| | |
| | | import cc.mrbird.febs.pay.model.FPCertificateVo; |
| | | import cc.mrbird.febs.pay.model.FPCertificates; |
| | | import cc.mrbird.febs.pay.model.FPEncryptCertificate; |
| | | import cc.mrbird.febs.pay.model.HeaderDto; |
| | | import cc.mrbird.febs.pay.service.WxFaPiaoService; |
| | | import cc.mrbird.febs.pay.util.JCEUtil; |
| | | import cc.mrbird.febs.pay.util.RandomStringGenerator; |
| | | import cn.hutool.core.util.ObjectUtil; |
| | | import cn.hutool.json.JSONObject; |
| | | import cn.hutool.json.JSONUtil; |
| | | import com.aliyun.oss.internal.SignUtils; |
| | | import com.wechat.pay.contrib.apache.httpclient.auth.AutoUpdateCertificatesVerifier; |
| | | import com.wechat.pay.contrib.apache.httpclient.auth.PrivateKeySigner; |
| | | import com.wechat.pay.contrib.apache.httpclient.auth.WechatPay2Credentials; |
| | | import com.wechat.pay.contrib.apache.httpclient.auth.WechatPay2Validator; |
| | | import com.wechat.pay.contrib.apache.httpclient.notification.Notification; |
| | | import com.wechat.pay.contrib.apache.httpclient.notification.NotificationHandler; |
| | | import com.wechat.pay.contrib.apache.httpclient.notification.NotificationRequest; |
| | | import com.wechat.pay.contrib.apache.httpclient.util.AesUtil; |
| | | import com.wechat.pay.java.core.notification.Resource; |
| | | import io.undertow.util.Certificates; |
| | | import lombok.RequiredArgsConstructor; |
| | | import lombok.SneakyThrows; |
| | | import lombok.extern.slf4j.Slf4j; |
| | | import okhttp3.HttpUrl; |
| | | import org.apache.commons.httpclient.HttpClient; |
| | |
| | | import org.apache.http.client.methods.HttpGet; |
| | | import org.apache.http.client.methods.HttpPatch; |
| | | import org.apache.http.client.methods.HttpPost; |
| | | import org.apache.http.client.protocol.HttpClientContext; |
| | | import org.apache.http.entity.StringEntity; |
| | | import org.apache.http.impl.client.CloseableHttpClient; |
| | | import org.apache.http.impl.client.HttpClients; |
| | | import org.apache.http.message.BasicNameValuePair; |
| | | import org.apache.http.util.EntityUtils; |
| | | import org.springframework.core.io.ClassPathResource; |
| | | import org.springframework.stereotype.Service; |
| | |
| | | import org.springframework.web.bind.annotation.RequestBody; |
| | | |
| | | import javax.servlet.http.HttpServletRequest; |
| | | import javax.servlet.http.HttpServletResponse; |
| | | import java.io.*; |
| | | import java.nio.charset.StandardCharsets; |
| | | import java.security.*; |
| | |
| | | import java.security.spec.PKCS8EncodedKeySpec; |
| | | import java.text.ParseException; |
| | | import java.text.SimpleDateFormat; |
| | | import java.util.Base64; |
| | | import java.util.Date; |
| | | import java.util.HashMap; |
| | | import java.util.Map; |
| | | import java.util.concurrent.ConcurrentHashMap; |
| | | import java.util.*; |
| | | import java.util.stream.Collectors; |
| | | import java.util.stream.Stream; |
| | | |
| | | @Slf4j |
| | | @Service |
| | |
| | | } |
| | | |
| | | @Override |
| | | public String sendGet(String url, Map<String, Object> params, String token) { |
