuthorization(String method, String canonicalUrl, String body, PrivateKey keyPair) throws UnsupportedEncodingException, NoSuchAlgorithmException { | 
|         String nonceStr = RandomStringGenerator.getRandomStringByLength(32);//随机字符串 | 
|         long timestamp = System.currentTimeMillis() / 1000;//时间戳 | 
|         HttpUrl httpurl = HttpUrl.parse(canonicalUrl); | 
|         String message = buildMessage(method, httpurl, timestamp, nonceStr, body); | 
|         log.info("签名串:\n"+message); | 
|         log.info("签名串长度:\n"+getWordCount(message)); | 
|         String signature = sign2(message.getBytes("utf-8"), keyPair); | 
|   | 
|         log.info("签名串sign:\n"+signature); | 
|         log.info("签名串长度sign:\n"+getWordCount(signature)); | 
| //        String yourCertificateSerialNo = "221D49AEC4EA538A63941D1936709C8559EB05C5"; | 
|         return "mchid=\"" + xcxProperties.getWecharpayMchid() + "\"," | 
|                 + "nonce_str=\"" + nonceStr + "\"," | 
|                 + "timestamp=\"" + timestamp + "\"," | 
|                 + "serial_no=\"" + AppContants.WX_CARD_NUM + "\"," | 
|                 + "signature=\"" + signature + "\""; | 
|     } | 
|   | 
|     public   int  getWordCount(String s) | 
|     { | 
|         int  length  =   0 ; | 
|         for ( int  i  =   0 ; i  <  s.length(); i ++ ) | 
|         { | 
|             int  ascii  =  Character.codePointAt(s, i); | 
|             if (ascii  >=   0   &&  ascii  <= 255 ) | 
|                 length ++ ; | 
|             else | 
|                 length  +=   2 ; | 
|   | 
|         } | 
|         return  length; | 
|   | 
|     } | 
|   | 
|     public String sign2(byte[] message,PrivateKey keyPair) throws NoSuchAlgorithmException { | 
|         Signature sign = Signature.getInstance("SHA256withRSA"); | 
|         String s = null; | 
|         try { | 
|             sign.initSign(keyPair); | 
|             sign.update(message); | 
|             s = Base64.getEncoder().encodeToString(sign.sign()); | 
|         } catch (InvalidKeyException e) { | 
|             e.printStackTrace(); | 
|         } catch (SignatureException e) { | 
|             e.printStackTrace(); | 
|         } | 
|         return s; | 
|     } | 
|   | 
|     public String buildMessage(String method, HttpUrl url, long timestamp, String nonceStr, String body) { | 
|         String canonicalUrl = url.encodedPath(); | 
|         if (url.encodedQuery() != null) { | 
|             canonicalUrl += "?" + url.encodedQuery(); | 
|         } | 
|         return method + "\n" | 
|                 + canonicalUrl + "\n" | 
|                 + timestamp + "\n" | 
|                 + nonceStr + "\n" | 
|                 + body + "\n"; | 
|     } | 
|   | 
|     @Override | 
|     public PrivateKey getPrivateKeyV3() throws IOException { | 
|         InputStream inputStream = new ClassPathResource("wxP12/apiclient_key.pem") | 
|                 .getInputStream(); | 
|   | 
|         String content = new BufferedReader(new InputStreamReader(inputStream)) | 
|                 .lines().collect(Collectors.joining(System.lineSeparator())); | 
|         try { | 
|             String privateKey = content.replace("-----BEGIN PRIVATE KEY-----", "") | 
|                     .replace("-----END PRIVATE KEY-----", "") | 
|                     .replaceAll("\\s+", ""); | 
|   | 
|             KeyFactory kf = KeyFactory.getInstance("RSA"); | 
|             return kf.generatePrivate( | 
|                     new PKCS8EncodedKeySpec(Base64.getDecoder().decode(privateKey))); | 
|         } catch (NoSuchAlgorithmException e) { | 
|             throw new RuntimeException("当前Java环境不支持RSA", e); | 
|         } catch (InvalidKeySpecException e) { | 
|             throw new RuntimeException("无效的密钥格式"); | 
|         } | 
|     } | 
|   | 
|     @Override | 
|     public String sendPatch(String url, String params, String token) { | 
|         String result = ""; | 
|         CloseableHttpClient httpClient = HttpClients.createDefault(); | 
|         HttpPatch httpPatch = new HttpPatch(url); | 
