支付宝沙箱的相关配置在支付宝开放平台中
我们在登录支付宝开放平台后，需要先生成公钥和私钥，首先需要先下载秘钥生成工具，然后生成应用公钥和私钥，这个应用私钥是开发者自己保存的，应用公钥是上传到沙箱环境用来生成支付宝公钥，支付宝公钥是项目中发起支付需要携带的，这个是个坑，千万不要携带应用公钥！！！秘钥的功能如下图
支付流程这块，分三步，1、用户点击支付，1、跳转到支付宝，3、支付结果返回，流程图如下
demo
这个demo以Django为主
模型
from django.db import models
class shopping(models.Model):
id = models.AutoField(primary_key=True)
shoping = models.CharField(max_length=64)
money = models.FloatField()
class order(models.Model):
id = models.AutoField(primary_key=True)
shopping = models.ForeignKey('shopping',to_field='id',on_delete=models.CASCADE)
status_choics = ((1,'未支付'),(2,'已支付'))
status = models.IntegerField(choices=status_choics,default=1)
对接支付宝SDK安装：
pip3 install python-alipay-sdk --upgrade
支付宝公钥和应用私钥的配置
在项目根目录下新建名为utils的文件夹，在这个新建的文件夹下面创建两个txt文件和一个py文件，将第一个txt文件改名为app_privatc_2048.txt，文件中的内容如下：
-----BEGIN RSA PRIVATE KEY-----
写上你的应用私钥
-----END RSA PRIVATE KEY-----
第二个txt文件改名为alipay_public_2048.txt，文件中的内容如下：
-----BEGIN PUBLIC KEY-----
写上你的支付宝公钥，支付宝公钥是由应用公钥生成的，在开放平台的沙箱环境下获取
-----END PUBLIC KEY-----
将py文件改名为alipay.py，内容如下：
from datetime import datetime
from Crypto.PublicKey import RSA
from Crypto.Signature import PKCS1_v1_5
from Crypto.Hash import SHA256
from urllib.parse import quote_plus
from base64 import decodebytes, encodebytes
import json
class AliPay(object):
"""
支付宝支付接口(PC端支付接口)
"""
def __init__(self, appid, app_notify_url, app_private_key_path,
alipay_public_key_path, return_url, debug=False):
self.appid = appid
self.app_notify_url = app_notify_url
self.app_private_key_path = app_private_key_path
self.app_private_key = None
self.return_url = return_url
with open(self.app_private_key_path) as fp:
self.app_private_key = RSA.importKey(fp.read())
self.alipay_public_key_path = alipay_public_key_path
with open(self.alipay_public_key_path) as fp:
self.alipay_public_key = RSA.importKey(fp.read())
if debug is True:
self.__gateway = "https://openapi.alipaydev.com/gateway.do"
else:
self.__gateway = "https://openapi.alipay.com/gateway.do"
def direct_pay(self, subject, out_trade_no, total_amount, return_url=None, **kwargs):
biz_content = {
"subject": subject,
"out_trade_no": out_trade_no,
"total_amount": total_amount,
"product_code": "FAST_INSTANT_TRADE_PAY",
# "qr_pay_mode":4
}
biz_content.update(kwargs)
data = self.build_body("alipay.trade.page.pay", biz_content, self.return_url)
return self.sign_data(data)
def build_body(self, method, biz_content, return_url=None):
data = {
"app_id": self.appid,
"method": method,
"charset": "utf-8",
"sign_type": "RSA2",
"timestamp": datetime.now().strftime("%Y-%m-%d %H:%M:%S"),
"version": "1.0",
"biz_content": biz_content
}
if return_url is not None:
data["notify_url"] = self.app_notify_url
data["return_url"] = self.return_url
return data
def sign_data(self, data):
data.pop("sign", None)
# 排序后的字符串
unsigned_items = self.ordered_data(data)
unsigned_string = "&".join("{0}={1}".format(k, v) for k, v in unsigned_items)
sign = self.sign(unsigned_string.encode("utf-8"))
# ordered_items = self.ordered_data(data)
quoted_string = "&".join("{0}={1}".format(k, quote_plus(v)) for k, v in unsigned_items)
# 获得最终的订单信息字符串
signed_string = quoted_string + "&sign=" + quote_plus(sign)
return signed_string
def ordered_data(self, data):
complex_keys = []
for key, value in data.items():
if isinstance(value, dict):
complex_keys.append(key)
# 将字典类型的数据dump出来
for key in complex_keys:
data[key] = json.dumps(data[key], separators=(',', ':'))
return sorted([(k, v) for k, v in data.items()])
def sign(self, unsigned_string):
# 开始计算签名
key = self.app_private_key
signer = PKCS1_v1_5.new(key)
signature = signer.sign(SHA256.new(unsigned_string))
# base64 编码，转换为unicode表示并移除回车
sign = encodebytes(signature).decode("utf8").replace("\n", "")
return sign
def _verify(self, raw_content, signature):
# 开始计算签名
key = self.alipay_public_key
signer = PKCS1_v1_5.new(key)
digest = SHA256.new()
digest.update(raw_content.encode("utf8"))
if signer.verify(digest, decodebytes(signature.encode("utf8"))):
return True
return False
def verify(self, data, signature):
if "sign_type" in data:
sign_type = data.pop("sign_type")
# 排序后的字符串
unsigned_items = self.ordered_data(data)
message = "&".join(u"{}={}".format(k, v) for k, v in unsigned_items)
return self._verify(message, signature)
接下来将模型迁移,并在模型中添加数据
python manage.py makemigrations
python manage.py migrate
配置settings，在settings中的最下方加入下面的代码
# 支付宝公钥
alipay_public_key_path = os.path.join(BASE_DIR,'utils/alipay_public_2048.txt')
# 应用私钥
app_private_key_path = os.path.join(BASE_DIR,'utils/app_privatc_2048.txt')
from utils.alipay import AliPay
# 支付需要的各种参数
app_id = '2016101900720980'
# POST，发送支付状态信息
notify_url = 'http://服务器IP:端口/baoinfo/'
# GET，将用户浏览器地址重定向到原网站
return_url = 'http://服务器IP:端口/returnonline/'
alipay = AliPay(
appid = app_id,
app_notify_url = notify_url,
return_url = return_url,
app_private_key_path = app_private_key_path,
alipay_public_key_path = alipay_public_key_path, # 支付宝公钥，验证支付宝回传消息使用不是自己的公钥
debug=True, # 默认是False，Ture是沙箱环境
)
建立三个路由
from django.urls import path,re_path
from pay import views
urlpatterns = [
# 订单列表
re_path(r'^index/$',views.index.as_view(),name='index/'),
# 发起支付
re_path(r'^onsetpay/(?P<shopid>\d+)/$',views.onsetpay.as_view(),name='onsetpay/'),
# 支付宝通知信息，POST
re_path(r'^baoinfo/$',views.baoinfo.as_view(),name='baoinfo/'),
# 回到我们的网站，GET
re_path(r'^returnonline/$',views.returnonline.as_view(),name='returnonline/'),
# 支付成功
re_path(r'^sures/$',views.sures.as_view(),name='sures/'),
views视图
from django.shortcuts import render,HttpResponse,redirect
from django.views.generic import View
from pay.models import shopping
from pay import models
import uuid
from urllib.parse import parse_qs
from .settings import alipay
# 商品列表
class index(View):
def get(self,request):
shopping_obj = shopping.objects.all()
return render(request,'index.html',{'shopping_obj':shopping_obj})
# 发起支付
class onsetpay(View):
def get(self,request,shopid):
''' 去购买并支付 '''
shop_obj = models.shopping.objects.get(id=shopid)
money = shop_obj.money
# 商户订单号
no = str(uuid.uuid4())
# 加载需要携带的商品信息
query = alipay.direct_pay(
subject=shop_obj.shoping,# 商品描述
out_trade_no=no, # 商户订单号
total_amount = money,# 交易金额
)
pay_url = 'https://openapi.alipaydev.com/gateway.do?{}'.format(query)
return redirect(pay_url)
# 支付宝通知信息，POST
class baoinfo(View):
def get(self,request):
return HttpResponse('只支持POST请求！')
def post(self,request):
# print('我是POST请求，',request.POST)
body_str = request.body.decode('utf-8')
post_data = parse_qs(body_str)
post_dict = {}
for k,v in post_data.items():
post_dict[k] = v[0]
print(post_dict)
sign = post_dict.pop('sign',None)
status = alipay.verify(post_dict,sign)
if status:
print('OK')
''' 支付成功，获取订单号将状态更新 '''
return HttpResponse('支付成功!')
