利用SpringBoot實現一個跳轉支付功能

package com.ehs.union.pay.spring.boot.demo.controller;

import com.esh.union.pay.sdk.bean.config.UnionPayConfig;
import com.esh.union.pay.sdk.bean.consts.*;
import com.esh.union.pay.sdk.bean.request.UnionOpenAllChannelAndPayRequest;
import com.esh.union.pay.sdk.service.UnionPayService;
import com.esh.union.pay.sdk.utils.UnionStrUtil;
import com.esh.union.pay.sdk.utils.sign.CertDescriptor;
import com.esh.union.pay.sdk.utils.sign.UnionSecureUtil;
import com.esh.union.pay.sdk.utils.sign.UnionSignUtil;
import com.esh.union.pay.sdk.utils.sign.encrypt.RSA2;
import com.esh.union.pay.sdk.utils.sign.encrypt.X509;
import org.apache.commons.codec.binary.Base64;
import org.apache.commons.codec.digest.DigestUtils;
import org.apache.commons.io.IOUtils;
import org.apache.commons.lang3.StringUtils;
import org.apache.commons.lang3.time.DateFormatUtils;
import org.apache.commons.lang3.time.DateUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.ModelAttribute;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.servlet.ModelAndView;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.io.UnsupportedEncodingException;
import java.net.URLDecoder;
import java.security.PrivateKey;
import java.util.*;

/**
 * 無跳轉支付
 *
 * @author huyufan
 * @date 2020/11/8 16:49
 */
@Controller
@RequestMapping(value = "/pay")
public class PayController {

 protected static final Logger log = LoggerFactory.getLogger(PayController.class);

 @Autowired
 private UnionPayService unionPayService;

 @Autowired
 private CertDescriptor certDescriptor;


 /**
 * 支付請求 TO 銀聯
 * @param resp
 * @param openAllChannelAndPayRequest
 */
 @RequestMapping(value = "/yinlian", method = RequestMethod.POST)
 public void toYinlianPay(HttpServletResponse resp, @ModelAttribute(value = "openAllChannelAndPayRequest") UnionOpenAllChannelAndPayRequest openAllChannelAndPayRequest) {
 UnionPayConfig config = unionPayService.getConfig();
 CertDescriptor certDescriptor = unionPayService.getCertDescriptor();
 openAllChannelAndPayRequest.setBizType(UnionBizTypeConsts.BIZ_TYPE_000902);
 openAllChannelAndPayRequest.setTxnTime(DateFormatUtils.format(new Date(), "yyyyMMddHHmmss"));
 //TODO 后臺異步回調，暫未實現 backUrl 默認填官方要求的默認值，否則會校驗
 openAllChannelAndPayRequest.setBackUrl(config.getBackUrl());
 openAllChannelAndPayRequest.setCurrencyCode("156");
 openAllChannelAndPayRequest.setTxnType(UnionTxnTypeConsts.TXN_TYPE_01);
 openAllChannelAndPayRequest.setTxnSubType(UnionTxnSubTypeConsts.TXN_SUB_TYPE_01);
 openAllChannelAndPayRequest.setAccessType(UnionAccessTypeConsts.ACCESS_TYPE_0);
 openAllChannelAndPayRequest.setSignature(UnionSignMethodConsts.SIGNMETHOD_01);
 openAllChannelAndPayRequest.setChannelType(UnionChannelTypeConsts.CHANNEL_TYPE_07);
 openAllChannelAndPayRequest.setAccType(UnionAccTypeConsts.ACC_TYPE_01);
 openAllChannelAndPayRequest.setTokenPayData("{trId=99988877766&tokenType=01}");
 openAllChannelAndPayRequest.setAccNo(null);
 //前臺通知地址
 openAllChannelAndPayRequest.setFrontUrl(config.getFrontUrl());
 openAllChannelAndPayRequest.setPayTimeout(DateFormatUtils.format(DateUtils.addDays(new Date(), 1), "yyyyMMddHHmmss"));
 //request
 openAllChannelAndPayRequest.setCertId(certDescriptor.getSignCertId());
 openAllChannelAndPayRequest.setEncryptCertId(certDescriptor.getEncryptCertId());
 Map<String, String> paramMap = openAllChannelAndPayRequest.signAndGetMap(config,
  certDescriptor.getSignCertPrivateKey(config.getPrivateCertPwd()),
  config.getPrivateKeyString());
 String html = createAutoFormHtml(String.format(UnionUrlConsts.FRONT_TRANS_URL, "test.95516.com"), paramMap, "UTF-8");
 try {
  resp.getWriter().write(html);
 } catch (IOException e) {
  e.printStackTrace();
 }
 }

