lywsvip/pay-java-parent
1
0
Fork 0
mirror of https://gitee.com/egzosn/pay-java-parent.git synced 2026-06-08 02:17:20 +08:00
Code Issues Packages Projects Releases Wiki Activity

微信加入平台公钥文本

Browse Source
This commit is contained in:
egzosn
2024-10-27 11:25:45 +08:00
parent bffcadc22d
commit f23f0fe45c
4 changed files with 47 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

39
pay-java-wx/src/main/java/com/egzosn/pay/wx/v3/api/WxPayService.java
View File

@@ -2,7 +2,9 @@ package com.egzosn.pay.wx.v3.api;
import java.io.IOException;
import java.io.InputStream;
import java.security.GeneralSecurityException;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.cert.Certificate;
import java.util.ArrayList;
import java.util.Collections;
@@ -51,6 +53,7 @@ import com.egzosn.pay.common.util.MapGen;
import com.egzosn.pay.common.util.Util;
import com.egzosn.pay.common.util.sign.SignTextUtils;
import com.egzosn.pay.common.util.sign.SignUtils;
import com.egzosn.pay.common.util.sign.encrypt.RSA;
import com.egzosn.pay.common.util.sign.encrypt.RSA2;
import com.egzosn.pay.common.util.str.StringUtils;
import com.egzosn.pay.wx.bean.WxPayError;
@@ -130,8 +133,10 @@ public class WxPayService extends BasePayService<WxPayConfigStorage> implements
if (null == assistService) {
assistService = new DefaultWxPayAssistService(this);
}
//在这预先进行初始化
assistService.refreshCertificate();
if (StringUtils.isEmpty(payConfigStorage.getKeyPublic())) {
//在这预先进行初始化
assistService.refreshCertificate();
}
return assistService;
}
@@ -222,14 +227,15 @@ public class WxPayService extends BasePayService<WxPayConfigStorage> implements
//微信平台签名
String signature = noticeParams.getHeader("wechatpay-signature");
Certificate certificate = getAssistService().getCertificate(serial);
//这里为微信回调时的请求内容体，原值数据
String body = noticeParams.getBodyStr();
//签名信息
String signText = StringUtils.joining("\n", timestamp, nonce, body);
if (StringUtils.isNotEmpty(payConfigStorage.getKeyPublic())) {
return RSA2.verify(signText, signature, payConfigStorage.getKeyPublic(), payConfigStorage.getInputCharset());
}
Certificate certificate = getAssistService().getCertificate(serial);
return RSA2.verify(signText, signature, certificate, payConfigStorage.getInputCharset());
}
@@ -685,19 +691,32 @@ public class WxPayService extends BasePayService<WxPayConfigStorage> implements
return null;
}
// 商户上送敏感信息时使用`微信支付平台公钥`加密
String serialNumber = payConfigStorage.getCertEnvironment().getPlatformSerialNumber();
Certificate certificate = getAssistService().getCertificate(serialNumber);
PublicKey publicKeyTmp = null;
if (StringUtils.isEmpty(payConfigStorage.getKeyPublic())) {
// 商户上送敏感信息时使用`微信支付平台公钥`加密
String serialNumber = payConfigStorage.getCertEnvironment().getPlatformSerialNumber();
Certificate certificate = getAssistService().getCertificate(serialNumber);
publicKeyTmp = certificate.getPublicKey();
}
else {
try {
publicKeyTmp = RSA.getPublicKey(payConfigStorage.getKeyPublic());
}
catch (IOException | GeneralSecurityException e) {
throw new PayErrorException(new WxPayError("", e.getMessage()));
}
}
PublicKey publicKey = publicKeyTmp;
return transferDetails.stream()
.peek(transferDetailListItem -> {
String userName = transferDetailListItem.getUserName();
if (StringUtils.isNotEmpty(userName)) {
String encryptedUserName = AntCertificationUtil.encryptToString(userName, certificate);
String encryptedUserName = AntCertificationUtil.encryptToString(userName, publicKey);
transferDetailListItem.setUserName(encryptedUserName);
}
String userIdCard = transferDetailListItem.getUserIdCard();
if (StringUtils.isNotEmpty(userIdCard)) {
String encryptedUserIdCard = AntCertificationUtil.encryptToString(userIdCard, certificate);
String encryptedUserIdCard = AntCertificationUtil.encryptToString(userIdCard, publicKey);
transferDetailListItem.setUserIdCard(encryptedUserIdCard);
}
}).collect(Collectors.toList());

15
pay-java-wx/src/main/java/com/egzosn/pay/wx/v3/utils/AntCertificationUtil.java
View File

@@ -52,7 +52,7 @@ public final class AntCertificationUtil {
static {
String javaVersion = System.getProperty("java.version");
if (javaVersion.contains("1.8") || javaVersion.startsWith("8")){
if (javaVersion.contains("1.8") || javaVersion.startsWith("8")) {
Security.setProperty("crypto.policy", "unlimited");
}
SignUtils.initBc();
@@ -170,9 +170,20 @@ public final class AntCertificationUtil {
* @return 加密后的内容
*/
public static String encryptToString(String message, Certificate certificate) {
return encryptToString(message, certificate.getPublicKey());
}
/**
* 对请求敏感字段进行加密
*
* @param message the message
* @param publicKey the certificate
* @return 加密后的内容
*/
public static String encryptToString(String message, PublicKey publicKey) {
try {
Cipher cipher = Cipher.getInstance("RSA/ECB/OAEPWithSHA-1AndMGF1Padding", WxConst.BC_PROVIDER);
cipher.init(Cipher.ENCRYPT_MODE, certificate.getPublicKey());
cipher.init(Cipher.ENCRYPT_MODE, publicKey);
byte[] data = message.getBytes(StandardCharsets.UTF_8);
byte[] cipherData = cipher.doFinal(data);