else:
print('False')
return HttpResponse('支付失败！')
# 回到我们自己的网站
class returnonline(View):
def get(self,request):
params = request.GET.dict()
sign = params.pop('sign',None)
status = alipay.verify(params,sign)
if status:
print('GET成功')
return redirect('sures/')
else:
print('GET失败')
return HttpResponse('支付失败！')
class sures(View):
def get(self,request):
return render(request,'sures.html')
本地测试的话只能跳转到支付宝收银台完成支付，但是无法支付宝收银台无法跳转你指定的返回地址。所以我们需要将项目部署到服务器上才能进行测试。
支付宝返回的信息如下：
POST异步返回的信息
post = {
'gmt_create': '2020-07-14 08:55:52',
'charset': 'utf-8',
'gmt_payment': '2020-07-14 08:55:59',
'notify_time': '2020-07-14 08:55:59',
'subject': 'Pycharm会员',
'sign': 'BRTY0LbgmJ4rGDhRHYHs0xGs7E44Ipnh08XX56ejo+A15ExoAbIRBPNEYsXqXloSPFpU5NOGJSfed0gM2vP+ThXJYU1c4lJxsLV7'
'+gz1dOxyN7QcxRvHH3+8+h8HwjnP7rbb+BsCEyVu1oFqGGFqY7wCGEZwM6F+LYEFkyS5KFhcMOx3wN8IZeS1kyNiOwN3VZO2XMXV'
'qB/Sy/nNWzjfoa7WzpQwqVIXM5oau1Fmr2YpGWpHhLA56qrZaKrkJ9ykgNOBsPljq3zjso+WXWCJUrtyxgtA2VFkbiVIvQpTxJ8M'
'3MmNHjBIlXmtplBE+R2iunK1yAYSydCHBPzbjyY+Sw==',
'buyer_id': '2088102180558167',
'invoice_amount': '85.41',
'version': '1.0',
'notify_id': '2020071400222085559058160506415070',
'fund_bill_list': '[{"amount":"85.41","fundChannel":"ALIPAYACCOUNT"}]',
'notify_type': 'trade_status_sync',
'out_trade_no': 'fa22b276-b8a9-4fe6-90b1-00da1741c941',
'total_amount': '85.41',
'trade_status': 'TRADE_SUCCESS',
'trade_no': '2020071422001458160500843069',
'auth_app_id': '2016101900720980',
'receipt_amount': '85.41',
'point_amount': '0.00',
'app_id': '2016101900720980',
'buyer_pay_amount': '85.41',
'sign_type': 'RSA2',
'seller_id': '2088102180238098'
}
GET同步返回的信息：
get = {
'charset': 'utf-8',
'out_trade_no': 'fa22b276-b8a9-4fe6-90b1-00da1741c941',
'method': 'alipay.trade.page.pay.return',
'total_amount': '85.41',
'sign': 'LcqlazbMGtMMxyDM3uhzsZgOsyjSTZ8K+VPHJhCE8s7gwr5xEfRGVR9QH8mirlfkZgX2biYoqYF0R5+rNQJ5TO1hy4jTzr1y1'
'UP6SVN5pzZPgQD403FkPOdQ87nWUIiXBi/Mkdjthx3jpDMznbzXkOspNYGKB8NGpoKEThoCdhfD/kvP8kzbKs25diKNoFZWPU'
'VKSgYdZU31ONFNEYh/5fqbJn1XGa2CuvGwxRSnVEkOJ5jGSNS5UgHnkT6N8hO0XJsqfH+QDd3e3T2DJwmCZgRGh/kDaZz4ZQP'
'8SFP0mR3Hmtvt27enlytrzzQmToFVvNP6Ir8yYJ/43b92fLanng==',
'trade_no': '2020071422001458160500843069',
'auth_app_id': '2016101900720980',
'version': '1.0',
'app_id': '2016101900720980',
'sign_type': 'RSA2',
'seller_id': '2088102180238098',
'timestamp': '2020-07-14 08:56:05'
}
3万+
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