|         CloseableHttpResponse response = null; | 
|         httpPatch.setHeader("Content-type", "application/json"); | 
|         httpPatch.setHeader("Charset", "utf-8"); | 
|         httpPatch.setHeader("Accept", "application/json"); | 
|         httpPatch.setHeader("Accept-Charset", "utf-8"); | 
|         httpPatch.setHeader("Authorization", token); | 
|         try { | 
|             StringEntity data = new StringEntity(params, "utf-8"); | 
|             httpPatch.setEntity(data); | 
|             response = httpClient.execute(httpPatch); | 
|             HttpEntity entity = response.getEntity(); | 
|             result = EntityUtils.toString(entity); | 
|         } catch (Exception e) { | 
|             result = "{\"status\":\"1\",\"error\":\"" + e.getMessage() + "\"}"; | 
|         }finally { | 
|             try { | 
|                 httpClient.close(); | 
|                 if (response != null) { | 
|                     response.close(); | 
|                 } | 
|             } catch (IOException var22) { | 
|                 var22.printStackTrace(); | 
|             } | 
|         } | 
|         return result; | 
|     } | 
|   | 
|     @Override | 
|     public String sendPost(String url, String params, String token) { | 
|         String result = ""; | 
|         int err = 0; | 
|         while (true) { | 
|             CloseableHttpClient client = HttpClients.createDefault(); | 
|             HttpPost httpPost = new HttpPost(url); | 
|             CloseableHttpResponse response = null; | 
|             try { | 
|                 httpPost.addHeader("Content-type", "application/json"); | 
|                 httpPost.addHeader("Charset", "utf-8"); | 
|                 httpPost.addHeader("Accept", "application/json"); | 
|                 httpPost.addHeader("Accept-Charset", "utf-8"); | 
|                 httpPost.addHeader("Authorization", token); | 
|   | 
|                 StringEntity data = new StringEntity(params, "utf-8"); | 
|                 httpPost.setEntity(data); | 
|                 response = client.execute(httpPost); | 
|                 HttpEntity resEntity = response.getEntity(); | 
|                 result = EntityUtils.toString(resEntity); | 
|                 return result; | 
|             } catch (IOException e) { | 
|                 result = "{\"status\":\"1\",\"errors\":\"" + e.getMessage() + "\"}"; | 
|                 if (err++ > 2) { | 
|                     break; | 
|                 } | 
|                 try { | 
|                     Thread.sleep((err + 2) * 1000); | 
|                 } catch (InterruptedException e1) { | 
|                     result = "{\"status\":\"1\",\"errors\":\"" + e1.getMessage() + "\"}"; | 
|                 } | 
|             }finally { | 
|                 try { | 
|                     client.close(); | 
|                     if (response != null) { | 
|                         response.close(); | 
|                     } | 
|                 } catch (IOException var22) { | 
|                     var22.printStackTrace(); | 
|                 } | 
|             } | 
|         } | 
|         return result; | 
|     } | 
|   | 
|     @Override | 
|     public String sendGet(String url, Map<String, Object> params, String token) { | 
|         String result = ""; | 
|         int err = 0; | 
|         while (true) { | 
|             CloseableHttpClient httpClient = HttpClients.createDefault(); | 
|             CloseableHttpResponse response = null; | 
|             try { | 
|                 List<BasicNameValuePair> parameters = new ArrayList<>(); | 
|                 for (Map.Entry<String, Object> entry : params.entrySet()) { | 
|                     parameters.add(new BasicNameValuePair(entry.getKey(), entry.getValue().toString())); | 
|                 } | 
|                 StringBuilder dataparm = new StringBuilder(); | 
|                 params.forEach((k, v) -> dataparm.append("&" + k + "=" + v)); | 
|                 String urlparm = ""; | 
|                 String string = dataparm.toString(); | 