| | | String result = ""; |
| | | int err = 0; |
| | | while (true) { |
| | | CloseableHttpClient httpClient = HttpClients.createDefault(); |
| | | CloseableHttpResponse response = null; |
| | | try { |
| | | List<BasicNameValuePair> parameters = new ArrayList<>(); |
| | | for (Map.Entry<String, Object> entry : params.entrySet()) { |
| | | parameters.add(new BasicNameValuePair(entry.getKey(), entry.getValue().toString())); |
| | | } |
| | | StringBuilder dataparm = new StringBuilder(); |
| | | params.forEach((k, v) -> dataparm.append("&" + k + "=" + v)); |
| | | String urlparm = ""; |
| | | String string = dataparm.toString(); |
| | | if (!"".equals(string)) { |
| | | urlparm = dataparm.toString().substring(1); |
| | | } |
| | | HttpGet httpget = new HttpGet(url + "?" + urlparm); |
| | | |
| | | httpget.addHeader("Accept", "application/json"); |
| | | httpget.addHeader("User-Agent", "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36"); |
| | | httpget.addHeader("Content-Type", "application/x-www-form-urlencoded; charset=UTF-8"); |
| | | httpget.addHeader("Authorization", token); |
| | | response = httpClient.execute(httpget, HttpClientContext.create()); |
| | | |
| | | HttpEntity resEntity = response.getEntity(); |
| | | result = EntityUtils.toString(resEntity); |
| | | return result; |
| | | } catch (IOException e) { |
| | | result = "{\"status\":\"1\",\"errors\":\"" + e.getMessage() + "\"}"; |
| | | if (err++ > 2) { |
| | | break; |
| | | } |
| | | try { |
| | | Thread.sleep((err + 2) * 1000); |
| | | } catch (InterruptedException e1) { |
| | | result = "{\"status\":\"1\",\"errors\":\"" + e1.getMessage() + "\"}"; |
| | | } |
| | | }finally { |
| | | try { |
| | | httpClient.close(); |
| | | if (response != null) { |
| | | response.close(); |
| | | } |
| | | } catch (IOException var22) { |
| | | var22.printStackTrace(); |
| | | } |
| | | } |
| | | } |
| | | return result; |
| | | } |
| | | |
| | | @Override |
| | | public Map<String, Object> fapiaoCallBack(HttpServletRequest request, @RequestBody Map<String, Object> requestBody) throws IOException, NoSuchAlgorithmException, InvalidKeyException, SignatureException, ParseException { |
| | | Map<String,Object> map = new HashMap<>(); |
| | | String signature = request.getHeader("Wechatpay-Signature"); |
| | |
| | | if (signCheck) { |
| | | try { |
| | | //解析请求体 |
| | | // Resource resource = com.alibaba.fastjson.JSONObject.parseObject(com.alibaba.fastjson.JSONObject.toJSONString(requestBody.get("resource")), Resource.class); |
| | | Notification notification = com.alibaba.fastjson.JSONObject.parseObject(String.valueOf(body),Notification.class); |
| | | log.info("微信电子发票回调接口....解析请求体:"+notification.toString()); |
| | | String decryptData = notification.getDecryptData();//可能是支付业务的回调数据 |
| | | log.info("微信电子发票回调接口....decryptData:"+notification.toString()); |
| | | Notification.Resource resource = notification.getResource();//电子发票的回调加密数据 |
| | | log.info("微信电子发票回调接口....resource:"+notification.toString()); |
| | | JSONObject jsonObject = JSONUtil.parseObj(body); |
| | | log.info("微信电子发票回调接口....解析请求体:"+jsonObject); |
