这段时间工作中需要对接微信支付，而且要多个端同时进行接入，web端，手机浏览器，微信浏览器，所以研究了下。不同场景选择合适的接入方式是必须的。https://pay.weixin.qq.com/wiki/doc/api/index.html 官网上对这些都有说明。基础配置的流程就不写了。下面直接进入代码环节。
/// <summary>
/// 微信支付
/// </summary>
[HttpPost]
[Route("api/shopping/WeChatPay")]
public ResponseMessage WeChatPay(ReqWeChatPay req)
{
var response = new ResponseMessage { Msg = false, Message = CommonMessage.GetFailure, Info = 0 };
if (req == null) return response;
//将订单号给商品描述，用于页面展示
req.Subjects = req.OutTradeNo;
//获取到订单的相关信息
var orderInfo = CourseService.GetCourseByOrderNo(req.OutTradeNo);
var item = orderInfo.FirstOrDefault() ?? new CourseInfo { TrainingInstitutionId = 0, BuyPrice = Convert.ToDecimal(0.01) };
//获取机构下的微信支付信息
var weChatModel = MyShoppingCartService.GetMSiteWeChatPayAccount(item.TrainingInstitutionId);
//修改微信配置信息
SetWxPayConfig(weChatModel);
var weChatPay = new NativePay();
//构造返回实体
var respModel = new RespWeChatPay
{
ClassName = req.OutTradeNo,
OutTradeNo = req.OutTradeNo
};
//本订单下的支付流水有效，直接使用，没有生成新的支付流水，重新拉起支付
var serialNo = "N_" + DateTime.Now.ToString(CommonMessage.DateFormatYYYYMMDDHHMMSSFFFF).Substring(3);
var paySerial = MyShoppingCartService.GetPaySerial(item.OrderId, item.BuyPrice, "NATIVE", 120, serialNo);
req.OutTradeNo = paySerial;
//获取参数实体
var model = CreateGetWxPayDataModel(req, item.BuyPrice);
model.NotifyUrl = weChatModel.NotifyUrl;
AddOrderLog("NATIVE支付----参数实体)", string.Format("{0}", JsonHelper.toJson(model).Content.ReadAsStringAsync().Result)); //调用统一下单产生有效期为10分钟的二维码
var result = CreateRespModel(req, model, respModel, weChatPay);
//在return_code 和result_code都为SUCCESS的时候有返回,才能成功
if (result.GetValue("return_code").ToString() == CommonMessage.WeChatSuccess &&
result.GetValue("result_code").ToString() == CommonMessage.WeChatSuccess)
{
response.Msg = true;
response.Message = CommonMessage.OrderStatusSuccess;
response.Info = respModel;
//更新订单支付的类型
MyShoppingCartService.UpdateOrderPayType(req.Subjects, (int)CommonEnum.PayType.WechatPay, (int)CommonEnum.PaySourceType.WebOrApp);
} respModel.JsApiParameters = StringHelper.NullOrEmpty(respModel.JsApiParameters);
respModel.PrepayId = StringHelper.NullOrEmpty(respModel.PrepayId);
respModel.QrCodePath = PicHelper.ConcatPicUrl(respModel.QrCodePath);
AddOrderLog("NATIVE支付----二维码地址", $"{respModel.QrCodePath}");
return response;
} /// <summary>
/// 微信支付 --H5
/// </summary>
[HttpPost]
[Route("api/shopping/WeChatPayForH5")]
public ResponseMessage WeChatPayForH5(ReqWeChatPay req)
{
var response = new ResponseMessage { Msg = false, Message = CommonMessage.GetFailure, Info = 0 };
if (req == null) return response;
//将订单号给商品描述，用于页面展示
req.Subjects = req.OutTradeNo;
//获取到订单的相关信息
var orderInfo = CourseService.GetCourseByOrderNo(req.OutTradeNo);
var item = orderInfo.FirstOrDefault() ?? new CourseInfo { TrainingInstitutionId = 0, BuyPrice = Convert.ToDecimal(0.01) };
//获取机构下的微信支付信息
var weChatModel = MyShoppingCartService.GetMSiteWeChatPayAccount(item.TrainingInstitutionId);
//修改微信配置信息
SetWxPayConfig(weChatModel);
//构造返回实体
var respModel = new RespWeChatPay
{
ClassName = req.OutTradeNo,
OutTradeNo = req.OutTradeNo
};
var weChatPay = new NativePay();
//本订单下的支付流水有效，直接使用，没有生成新的支付流水，重新拉起支付
var serialNo = "M_" + DateTime.Now.ToString(CommonMessage.DateFormatYYYYMMDDHHMMSSFFFF).Substring(3);
//实际应支付金额
var buyPrice = item.BuyPrice - item.UsedScholarship;
var paySerial = MyShoppingCartService.GetPaySerial(item.OrderId, buyPrice, "MWEB", 5, serialNo);
req.OutTradeNo = paySerial;
//获取参数实体
var model = CreateGetWxPayDataModel(req, buyPrice);
