From 5cac1da67768c3dbbcd74e50ad59cb80fb82def0 Mon Sep 17 00:00:00 2001
From: KKSU <15274802129@163.com>
Date: Thu, 18 Jan 2024 11:21:36 +0800
Subject: [PATCH] fapiao

---
 src/main/java/cc/mrbird/febs/pay/service/impl/WxFaPiaoServiceImpl.java |  213 ++++++++++++++++++++++++++++++++++------------------
 1 files changed, 139 insertions(+), 74 deletions(-)

diff --git a/src/main/java/cc/mrbird/febs/pay/service/impl/WxFaPiaoServiceImpl.java b/src/main/java/cc/mrbird/febs/pay/service/impl/WxFaPiaoServiceImpl.java
index 577b465..54226c0 100644
--- a/src/main/java/cc/mrbird/febs/pay/service/impl/WxFaPiaoServiceImpl.java
+++ b/src/main/java/cc/mrbird/febs/pay/service/impl/WxFaPiaoServiceImpl.java
@@ -8,26 +8,14 @@
 import cc.mrbird.febs.pay.model.FPCertificateVo;
 import cc.mrbird.febs.pay.model.FPCertificates;
 import cc.mrbird.febs.pay.model.FPEncryptCertificate;
-import cc.mrbird.febs.pay.model.HeaderDto;
 import cc.mrbird.febs.pay.service.WxFaPiaoService;
 import cc.mrbird.febs.pay.util.JCEUtil;
 import cc.mrbird.febs.pay.util.RandomStringGenerator;
 import cn.hutool.core.util.ObjectUtil;
 import cn.hutool.json.JSONObject;
 import cn.hutool.json.JSONUtil;
-import com.aliyun.oss.internal.SignUtils;
-import com.wechat.pay.contrib.apache.httpclient.auth.AutoUpdateCertificatesVerifier;
-import com.wechat.pay.contrib.apache.httpclient.auth.PrivateKeySigner;
-import com.wechat.pay.contrib.apache.httpclient.auth.WechatPay2Credentials;
-import com.wechat.pay.contrib.apache.httpclient.auth.WechatPay2Validator;
-import com.wechat.pay.contrib.apache.httpclient.notification.Notification;
-import com.wechat.pay.contrib.apache.httpclient.notification.NotificationHandler;
-import com.wechat.pay.contrib.apache.httpclient.notification.NotificationRequest;
 import com.wechat.pay.contrib.apache.httpclient.util.AesUtil;
-import com.wechat.pay.java.core.notification.Resource;
-import io.undertow.util.Certificates;
 import lombok.RequiredArgsConstructor;
-import lombok.SneakyThrows;
 import lombok.extern.slf4j.Slf4j;
 import okhttp3.HttpUrl;
 import org.apache.commons.httpclient.HttpClient;
@@ -38,9 +26,11 @@
 import org.apache.http.client.methods.HttpGet;
 import org.apache.http.client.methods.HttpPatch;
 import org.apache.http.client.methods.HttpPost;
+import org.apache.http.client.protocol.HttpClientContext;
 import org.apache.http.entity.StringEntity;
 import org.apache.http.impl.client.CloseableHttpClient;
 import org.apache.http.impl.client.HttpClients;
+import org.apache.http.message.BasicNameValuePair;
 import org.apache.http.util.EntityUtils;
 import org.springframework.core.io.ClassPathResource;
 import org.springframework.stereotype.Service;
@@ -48,7 +38,6 @@
 import org.springframework.web.bind.annotation.RequestBody;
 
 import javax.servlet.http.HttpServletRequest;
-import javax.servlet.http.HttpServletResponse;
 import java.io.*;
 import java.nio.charset.StandardCharsets;
 import java.security.*;
@@ -58,13 +47,8 @@
 import java.security.spec.PKCS8EncodedKeySpec;
 import java.text.ParseException;
 import java.text.SimpleDateFormat;
-import java.util.Base64;
-import java.util.Date;
-import java.util.HashMap;
-import java.util.Map;
-import java.util.concurrent.ConcurrentHashMap;
+import java.util.*;
 import java.util.stream.Collectors;
-import java.util.stream.Stream;
 
