package cc.mrbird.febs.pay.controller;
|
|
import cc.mrbird.febs.common.enumerates.OrderDeliveryStateEnum;
|
import cc.mrbird.febs.common.enumerates.OrderStatusEnum;
|
import cc.mrbird.febs.common.exception.FebsException;
|
import cc.mrbird.febs.common.utils.ValidateEntityUtils;
|
import cc.mrbird.febs.mall.entity.MallMoneyFlow;
|
import cc.mrbird.febs.mall.entity.MallOrderInfo;
|
import cc.mrbird.febs.mall.mapper.MallMoneyFlowMapper;
|
import cc.mrbird.febs.mall.mapper.MallOrderInfoMapper;
|
import cc.mrbird.febs.mall.service.IApiMallMemberWalletService;
|
import cn.hutool.core.date.DateUtil;
|
import cn.hutool.json.JSONObject;
|
import cn.hutool.json.JSONUtil;
|
import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
|
import io.swagger.annotations.Api;
|
import lombok.extern.slf4j.Slf4j;
|
import org.apache.commons.codec.digest.DigestUtils;
|
import org.springframework.stereotype.Controller;
|
import org.springframework.ui.Model;
|
import org.springframework.web.bind.annotation.PostMapping;
|
import org.springframework.web.bind.annotation.RequestMapping;
|
import org.springframework.web.bind.annotation.RequestParam;
|
|
import javax.annotation.Resource;
|
import java.math.BigDecimal;
|
import java.math.RoundingMode;
|
|
@Slf4j
|
@Controller
|
//@RestController
|
@Api(value = "FiuuReturnController", tags = "FIUU支付-ReturnURL")
|
@RequestMapping(value = "/api/fuPayReturn")
|
public class FiuuReturnController {
|
|
private static final String SECRET_KEY = "59c709fc18978a6a83b87f05d37cecbf";
|
@Resource
|
private MallOrderInfoMapper mallOrderInfoMapper;
|
@Resource
|
private MallMoneyFlowMapper mallMoneyFlowMapper;
|
@Resource
|
private IApiMallMemberWalletService memberWalletService;
|
|
@PostMapping("/payment/callback")
|
public String handlePaymentCallback(
|
@RequestParam("amount") String amount,
|
@RequestParam("orderid") String orderId,
|
@RequestParam("tranID") String tranId,
|
@RequestParam("status") String status,
|
@RequestParam("domain") String domain,
|
@RequestParam("currency") String currency,
|
@RequestParam("appcode") String appcode,
|
@RequestParam("paydate") String payDate,
|
@RequestParam("skey") String receivedSkey,
|
Model model) {
|
|
// 1. 格式化amount为两位小数(确保与Fiuu传递的格式一致)
|
BigDecimal amountDecimal;
|
try {
|
amountDecimal = new BigDecimal(amount).setScale(2, RoundingMode.HALF_UP);
|
} catch (NumberFormatException e) {
|
throw new FebsException("金额格式错误: " + amount);
|
}
|
String formattedAmount = amountDecimal.toPlainString(); // 例如 "100.00"
|
|
// 2. 生成preSkey(严格按照参数顺序拼接)
|
log.info("callback Parameters for preSkey: tranId={}, orderId={}, status={}, domain={}, amount={}, currency={}", tranId, orderId, status, domain, amount, currency);
|
// 第一步哈希:pre_skey = md5(txnID + orderID + status + domain + amount + currency)
|
String preSkeyInput = tranId + orderId + status + domain + formattedAmount + currency;
|
String preSkey = DigestUtils.md5Hex(preSkeyInput);
|
log.info("callback preSkey生成参数: {}", preSkeyInput);
|
log.info("callback preSkey计算结果: {}", preSkey);
|
log.info("callback Parameters for calculatedSkey: payDate={}, domain={}, preSkey={}, appcode={}, SECRET_KEY={}", payDate, domain, preSkey, appcode, SECRET_KEY);
|
// 第二步哈希:skey = md5(paydate + domain + pre_skey + appcode + secret_key)
|
String skeyInput = payDate + domain + preSkey + appcode + SECRET_KEY;
|
String calculatedSkey = DigestUtils.md5Hex(skeyInput);
|
|
log.info("callback skey生成参数: {}", skeyInput);
|
log.info("callback callback status: {}", status);
|
log.info("callback receivedSkey: {}", receivedSkey);
|
log.info("callback calculatedSkey: {}", calculatedSkey);
|
|
if (!calculatedSkey.equalsIgnoreCase(receivedSkey)) {
|
// 记录安全警告日志
|
throw new FebsException("订单回调失败,---" + orderId);
|
}
|
|
// 将支付结果信息传递给支付成功页面
|
model.addAttribute("amount", amount);
|
model.addAttribute("orderId", orderId);
|
model.addAttribute("tranId", tranId);
|
model.addAttribute("status", status);
|
model.addAttribute("currency", currency);
|
model.addAttribute("payDate", payDate);
|
|
MallMoneyFlow mallMoneyFlow = mallMoneyFlowMapper.selectOne(new LambdaQueryWrapper<MallMoneyFlow>().eq(MallMoneyFlow::getOrderNo, orderId));