model.NotifyUrl = weChatModel.NotifyUrl;
AddOrderLog("H5支付----参数实体", $"{JsonHelper.toJson(model).Content.ReadAsStringAsync().Result}"); //调用统一下单产生支付跳转url（有效期5分钟）
var result = CreateRespModel(req, model, respModel, weChatPay);
//在return_code 和result_code都为SUCCESS的时候有返回,才能成功
if (result.GetValue("return_code").ToString() == CommonMessage.WeChatSuccess &&
result.GetValue("result_code").ToString() == CommonMessage.WeChatSuccess)
{
response.Msg = true;
response.Message = CommonMessage.OrderStatusSuccess;
respModel.MWebUrl = StringHelper.NullOrEmpty(respModel.MWebUrl);
response.Info = respModel;
AddOrderLog("H5支付----吊起微信的Url", $"{respModel.MWebUrl}");
MyShoppingCartService.UpdateOrderPayType(req.Subjects, (int)CommonEnum.PayType.WechatPay, (int)CommonEnum.PaySourceType.Mstation); //更新订单支付的类型
}
else
{
response.Info = result.IsSet("err_code_des") ? result.GetValue("err_code_des").ToString() : result.GetValue("return_msg").ToString();
AddOrderLog("H5支付---获取吊起微信Url失败", $"错误信息：{result.ToJson()}");
}
return response;
} /// <summary>
/// 微信支付 --H5 （微信端） JSAPI
/// </summary>
[HttpPost]
[Route("api/shopping/WeChatPayForWeChatH5")]
public ResponseMessage WeChatPayForWeChatH5(ReqWeChatPay req)
{
var response = new ResponseMessage { Msg = false, Message = CommonMessage.GetFailure, Info = 0 };
if (req == null) return response;
//将订单号给商品描述，用于页面展示
req.Subjects = req.OutTradeNo;
var orderInfo = CourseService.GetCourseByOrderNo(req.OutTradeNo);//获取到订单的相关信息
var item = orderInfo.FirstOrDefault() ?? new CourseInfo { TrainingInstitutionId = 0, BuyPrice = Convert.ToDecimal(0.01) };
//获取机构下的微信支付信息
var weChatModel = MyShoppingCartService.GetMSiteWeChatPayAccount(item.TrainingInstitutionId);
//修改微信配置信息
SetWxPayConfig(weChatModel);
var weChatPay = new NativePay();
var wxJsSdkApi = new WxJsSdkApi();
//构造返回实体
var respModel = new RespWeChatPay
{
ClassName = req.OutTradeNo,
OutTradeNo = req.OutTradeNo
};
//本订单下的支付流水有效，直接使用，没有生成新的支付流水，重新拉起支付
var serialNo = "J_" + DateTime.Now.ToString(CommonMessage.DateFormatYYYYMMDDHHMMSSFFFF).Substring(3);
//实际应支付金额
var buyPrice = item.BuyPrice - item.UsedScholarship;
var paySerial = MyShoppingCartService.GetPaySerial(item.OrderId, buyPrice, "JSAPI", 120, serialNo);
req.OutTradeNo = paySerial;
//获取参数实体
var model = CreateGetWxPayDataModel(req, buyPrice);
model.NotifyUrl = weChatModel.NotifyUrl;
model.OpenId = wxJsSdkApi.GetAccessTokenByCode(req.Code).OpenId;
AddOrderLog("JSAPI支付----参数实体", $"{JsonHelper.toJson(model).Content.ReadAsStringAsync().Result}"); //调用统一下单产生有效期为2小时的 JsApiParameters
var result = CreateRespModel(req, model, respModel, weChatPay);
//在return_code 和result_code都为SUCCESS的时候有返回,才能成功
if (result.GetValue("return_code").ToString() == CommonMessage.WeChatSuccess &&
result.GetValue("result_code").ToString() == CommonMessage.WeChatSuccess)
{
response.Msg = true;
response.Message = CommonMessage.OrderStatusSuccess;
response.Info = respModel;
//更新订单支付的类型
MyShoppingCartService.UpdateOrderPayType(req.Subjects, (int)CommonEnum.PayType.WechatPay, (int)CommonEnum.PaySourceType.Mstation);
} respModel.JsApiParameters = StringHelper.NullOrEmpty(respModel.JsApiParameters);
AddOrderLog("JSAPI支付----JsApiParameters", $"{respModel.JsApiParameters}");
return response;
}
微信配置静态类字段的赋值
/// <summary>
/// 修改微信配置信息
/// </summary>
private void SetWxPayConfig(T_MSiteWeChatPayAccount weChatModel)
{
WxPayConfig.APPID = weChatModel.AppId;
WxPayConfig.MCHID = weChatModel.MchId;
WxPayConfig.KEY = weChatModel.Key;
WxPayConfig.APPSECRET = weChatModel.AppSecret;