 @Slf4j
 @Service
@@ -238,6 +222,60 @@
     }
 
     @Override
+    public String sendGet(String url, Map<String, Object> params, String token) {
+        String result = "";
+        int err = 0;
+        while (true) {
+            CloseableHttpClient httpClient = HttpClients.createDefault();
+            CloseableHttpResponse response = null;
+            try {
+                List<BasicNameValuePair> parameters = new ArrayList<>();
+                for (Map.Entry<String, Object> entry : params.entrySet()) {
+                    parameters.add(new BasicNameValuePair(entry.getKey(), entry.getValue().toString()));
+                }
+                StringBuilder dataparm = new StringBuilder();
+                params.forEach((k, v) -> dataparm.append("&" + k + "=" + v));
+                String urlparm = "";
+                String string = dataparm.toString();
+                if (!"".equals(string)) {
+                    urlparm = dataparm.toString().substring(1);
+                }
+                HttpGet httpget = new HttpGet(url + "?" + urlparm);
+
+                httpget.addHeader("Accept", "application/json");
+                httpget.addHeader("User-Agent", "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36");
+                httpget.addHeader("Content-Type", "application/x-www-form-urlencoded; charset=UTF-8");
+                httpget.addHeader("Authorization", token);
+                response = httpClient.execute(httpget, HttpClientContext.create());
+
+                HttpEntity resEntity = response.getEntity();
+                result = EntityUtils.toString(resEntity);
+                return result;
+            } catch (IOException e) {
+                result = "{\"status\":\"1\",\"errors\":\"" + e.getMessage() + "\"}";
+                if (err++ > 2) {
+                    break;
+                }
+                try {
+                    Thread.sleep((err + 2) * 1000);
+                } catch (InterruptedException e1) {
+                    result = "{\"status\":\"1\",\"errors\":\"" + e1.getMessage() + "\"}";
+                }
+            }finally {
+                try {
+                    httpClient.close();
+                    if (response != null) {
+                        response.close();
+                    }
+                } catch (IOException var22) {
+                    var22.printStackTrace();
+                }
+            }
+        }
+        return result;
+    }
+
+    @Override
     public Map<String, Object> fapiaoCallBack(HttpServletRequest request, @RequestBody Map<String, Object> requestBody) throws IOException, NoSuchAlgorithmException, InvalidKeyException, SignatureException, ParseException {
         Map<String,Object> map = new HashMap<>();
         String signature = request.getHeader("Wechatpay-Signature");
@@ -257,27 +295,40 @@
         if (signCheck) {
             try {
                 //解析请求体
-//            Resource resource = com.alibaba.fastjson.JSONObject.parseObject(com.alibaba.fastjson.JSONObject.toJSONString(requestBody.get("resource")), Resource.class);
-                Notification notification = com.alibaba.fastjson.JSONObject.parseObject(String.valueOf(body),Notification.class);
-                log.info("微信电子发票回调接口....解析请求体:"+notification.toString());
-                String decryptData = notification.getDecryptData();//可能是支付业务的回调数据
-                log.info("微信电子发票回调接口....decryptData:"+notification.toString());
-                Notification.Resource resource = notification.getResource();//电子发票的回调加密数据
-                log.info("微信电子发票回调接口....resource:"+notification.toString());
+                JSONObject jsonObject = JSONUtil.parseObj(body);
+                log.info("微信电子发票回调接口....解析请求体:"+jsonObject);
 
-                if ("FAPIAO.USER_APPLIED".equals(notification.getEventType())//用户发票抬头填写完成类型:FAPIAO.USER_APPLIED
-                        && !"encryptresource".equals(notification.getResourceType())) {//通知的资源数据类型,确认成功通知为encryptresource。
+                String id = jsonObject.getStr("id");//可能是支付业务的回调数据
+                String create_time = jsonObject.getStr("create_time");//可能是支付业务的回调数据
+                String resource_type = jsonObject.getStr("resource_type");//可能是支付业务的回调数据
+                String event_type = jsonObject.getStr("event_type");//可能是支付业务的回调数据
+                String resource = jsonObject.getStr("resource");//可能是支付业务的回调数据
+                log.info("微信电子发票回调接口....id:"+ id);
+                log.info("微信电子发票回调接口....create_time:"+ create_time);
+                log.info("微信电子发票回调接口....resource_type:"+ resource_type);
+                log.info("微信电子发票回调接口....event_type:"+ event_type);
+                log.info("微信电子发票回调接口....resource:"+ resource);
+                if ("FAPIAO.USER_APPLIED".equals(event_type)//用户发票抬头填写完成类型:FAPIAO.USER_APPLIED
+                        && "encrypt-resource".equals(resource_type)) {//通知的资源数据类型,确认成功通知为encryptresource。
+                    JCEUtil.removeCryptographyRestrictions();
                     //解密
                     AesUtil aesUtil = new AesUtil(xcxProperties.getWecharpaySecretV3().getBytes("utf-8"));
+                    JSONObject jsonObjectResource = JSONUtil.parseObj(resource);
+                    String original_type = jsonObjectResource.getStr("original_type");//可能是支付业务的回调数据
+                    String algorithm = jsonObjectResource.getStr("algorithm");//可能是支付业务的回调数据
+                    String ciphertext = jsonObjectResource.getStr("ciphertext");//可能是支付业务的回调数据
+                    String associated_data = jsonObjectResource.getStr("associated_data");//可能是支付业务的回调数据
+                    String nonceStr = jsonObjectResource.getStr("nonce");//可能是支付业务的回调数据
                     String decryptToString = aesUtil.decryptToString(
-                            resource.getAssociatedData().getBytes("utf-8"),
-                            resource.getNonce().getBytes("utf-8"),
-                            resource.getCiphertext());
+                            associated_data.getBytes("utf-8"),
+                            nonceStr.getBytes("utf-8"),
+                            ciphertext);
                     log.info("微信电子发票回调接口....resource解密:"+decryptToString);
 
