利用SpringBoot实现一个跳转支付功能

package com.ehs.union.pay.spring.boot.demo.controller;

import com.esh.union.pay.sdk.bean.config.UnionPayConfig;
import com.esh.union.pay.sdk.bean.consts.*;
import com.esh.union.pay.sdk.bean.request.UnionOpenAllChannelAndPayRequest;
import com.esh.union.pay.sdk.service.UnionPayService;
import com.esh.union.pay.sdk.utils.UnionStrUtil;
import com.esh.union.pay.sdk.utils.sign.CertDescriptor;
import com.esh.union.pay.sdk.utils.sign.UnionSecureUtil;
import com.esh.union.pay.sdk.utils.sign.UnionSignUtil;
import com.esh.union.pay.sdk.utils.sign.encrypt.RSA2;
import com.esh.union.pay.sdk.utils.sign.encrypt.X509;
import org.apache.commons.codec.binary.Base64;
import org.apache.commons.codec.digest.DigestUtils;
import org.apache.commons.io.IOUtils;
import org.apache.commons.lang3.StringUtils;
import org.apache.commons.lang3.time.DateFormatUtils;
import org.apache.commons.lang3.time.DateUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.ModelAttribute;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.servlet.ModelAndView;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.io.UnsupportedEncodingException;
import java.net.URLDecoder;
import java.security.PrivateKey;
import java.util.*;

/**
 * 无跳转支付
 *
 * @author huyufan
 * @date 2020/11/8 16:49
 */
@Controller
@RequestMapping(value = "/pay")
public class PayController {

 protected static final Logger log = LoggerFactory.getLogger(PayController.class);

 @Autowired
 private UnionPayService unionPayService;

 @Autowired
 private CertDescriptor certDescriptor;


 /**
 * 支付请求 TO 银联
 * @param resp
 * @param openAllChannelAndPayRequest
 */
 @RequestMapping(value = "/yinlian", method = RequestMethod.POST)
 public void toYinlianPay(HttpServletResponse resp, @ModelAttribute(value = "openAllChannelAndPayRequest") UnionOpenAllChannelAndPayRequest openAllChannelAndPayRequest) {
 UnionPayConfig config = unionPayService.getConfig();
 CertDescriptor certDescriptor = unionPayService.getCertDescriptor();
 openAllChannelAndPayRequest.setBizType(UnionBizTypeConsts.BIZ_TYPE_000902);
 openAllChannelAndPayRequest.setTxnTime(DateFormatUtils.format(new Date(), "yyyyMMddHHmmss"));
 //TODO 后台异步回调，暂未实现 backUrl 默认填官方要求的默认值，否则会校验
 openAllChannelAndPayRequest.setBackUrl(config.getBackUrl());
 openAllChannelAndPayRequest.setCurrencyCode("156");
 openAllChannelAndPayRequest.setTxnType(UnionTxnTypeConsts.TXN_TYPE_01);
 openAllChannelAndPayRequest.setTxnSubType(UnionTxnSubTypeConsts.TXN_SUB_TYPE_01);
 openAllChannelAndPayRequest.setAccessType(UnionAccessTypeConsts.ACCESS_TYPE_0);
 openAllChannelAndPayRequest.setSignature(UnionSignMethodConsts.SIGNMETHOD_01);
 openAllChannelAndPayRequest.setChannelType(UnionChannelTypeConsts.CHANNEL_TYPE_07);
 openAllChannelAndPayRequest.setAccType(UnionAccTypeConsts.ACC_TYPE_01);
 openAllChannelAndPayRequest.setTokenPayData("{trId=99988877766&tokenType=01}");
 openAllChannelAndPayRequest.setAccNo(null);
 //前台通知地址
 openAllChannelAndPayRequest.setFrontUrl(config.getFrontUrl());
 openAllChannelAndPayRequest.setPayTimeout(DateFormatUtils.format(DateUtils.addDays(new Date(), 1), "yyyyMMddHHmmss"));
 //request
 openAllChannelAndPayRequest.setCertId(certDescriptor.getSignCertId());
 openAllChannelAndPayRequest.setEncryptCertId(certDescriptor.getEncryptCertId());
 Map<String, String> paramMap = openAllChannelAndPayRequest.signAndGetMap(config,
  certDescriptor.getSignCertPrivateKey(config.getPrivateCertPwd()),
  config.getPrivateKeyString());
 String html = createAutoFormHtml(String.format(UnionUrlConsts.FRONT_TRANS_URL, "test.95516.com"), paramMap, "UTF-8");
 try {
  resp.getWriter().write(html);
 } catch (IOException e) {
  e.printStackTrace();
 }
 }