WxPayConfig.NOTIFY_URL = weChatModel.NotifyUrl;
}
创建统一下单所需实体
/// <summary>
/// 构造参数实体
/// </summary>
/// <param name="req">接口参数</param>
/// <param name="price">价格，单位：分</param>
private GetWxPayDataModel CreateGetWxPayDataModel(ReqWeChatPay req, decimal price)
{
var ip = GetRealIp();
var model = new GetWxPayDataModel
{
Attach = req.Subjects,
Body = req.Subjects,
GoodsTag = req.Subjects,
OutTradeNo = req.OutTradeNo,
ProductId = req.OutTradeNo,
TimeStart = DateTime.Now.ToString(CommonMessage.DateFormatYYYYMMDDHHMMSS),
TimeExpire = req.TradeType == "NATIVE"
? DateTime.Now.AddMinutes(10).ToString(CommonMessage.DateFormatYYYYMMDDHHMMSS)
: req.TradeType == "MWEB"
? DateTime.Now.AddMinutes(5).ToString(CommonMessage.DateFormatYYYYMMDDHHMMSS)
: DateTime.Now.AddMinutes(120).ToString(CommonMessage.DateFormatYYYYMMDDHHMMSS),
TotalFee = (int)(price * 100),
TradeType = req.TradeType,
Ip = ip
};
return model;
} /// <summary>
/// 微信支付统一下单后的结果处理
/// </summary>
private WxPayData CreateRespModel(ReqWeChatPay req, GetWxPayDataModel model, RespWeChatPay respModel, NativePay weChatPay, bool saveQrCode = true)
{
var result = new WxPayData();
//二维码扫码支付
if (req.TradeType == ReqWeChatPay.NATIVE)
{
//统一下单
result = weChatPay.GetWxPayData(model);
Log4NetHelp.Info($"下单结果--{result.ToJson()}");
if (result.GetValue("return_code").ToString() == CommonMessage.WeChatSuccess)
{
var codeUrl = result.GetValue("code_url").ToString();
if (!saveQrCode) return result;
var uppath = CommonMessage.TPImageUpPath; //获取图片上传路径
var savepath = CommonMessage.TPImageSavePath; //获取图片保存数据库中的路径
var fileName = DateTime.Now.ToString(CommonMessage.DateFormatYYYYMMDDHHMMSSFFFF) + ".png";
var newFilePath = string.Format(savepath, "QrCode");
newFilePath = $"{newFilePath}{fileName}";
var filepath = string.Format(uppath, "QrCode");
weChatPay.MakeQrCode(codeUrl, filepath, fileName);
respModel.QrCodePath = newFilePath;
}
}
//H5支付
if (req.TradeType == ReqWeChatPay.MWEB)
{
//统一下单
result = weChatPay.GetWxPayData(model);
Log4NetHelp.Info($"下单结果--{result.ToJson()}");
if (result.GetValue("return_code").ToString() == CommonMessage.WeChatSuccess)
respModel.MWebUrl = result.GetValue("mweb_url").ToString();
}
//JSAPI支付
if (req.TradeType == ReqWeChatPay.JSAPI)
{
//统一下单
result = weChatPay.GetWxPayData(model);
Log4NetHelp.Info($"下单结果--{result.ToJson()}");
if (result.GetValue("return_code").ToString() == CommonMessage.WeChatSuccess)
respModel.JsApiParameters = weChatPay.GetJsApiParameters(result);
}
return result;
}
统一下单之前的数据组合，这里我是把获取返回来的数据都存在了redis中了。未过期之前直接获取就可以用。或者在实际应用中可以存在数据库中或者缓存中。
/// <summary>
/// 生成直接支付url，有效期为2小时 ----NATIVE
/// 生成支付跳转url，有效期为5分钟 ----MWEB
/// 生成prepay_id，有效期2小时 ----JSAPI
/// 微信支付统一下单后的返回数据
/// 模式二
/// </summary>
/// <returns>数据里面有prepay_id和二维码链接code_url</returns>
public WxPayData GetWxPayData(GetWxPayDataModel model)
{
WxPayData data = new WxPayData();
var validTime = CommonConst.ConstIntNumberZero;
if (model.TradeType == "NATIVE") validTime = 7200;
if (model.TradeType == "MWEB") validTime = 300;
if (model.TradeType == "JSAPI") validTime = 7200;
//redis中获取之前存的微信返回数据
var redisValue = redis.GetRedisValue(model.OutTradeNo);
Log.Info("get wechat unifiedOrder redisValue:", redisValue.ToJson());
if (!string.IsNullOrEmpty(redisValue))
{
SetWxPayResultData(redisValue, data);
return data;
}
data.SetValue("body", model.Body);//商品描述
data.SetValue("attach", model.Attach);//附加数据
data.SetValue("out_trade_no", model.OutTradeNo);//订单号
data.SetValue("total_fee", model.TotalFee);//总金额