                     JSONObject parseObj = JSONUtil.parseObj(decryptToString);
                     log.info("微信电子发票回调接口....resource解密-JSONObject:"+parseObj);
-                    String fapiao_apply_id = String.valueOf(parseObj.get("fapiao_apply_id"));
+                    String fapiao_apply_id = parseObj.getStr("fapiao_apply_id");
+                    log.info("微信电子发票回调接口....resource解密-fapiao_apply_id:"+fapiao_apply_id);
                     MallOrderInfo mallOrderInfo = mallOrderInfoMapper.selectByOrderNo(fapiao_apply_id);
                     if(ObjectUtil.isNotEmpty(mallOrderInfo)){
                         //省略查询订单
@@ -350,61 +401,75 @@
         } catch (NoSuchAlgorithmException e) {
             e.printStackTrace();
         }
-        HttpClient httpClient = new HttpClient();
-        //请求URL
-        GetMethod method = new GetMethod(baseUrl+canonicalUrl);
-        method.setRequestHeader("Accept", "application/json");
-        method.setRequestHeader("User-Agent", "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36");
-        method.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; charset=UTF-8");
-//            method.setRequestHeader("Connection", "keep-alive");
-        method.setRequestHeader("Authorization", "WECHATPAY2-SHA256-RSA2048 "+postStr);
-        int statusCode = httpClient.executeMethod(method);
         //完成签名并执行请求
         X509Certificate x509Certificate = null;
         try {
-            if (statusCode == 200) { //处理成功
-//                System.out.println("success,return body = " + EntityUtils.toString(response.getEntity()));
+            String responseBodyAsString = this.sendGet(baseUrl + canonicalUrl, new HashMap<>(), "WECHATPAY2-SHA256-RSA2048 "+postStr);
+            FPCertificateVo certificateVo = com.alibaba.fastjson.JSONObject.parseObject(responseBodyAsString, FPCertificateVo.class);
+            for (FPCertificates certificates : certificateVo.getData()) {
+                if (format.parse(certificates.getEffective_time()).before(new Date())
+                        && format.parse(certificates.getExpire_time()).after(new Date())) {
+                    FPEncryptCertificate encrypt_certificate = certificates.getEncrypt_certificate();
+                    //解密
+                    AesUtil aesUtil = new AesUtil(xcxProperties.getWecharpaySecretV3().getBytes("utf-8"));
+                    String pulicKey = aesUtil.decryptToString(
+                            encrypt_certificate.getAssociated_data().getBytes("utf-8"),
+                            encrypt_certificate.getNonce().getBytes("utf-8"),
+                            encrypt_certificate.getCiphertext());
+                    //获取平台证书
+                    final CertificateFactory cf = CertificateFactory.getInstance("X509");
 
-                String responseBodyAsString = method.getResponseBodyAsString();
-                FPCertificateVo certificateVo = com.alibaba.fastjson.JSONObject.parseObject(responseBodyAsString, FPCertificateVo.class);
-                for (FPCertificates certificates : certificateVo.getData()) {
-                    if (format.parse(certificates.getEffective_time()).before(new Date())
-                            && format.parse(certificates.getExpire_time()).after(new Date())) {
-                        FPEncryptCertificate encrypt_certificate = certificates.getEncrypt_certificate();
-                        //解密
-                        AesUtil aesUtil = new AesUtil(xcxProperties.getWecharpaySecretV3().getBytes("utf-8"));
-                        String pulicKey = aesUtil.decryptToString(
-                                encrypt_certificate.getAssociated_data().getBytes("utf-8"),
-                                encrypt_certificate.getNonce().getBytes("utf-8"),
-                                encrypt_certificate.getCiphertext());
-                        //获取平台证书
-                        final CertificateFactory cf = CertificateFactory.getInstance("X509");
+                    ByteArrayInputStream inputStream = new ByteArrayInputStream(pulicKey.getBytes(StandardCharsets.UTF_8));
 
