微信APP支付-Java后台实现

 因为自己项目上的APP 原来有支付宝支付，现在想要加上微信支付，所以去研究了微信APP支付的相关技术文档。虽然微信的相关的技术文档已经非常的清楚了。但是我还是想记录一下自己研究过程。

1 注册微信开放者平台

开发者平台地址：https://open.weixin.qq.com/

2 成为开发者

3 上传APP

4 开通微信支付功能

5 设置商户号信息

APP 支付能力开通后，微信会给你一个商户号，用户和密码等信息。需要验证商户信息，还需要设置一个加密的密钥字段，这里就不一一细说了。

6 开发接口

微信APP支付接口，是很好调试的，（不像微信公众平台，需要80端口），可以直接在本地就可以进行调试。 具体业务就不细说，直接看代码就懂了。

1 基础信息配置

package com.qx.client.common.pay.weichart.config;

import java.util.Properties;

import com.tom.util.properties.PropertiesUtil;
import com.tom.util.system.RSystemConfig;


public class WeiChartConfig {

   /** * 预支付请求地址 */
   public static final String  PrepayUrl = "https://api.mch.weixin.qq.com/pay/unifiedorder";

   /** * 查询订单地址 */
   public static final String  OrderUrl = "https://api.mch.weixin.qq.com/pay/orderquery";

   /** * 关闭订单地址 */
   public static final String  CloseOrderUrl = "https://api.mch.weixin.qq.com/pay/closeorder";

   /** * 申请退款地址 */
   public static final String  RefundUrl = "https://api.mch.weixin.qq.com/secapi/pay/refund";

   /** * 查询退款地址 */
   public static final String  RefundQueryUrl = "https://api.mch.weixin.qq.com/pay/refundquery";

   /** * 下载账单地址 */
   public static final String  DownloadBillUrl = "https://api.mch.weixin.qq.com/pay/downloadbill";

   /** * 商户APPID */
   public static final String  AppId = "wxabcdefghjjsdfsd";

   /** * 商户账户 获取支付能力后，从邮件中得到 */
   public static final String  MchId = "13000000000001";

   /** * 商户秘钥 32位，在微信商户平台中设置 */
   public static final String  AppSercret = "qx12345645778679789";

   /** * 服务器异步通知页面路径 */
   public static String notify_url = getProperties().getProperty("notify_url");

   /** * 页面跳转同步通知页面路径 */
   public static String return_url = getProperties().getProperty("return_url");

   /** * 退款通知地址 */
   public static String refund_notify_url = getProperties().getProperty("refund_notify_url");

   /** * 退款需要证书文件，证书文件的地址 */
   public static String refund_file_path = getProperties().getProperty("refund_file_path");

   /** * 商品名称 */
   public static String subject =  getProperties().getProperty("subject");

   /** * 商品描述 */
   public static String body = getProperties().getProperty("body");

   private static  Properties properties;

   public static synchronized Properties getProperties(){
      if(properties == null){
         String path = System.getenv(RSystemConfig.KEY_WEB_HOME_CONF) + "/weichart.properties";
         properties = PropertiesUtil.getInstance().getProperties(path);
      }
      return properties;
   }

}

2 http /https请求的工具类

其中有需要证书的，也有不需要证书的。
证书是在需要退款接口的时候需要使用，直接把证书放在服务器上，然后传路径

package com.qx.client.common.pay.weichart.util.httpClient;

import java.io.BufferedReader;
import java.io.File;
import java.io.FileInputStream;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.OutputStreamWriter;
import java.net.MalformedURLException;
import java.net.URL;
import java.net.URLConnection;
import java.security.KeyStore;
import java.util.Map;

import javax.net.ssl.SSLContext;

import org.apache.commons.httpclient.HttpClient;
import org.apache.commons.httpclient.methods.PostMethod;
import org.apache.commons.httpclient.methods.StringRequestEntity;
import org.apache.commons.httpclient.params.HttpMethodParams;
import org.apache.http.HttpEntity;
import org.apache.http.client.methods.CloseableHttpResponse;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
import org.apache.http.conn.ssl.SSLContexts;
import org.apache.http.entity.StringEntity;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.util.EntityUtils;

public class HttpClientUtil{



   public static String postHttplient(String url,
                                      String xmlInfo){
      try{
         HttpClient httpclient = new HttpClient();
         httpclient.getParams().setParameter(HttpMethodParams.HTTP_CONTENT_CHARSET, "UTF-8");
         PostMethod httpPost = new PostMethod(url);
         httpPost.setRequestEntity(new StringRequestEntity(xmlInfo));
         httpclient.executeMethod(httpPost);