data.SetValue("time_start", model.TimeStart);//交易起始时间
data.SetValue("time_expire", model.TimeExpire);//交易结束时间
data.SetValue("goods_tag", model.GoodsTag);//商品标记
data.SetValue("trade_type", model.TradeType);//交易类型
data.SetValue("product_id", model.ProductId);//商品ID
data.SetValue("notify_url", model.NotifyUrl);//微信异步回调地址
data.SetValue("openid", model.OpenId ?? "");//openId
data.SetValue("spbill_create_ip", model.Ip ?? "");//终端ip
//调用统一下单接口
data = WxPayApi.UnifiedOrder(data);
Log.Info("get wechat unifiedOrder model:", data.ToJson());
//将微信返回的数据存到redis中
if (data.GetValue("return_code").ToString() == "SUCCESS" && data.GetValue("result_code").ToString() == "SUCCESS")
redis.SetRedis(model.OutTradeNo, data.GetValues(), DateTime.Now.AddSeconds(validTime));
return data;
}
下面就到了微信demo中的统一下单接口的调用了
/**
*
* 统一下单
* @param WxPaydata inputObj 提交给统一下单API的参数
* @param int timeOut 超时时间
* @throws WxPayException
* @return 成功时返回，其他抛异常
*/
public static WxPayData UnifiedOrder(WxPayData inputObj, int timeOut = 60)
{
string url = "https://api.mch.weixin.qq.com/pay/unifiedorder";
//检测必填参数
if (!inputObj.IsSet("out_trade_no"))
{
throw new WxPayException("缺少统一支付接口必填参数out_trade_no！");
}
else if (!inputObj.IsSet("body"))
{
throw new WxPayException("缺少统一支付接口必填参数body！");
}
else if (!inputObj.IsSet("total_fee"))
{
throw new WxPayException("缺少统一支付接口必填参数total_fee！");
}
else if (!inputObj.IsSet("trade_type"))
{
throw new WxPayException("缺少统一支付接口必填参数trade_type！");
} //关联参数
if (inputObj.GetValue("trade_type").ToString() == "JSAPI" && !inputObj.IsSet("openid"))
{
throw new WxPayException("统一支付接口中，缺少必填参数openid！trade_type为JSAPI时，openid为必填参数！");
}
if (inputObj.GetValue("trade_type").ToString() == "NATIVE" && !inputObj.IsSet("product_id"))
{
throw new WxPayException("统一支付接口中，缺少必填参数product_id！trade_type为NATIVE时，product_id为必填参数！");
} if (inputObj.GetValue("trade_type").ToString() == "MWEB" && !inputObj.IsSet("spbill_create_ip"))
{
throw new WxPayException("统一支付接口中，缺少必填参数spbill_create_ip！trade_type为MWEB时，spbill_create_ip为必填参数！");
} //异步通知url未设置，则使用配置文件中的url
if (!inputObj.IsSet("notify_url"))
{
inputObj.SetValue("notify_url", WxPayConfig.NOTIFY_URL);//异步通知url
} inputObj.SetValue("appid", WxPayConfig.APPID);//公众账号ID
inputObj.SetValue("mch_id", WxPayConfig.MCHID);//商户号
inputObj.SetValue("spbill_create_ip", inputObj.IsSet("spbill_create_ip") ? inputObj.GetValue("spbill_create_ip").ToString() : "");//终端ip
inputObj.SetValue("nonce_str", GenerateNonceStr());//随机字符串 //签名
inputObj.SetValue("sign", inputObj.MakeSign());
string xml = inputObj.ToXml(); var start = DateTime.Now; //Log.Debug("WxPayApi", "UnfiedOrder request : " + xml);
string response = HttpService.Post(xml, url, false, timeOut); //准备了这么多就为了这一句
//Log.Debug("WxPayApi", "UnfiedOrder response : " + response); var end = DateTime.Now;
int timeCost = (int)((end - start).TotalMilliseconds); WxPayData result = new WxPayData();
result.FromXml(response); ReportCostTime(url, timeCost, result);//测速上报 return result;
}
FromXml() 会对签名进行验证。回调的时候也可以直接调用。
/**
* @将xml转为WxPayData对象并返回对象内部的数据
* @param string 待转换的xml串
* @return 经转换得到的Dictionary
* @throws WxPayException
*/
public SortedDictionary<string, object> FromXml(string xml)
{
if (string.IsNullOrEmpty(xml))
{
Log.Error(this.GetType().ToString(), "将空的xml串转换为WxPayData不合法!");
throw new WxPayException("将空的xml串转换为WxPayData不合法!");
} XmlDocument xmlDoc = new XmlDocument();
xmlDoc.LoadXml(xml);
XmlNode xmlNode = xmlDoc.FirstChild;//获取到根节点<xml>
XmlNodeList nodes = xmlNode.ChildNodes;
foreach (XmlNode xn in nodes)
{
XmlElement xe = (XmlElement)xn;