 /**
 * 銀聯同步通知
 * @param req
 * @return
 */
 @RequestMapping("/frontRcvResponse")
 public ModelAndView frontRcvResponse(HttpServletRequest req) {
 String encoding = req.getParameter("encoding");
 log.info("返回報文中encoding=[" + encoding + "]");
 String pageResult = "";
 if ("UTF-8".equalsIgnoreCase(encoding)) {
  pageResult = "success";
 } else {
  pageResult = "error";
  ModelAndView modelAndView = new ModelAndView(pageResult);
  modelAndView.addObject("result", "交易出錯，請聯系管理員");
  return modelAndView;
 }
 //獲取響應數據轉換為map
 Map<String, String> respParam = getAllRequestParam(req);
 // 驗簽集合
 Map<String, String> valideData = null;
 StringBuffer page = new StringBuffer();
 //組裝集合數據
 if (null != respParam && !respParam.isEmpty()) {
  Iterator<Map.Entry<String, String>> it = respParam.entrySet().iterator();
  valideData = new HashMap<String, String>(respParam.size());
  while (it.hasNext()) {
  Map.Entry<String, String> e = it.next();
  String key = (String) e.getKey();
  String value = (String) e.getValue();
  valideData.put(key, value);
  }
 }
 //獲取公鑰證書
 /*X509Certificate x509Cert = SDK.genCertificateByStr(valideData.get("signPubKeyCert"));
 if (x509Cert == null) {
  log.info("convert signPubKeyCert failed");
  throw new RuntimeException();
 }*/
 // 2.驗證證書鏈 以及是否過期
 /*if (!SDK.verifyCertificate(x509Cert, certDescriptor)) {
  log.info("驗證公鑰證書失敗，證書信息：[" + valideData.get("signPubKeyCert") + "]");
  throw new RuntimeException();
 }*/
 //驗 簽 處理
 String sign256 = DigestUtils.sha256Hex(UnionSignUtil.createQueryString(valideData, UnionParamConsts.getDefaultIgnoreSignParams()));
 boolean validate = RSA2.verify(sign256, valideData.get(UnionParamConsts.PARAM_SIGNATURE),X509.getPublicKey(valideData.get(UnionParamConsts.PARAM_SIGN_PUB_KEY_CERT)), "UTF-8");
 if (!validate) {
  log.info("驗證簽名結果[失敗].");
  return null;
 } else {
  log.info("驗證簽名結果[成功].");
  //前臺回調接口不涉及用戶相關信息封裝
  /*String customerInfo = valideData.get("customerInfo");
  if (null != customerInfo) {
  Map<String, String> customerInfoMap = this.parseCustomerInfo(customerInfo, "UTF-8");
  page.append("customerInfo明文: " + customerInfoMap);
  }
  String accNo = valideData.get("accNo");
  //如果返回的卡號是密文那么，可以用下邊方法解密
  if (null != accNo) {
  accNo = AcpService.decryptData(accNo, "UTF-8");
  page.append("<br>accNo明文: " + accNo);
  }*/
  //判斷respCode=00、A6后，對涉及資金類的交易，請再發起查詢接口查詢，確定交易成功后更新數據庫。
  String respCode = valideData.get("respCode");
 }
 if (StringUtils.equals(valideData.get("respCode"), "00")) {
  //解密卡號
  String accNo = UnionSecureUtil.decryptData(certDescriptor.getSignCertPrivateKey("000000"), valideData.get("accNo"), "UTF-8");
  respParam.put("accNo明文",accNo);
  ModelAndView modelAndView = new ModelAndView(pageResult);
  modelAndView.addObject("result", respParam);
  return modelAndView;
 } else {
  //TODO 交易碼不正確 邏輯未完善
  ModelAndView modelAndView = new ModelAndView(pageResult);
  modelAndView.addObject("result", "交易出錯，請聯系管理員");
  return modelAndView;
 }
 }