|                 if (!"".equals(string)) { | 
|                     urlparm = dataparm.toString().substring(1); | 
|                 } | 
|                 HttpGet httpget = new HttpGet(url + "?" + urlparm); | 
|   | 
|                 httpget.addHeader("Accept", "application/json"); | 
|                 httpget.addHeader("User-Agent", "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36"); | 
|                 httpget.addHeader("Content-Type", "application/x-www-form-urlencoded; charset=UTF-8"); | 
|                 httpget.addHeader("Authorization", token); | 
|                 response = httpClient.execute(httpget, HttpClientContext.create()); | 
|   | 
|                 HttpEntity resEntity = response.getEntity(); | 
|                 result = EntityUtils.toString(resEntity); | 
|                 return result; | 
|             } catch (IOException e) { | 
|                 result = "{\"status\":\"1\",\"errors\":\"" + e.getMessage() + "\"}"; | 
|                 if (err++ > 2) { | 
|                     break; | 
|                 } | 
|                 try { | 
|                     Thread.sleep((err + 2) * 1000); | 
|                 } catch (InterruptedException e1) { | 
|                     result = "{\"status\":\"1\",\"errors\":\"" + e1.getMessage() + "\"}"; | 
|                 } | 
|             }finally { | 
|                 try { | 
|                     httpClient.close(); | 
|                     if (response != null) { | 
|                         response.close(); | 
|                     } | 
|                 } catch (IOException var22) { | 
|                     var22.printStackTrace(); | 
|                 } | 
|             } | 
|         } | 
|         return result; | 
|     } | 
|   | 
|     @Override | 
|     public Map<String, Object> fapiaoCallBack(HttpServletRequest request, @RequestBody Map<String, Object> requestBody){ | 
|         Map<String,Object> map = new HashMap<>(); | 
|         String signature = request.getHeader("Wechatpay-Signature"); | 
|         String timestamp = request.getHeader("Wechatpay-Timestamp"); | 
|         String nonce = request.getHeader("Wechatpay-Nonce"); | 
|         //平台证书序列号不是API证书序列号 | 
|         String serial = request.getHeader("Wechatpay-Serial"); | 
|         String body = com.alibaba.fastjson.JSONObject.toJSONString(requestBody); | 
|         log.info("头信息---签名:" + signature); | 
|         log.info("头信息---时间戳:" + timestamp); | 
|         log.info("头信息---随机字符:" + nonce); | 
|         log.info("头信息---平台证书序列号:" + serial); | 
|         log.info("获取到的body信息:" + body); | 
|         //应对签名探测流量 | 
|         if(signature.contains("WECHATPAY/SIGNTEST")){ | 
|             map.put("code",500); | 
|             map.put("message", "失败"); | 
|             return map; | 
|         } | 
|         //验签 | 
|         boolean signCheck = false; | 
|         try { | 
|             signCheck = signCheck(timestamp, nonce, requestBody, signature); | 
|         } catch (NoSuchAlgorithmException e) { | 
|             e.printStackTrace(); | 
|         } catch (SignatureException e) { | 
|             e.printStackTrace(); | 
|         } catch (IOException e) { | 
|             e.printStackTrace(); | 
|         } catch (InvalidKeyException e) { | 
|             e.printStackTrace(); | 
|         } catch (ParseException e) { | 
|             e.printStackTrace(); | 
|         } | 
|         log.info("验签结果:" + signCheck); | 
|         if (signCheck) { | 
|             try { | 
|                 //解析请求体 | 
|                 JSONObject jsonObject = JSONUtil.parseObj(body); | 
|                 log.info("微信电子发票回调接口....解析请求体:"+jsonObject); | 
|   | 
|                 String id = jsonObject.getStr("id");//可能是支付业务的回调数据 | 
|                 String create_time = jsonObject.getStr("create_time");//可能是支付业务的回调数据 | 
|                 String resource_type = jsonObject.getStr("resource_type");//可能是支付业务的回调数据 | 
|                 String event_type = jsonObject.getStr("event_type");//可能是支付业务的回调数据 | 
|                 String resource = jsonObject.getStr("resource");//可能是支付业务的回调数据 | 