m_values[xe.Name] = xe.InnerText;//获取xml的键值对到WxPayData内部的数据中
} try
{
// 错误是没有签名
if(m_values["return_code"] != "SUCCESS")
{
return m_values;
}
CheckSign();//验证签名,不通过会抛异常
}
catch(WxPayException ex)
{
throw new WxPayException(ex.Message);
} return m_values;
}
统一下单之后要对数据进行分类处理。 NATIVE--生成二维码 用户扫码支付， MWEB -- 返回mweb_url 用来吊起微信应用，JSAPI -- 返回 jsApiParam 用来吊起微信支付页面
/// <summary>
/// 生成二维码
/// </summary>
/// <param name="codeUrl">微信返回的二维码图片地址</param>
/// <param name="filePath">二维码图片存放的地址</param>
public void MakeQrCode(string codeUrl, string filePath, string fileName)
{
//初始化二维码生成工具
QRCodeEncoder qrCodeEncoder = new QRCodeEncoder
{
QRCodeEncodeMode = QRCodeEncoder.ENCODE_MODE.BYTE,
QRCodeErrorCorrect = QRCodeEncoder.ERROR_CORRECTION.M,
QRCodeVersion = 0,
QRCodeScale = 4
};
//将字符串生成二维码图片
Bitmap image = qrCodeEncoder.Encode(codeUrl, Encoding.Default);
if (!Directory.Exists(filePath))
{
Directory.CreateDirectory(filePath);
}
filePath += fileName;
image.Save(filePath, ImageFormat.Jpeg);
}
吊起微信所需要的参数
/// <summary>
/// 获取json参数返回给前端使用
/// </summary>
/// <param name="data">统一下单之后的返回数据</param>
/// <returns>json参数串，返回给前端使用</returns>
public string GetJsApiParameters(WxPayData data)
{
Log.Debug(this.GetType().ToString(), "JsApiPay::GetJsApiParam is processing..."); WxPayData jsApiParam = new WxPayData();
jsApiParam.SetValue("appId", data.GetValue("appid"));
jsApiParam.SetValue("timeStamp", WxPayApi.GenerateTimeStamp());
jsApiParam.SetValue("nonceStr", WxPayApi.GenerateNonceStr());
jsApiParam.SetValue("package", "prepay_id=" + data.GetValue("prepay_id"));
jsApiParam.SetValue("signType", "MD5");
jsApiParam.SetValue("paySign", jsApiParam.MakeSign()); string parameters = jsApiParam.ToJson(); Log.Debug(this.GetType().ToString(), "Get jsApiParam : " + parameters);
return parameters;
}
JSAPI 需要获取openId 下面是openId的获取方法，其中code需要从前端获取。可以参考下官网第一步说明： https://mp.weixin.qq.com/wiki?t=resource/res_main&id=mp1421140842
因为access token的获取每天有次数限制，这里需要进行保存下。
public class WxJsSdkApi
{
/// <summary>
/// 缓存
/// </summary>
private RedisInfoHelper redis => new RedisInfoHelper(); /// <summary>
/// 微信appid
/// </summary>
private string appId = WxPayConfig.APPID; /// <summary>
/// 微信appsecret
/// </summary>
private string secret = WxPayConfig.APPSECRET;
/// <summary>
/// 获取基础支持access_token url 每日调用上限2000次
/// 详情参考：https://mp.weixin.qq.com/wiki?t=resource/res_main&id=mp1421140183
/// </summary>
private string WxGetTokenUrl = "https://api.weixin.qq.com/cgi-bin/token";
private string WxGetTokenParam = "grant_type=client_credential&appid={0}&secret={1}"; /// <summary>
/// 获取jsapi_ticket url
/// 详情参考：https://qydev.weixin.qq.com/wiki/index.php?title=%E5%BE%AE%E4%BF%A1JS-SDK%E6%8E%A5%E5%8F%A3
/// </summary>
private string WxGetTicketUrl = "https://api.weixin.qq.com/cgi-bin/ticket/getticket";
private string WxGetTicketParam = "access_token={0}&type=jsapi"; /// <summary>
/// 加密字符串的拼接
/// </summary>
private string WxSha1SignStr = "jsapi_ticket={0}&noncestr={1}×tamp={2}&url={3}"; /// <summary>
/// 通过用户code获取网页授权access_token url
/// 详情参考：https://mp.weixin.qq.com/wiki?t=resource/res_main&id=mp1421140842
/// </summary>
private string WxGetAccessTokenByCodeUrl = "https://api.weixin.qq.com/sns/oauth2/access_token";
private string WxGetAccessTokenByCodeParam = "appid={0}&secret={1}&code={2}&grant_type=authorization_code"; /// <summary>
/// 基础支持Access_Token 有效期7200秒
/// </summary>
public string BaseAccessToken => GetBaseAccessToken(); /// <summary>
/// Ticket 公众号用于调用微信JS接口的临时票据 （有效期7200秒）