| | | |
| | | if ("FAPIAO.USER_APPLIED".equals(notification.getEventType())//用户发票抬头填写完成类型:FAPIAO.USER_APPLIED |
| | | && !"encryptresource".equals(notification.getResourceType())) {//通知的资源数据类型,确认成功通知为encryptresource。 |
| | | String id = jsonObject.getStr("id");//可能是支付业务的回调数据 |
| | | String create_time = jsonObject.getStr("create_time");//可能是支付业务的回调数据 |
| | | String resource_type = jsonObject.getStr("resource_type");//可能是支付业务的回调数据 |
| | | String event_type = jsonObject.getStr("event_type");//可能是支付业务的回调数据 |
| | | String resource = jsonObject.getStr("resource");//可能是支付业务的回调数据 |
| | | log.info("微信电子发票回调接口....id:"+ id); |
| | | log.info("微信电子发票回调接口....create_time:"+ create_time); |
| | | log.info("微信电子发票回调接口....resource_type:"+ resource_type); |
| | | log.info("微信电子发票回调接口....event_type:"+ event_type); |
| | | log.info("微信电子发票回调接口....resource:"+ resource); |
| | | if ("FAPIAO.USER_APPLIED".equals(event_type)//用户发票抬头填写完成类型:FAPIAO.USER_APPLIED |
| | | && "encrypt-resource".equals(resource_type)) {//通知的资源数据类型,确认成功通知为encryptresource。 |
| | | JCEUtil.removeCryptographyRestrictions(); |
| | | //解密 |
| | | AesUtil aesUtil = new AesUtil(xcxProperties.getWecharpaySecretV3().getBytes("utf-8")); |
| | | JSONObject jsonObjectResource = JSONUtil.parseObj(resource); |
| | | String original_type = jsonObjectResource.getStr("original_type");//可能是支付业务的回调数据 |
| | | String algorithm = jsonObjectResource.getStr("algorithm");//可能是支付业务的回调数据 |
| | | String ciphertext = jsonObjectResource.getStr("ciphertext");//可能是支付业务的回调数据 |
| | | String associated_data = jsonObjectResource.getStr("associated_data");//可能是支付业务的回调数据 |
| | | String nonceStr = jsonObjectResource.getStr("nonce");//可能是支付业务的回调数据 |
| | | String decryptToString = aesUtil.decryptToString( |
| | | resource.getAssociatedData().getBytes("utf-8"), |
| | | resource.getNonce().getBytes("utf-8"), |
| | | resource.getCiphertext()); |
| | | associated_data.getBytes("utf-8"), |
| | | nonceStr.getBytes("utf-8"), |
| | | ciphertext); |
| | | log.info("微信电子发票回调接口....resource解密:"+decryptToString); |
| | | |
| | | JSONObject parseObj = JSONUtil.parseObj(decryptToString); |
| | | log.info("微信电子发票回调接口....resource解密-JSONObject:"+parseObj); |
| | | String fapiao_apply_id = String.valueOf(parseObj.get("fapiao_apply_id")); |
| | | String fapiao_apply_id = parseObj.getStr("fapiao_apply_id"); |
| | | log.info("微信电子发票回调接口....resource解密-fapiao_apply_id:"+fapiao_apply_id); |
| | | MallOrderInfo mallOrderInfo = mallOrderInfoMapper.selectByOrderNo(fapiao_apply_id); |
| | | if(ObjectUtil.isNotEmpty(mallOrderInfo)){ |
| | | //省略查询订单 |
| | |
| | | } catch (NoSuchAlgorithmException e) { |
| | | e.printStackTrace(); |
| | | } |
| | | HttpClient httpClient = new HttpClient(); |
| | | //请求URL |
| | | GetMethod method = new GetMethod(baseUrl+canonicalUrl); |
| | | method.setRequestHeader("Accept", "application/json"); |
| | | method.setRequestHeader("User-Agent", "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36"); |
| | | method.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; charset=UTF-8"); |
| | | // method.setRequestHeader("Connection", "keep-alive"); |