|
if (mallMoneyFlow != null) {
|
if(1 == mallMoneyFlow.getStatus()){
|
memberWalletService.addBalance(mallMoneyFlow.getAmount(),mallMoneyFlow.getMemberId());
|
// 更新订单状态为已支付
|
mallMoneyFlow.setStatus(2);
|
mallMoneyFlowMapper.updateById(mallMoneyFlow);
|
}
|
}else{
|
MallOrderInfo mallOrderInfo = mallOrderInfoMapper.selectById(Long.parseLong(orderId));
|
if(mallOrderInfo != null){
|
updateOrderStatus(orderId, status, amount, payDate, tranId);
|
}
|
}
|
return "payment-success";
|
}
|
|
public static void main(String[] args) {
|
String secretKey = "59c709fc18978a6a83b87f05d37cecbf";
|
String ss = "{\"nbcb\":\"2\",\"tranID\":\"2693805878\",\"amount\":\"1.00\",\"orderid\":\"359\",\"channel\":\"alipay\",\"paydate\":\"2025-02-10 10:24:20\",\"error_desc\":\"\",\"domain\":\"e2umart01\",\"skey\":\"29913d009b74cb8bc3650aed84394cfe\",\"error_code\":\"\",\"currency\":\"RM\",\"appcode\":\"2025021022001302841422314686\",\"status\":\"00\"}";
|
|
JSONObject params = JSONUtil.parseObj(ss);
|
|
// 按API文档生成skey
|
String tranID = params.getStr("tranID");
|
String orderId = params.getStr("orderid");
|
String status = params.getStr("status");
|
String domain = params.getStr("domain");
|
String amount = params.getStr("amount");
|
String currency = params.getStr("currency");
|
String appcode = params.getStr("appcode");
|
String paydate = params.getStr("paydate");
|
String receivedSkey = params.getStr("skey");
|
|
// 第一步哈希:pre_skey = md5(txnID + orderID + status + domain + amount + currency)
|
String preSkey = DigestUtils.md5Hex(tranID + orderId + status + domain + amount + currency);
|
|
log.info("notify preSkey: {}", preSkey);
|
// 第二步哈希:skey = md5(paydate + domain + pre_skey + appcode + secretKey)
|
String calculatedSkey = DigestUtils.md5Hex(paydate + domain + preSkey + appcode + secretKey);
|
|
log.info("notify calculatedSkey: {}", calculatedSkey);
|
|
// 1. 格式化amount为两位小数(确保与Fiuu传递的格式一致)
|
BigDecimal amountDecimal;
|
try {
|
amountDecimal = new BigDecimal(amount).setScale(2, RoundingMode.HALF_UP);
|
} catch (NumberFormatException e) {
|
throw new FebsException("金额格式错误: " + amount);
|
}
|
String formattedAmount = amountDecimal.toPlainString(); // 例如 "100.00"
|
|
// 2. 生成preSkey(严格按照参数顺序拼接)
|
log.info("callback Parameters for preSkey: tranId={}, orderId={}, status={}, domain={}, amount={}, currency={}", tranID, orderId, status, domain, amount, currency);
|
// 第一步哈希:pre_skey = md5(txnID + orderID + status + domain + amount + currency)
|
String preSkeyInput = tranID + orderId + status + domain + formattedAmount + currency;
|
String preSkey1 = DigestUtils.md5Hex(preSkeyInput);
|
log.info("callback preSkey生成参数: {}", preSkeyInput);
|
log.info("callback preSkey计算结果: {}", preSkey1);
|
log.info("callback Parameters for calculatedSkey: payDate={}, domain={}, preSkey={}, appcode={}, SECRET_KEY={}", paydate, domain, preSkey, appcode, SECRET_KEY);
|
// 第二步哈希:skey = md5(paydate + domain + pre_skey + appcode + secret_key)
|
String skeyInput = paydate + domain + preSkey + appcode + secretKey;
|
String calculatedSkey1 = DigestUtils.md5Hex(skeyInput);
|
|
log.info("callback skey生成参数: {}", skeyInput);
|
log.info("callback callback status: {}", status);
|
log.info("callback receivedSkey: {}", receivedSkey);
|
log.info("callback calculatedSkey: {}", calculatedSkey1);
|
|
}
|
|
private void updateOrderStatus(String orderId, String status, String amount, String paydate, String tranID) {
|
// 实现订单状态更新逻辑(如更新数据库)
|
MallOrderInfo mallOrderInfo = ValidateEntityUtils.ensureColumnReturnEntity(orderId, MallOrderInfo::getId, mallOrderInfoMapper::selectOne, "订单不存在");
|
ValidateEntityUtils.ensureNotEqual(mallOrderInfo.getPayResult(), "1", "订单已支付");
|
ValidateEntityUtils.ensureEqual(mallOrderInfo.getAmount().toString(), amount, "订单金额异常");
|
// 更新订单状态
|
mallOrderInfo.setPayMethod("FIUU支付");
|
mallOrderInfo.setStatus(OrderStatusEnum.WAIT_SHIPPING.getValue());
|
mallOrderInfo.setPayResult("1");
|
mallOrderInfo.setPayTime(DateUtil.parseDateTime(paydate));
|
mallOrderInfo.setDeliveryState(OrderDeliveryStateEnum.DELIVERY_WAIT.getValue());
|
mallOrderInfo.setPayOrderNo(tranID);
|
mallOrderInfoMapper.updateById(mallOrderInfo);
|
}
|
}
|