/// </summary>
public string Ticket
{
get { return GetTicket(); }
} /// <summary>
/// 生成签名的随机串
/// </summary>
public string NonceStr { get; set; } = Guid.NewGuid().ToString().Replace("-", ""); /// <summary>
/// 生成签名的时间戳
/// </summary>
public string TimeStamp
{
get
{
TimeSpan ts = DateTime.UtcNow - new DateTime(1970, 1, 1, 0, 0, 0, 0);
return Convert.ToInt64(ts.TotalSeconds).ToString();
}
} /// <summary>
/// 获取基础支持access_token
/// </summary>
private string GetBaseAccessToken()
{
var accesstoken = redis.GetAccessTokenByAppId("wx_" + appId);
if ((string.Empty).Equals(accesstoken))
{
return GetBaseToken();
}
return accesstoken != null ? accesstoken.ToString() : GetBaseToken();
} /// <summary>
/// 获取基础支持access_token
/// </summary>
private string GetBaseToken()
{
try
{
string token = string.Empty; //向微信发送请求获取 基础支持accessToken
string content = HttpClientHelper.HttpGet(WxGetTokenUrl,
string.Format(WxGetTokenParam, appId, secret));
Log4NetHelp.Debug($"微信JSSDK获取基础accessToken参数--appid:{content},secret:{secret}");
Log4NetHelp.Debug($"微信JSSDK获取基础accessToken返回结果--{content}");
if (!string.IsNullOrEmpty(content))
{
var obj = JsonConvert.DeserializeObject<BaseTokenResult>(content);
if (!obj.errcode.HasValue)
{
token = obj.access_token;
//缓存 access_token
redis.SetRedis("wx_" + appId, token, DateTime.Now.AddSeconds(7200));
//获取 ticket
GetTicket(token);
}
}
return token;
}
catch (Exception ex)
{
return ex.Message;
}
} /// <summary>
/// 获取ticket
/// </summary>
private string GetTicket(string accessToken = "")
{
var ticket = string.Empty;
accessToken = BaseAccessToken;
if (string.Empty.Equals(accessToken)) return ticket;
ticket = redis.GetTicketByAccessToken(accessToken);
if ((string.Empty).Equals(ticket))
{
string content = HttpClientHelper.HttpGet(WxGetTicketUrl, string.Format(WxGetTicketParam, accessToken));
Log4NetHelp.Debug($"微信JSSDK获取ticket参数--accessToken:{accessToken}");
Log4NetHelp.Debug($"微信JSSDK获取ticket返回结果--{content}");
JsApiTicket obj = JsonConvert.DeserializeObject<JsApiTicket>(content);
ticket = obj.ticket;
redis.SetRedis(accessToken, ticket, DateTime.Now.AddSeconds(7200));
}
return ticket;
} /// <summary>
/// SDK生成签名 （SHA1加密）
/// 注意：需要引用System.Security.dll
/// </summary>
/// <param name="url">当前页面链接</param>
public string MakeSha1Sign(string nonceStr, string timeStamp, string url)
{
string str = string.Format(WxSha1SignStr, Ticket, nonceStr, timeStamp, url);
Log4NetHelp.Info($"SDK生成签名加密字符串--{str}");
byte[] StrRes = Encoding.Default.GetBytes(str);
HashAlgorithm iSHA = new SHA1CryptoServiceProvider();
StrRes = iSHA.ComputeHash(StrRes);
StringBuilder EnText = new StringBuilder();
foreach (byte iByte in StrRes)
{
EnText.AppendFormat("{0:x2}", iByte);
}
return EnText.ToString();
} /// <summary>
/// 通过code换取网页授权access_token
/// </summary>
/// <param name="code"></param>
/// <returns></returns>
public TokenResultInfo GetAccessTokenByCode(string code)
{
var result = new TokenResultInfo();
//向微信发送请求获取 网页授权accessToken
string content = HttpClientHelper.HttpGet(WxGetAccessTokenByCodeUrl,
string.Format(WxGetAccessTokenByCodeParam, appId, secret, code));
Log4NetHelp.Info($"通过code换取网页授权access_token参数--appid:{appId}--secret:{secret}--code:{code}");
Log4NetHelp.Info($"通过code换取网页授权access_token返回结果--{content}--appid:{appId}--secret:{secret}--code:{code}");
if (!string.IsNullOrEmpty(content))
{
var obj = JsonConvert.DeserializeObject<TokenResult>(content);
if (!obj.errcode.HasValue)
{
result.AccessToken = obj.access_token;
result.OpenId = obj.openid;
}
} return result;
}