 /**
 * 银联同步通知
 * @param req
 * @return
 */
 @RequestMapping("/frontRcvResponse")
 public ModelAndView frontRcvResponse(HttpServletRequest req) {
 String encoding = req.getParameter("encoding");
 log.info("返回报文中encoding=[" + encoding + "]");
 String pageResult = "";
 if ("UTF-8".equalsIgnoreCase(encoding)) {
  pageResult = "success";
 } else {
  pageResult = "error";
  ModelAndView modelAndView = new ModelAndView(pageResult);
  modelAndView.addObject("result", "交易出错，请联系管理员");
  return modelAndView;
 }
 //获取响应数据转换为map
 Map<String, String> respParam = getAllRequestParam(req);
 // 验签集合
 Map<String, String> valideData = null;
 StringBuffer page = new StringBuffer();
 //组装集合数据
 if (null != respParam && !respParam.isEmpty()) {
  Iterator<Map.Entry<String, String>> it = respParam.entrySet().iterator();
  valideData = new HashMap<String, String>(respParam.size());
  while (it.hasNext()) {
  Map.Entry<String, String> e = it.next();
  String key = (String) e.getKey();
  String value = (String) e.getValue();
  valideData.put(key, value);
  }
 }
 //获取公钥证书
 /*X509Certificate x509Cert = SDK.genCertificateByStr(valideData.get("signPubKeyCert"));
 if (x509Cert == null) {
  log.info("convert signPubKeyCert failed");
  throw new RuntimeException();
 }*/
 // 2.验证证书链 以及是否过期
 /*if (!SDK.verifyCertificate(x509Cert, certDescriptor)) {
  log.info("验证公钥证书失败，证书信息：[" + valideData.get("signPubKeyCert") + "]");
  throw new RuntimeException();
 }*/
 //验 签 处理
 String sign256 = DigestUtils.sha256Hex(UnionSignUtil.createQueryString(valideData, UnionParamConsts.getDefaultIgnoreSignParams()));
 boolean validate = RSA2.verify(sign256, valideData.get(UnionParamConsts.PARAM_SIGNATURE),X509.getPublicKey(valideData.get(UnionParamConsts.PARAM_SIGN_PUB_KEY_CERT)), "UTF-8");
 if (!validate) {
  log.info("验证签名结果[失败].");
  return null;
 } else {
  log.info("验证签名结果[成功].");
  //前台回调接口不涉及用户相关信息封装
  /*String customerInfo = valideData.get("customerInfo");
  if (null != customerInfo) {
  Map<String, String> customerInfoMap = this.parseCustomerInfo(customerInfo, "UTF-8");
  page.append("customerInfo明文: " + customerInfoMap);
  }
  String accNo = valideData.get("accNo");
  //如果返回的卡号是密文那么，可以用下边方法解密
  if (null != accNo) {
  accNo = AcpService.decryptData(accNo, "UTF-8");
  page.append("<br>accNo明文: " + accNo);
  }*/
  //判断respCode=00、A6后，对涉及资金类的交易，请再发起查询接口查询，确定交易成功后更新数据库。
  String respCode = valideData.get("respCode");
 }
 if (StringUtils.equals(valideData.get("respCode"), "00")) {
  //解密卡号
  String accNo = UnionSecureUtil.decryptData(certDescriptor.getSignCertPrivateKey("000000"), valideData.get("accNo"), "UTF-8");
  respParam.put("accNo明文",accNo);
  ModelAndView modelAndView = new ModelAndView(pageResult);
  modelAndView.addObject("result", respParam);
  return modelAndView;
 } else {
  //TODO 交易码不正确 逻辑未完善
  ModelAndView modelAndView = new ModelAndView(pageResult);
  modelAndView.addObject("result", "交易出错，请联系管理员");
  return modelAndView;
 }
 }