| | | method.setRequestHeader("Authorization", "WECHATPAY2-SHA256-RSA2048 "+postStr); |
| | | int statusCode = httpClient.executeMethod(method); |
| | | //完成签名并执行请求 |
| | | X509Certificate x509Certificate = null; |
| | | try { |
| | | if (statusCode == 200) { //处理成功 |
| | | // System.out.println("success,return body = " + EntityUtils.toString(response.getEntity())); |
| | | String responseBodyAsString = this.sendGet(baseUrl + canonicalUrl, new HashMap<>(), "WECHATPAY2-SHA256-RSA2048 "+postStr); |
| | | FPCertificateVo certificateVo = com.alibaba.fastjson.JSONObject.parseObject(responseBodyAsString, FPCertificateVo.class); |
| | | for (FPCertificates certificates : certificateVo.getData()) { |
| | | if (format.parse(certificates.getEffective_time()).before(new Date()) |
| | | && format.parse(certificates.getExpire_time()).after(new Date())) { |
| | | FPEncryptCertificate encrypt_certificate = certificates.getEncrypt_certificate(); |
| | | //解密 |
| | | AesUtil aesUtil = new AesUtil(xcxProperties.getWecharpaySecretV3().getBytes("utf-8")); |
| | | String pulicKey = aesUtil.decryptToString( |
| | | encrypt_certificate.getAssociated_data().getBytes("utf-8"), |
| | | encrypt_certificate.getNonce().getBytes("utf-8"), |
| | | encrypt_certificate.getCiphertext()); |
| | | //获取平台证书 |
| | | final CertificateFactory cf = CertificateFactory.getInstance("X509"); |
| | | |
| | | String responseBodyAsString = method.getResponseBodyAsString(); |
| | | FPCertificateVo certificateVo = com.alibaba.fastjson.JSONObject.parseObject(responseBodyAsString, FPCertificateVo.class); |
| | | for (FPCertificates certificates : certificateVo.getData()) { |
| | | if (format.parse(certificates.getEffective_time()).before(new Date()) |
| | | && format.parse(certificates.getExpire_time()).after(new Date())) { |
| | | FPEncryptCertificate encrypt_certificate = certificates.getEncrypt_certificate(); |
| | | //解密 |
| | | AesUtil aesUtil = new AesUtil(xcxProperties.getWecharpaySecretV3().getBytes("utf-8")); |
| | | String pulicKey = aesUtil.decryptToString( |
| | | encrypt_certificate.getAssociated_data().getBytes("utf-8"), |
| | | encrypt_certificate.getNonce().getBytes("utf-8"), |
| | | encrypt_certificate.getCiphertext()); |
| | | //获取平台证书 |
| | | final CertificateFactory cf = CertificateFactory.getInstance("X509"); |
| | | ByteArrayInputStream inputStream = new ByteArrayInputStream(pulicKey.getBytes(StandardCharsets.UTF_8)); |
| | | |
| | | ByteArrayInputStream inputStream = new ByteArrayInputStream(pulicKey.getBytes(StandardCharsets.UTF_8)); |
| | | |
| | | x509Certificate = (X509Certificate) cf.generateCertificate(inputStream); |
| | | } |
| | | x509Certificate = (X509Certificate) cf.generateCertificate(inputStream); |
| | | } |
| | | return x509Certificate; |
| | | } else if (statusCode == 204) { //处理成功,无返回Body |
| | | return x509Certificate; |
| | | } else { |
| | | return x509Certificate; |
| | | } |
| | | return x509Certificate; |
| | | } catch (GeneralSecurityException | ParseException e) { |
| | | e.printStackTrace(); |
| | | return null; |
| | | } |
| | | return null; |