}
回调时统一处理
/// <summary>
/// 微信异步回调处理
/// </summary>
[HttpPost]
[Route("api/shopping/WeChatNotifyUrl")]
public HttpResponseMessage WeChatNotifyUrl()
{
var response = new HttpResponseMessage();
var notify = new ResultNotify();
//签名验证 && 数据有效性验证
var data = notify.ProcessNotify(HttpContext.Current);
AddOrderLog("微信回调日志", $"微信回调 {data.ToJson()}");
var res = new WxPayData();
res.SetValue("return_code", CommonMessage.WeChatFail);
res.SetValue("return_msg", CommonMessage.WeChatFailMsg); if (data.GetValue("return_code").ToString() == "SUCCESS" &&
data.GetValue("result_code").ToString() == "SUCCESS")
{
//2. 校验返回的订单金额是否与商户侧的订单金额一致 不一致，返回错误信息
var isSameAccount = MyShoppingCartService.GetMyOrderTotalFeeByTradeNo(data.GetValue("out_trade_no").ToString(), Convert.ToInt32(data.GetValue("total_fee").ToString()));
if (!isSameAccount)
{
res.SetValue("return_msg", CommonMessage.InconformityWithAmount);
}
else
{
//更新订单以及相关业务处理
res.SetValue("return_code", CommonMessage.WeChatSuccess);
res.SetValue("return_msg", CommonMessage.WeChatSuccessMsg); }
}
response.Content = new StringContent(res.ToXml());
AddOrderLog("微信回调日志", $"微信回调返回数据 {res.ToXml()}");
return response;
}
回调处理基类：
/// <summary>
/// 回调处理基类
/// 主要负责接收微信支付后台发送过来的数据，对数据进行签名验证
/// 子类在此类基础上进行派生并重写自己的回调处理过程
/// </summary>
public class Notify
{
/// <summary>
/// 接收从微信支付后台发送过来的数据并验证签名
/// </summary>
/// <returns>微信支付后台返回的数据</returns>
public WxPayData GetNotifyData(HttpContext context)
{
//接收从微信后台POST过来的数据
System.IO.Stream s = context.Request.InputStream;
int count = 0;
byte[] buffer = new byte[1024];
StringBuilder builder = new StringBuilder();
while ((count = s.Read(buffer, 0, 1024)) > 0)
{
builder.Append(Encoding.UTF8.GetString(buffer, 0, count));
}
s.Flush();
s.Close();
s.Dispose(); Log.Info(this.GetType().ToString(), "Receive data from WeChat : " + builder.ToString()); //转换数据格式并验证签名
WxPayData data = new WxPayData();
try
{
//FormXML会校验签名
data.FromXml(builder.ToString());
}
catch (WxPayException ex)
{
//若签名错误，则立即返回结果给微信支付后台
WxPayData res = new WxPayData();
res.SetValue("return_code", "FAIL");
res.SetValue("return_msg", ex.Message);
Log.Error(this.GetType().ToString(), "Sign check error : " + res.ToXml());
context.Response.Write(res.ToXml());
context.Response.End();
} Log.Info(this.GetType().ToString(), "Check sign success");
return data;
} //派生类需要重写这个方法，进行不同的回调处理
public virtual WxPayData ProcessNotify(HttpContext context)
{
return null;
}
} /// <summary>
/// 支付结果通知回调处理类
/// 负责接收微信支付后台发送的支付结果并对订单有效性进行验证，将验证结果反馈给微信支付后台
/// </summary>
public class ResultNotify : Notify
{
public override WxPayData ProcessNotify(HttpContext context)
{
WxPayData notifyData = GetNotifyData(context);
//这里可以进行其他的验证
。。。。。。。
return notifyData;
}
}
获取真实IP的方法：
#region 获取web端真实IP地址
/// <summary>
/// 获取web端真实IP地址
/// </summary>
/// <returns></returns>
public string GetRealIp()
{
var ip = string.Empty;
if (HttpContext.Current != null)
{
ip = GetWebClientIp();
}
if (string.IsNullOrWhiteSpace(ip))
{
ip = GetLanIp();
}
return ip;
}
/// <summary>
/// 获取Web客户端的IP
/// </summary>
/// <returns></returns>
private string GetWebClientIp()
{
var ip = GetWebProxyRealIp() ?? GetWebRemoteIp();
foreach (var hostAddress in Dns.GetHostAddresses(ip))
{
if (hostAddress.AddressFamily == AddressFamily.InterNetwork)
{
return hostAddress.ToString();
}
}
return string.Empty;
}
/// <summary>
/// 获取Web远程IP
/// </summary>
/// <returns></returns>
private static string GetWebRemoteIp()
{
try
{
return HttpContext.Current.Request.ServerVariables["HTTP_X_FORWARDED_FOR"] ??