|                 log.info("微信电子发票回调接口....id:"+ id); | 
|                 log.info("微信电子发票回调接口....create_time:"+ create_time); | 
|                 log.info("微信电子发票回调接口....resource_type:"+ resource_type); | 
|                 log.info("微信电子发票回调接口....event_type:"+ event_type); | 
|                 log.info("微信电子发票回调接口....resource:"+ resource); | 
|                 if ("FAPIAO.USER_APPLIED".equals(event_type)//用户发票抬头填写完成类型:FAPIAO.USER_APPLIED | 
|                         && "encrypt-resource".equals(resource_type)) {//通知的资源数据类型,确认成功通知为encryptresource。 | 
|                     JCEUtil.removeCryptographyRestrictions(); | 
|                     //解密 | 
|                     AesUtil aesUtil = new AesUtil(xcxProperties.getWecharpaySecretV3().getBytes("utf-8")); | 
|                     JSONObject jsonObjectResource = JSONUtil.parseObj(resource); | 
|                     String original_type = jsonObjectResource.getStr("original_type");//可能是支付业务的回调数据 | 
|                     String algorithm = jsonObjectResource.getStr("algorithm");//可能是支付业务的回调数据 | 
|                     String ciphertext = jsonObjectResource.getStr("ciphertext");//可能是支付业务的回调数据 | 
|                     String associated_data = jsonObjectResource.getStr("associated_data");//可能是支付业务的回调数据 | 
|                     String nonceStr = jsonObjectResource.getStr("nonce");//可能是支付业务的回调数据 | 
|                     String decryptToString = aesUtil.decryptToString( | 
|                             associated_data.getBytes("utf-8"), | 
|                             nonceStr.getBytes("utf-8"), | 
|                             ciphertext); | 
|                     log.info("微信电子发票回调接口....resource解密:"+decryptToString); | 
|   | 
|                     JSONObject parseObj = JSONUtil.parseObj(decryptToString); | 
|                     log.info("微信电子发票回调接口....resource解密-JSONObject:"+parseObj); | 
|                     String fapiao_apply_id = parseObj.getStr("fapiao_apply_id"); | 
|                     log.info("微信电子发票回调接口....resource解密-fapiao_apply_id:"+fapiao_apply_id); | 
|                     MallOrderInfo mallOrderInfo = mallOrderInfoMapper.selectBypayOrderNo(fapiao_apply_id); | 
|                     if(ObjectUtil.isEmpty(mallOrderInfo)){ | 
|                         map.put("code",404); | 
|                         map.put("message", "订单不存在"); | 
|                         return map; | 
|                     } | 
|   | 
|                     if(ObjectUtil.isNotEmpty(mallOrderInfo)){ | 
|                         //更新订单状态 | 
| //                        mallOrderInfo.setIsInvoice(1); | 
| //                        mallOrderInfoMapper.updateById(mallOrderInfo); | 
|                         //获取用户的抬头信息 | 
|                         String userInvoiceInfo = this.getUserInvoiceInfo(fapiao_apply_id); | 
|                         JSONObject userInvoiceInfoJson = JSONUtil.parseObj(userInvoiceInfo); | 
|                         //查看当前订单是否已经开具发票 | 
|                         Long memberId = mallOrderInfo.getMemberId(); | 
|                         String payOrderNo = mallOrderInfo.getPayOrderNo(); | 
|                         List<MallInvoice> mallInvoices = mallInvoiceMapper.selectByFapiaoApplyIdAndMemberId(fapiao_apply_id, mallOrderInfo.getMemberId()); | 
|                         if(CollUtil.isEmpty(mallInvoices)){ | 
|                             MallInvoice mallInvoice = new MallInvoice(); | 
|                             mallInvoice.setMemberId(memberId); | 
|                             mallInvoice.setFapiaoApplyId(payOrderNo); | 
|                             mallInvoice.setOrderNo(mallOrderInfo.getOrderNo()); | 
|                             mallInvoice.setOrderId(mallOrderInfo.getId()); | 
|                             mallInvoice.setStatus(mallOrderInfo.getStatus()); | 
|                             mallInvoice.setAmount(mallOrderInfo.getAmount()); | 
|                             List<MallOrderItem> mallOrderItemList = mallOrderItemMapper.selectListByOrderId(mallOrderInfo.getId()); | 
|                             mallInvoice.setGoodsImg(mallOrderItemList.get(0).getSkuImage()); | 