         BufferedReader reader = new BufferedReader(new InputStreamReader(httpPost.getResponseBodyAsStream()));
         StringBuffer stringBuffer = new StringBuffer();
         String str = "";
         while((str = reader.readLine()) != null){
            stringBuffer.append(str);
         }
         reader.close();
         return stringBuffer.toString();
      }catch(Exception e){
         e.printStackTrace();
      }
      return null;
   }

   /** * 需要加密执行的 * @param url * @param xmlInfo * @return * @throws Exception */
   public static String postHttplientNeedSSL(String url,
                                             String xmlInfo,
                                             String cretPath,
                                             String mrchId)
         throws Exception{
      //选择初始化密钥文件格式
      KeyStore keyStore = KeyStore.getInstance("PKCS12");
      //得到密钥文件流
      FileInputStream instream = new FileInputStream(new File(cretPath));
      try{
         //用商户的ID 来解读文件
         keyStore.load(instream, mrchId.toCharArray());
      }finally{
         instream.close();
      }
      //用商户的ID 来加载
      SSLContext sslcontext = SSLContexts.custom().loadKeyMaterial(keyStore, mrchId.toCharArray()).build();
      // Allow TLSv1 protocol only
      SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslcontext, new String[] { "TLSv1" }, null, SSLConnectionSocketFactory.BROWSER_COMPATIBLE_HOSTNAME_VERIFIER);
      //用最新的httpclient 加载密钥
      CloseableHttpClient httpclient = HttpClients.custom().setSSLSocketFactory(sslsf).build();
      StringBuffer ret = new StringBuffer();
      try{
         HttpPost httpPost = new HttpPost(url);
         httpPost.setEntity(new StringEntity(xmlInfo));
         CloseableHttpResponse response = httpclient.execute(httpPost);
         try{
            HttpEntity entity = response.getEntity();
            if(entity != null){
               BufferedReader bufferedReader = new BufferedReader(new InputStreamReader(entity.getContent()));
               String text;
               while((text = bufferedReader.readLine()) != null){
                  ret.append(text);
               }
            }
            EntityUtils.consume(entity);
         }finally{
            response.close();
         }
      }finally{
         httpclient.close();
      }
      return ret.toString();
   }

   public static String postHtpps(String urlStr,
                                  String xmlInfo){
      try{
         URL url = new URL(urlStr);
         URLConnection con = url.openConnection();
         con.setDoOutput(true);
         con.setRequestProperty("Pragma:", "no-cache");
         con.setRequestProperty("Cache-Control", "no-cache");
         con.setRequestProperty("Content-Type", "text/xml");
         OutputStreamWriter out = new OutputStreamWriter(con.getOutputStream());
         out.write(new String(xmlInfo.getBytes("utf-8")));
         out.flush();
         out.close();
         BufferedReader br = new BufferedReader(new InputStreamReader(con.getInputStream()));
         StringBuffer lines = new StringBuffer();
         String line = "";
         for(line = br.readLine(); line != null; line = br.readLine()){
            lines.append(line);
         }
         return lines.toString();
      }catch(MalformedURLException e){
         e.printStackTrace();
      }catch(IOException e){
         e.printStackTrace();
      }
      return null;
   }

}

4 调用API接口

其中包含 XML生成，和解析XML，请求参数字典排序，拼接密钥，MD5加密

package com.qx.client.common.pay.weichart.util;

import java.net.InetAddress;
import java.net.UnknownHostException;
import java.util.Arrays;
import java.util.Date;
import java.util.HashMap;
import java.util.Map;
import java.util.Random;
import java.util.Set;

import org.mobj.com.encoding.RMd5;
import org.mobj.com.xml.FXmlDocument;
import org.mobj.com.xml.FXmlNode;
import org.mobj.com.xml.FXmlNodes;

import com.qx.client.common.pay.weichart.config.WeiChartConfig;
import com.qx.client.common.pay.weichart.util.httpClient.HttpClientUtil;

public class WeiChartUtil{

   /** * 返回状态码 */
   public static final String ReturnCode = "return_code";