 /**
 * 解析返回報文（后臺通知）中的customerInfo域：<br>
 * 解base64,如果帶敏感信息加密 encryptedInfo 則將其解密并將 encryptedInfo中的域放到customerInfoMap返回<br>
 *
 * @param customerInfo<br>
 * @param encoding<br>
 * @return
 */
 public Map<String, String> parseCustomerInfo(String customerInfo, String encoding) {
 Map<String, String> customerInfoMap = null;
 try {
  byte[] b = Base64.decodeBase64(customerInfo.getBytes(encoding));
  String customerInfoNoBase64 = new String(b, encoding);
  log.info("解base64后===>" + customerInfoNoBase64);
  //去掉前后的{}
  customerInfoNoBase64 = customerInfoNoBase64.substring(1, customerInfoNoBase64.length() - 1);
  customerInfoMap = UnionStrUtil.parseQString(customerInfoNoBase64);
  if (customerInfoMap.containsKey("encryptedInfo")) {
  String encInfoStr = customerInfoMap.get("encryptedInfo");
  customerInfoMap.remove("encryptedInfo");
  PrivateKey privateKey = certDescriptor.getSignCertPrivateKey("000000");
  String encryptedInfoStr = UnionSecureUtil.decryptData(privateKey, encInfoStr, encoding);
  Map<String, String> encryptedInfoMap = UnionStrUtil.parseQString(encryptedInfoStr);
  customerInfoMap.putAll(encryptedInfoMap);
  }
 } catch (UnsupportedEncodingException e) {
  log.info(e.getMessage(), e);
 } catch (IOException e) {
  log.info(e.getMessage(), e);
 }
 return customerInfoMap;
 }


 /**
 * 獲取請求參數中所有的信息
 * 當商戶上送frontUrl或backUrl地址中帶有參數信息的時候，
 * 這種方式會將url地址中的參數讀到map中，會導多出來這些信息從而致驗簽失敗，這個時候可以自行修改過濾掉url中的參數或者使用getAllRequestParamStream方法。
 *
 * @param request
 * @return
 */
 public static Map<String, String> getAllRequestParam(
  final HttpServletRequest request) {
 Map<String, String> res = new HashMap<String, String>();
 Enumeration<&#63;> temp = request.getParameterNames();
 if (null != temp) {
  while (temp.hasMoreElements()) {
  String en = (String) temp.nextElement();
  String value = request.getParameter(en);
  res.put(en, value);
  // 在報文上送時，如果字段的值為空，則不上送<下面的處理為在獲取所有參數數據時，判斷若值為空，則刪除這個字段>
  if (res.get(en) == null || "".equals(res.get(en))) {
   // System.out.println("======為空的字段名===="+en);
   res.remove(en);
  }
  }
 }
 return res;
 }

 /**
 * 獲取請求參數中所有的信息。
 * 非struts可以改用此方法獲取，好處是可以過濾掉request.getParameter方法過濾不掉的url中的參數。
 * struts可能對某些content-type會提前讀取參數導致從inputstream讀不到信息，所以可能用不了這個方法。理論應該可以調整struts配置使不影響，但請自己去研究。
 * 調用本方法之前不能調用req.getParameter("key");這種方法，否則會導致request取不到輸入流。
 *
 * @param request
 * @return
 */
 public static Map<String, String> getAllRequestParamStream(
  final HttpServletRequest request) {
 Map<String, String> res = new HashMap<String, String>();
 try {
  String notifyStr = new String(IOUtils.toByteArray(request.getInputStream()), "UTF-8");
  log.info("收到通知報文：" + notifyStr);
  String[] kvs = notifyStr.split("&");
  for (String kv : kvs) {
  String[] tmp = kv.split("=");
  if (tmp.length >= 2) {
   String key = tmp[0];
   String value = URLDecoder.decode(tmp[1], "UTF-8");
   res.put(key, value);
  }
  }
 } catch (UnsupportedEncodingException e) {
  log.info("getAllRequestParamStream.UnsupportedEncodingException error: " + e.getClass() + ":" + e.getMessage());
 } catch (IOException e) {
  log.info("getAllRequestParamStream.IOException error: " + e.getClass() + ":" + e.getMessage());
 }
 return res;
 }


 public static String createAutoFormHtml(String reqUrl, Map<String, String> hiddens, String encoding) {
 StringBuffer sf = new StringBuffer();
 sf.append("<html><head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=" + encoding + "\"/></head><body>");
 sf.append("<form id = \"pay_form\" action=\"" + reqUrl
  + "\" method=\"post\">");
 if (null != hiddens && 0 != hiddens.size()) {
  Set<Map.Entry<String, String>> set = hiddens.entrySet();
  Iterator<Map.Entry<String, String>> it = set.iterator();
  while (it.hasNext()) {
  Map.Entry<String, String> ey = it.next();
  String key = ey.getKey();
  String value = ey.getValue();
  sf.append("<input type=\"hidden\" name=\"" + key + "\" id=\""
   + key + "\" value=\"" + value + "\"/>");
  }
 }
 sf.append("</form>");
 sf.append("</body>");
 sf.append("<script type=\"text/javascript\">");
 sf.append("document.all.pay_form.submit();");
 sf.append("</script>");
 sf.append("</html>");
 return sf.toString();
 }

}