ios支付签名认证
一、解析json中参数的含义
private Long id;
@ApiModelProperty(value = "创建时间")
private Date gmtCreate;
@ApiModelProperty(value = "修改时间")
private Date gmtModified;
@ApiModelProperty(value = "用户编号")
private Long userNo;
@ApiModelProperty(value = "订单号")
private Long orderNo;
@ApiModelProperty(value = "唯一标识符")
private String uniqueIdentifier;
@ApiModelProperty(value = "原始交易ID")
private Long originalTransactionId;
@ApiModelProperty(value = "交易的标识")
private Long transactionId;
@ApiModelProperty(value = "数量")
private BigDecimal quantity;
@ApiModelProperty(value = "开发商交易ID")
private String uniqueVendorIdentifier;
@ApiModelProperty(value = "App Store用来标识程序的字符串")
private Long itemId;
@ApiModelProperty(value = "识别购买时使用的App版本，为任意数字")
private String versionExternalIdentifier;
@ApiModelProperty(value = "iPhone程序的bundle标识")
private String bid;
@ApiModelProperty(value = "商品的标识 ")
private String productId;
@ApiModelProperty(value = "校验状态码")
private Integer status;
二、定义解析工具类
package com.roncoo.education.common.core.tools;
import com.alibaba.fastjson.JSONObject;
import javax.net.ssl.*;
import java.io.BufferedOutputStream;
import java.io.BufferedReader;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.math.BigDecimal;
import java.net.URL;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.util.Locale;
/**
* @author ZhangRF
*/
public class IosVerifyUtil {
private static class TrustAnyTrustManager implements X509TrustManager {
public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
}
public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
}
public X509Certificate[] getAcceptedIssuers() {
return new X509Certificate[] {};
}
}
private static class TrustAnyHostnameVerifier implements HostnameVerifier {
public boolean verify(String hostname, SSLSession session) {
return true;
}
}
private static final String url_sandbox = "https://sandbox.itunes.apple.com/verifyReceipt";
private static final String url_verify = "https://buy.itunes.apple.com/verifyReceipt";
/**
* 苹果服务器验证
*
* @param receipt
* 账单
* @url 要验证的地址
* @return null 或返回结果 沙盒 https://sandbox.itunes.apple.com/verifyReceipt
*
*/
public static String buyAppVerify(String receipt,int type) {
//环境判断 线上/开发环境用不同的请求链接
String url = "";
if(type==0){
url = url_sandbox; //沙盒测试
}else{
url = url_verify; //线上测试
}
try {
SSLContext sc = SSLContext.getInstance("SSL");
sc.init(null, new TrustManager[] { new TrustAnyTrustManager() }, new java.security.SecureRandom());
URL console = new URL(url);
HttpsURLConnection conn = (HttpsURLConnection) console.openConnection();
conn.setSSLSocketFactory(sc.getSocketFactory());
conn.setHostnameVerifier(new TrustAnyHostnameVerifier());
conn.setRequestMethod("POST");
conn.setRequestProperty("content-type", "text/json");
conn.setRequestProperty("Proxy-Connection", "Keep-Alive");
conn.setDoInput(true);
conn.setDoOutput(true);
BufferedOutputStream hurlBufOus = new BufferedOutputStream(conn.getOutputStream());
String str = String.format(Locale.CHINA, "{\"receipt-data\":\"" + receipt + "\"}");//拼成固定的格式传给平台
hurlBufOus.write(str.getBytes());
hurlBufOus.flush();
InputStream is = conn.getInputStream();
BufferedReader reader = new BufferedReader(new InputStreamReader(is));
String line = null;
StringBuffer sb = new StringBuffer();
while ((line = reader.readLine()) != null) {
sb.append(line);
}
return sb.toString();
} catch (Exception ex) {
System.out.println("苹果服务器异常");
ex.printStackTrace();
}
return null;
}
/**
* 用BASE64加密
*
* @param str
* @return
*/
public static String getBASE64(String str) {
byte[] b = str.getBytes();
String s = null;
if (b != null) {
s = new sun.misc.BASE64Encoder().encode(b);
}
return s;
}
public static void main(String[] args) {
String a = "拿到的苹果签名";
String buyAppVerify = buyAppVerify(a, 0);
System.out.println(buyAppVerify);