   /** * 返回信息 */
   public static final String ReturnMsg = "return_msg";

   /** * 业务结果 */
   public static final String ResultCode = "result_code";

   /** * 预支付交易会话标识 */
   public static final String PrepayId = "prepay_id";
   /** * 得到微信预付单的返回ID * @param orderId 商户自己的订单号 * @param totalFee 总金额 （分） * @return */
   public static Map<String, String> getPreyId(String orderId,
                                  String totalFee){
      Map<String, String> reqMap = new HashMap<String, String>();
      reqMap.put("appid", WeiChartConfig.AppId);
      reqMap.put("mch_id", WeiChartConfig.MchId);
      reqMap.put("nonce_str", getRandomString());
      reqMap.put("body", WeiChartConfig.body);
      //reqMap.put("detail", WeiChartConfig.subject); //非必填
      //reqMap.put("attach", "附加数据"); //非必填
      reqMap.put("out_trade_no", orderId); //商户系统内部的订单号,
      reqMap.put("total_fee", totalFee); //订单总金额，单位为分
      reqMap.put("spbill_create_ip", getHostIp()); //用户端实际ip
      // reqMap.put("time_start", "172.16.40.18"); //交易起始时间 非必填
      // reqMap.put("time_expire", "172.16.40.18"); //交易结束时间 非必填
      // reqMap.put("goods_tag", "172.16.40.18"); //商品标记 非必填
      reqMap.put("notify_url", WeiChartConfig.notify_url); //通知地址
      reqMap.put("trade_type", "APP"); //交易类型
      //reqMap.put("limit_pay", "no_credit"); //指定支付方式,no_credit 指定不能使用信用卡支 非必填
      reqMap.put("sign", getSign(reqMap));

      String reqStr = creatXml(reqMap);
      String retStr = HttpClientUtil.postHttplient(WeiChartConfig.PrepayUrl, reqStr);
      return getInfoByXml(retStr);
   }

   /** * 关闭订单 * @param orderId 商户自己的订单号 * @return */
   public static Map<String, String> closeOrder(String orderId){
      Map<String, String> reqMap = new HashMap<String, String>();
      reqMap.put("appid", WeiChartConfig.AppId);
      reqMap.put("mch_id", WeiChartConfig.MchId);
      reqMap.put("nonce_str", getRandomString());
      reqMap.put("out_trade_no", orderId); //商户系统内部的订单号,
      reqMap.put("sign", getSign(reqMap));

      String reqStr = creatXml(reqMap);
      String retStr = HttpClientUtil.postHttplient(WeiChartConfig.CloseOrderUrl, reqStr);
      return getInfoByXml(retStr);
   }


   /** * 查询订单 * @param orderId 商户自己的订单号 * @return */
   public static String getOrder(String orderId){
      Map<String, String> reqMap = new HashMap<String, String>();
      reqMap.put("appid", WeiChartConfig.AppId);
      reqMap.put("mch_id", WeiChartConfig.MchId);
      reqMap.put("nonce_str", getRandomString());
      reqMap.put("out_trade_no", orderId); //商户系统内部的订单号,
      reqMap.put("sign", getSign(reqMap));

      String reqStr = creatXml(reqMap);
      String retStr = HttpClientUtil.postHttplient(WeiChartConfig.OrderUrl, reqStr);
      return retStr;
   }


   /** * 退款 * @param orderId 商户订单号 * @param refundId 退款单号 * @param totralFee 总金额（分） * @param refundFee 退款金额（分） * @param opUserId 操作员ID * @return */
   public static Map<String, String> refundWei(String orderId,String refundId,String totralFee,String refundFee,String opUserId){
      Map<String, String> reqMap = new HashMap<String, String>();
      reqMap.put("appid", WeiChartConfig.AppId);
      reqMap.put("mch_id", WeiChartConfig.MchId);
      reqMap.put("nonce_str", getRandomString());
      reqMap.put("out_trade_no", orderId); //商户系统内部的订单号,
      reqMap.put("out_refund_no", refundId); //商户退款单号
      reqMap.put("total_fee", totralFee); //总金额
      reqMap.put("refund_fee", refundFee); //退款金额
      reqMap.put("op_user_id", opUserId); //操作员
      reqMap.put("sign", getSign(reqMap));