|                             mallInvoice.setState(1); | 
|                             mallInvoice.setType(userInvoiceInfoJson.getStr("type")); | 
|                             mallInvoice.setName(userInvoiceInfoJson.getStr("name")); | 
|                             mallInvoice.setTaxpayerId(userInvoiceInfoJson.getStr("taxpayer_id")); | 
|                             mallInvoice.setAddress(userInvoiceInfoJson.getStr("address")); | 
|                             mallInvoice.setTelephone(userInvoiceInfoJson.getStr("telephone")); | 
|                             mallInvoice.setBankName(userInvoiceInfoJson.getStr("bank_name")); | 
|                             mallInvoice.setBankAccount(userInvoiceInfoJson.getStr("bank_account")); | 
|                             mallInvoiceMapper.insert(mallInvoice); | 
|                         }else{ | 
|                             MallInvoice mallInvoice = mallInvoices.get(0); | 
|                             if(2 != mallInvoice.getState()){ | 
|                                 mallInvoice.setState(1); | 
|                                 mallInvoice.setType(userInvoiceInfoJson.getStr("type")); | 
|                                 mallInvoice.setName(userInvoiceInfoJson.getStr("name")); | 
|                                 mallInvoice.setTaxpayerId(userInvoiceInfoJson.getStr("taxpayer_id")); | 
|                                 mallInvoice.setAddress(userInvoiceInfoJson.getStr("address")); | 
|                                 mallInvoice.setTelephone(userInvoiceInfoJson.getStr("telephone")); | 
|                                 mallInvoice.setBankName(userInvoiceInfoJson.getStr("bank_name")); | 
|                                 mallInvoice.setBankAccount(userInvoiceInfoJson.getStr("bank_account")); | 
|                                 mallInvoiceMapper.updateById(mallInvoice); | 
|                             } | 
|                         } | 
|                         //省略查询订单 | 
|                         //此处处理业务 | 
|                         map.put("code","SUCCESS"); | 
|                         map.put("message","成功"); | 
|                         //消息推送成功 | 
|                         return map; | 
|                     } | 
|                 } | 
|                 map.put("code",404); | 
|                 map.put("message", "订单不存在"); | 
|                 return map; | 
|             }catch (Exception e) { | 
|                 e.printStackTrace(); | 
|             } | 
|         } | 
|         map.put("code",500); | 
|         map.put("message", "失败"); | 
|         return map; | 
|     } | 
|     /** | 
|      * 获取用户的抬头信息 | 
|      */ | 
|     @Override | 
|     public String getUserInvoiceInfo(String fapiaoApplyId) throws IOException { | 
|   | 
|         //初始化请求参数 | 
|         Map<String, Object> params = new HashMap<>(); | 
|         params.put("scene","WITH_WECHATPAY"); | 
| //        params.put("fapiao_apply_id","4200002070202401175245187105"); | 
|         params.put("fapiao_apply_id",fapiaoApplyId); | 
|   | 
|         String baseUrl = "https://api.mch.weixin.qq.com"; | 
|         String canonicalUrl = "/v3/new-tax-control-fapiao/user-title"; | 
|   | 
|         String urlparm = baseUrl+canonicalUrl;//有参数的get请求,加密是需要把参数加载进去URL | 
|         List<BasicNameValuePair> parameters = new ArrayList<>(); | 
|         for (Map.Entry<String, Object> entry : params.entrySet()) { | 
|             parameters.add(new BasicNameValuePair(entry.getKey(), entry.getValue().toString())); | 
|         } | 
|         StringBuilder dataparm = new StringBuilder(); | 
|         params.forEach((k, v) -> dataparm.append("&" + k + "=" + v)); | 
|         String string = dataparm.toString(); | 
|         if (!"".equals(string)) { | 
|             urlparm = baseUrl+canonicalUrl + "?" + dataparm.substring(1); | 
|         } | 
|         PrivateKey privateKey = this.getPrivateKeyV3(); | 
|         String postStr = null; | 
|         try { | 
|             postStr = this.createAuthorization( | 
|                     "GET", | 