-                        ByteArrayInputStream inputStream = new ByteArrayInputStream(pulicKey.getBytes(StandardCharsets.UTF_8));
-
-                        x509Certificate = (X509Certificate) cf.generateCertificate(inputStream);
-                    }
+                    x509Certificate = (X509Certificate) cf.generateCertificate(inputStream);
                 }
-                return x509Certificate;
-            } else if (statusCode == 204) { //处理成功,无返回Body
-                return x509Certificate;
-            } else {
-                return x509Certificate;
             }
+            return x509Certificate;
         } catch (GeneralSecurityException | ParseException e) {
             e.printStackTrace();
-            return null;
         }
+        return null;
     }
 
-    public static void main(String[] args) {
-        byte[] bytes = new byte[0];
-        try {
-            bytes = "DVREEVEREBERykpbgqcfsdsfggsdg".getBytes("utf-8");
-        } catch (UnsupportedEncodingException e) {
-            e.printStackTrace();
+    public static void main(String[] args) throws UnsupportedEncodingException, GeneralSecurityException {
+        JCEUtil.removeCryptographyRestrictions();
+        String body = "{\"id\":\"5fb7f522-466f-5c99-a325-0eb4001f1ec3\",\"create_time\":\"2024-01-17T15:38:33+08:00\",\"resource_type\":\"encrypt-resource\",\"event_type\":\"FAPIAO.USER_APPLIED\",\"summary\":\"用户已申请开票\",\"resource\":{\"original_type\":\"fapiao\",\"algorithm\":\"AEAD_AES_256_GCM\",\"ciphertext\":\"bBOs5WTUV1AhwiYSIUugaw9z4EHXxC28ZVsGHOppCNP4qpxYgnR+W+l983UyETmD/Wgu8ukJhe/xYkSsF947pgDP1ElTXC8MJA3lCc8NlsXQ1csPfWTS6A0XrxBoNMgwGEsYFo/7tPW/zDrEpzRZL/GgEwEtK6X1Y4Ci9IofzeI=\",\"associated_data\":\"fapiao\",\"nonce\":\"7a5dzuYqStef\"}}";
+        JSONObject jsonObject = JSONUtil.parseObj(body);
+        log.info("微信电子发票回调接口....解析请求体:"+jsonObject);
+
+        String id = jsonObject.getStr("id");//可能是支付业务的回调数据
+        String create_time = jsonObject.getStr("create_time");//可能是支付业务的回调数据
+        String resource_type = jsonObject.getStr("resource_type");//可能是支付业务的回调数据
+        String event_type = jsonObject.getStr("event_type");//可能是支付业务的回调数据
+        String resource = jsonObject.getStr("resource");//可能是支付业务的回调数据
+        log.info("微信电子发票回调接口....id:"+ id);
+        log.info("微信电子发票回调接口....create_time:"+ create_time);
+        log.info("微信电子发票回调接口....resource_type:"+ resource_type);
+        log.info("微信电子发票回调接口....event_type:"+ event_type);
+        log.info("微信电子发票回调接口....resource:"+ resource);
+
+        if ("FAPIAO.USER_APPLIED".equals(event_type)//用户发票抬头填写完成类型:FAPIAO.USER_APPLIED
+                && !"encryptresource".equals(resource_type)) {//通知的资源数据类型,确认成功通知为encryptresource。
+            //解密
+            AesUtil aesUtil = new AesUtil("daL341aN5orDt13puXadsAf2rpuX12v3".getBytes("utf-8"));
+            JSONObject jsonObjectResource = JSONUtil.parseObj(resource);
+//            String original_type = jsonObjectResource.getStr("original_type");//可能是支付业务的回调数据
+//            String algorithm = jsonObjectResource.getStr("algorithm");//可能是支付业务的回调数据
+            String ciphertext = jsonObjectResource.getStr("ciphertext");//可能是支付业务的回调数据
+            String associated_data = jsonObjectResource.getStr("associated_data");//可能是支付业务的回调数据
+            String nonce = jsonObjectResource.getStr("nonce");//可能是支付业务的回调数据
+            String decryptToString = aesUtil.decryptToString(
+                    associated_data.getBytes("utf-8"),
+                    nonce.getBytes("utf-8"),
+                    ciphertext);
+            log.info("微信电子发票回调接口....resource解密:"+decryptToString);
+
+            JSONObject parseObj = JSONUtil.parseObj(decryptToString);
+            log.info("微信电子发票回调接口....resource解密-JSONObject:"+parseObj);
+            String fapiao_apply_id = parseObj.getStr("fapiao_apply_id");
+            log.info("微信电子发票回调接口....resource解密-fapiao_apply_id:"+fapiao_apply_id);
+
         }
-        System.out.println(bytes.length);
     }
 
 }

--
Gitblit v1.9.1