      String reqStr = creatXml(reqMap);
      String retStr = "";
      try{
         retStr = HttpClientUtil.postHttplientNeedSSL(WeiChartConfig.RefundUrl, reqStr, WeiChartConfig.refund_file_path, WeiChartConfig.MchId);
      }catch(Exception e){
         e.printStackTrace();
         return null;
      }
      return getInfoByXml(retStr);
   }


   /** * 退款查询 * @param refundId 退款单号 * @return */
   public static Map<String, String> getRefundWeiInfo(String refundId){
      Map<String, String> reqMap = new HashMap<String, String>();
      reqMap.put("appid", WeiChartConfig.AppId);
      reqMap.put("mch_id", WeiChartConfig.MchId);
      reqMap.put("nonce_str", getRandomString());
      reqMap.put("out_refund_no", refundId); //商户退款单号
      reqMap.put("sign", getSign(reqMap));

      String reqStr = creatXml(reqMap);
      String retStr = HttpClientUtil.postHttplient(WeiChartConfig.RefundQueryUrl, reqStr);
      return getInfoByXml(retStr);
   }
   /** * 传入map 生成头为XML的xml字符串，例：<xml><key>123</key></xml> * @param reqMap * @return */
   public static String creatXml(Map<String, String> reqMap){
      Set<String> set = reqMap.keySet();
      FXmlNode rootXml = new FXmlNode();
      rootXml.setName("xml");
      for(String key : set){
         rootXml.createNode(key, reqMap.get(key));
      }
      return rootXml.xml().toString();
   }

   /** * 得到加密值 * @param map * @return */
   public static String getSign(Map<String, String> map){
      String[] keys = map.keySet().toArray(new String[0]);
      Arrays.sort(keys);
      StringBuffer reqStr = new StringBuffer();
      for(String key : keys){
         String v = map.get(key);
         if(v != null && !v.equals("")){
            reqStr.append(key).append("=").append(v).append("&");
         }
      }
      reqStr.append("key").append("=").append(WeiChartConfig.AppSercret);

      //MD5加密
      return RMd5.encode(reqStr.toString()).toUpperCase();
   }

   /** * 得到10 位的时间戳 * 如果在JAVA上转换为时间要在后面补上三个0 * @return */
   public static String getTenTimes(){
      String t = new Date().getTime()+"";
      t = t.substring(0, t.length()-3);
      return t;
   }

   /** * 得到随机字符串 * @param length * @return */
   public static String getRandomString(){
      int length = 32;
      String str = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
      Random random = new Random();
      StringBuffer sb = new StringBuffer();

      for(int i = 0; i < length; ++i){
         int number = random.nextInt(62);//[0,62) 
         sb.append(str.charAt(number));
      }
      return sb.toString();
   }

   /** * 得到本地机器的IP * @return */
   private static String getHostIp(){
      String ip = "";
      try{
         ip = InetAddress.getLocalHost().getHostAddress();
      }catch(UnknownHostException e){
         e.printStackTrace();
      }
      return ip;
   }

   /** * 将XML转换为Map 验证加密算法 然后返回 * @param xml * @return */
   public static Map<String, String>  getInfoByXml(String xml){
      try{
         FXmlDocument xdoc = new FXmlDocument();
         FXmlNode nodeRoot = xdoc.formatStringToXml(xml);
         FXmlNodes allNodes =  nodeRoot.allNodes();
         Map<String, String> map = new HashMap<String, String>();
         for(FXmlNode fXmlNode : allNodes){
            map.put(fXmlNode.name(), fXmlNode.text());
         }
         //对返回结果做校验.去除sign 字段再去加密
         String retSign = map.get("sign");
         map.remove("sign");
         String rightSing = getSign(map);
         if(rightSing.equals(retSign)){
            return map;
         }
      }catch(Exception e){
         return null;
      }
      return null;
   }


   /** * 将金额转换成分 * @param fee 元格式的 * @return 分 */
   public static String changeToFen(Double fee){
      String priceStr = "";
      if(fee != null){
          int p = (int)(fee * 100); //价格变为分
          priceStr = Integer.toString(p);
      }
      return priceStr;
   }

}