|                     urlparm, | 
|                     "", | 
|                     privateKey | 
|             ); | 
|         } catch (NoSuchAlgorithmException e) { | 
|             e.printStackTrace(); | 
|         } | 
|         return this.sendGet(baseUrl+canonicalUrl, params, "WECHATPAY2-SHA256-RSA2048 "+postStr); | 
|     } | 
|   | 
|     /** | 
|      * 验证签名 | 
|      * | 
|      * @param timestamp   微信平台传入的时间戳 | 
|      * @param nonce       微信平台传入的随机字符串 | 
|      * @param requestBody 微信平台传入的消息体 | 
|      * @param signature   微信平台传入的签名 | 
|      * @return | 
|      * @throws NoSuchAlgorithmException | 
|      * @throws SignatureException | 
|      * @throws IOException | 
|      * @throws InvalidKeyException | 
|      */ | 
|     public boolean signCheck(String timestamp, String nonce, Map<String, Object> requestBody, String signature) throws | 
|             NoSuchAlgorithmException, | 
|             SignatureException, | 
|             IOException, | 
|             InvalidKeyException, | 
|             ParseException { | 
|         //构造验签名串 | 
|         String signatureStr = timestamp + "\n" + nonce + "\n" + com.alibaba.fastjson.JSONObject.toJSONString(requestBody) + "\n"; | 
|         // 加载SHA256withRSA签名器 | 
|         Signature signer = Signature.getInstance("SHA256withRSA"); | 
|         // 用微信平台公钥对签名器进行初始化(调上一节中的获取平台证书方法) | 
|         signer.initVerify(getCertificates()); | 
|         // 把我们构造的验签名串更新到签名器中 | 
|         signer.update(signatureStr.getBytes(StandardCharsets.UTF_8)); | 
|         // 把请求头中微信服务器返回的签名用Base64解码 并使用签名器进行验证 | 
|         boolean result = signer.verify(Base64Utils.decodeFromString(signature)); | 
|         return result; | 
|     } | 
|   | 
|   | 
|     /** | 
|      * 获取平台证书 | 
|      */ | 
|     public X509Certificate getCertificates() throws IOException, NoSuchAlgorithmException, SignatureException, InvalidKeyException, ParseException { | 
|         JCEUtil.removeCryptographyRestrictions(); | 
|         SimpleDateFormat format = new SimpleDateFormat("yyyy-MM-dd'T'HH:mm:ss"); | 
|   | 
|         PrivateKey privateKey = this.getPrivateKeyV3(); | 
|         String baseUrl = "https://api.mch.weixin.qq.com"; | 
|         String canonicalUrl = "/v3/certificates"; | 
|         String postStr = null; | 
|         try { | 
|             postStr = this.createAuthorization( | 
|                     "GET", | 
|                     baseUrl+canonicalUrl, | 
|                     "", | 
|                     privateKey | 
|   | 
|             ); | 
|         } catch (NoSuchAlgorithmException e) { | 
|             e.printStackTrace(); | 
|         } | 
|         //完成签名并执行请求 | 
|         X509Certificate x509Certificate = null; | 
|         try { | 
|             String responseBodyAsString = this.sendGet(baseUrl + canonicalUrl, new HashMap<>(), "WECHATPAY2-SHA256-RSA2048 "+postStr); | 
|             FPCertificateVo certificateVo = com.alibaba.fastjson.JSONObject.parseObject(responseBodyAsString, FPCertificateVo.class); | 
|             for (FPCertificates certificates : certificateVo.getData()) { | 
|                 if (format.parse(certificates.getEffective_time()).before(new Date()) | 
|                         && format.parse(certificates.getExpire_time()).after(new Date())) { | 
|                     FPEncryptCertificate encrypt_certificate = certificates.getEncrypt_certificate(); | 
|                     //解密 | 
|                     AesUtil aesUtil = new AesUtil(xcxProperties.getWecharpaySecretV3().getBytes("utf-8")); | 
|                     String pulicKey = aesUtil.decryptToString( | 
|                             encrypt_certificate.getAssociated_data().getBytes("utf-8"), | 
|                             encrypt_certificate.getNonce().getBytes("utf-8"), | 
|                             encrypt_certificate.getCiphertext()); | 
|                     //获取平台证书 | 
|                     final CertificateFactory cf = CertificateFactory.getInstance("X509"); | 
|   | 
|                     ByteArrayInputStream inputStream = new ByteArrayInputStream(pulicKey.getBytes(StandardCharsets.UTF_8)); | 