JSONObject appleReturn = JSONObject.parseObject(buyAppVerify);
String status = appleReturn.getString("status");
a = appleReturn.getString("receipt");
JSONObject returnJson = JSONObject.parseObject(a);
String uniqueIdentifier = returnJson.getString("unique_identifier");
Long originalTransactionId = returnJson.getLong("original_transaction_id");
Long transactionId = returnJson.getLong("transaction_id");
BigDecimal quantity = returnJson.getBigDecimal("quantity");
String uniqueVendorIdentifier = returnJson.getString("unique_vendor_identifier");
Long itemId = returnJson.getLong("item_id");
String versionExternalIdentifier = returnJson.getString("version_external_identifier");
String bid = returnJson.getString("bid");
String productId = returnJson.getString("product_id");
System.out.println(uniqueIdentifier+"======originalTransactionId"+originalTransactionId+"==transactionId=="+transactionId+
"====uniqueVendorIdentifier"+uniqueVendorIdentifier+"=====quantity"+quantity+"========"+itemId
+"versionExternalIdentifier"+versionExternalIdentifier+"====bid"+bid+"===productId"+productId+"status"+status);
}
}
三、解析使用，数据存入数据库
package com.roncoo.education.course.service.api.auth.biz;
import com.alibaba.fastjson.JSONObject;
import com.roncoo.education.common.core.base.Base;
import com.roncoo.education.common.core.base.Result;
import com.roncoo.education.common.core.tools.IosVerifyUtil;
import com.roncoo.education.course.service.dao.IosVerifyDao;
import com.roncoo.education.course.service.dao.impl.mapper.entity.IosVerify;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;
import java.math.BigDecimal;
/**
* @author ZhangRF
*/
@Component
public class AuthApiIosVerifyBiz extends Base {
@Autowired
private IosVerifyDao dao;
/**
* 解析IOS支付结果
*
* @param receipt
* @return
*/
public Result<Integer> buyAppVerify(String receipt, Long userNo, Long orderNo) {
String verifyResult = IosVerifyUtil.buyAppVerify(receipt, 1);
if (verifyResult == null) {
return Result.error("苹果验证失败，返回数据为空");
} else {
logger.info("线上，苹果平台返回JSON:" + verifyResult);
JSONObject appleReturn = JSONObject.parseObject(verifyResult);
String status = appleReturn.getString("status");
//无数据则沙箱环境验证
if ("21007".equals(status)) {
verifyResult = IosVerifyUtil.buyAppVerify(receipt, 0);
logger.info("沙盒环境，苹果平台返回JSON:" + verifyResult);
appleReturn = JSONObject.parseObject(verifyResult);
status = appleReturn.getString("status");
}
logger.info("苹果平台返回值：appleReturn" + appleReturn);
// 前端所提供的收据是有效的 验证成功
if (status.equals("0")) {
receipt = appleReturn.getString("receipt");
JSONObject returnJson = JSONObject.parseObject(receipt);
String uniqueIdentifier = returnJson.getString("unique_identifier");
Long originalTransactionId = returnJson.getLong("original_transaction_id");
Long transactionId = returnJson.getLong("transaction_id");
BigDecimal quantity = returnJson.getBigDecimal("quantity");
String uniqueVendorIdentifier = returnJson.getString("unique_vendor_identifier");
Long itemId = returnJson.getLong("item_id");
String versionExternalIdentifier = returnJson.getString("version_external_identifier");
String bid = returnJson.getString("bid");
String productId = returnJson.getString("product_id");
IosVerify iosVerify = new IosVerify();
iosVerify.setUniqueIdentifier(uniqueIdentifier);
iosVerify.setOriginalTransactionId(originalTransactionId);
iosVerify.setTransactionId(transactionId);
iosVerify.setQuantity(quantity);
iosVerify.setUniqueVendorIdentifier(uniqueVendorIdentifier);
iosVerify.setItemId(itemId);
iosVerify.setVersionExternalIdentifier(versionExternalIdentifier);
iosVerify.setBid(bid);
iosVerify.setProductId(productId);
iosVerify.setStatus(Integer.valueOf(status));
iosVerify.setUserNo(userNo);
iosVerify.setOrderNo(orderNo);
return Result.success(dao.save(iosVerify));
} else {
return Result.error("支付失败，错误码：" + status);
}
}
}
}