| | | } |
| | | |
| | | public static void main(String[] args) { |
| | | byte[] bytes = new byte[0]; |
| | | try { |
| | | bytes = "DVREEVEREBERykpbgqcfsdsfggsdg".getBytes("utf-8"); |
| | | } catch (UnsupportedEncodingException e) { |
| | | e.printStackTrace(); |
| | | public static void main(String[] args) throws UnsupportedEncodingException, GeneralSecurityException { |
| | | JCEUtil.removeCryptographyRestrictions(); |
| | | String body = "{\"id\":\"5fb7f522-466f-5c99-a325-0eb4001f1ec3\",\"create_time\":\"2024-01-17T15:38:33+08:00\",\"resource_type\":\"encrypt-resource\",\"event_type\":\"FAPIAO.USER_APPLIED\",\"summary\":\"用户已申请开票\",\"resource\":{\"original_type\":\"fapiao\",\"algorithm\":\"AEAD_AES_256_GCM\",\"ciphertext\":\"bBOs5WTUV1AhwiYSIUugaw9z4EHXxC28ZVsGHOppCNP4qpxYgnR+W+l983UyETmD/Wgu8ukJhe/xYkSsF947pgDP1ElTXC8MJA3lCc8NlsXQ1csPfWTS6A0XrxBoNMgwGEsYFo/7tPW/zDrEpzRZL/GgEwEtK6X1Y4Ci9IofzeI=\",\"associated_data\":\"fapiao\",\"nonce\":\"7a5dzuYqStef\"}}"; |
| | | JSONObject jsonObject = JSONUtil.parseObj(body); |
| | | log.info("微信电子发票回调接口....解析请求体:"+jsonObject); |
| | | |
| | | String id = jsonObject.getStr("id");//可能是支付业务的回调数据 |
| | | String create_time = jsonObject.getStr("create_time");//可能是支付业务的回调数据 |
| | | String resource_type = jsonObject.getStr("resource_type");//可能是支付业务的回调数据 |
| | | String event_type = jsonObject.getStr("event_type");//可能是支付业务的回调数据 |
| | | String resource = jsonObject.getStr("resource");//可能是支付业务的回调数据 |
| | | log.info("微信电子发票回调接口....id:"+ id); |
| | | log.info("微信电子发票回调接口....create_time:"+ create_time); |
| | | log.info("微信电子发票回调接口....resource_type:"+ resource_type); |
| | | log.info("微信电子发票回调接口....event_type:"+ event_type); |
| | | log.info("微信电子发票回调接口....resource:"+ resource); |
| | | |
| | | if ("FAPIAO.USER_APPLIED".equals(event_type)//用户发票抬头填写完成类型:FAPIAO.USER_APPLIED |
| | | && !"encryptresource".equals(resource_type)) {//通知的资源数据类型,确认成功通知为encryptresource。 |
| | | //解密 |
| | | AesUtil aesUtil = new AesUtil("daL341aN5orDt13puXadsAf2rpuX12v3".getBytes("utf-8")); |
| | | JSONObject jsonObjectResource = JSONUtil.parseObj(resource); |
| | | // String original_type = jsonObjectResource.getStr("original_type");//可能是支付业务的回调数据 |
| | | // String algorithm = jsonObjectResource.getStr("algorithm");//可能是支付业务的回调数据 |
| | | String ciphertext = jsonObjectResource.getStr("ciphertext");//可能是支付业务的回调数据 |
| | | String associated_data = jsonObjectResource.getStr("associated_data");//可能是支付业务的回调数据 |
| | | String nonce = jsonObjectResource.getStr("nonce");//可能是支付业务的回调数据 |
| | | String decryptToString = aesUtil.decryptToString( |
| | | associated_data.getBytes("utf-8"), |
| | | nonce.getBytes("utf-8"), |
| | | ciphertext); |
| | | log.info("微信电子发票回调接口....resource解密:"+decryptToString); |
| | | |
| | | JSONObject parseObj = JSONUtil.parseObj(decryptToString); |
| | | log.info("微信电子发票回调接口....resource解密-JSONObject:"+parseObj); |
| | | String fapiao_apply_id = parseObj.getStr("fapiao_apply_id"); |
| | | log.info("微信电子发票回调接口....resource解密-fapiao_apply_id:"+fapiao_apply_id); |
| | | |
| | | } |
| | | System.out.println(bytes.length); |
| | | } |
| | | |
| | | } |