HttpContext.Current.Request.ServerVariables["REMOTE_ADDR"] ?? "";
}
catch (Exception e)
{
return string.Empty;
}
}
/// <summary>
/// 获取Web代理真实IP
/// </summary>
/// <returns></returns>
private string GetWebProxyRealIp()
{
var request = HttpContext.Current.Request;
string ip = request.Headers.Get("x-forwarded-for");
if (string.IsNullOrEmpty(ip) || string.Equals("unknown", ip, StringComparison.OrdinalIgnoreCase))
{
ip = request.Headers.Get("Proxy-Client-IP");
}
if (string.IsNullOrEmpty(ip) || string.Equals("unknown", ip, StringComparison.OrdinalIgnoreCase))
{
ip = request.Headers.Get("WL-Proxy-Client-IP");
}
if (string.IsNullOrEmpty(ip) || string.Equals("unknown", ip, StringComparison.OrdinalIgnoreCase))
{
ip = request.UserHostAddress;
}
if (string.IsNullOrEmpty(ip))
{
return string.Empty;
}
// 可能存在如下格式：X-Forwarded-For: client, proxy1, proxy2
if (ip.Contains(", "))
{
// 如果存在多个反向代理，获得的IP是一个用逗号分隔的IP集合，取第一个
// X-Forwarded-For: client 第一个
string[] ips = ip.Split(new string[1] { ", " }, StringSplitOptions.RemoveEmptyEntries);
var i = 0;
for (i = 0; i < ips.Length; i++)
{
if (ips[i] != "")
{
// 判断是否为内网IP
if (false == IsInnerIp(ips[i]))
{
IPAddress realIp;
if (IPAddress.TryParse(ips[i], out realIp) && ips[i].Split('.').Length == 4)
{
//合法IP
return ips[i];
}
return "";
}
}
}
ip = ips[0];// 默认获取第一个IP地址
}
return ip;
}
/// <summary>
/// 判断IP地址是否为内网IP地址
/// </summary>
/// <param name="ip">IP地址</param>
/// <returns></returns>
private bool IsInnerIp(string ip)
{
bool isInnerIp = false;
ulong ipNum = Ip2Ulong(ip);
/**
* 私有IP
* A类：10.0.0.0-10.255.255.255
* B类：172.16.0.0-172.31.255.255
* C类：192.168.0.0-192.168.255.255
* 当然，还有127这个网段是环回地址
*/
ulong aBegin = Ip2Ulong("10.0.0.0");
ulong aEnd = Ip2Ulong("10.255.255.255");
ulong bBegin = Ip2Ulong("172.16.0.0");
ulong bEnd = Ip2Ulong("10.31.255.255");
ulong cBegin = Ip2Ulong("192.168.0.0");
ulong cEnd = Ip2Ulong("192.168.255.255");
isInnerIp = IsInner(ipNum, aBegin, aEnd) || IsInner(ipNum, bBegin, bEnd) || IsInner(ipNum, cBegin, cEnd) ||
ip.Equals("127.0.0.1");
return isInnerIp;
}
/// <summary>
/// 将IP地址转换为Long型数字
/// </summary>
/// <param name="ip">IP地址</param>
/// <returns></returns>
private ulong Ip2Ulong(string ip)
{
byte[] bytes = IPAddress.Parse(ip).GetAddressBytes();
ulong ret = 0;
foreach (var b in bytes)
{
ret <<= 8;
ret |= b;
}
return ret;
}
/// <summary>
/// 判断用户IP地址转换为Long型后是否在内网IP地址所在范围
/// </summary>
/// <param name="userIp">用户IP</param>
/// <param name="begin">开始范围</param>
/// <param name="end">结束范围</param>
/// <returns></returns>
private bool IsInner(ulong userIp, ulong begin, ulong end)
{
return (userIp >= begin) && (userIp <= end);
}
/// <summary>
/// 获取局域网IP
/// </summary>
/// <returns></returns>
private string GetLanIp()
{
foreach (var hostAddress in Dns.GetHostAddresses(Dns.GetHostName()))
{
if (hostAddress.AddressFamily == AddressFamily.InterNetwork)
{
return hostAddress.ToString();
}
}
return string.Empty;
}
#endregion