|   | 
|                     x509Certificate = (X509Certificate) cf.generateCertificate(inputStream); | 
|                 } | 
|             } | 
|             return x509Certificate; | 
|         } catch (GeneralSecurityException | ParseException e) { | 
|             e.printStackTrace(); | 
|         } | 
|         return null; | 
|     } | 
|   | 
|     public static void main(String[] args) throws UnsupportedEncodingException, GeneralSecurityException { | 
|         String signature = "WECHATPAY/SIGNTEST/9WwfXW/noMdzDPcOrFD51Bf5YIThXLTtLCl5hoGlSfIBdY2UpE+5eHLs0XyF7y2cQc4OlzTzDDxSMTp/p/8ZenE2hMBaQjxVrdbTtrOLA1h13/WjCNaTr1URTqQ5+IF5bLCxAW8BmZ0jEqpmI/HYR3wdK8/7W91c1zfKODYgkvJzxFzd8OWi2GtELE5tLamkOLyb0GEcsGww2DUOypO5HjNyITgsy9R00w3OH92UInCD8Z6c5BAsQNySqFK8N52y38AlIWTtKROHmJtu+kHbt+nMOU0kbB5bZcPAptsnVYpp9KMmjMrmyjiKtHZb2TGIWiN/L+bgceyN3g=="; | 
|         if(signature.contains("WECHATPAY/SIGNTEST")){ | 
|             System.out.println(1); | 
|         } | 
|   | 
| //        JCEUtil.removeCryptographyRestrictions(); | 
| //        String body = "{\"id\":\"5fb7f522-466f-5c99-a325-0eb4001f1ec3\",\"create_time\":\"2024-01-17T15:38:33+08:00\",\"resource_type\":\"encrypt-resource\",\"event_type\":\"FAPIAO.USER_APPLIED\",\"summary\":\"用户已申请开票\",\"resource\":{\"original_type\":\"fapiao\",\"algorithm\":\"AEAD_AES_256_GCM\",\"ciphertext\":\"bBOs5WTUV1AhwiYSIUugaw9z4EHXxC28ZVsGHOppCNP4qpxYgnR+W+l983UyETmD/Wgu8ukJhe/xYkSsF947pgDP1ElTXC8MJA3lCc8NlsXQ1csPfWTS6A0XrxBoNMgwGEsYFo/7tPW/zDrEpzRZL/GgEwEtK6X1Y4Ci9IofzeI=\",\"associated_data\":\"fapiao\",\"nonce\":\"7a5dzuYqStef\"}}"; | 
| //        JSONObject jsonObject = JSONUtil.parseObj(body); | 
| //        log.info("微信电子发票回调接口....解析请求体:"+jsonObject); | 
| // | 
| //        String id = jsonObject.getStr("id");//可能是支付业务的回调数据 | 
| //        String create_time = jsonObject.getStr("create_time");//可能是支付业务的回调数据 | 
| //        String resource_type = jsonObject.getStr("resource_type");//可能是支付业务的回调数据 | 
| //        String event_type = jsonObject.getStr("event_type");//可能是支付业务的回调数据 | 
| //        String resource = jsonObject.getStr("resource");//可能是支付业务的回调数据 | 
| //        log.info("微信电子发票回调接口....id:"+ id); | 
| //        log.info("微信电子发票回调接口....create_time:"+ create_time); | 
| //        log.info("微信电子发票回调接口....resource_type:"+ resource_type); | 
| //        log.info("微信电子发票回调接口....event_type:"+ event_type); | 
| //        log.info("微信电子发票回调接口....resource:"+ resource); | 
| // | 
| //        if ("FAPIAO.USER_APPLIED".equals(event_type)//用户发票抬头填写完成类型:FAPIAO.USER_APPLIED | 
| //                && !"encryptresource".equals(resource_type)) {//通知的资源数据类型,确认成功通知为encryptresource。 | 
| //            //解密 | 
| //            AesUtil aesUtil = new AesUtil("daL341aN5orDt13puXadsAf2rpuX12v3".getBytes("utf-8")); | 
| //            JSONObject jsonObjectResource = JSONUtil.parseObj(resource); | 
| ////            String original_type = jsonObjectResource.getStr("original_type");//可能是支付业务的回调数据 | 
| ////            String algorithm = jsonObjectResource.getStr("algorithm");//可能是支付业务的回调数据 | 
| //            String ciphertext = jsonObjectResource.getStr("ciphertext");//可能是支付业务的回调数据 | 
| //            String associated_data = jsonObjectResource.getStr("associated_data");//可能是支付业务的回调数据 | 
| //            String nonce = jsonObjectResource.getStr("nonce");//可能是支付业务的回调数据 | 
| //            String decryptToString = aesUtil.decryptToString( | 
| //                    associated_data.getBytes("utf-8"), | 
| //                    nonce.getBytes("utf-8"), | 
| //                    ciphertext); | 
| //            log.info("微信电子发票回调接口....resource解密:"+decryptToString); | 
| // | 
| //            JSONObject parseObj = JSONUtil.parseObj(decryptToString); | 
| //            log.info("微信电子发票回调接口....resource解密-JSONObject:"+parseObj); | 
| //            String fapiao_apply_id = parseObj.getStr("fapiao_apply_id"); | 
| //            log.info("微信电子发票回调接口....resource解密-fapiao_apply_id:"+fapiao_apply_id); | 
| // | 
| //        } | 
|     } | 
|   | 
| } |