python支付宝异步通知notify验签方法

coding=utf-8

from urllib import request as requests
···
def notify(request):
“”“处理不同得参数，必须返回success”""
body = request.POST
trade_no = request.POST.get(“trade_no”) # 支付宝交易号
out_trade_no = request.POST.get(“out_trade_no”) # 获取订单号
trade_status = request.POST.get(“trade_status”) # 交易状态
notify_id = request.POST.get(“notify_id”) # 获取notify_id
seller_id = request.POST.get(“seller_id”) # 获取seller_id
buyer_email = request.POST.get(“buyer_logon_id”) # 获取支付者email
total_amount = request.POST.get(“total_amount”) # 获取支付价格
# 获取当前价格订单在自己数据库是否存在
pay_info = XXXXXXX
if not pay_info:
return HttpResponse(‘fail’)
# 对回传的seller_id做校验
if pay_info.third_account != seller_id:
return HttpResponse(‘fail’)
# 状态trade_status = TRADE_SUCCESS说明是交易成功
if trade_status == ‘TRADE_SUCCESS’:
# 请求支付宝验签接口，交易notify_id，看是否是支付宝发来的
gateway = “http://notify.alipay.com/trade/notify_query.do?"
veryfy_url = “partner=%s&notify_id=%s” % (seller_id, notify_id)
url = gateway + veryfy_url
try:
resp = requests.urlopen(url)
str_result = resp.read()
except Exception as e:
str_result = u"false”
print(“错误：%s-----<%s>” % (e, url))
if str_result == b’true’:
time_now = int(time.time())
# 做自己数据库一系列更新增加等操作
result = XXXXXXXX
if not result:
print(“更新支付宝支付状态失败，订单号%s” % out_trade_no)
return HttpResponse(‘fail’)
return HttpResponse(‘success’)
else:
return HttpResponse(‘fail’)
else:
return HttpResponse(‘success’)
···