 /**
 * 解析返回报文（后台通知）中的customerInfo域：<br>
 * 解base64,如果带敏感信息加密 encryptedInfo 则将其解密并将 encryptedInfo中的域放到customerInfoMap返回<br>
 *
 * @param customerInfo<br>
 * @param encoding<br>
 * @return
 */
 public Map<String, String> parseCustomerInfo(String customerInfo, String encoding) {
 Map<String, String> customerInfoMap = null;
 try {
  byte[] b = Base64.decodeBase64(customerInfo.getBytes(encoding));
  String customerInfoNoBase64 = new String(b, encoding);
  log.info("解base64后===>" + customerInfoNoBase64);
  //去掉前后的{}
  customerInfoNoBase64 = customerInfoNoBase64.substring(1, customerInfoNoBase64.length() - 1);
  customerInfoMap = UnionStrUtil.parseQString(customerInfoNoBase64);
  if (customerInfoMap.containsKey("encryptedInfo")) {
  String encInfoStr = customerInfoMap.get("encryptedInfo");
  customerInfoMap.remove("encryptedInfo");
  PrivateKey privateKey = certDescriptor.getSignCertPrivateKey("000000");
  String encryptedInfoStr = UnionSecureUtil.decryptData(privateKey, encInfoStr, encoding);
  Map<String, String> encryptedInfoMap = UnionStrUtil.parseQString(encryptedInfoStr);
  customerInfoMap.putAll(encryptedInfoMap);
  }
 } catch (UnsupportedEncodingException e) {
  log.info(e.getMessage(), e);
 } catch (IOException e) {
  log.info(e.getMessage(), e);
 }
 return customerInfoMap;
 }


 /**
 * 获取请求参数中所有的信息
 * 当商户上送frontUrl或backUrl地址中带有参数信息的时候，
 * 这种方式会将url地址中的参数读到map中，会导多出来这些信息从而致验签失败，这个时候可以自行修改过滤掉url中的参数或者使用getAllRequestParamStream方法。
 *
 * @param request
 * @return
 */
 public static Map<String, String> getAllRequestParam(
  final HttpServletRequest request) {
 Map<String, String> res = new HashMap<String, String>();
 Enumeration<&#63;> temp = request.getParameterNames();
 if (null != temp) {
  while (temp.hasMoreElements()) {
  String en = (String) temp.nextElement();
  String value = request.getParameter(en);
  res.put(en, value);
  // 在报文上送时，如果字段的值为空，则不上送<下面的处理为在获取所有参数数据时，判断若值为空，则删除这个字段>
  if (res.get(en) == null || "".equals(res.get(en))) {
   // System.out.println("======为空的字段名===="+en);
   res.remove(en);
  }
  }
 }
 return res;
 }

 /**
 * 获取请求参数中所有的信息。
 * 非struts可以改用此方法获取，好处是可以过滤掉request.getParameter方法过滤不掉的url中的参数。
 * struts可能对某些content-type会提前读取参数导致从inputstream读不到信息，所以可能用不了这个方法。理论应该可以调整struts配置使不影响，但请自己去研究。
 * 调用本方法之前不能调用req.getParameter("key");这种方法，否则会导致request取不到输入流。
 *
 * @param request
 * @return
 */
 public static Map<String, String> getAllRequestParamStream(
  final HttpServletRequest request) {
 Map<String, String> res = new HashMap<String, String>();
 try {
  String notifyStr = new String(IOUtils.toByteArray(request.getInputStream()), "UTF-8");
  log.info("收到通知报文：" + notifyStr);
  String[] kvs = notifyStr.split("&");
  for (String kv : kvs) {
  String[] tmp = kv.split("=");
  if (tmp.length >= 2) {
   String key = tmp[0];
   String value = URLDecoder.decode(tmp[1], "UTF-8");
   res.put(key, value);
  }
  }
 } catch (UnsupportedEncodingException e) {
  log.info("getAllRequestParamStream.UnsupportedEncodingException error: " + e.getClass() + ":" + e.getMessage());
 } catch (IOException e) {
  log.info("getAllRequestParamStream.IOException error: " + e.getClass() + ":" + e.getMessage());
 }
 return res;
 }


 public static String createAutoFormHtml(String reqUrl, Map<String, String> hiddens, String encoding) {
 StringBuffer sf = new StringBuffer();
 sf.append("<html><head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=" + encoding + "\"/></head><body>");
 sf.append("<form id = \"pay_form\" action=\"" + reqUrl
  + "\" method=\"post\">");
 if (null != hiddens && 0 != hiddens.size()) {
  Set<Map.Entry<String, String>> set = hiddens.entrySet();
  Iterator<Map.Entry<String, String>> it = set.iterator();
  while (it.hasNext()) {
  Map.Entry<String, String> ey = it.next();
  String key = ey.getKey();
  String value = ey.getValue();
  sf.append("<input type=\"hidden\" name=\"" + key + "\" id=\""
   + key + "\" value=\"" + value + "\"/>");
  }
 }
 sf.append("</form>");
 sf.append("</body>");
 sf.append("<script type=\"text/javascript\">");
 sf.append("document.all.pay_form.submit();");
 sf.append("</script>");
 sf.append("</html>");
 return sf.toString();
 }

}