package com.dsh.course.util.midtrans;
|
|
import com.alibaba.fastjson.JSON;
|
import com.midtrans.Config;
|
import com.midtrans.Midtrans;
|
import com.midtrans.httpclient.SnapApi;
|
import com.midtrans.httpclient.TransactionApi;
|
import com.midtrans.httpclient.error.MidtransError;
|
import org.json.JSONObject;
|
|
import javax.servlet.http.HttpServletRequest;
|
import java.io.BufferedReader;
|
import java.io.IOException;
|
import java.io.InputStream;
|
import java.io.InputStreamReader;
|
import java.nio.charset.StandardCharsets;
|
import java.security.MessageDigest;
|
import java.security.NoSuchAlgorithmException;
|
import java.util.HashMap;
|
import java.util.Map;
|
|
/**
|
* Midtrans支付工具类
|
* @author pzb
|
* @Date 2022/11/28 14:19
|
*/
|
public class MidtransUtil {
|
|
private static String sandbox_merchant_id = "G118246934";
|
|
private static String sandbox_serverKey = "SB-Mid-server-qR4Xy4kbpyxND_7f6c1_knb9";
|
|
private static String sandbox_clientKey = "SB-Mid-client-xhRbIV8lsbu7bKCE";
|
|
private static String merchant_id = "G118246934";
|
|
private static String serverKey = "Mid-server-w1ATM2ldDpd0c4Q0s9sNfeNN";
|
|
private static String clientKey = "Mid-client-X22yMA1Wvs0v1vfO";
|
|
|
/**
|
* 获取支付令牌
|
* @param order_id 商户订单id
|
* @param gross_amount 支付金额
|
* @param xOverrideNotification 支付状态通知回调地址
|
* @return
|
*/
|
public static TokenResult getPayToken(String order_id, String gross_amount, String xOverrideNotification){
|
//沙箱环境
|
Midtrans.serverKey = sandbox_serverKey;
|
Midtrans.clientKey = sandbox_clientKey;
|
Midtrans.isProduction = false;
|
|
//生产环境
|
// Midtrans.serverKey = serverKey;
|
// Midtrans.clientKey = clientKey;
|
// Midtrans.isProduction = true;
|
|
Midtrans.paymentOverrideNotification(xOverrideNotification);
|
// Create Token and then you can send token variable to FrontEnd,
|
// to initialize Snap JS when customer click pay button
|
//201 成功创建 Snap 令牌。 “令牌”：“66e4fa55-fdac-4ef9-91b5-733b97d1b862”
|
//401 未能创建令牌，因为发送了错误的授权。 “访问被拒绝，请检查客户端或服务器密钥”
|
//4xx 未能创建令牌，因为发送了错误的参数。按照 error_message 并检查您的参数。 “transaction_details.gross_amount 不等于 item_details 的总和”
|
//5xx 由于 Midtrans 内部错误，无法创建令牌。大多数情况下这是暂时的，您可以稍后重试。 “抱歉，我们遇到内部服务器错误。我们会尽快解决这个问题。”
|
|
try {
|
JSONObject transaction = SnapApi.createTransaction(requestBody(order_id, gross_amount), Config.getGlobalConfig());
|
TokenResult tokenResult = new TokenResult();
|
tokenResult.setToken(transaction.getString("token"));
|
tokenResult.setRedirect_url(transaction.getString("redirect_url"));
|
return tokenResult;
|
} catch (MidtransError midtransError) {
|
midtransError.printStackTrace();
|
}
|
return null;
|
}
|
|
|
// Create params JSON Raw Object request
|
public static Map<String, Object> requestBody(String order_id, String gross_amount) {
|
Map<String, Object> params = new HashMap<>();
|
Map<String, String> transactionDetails = new HashMap<>();
|
transactionDetails.put("order_id", order_id);
|
transactionDetails.put("gross_amount", gross_amount);
|
Map<String, String> creditCard = new HashMap<>();
|
creditCard.put("secure", "true");
|
params.put("transaction_details", transactionDetails);
|
params.put("credit_card", creditCard);
|
return params;
|
}
|
|
|
/**
|
* 获取订单支付状态
|
* @param order_id
|
* @return
|
*/
|
public static PaymentNotice getPayStatus(String order_id){
|
//沙箱环境
|
Midtrans.serverKey = sandbox_serverKey;
|
Midtrans.clientKey = sandbox_clientKey;
|
Midtrans.isProduction = false;
|
|
//生产环境
|
// Midtrans.serverKey = serverKey;
|
// Midtrans.clientKey = clientKey;
|
// Midtrans.isProduction = true;
|
JSONObject jsonObject = null;
|
try {
|
jsonObject = TransactionApi.checkTransaction(order_id);
|
} catch (MidtransError midtransError) {
|
midtransError.printStackTrace();
|
}
|
PaymentNotice paymentNotice = JSON.parseObject(jsonObject.toString(), PaymentNotice.class);
|
if(null == paymentNotice){
|
System.err.println("回调结果解析失败");
|
return null;
|
}
|
String signature_key = paymentNotice.getSignature_key();
|
order_id = paymentNotice.getOrder_id();
|
String status_code = paymentNotice.getStatus_code();
|
if("400".equals(status_code)){
|
System.err.println("数据丢失或无效");
|
return null;
|
}
|
if("401".equals(status_code)){
|
System.err.println("授权错误");
|
return null;
|
}
|
if("404".equals(status_code)){
|
System.err.println("找不到请求的资源");
|
return null;
|
}
|
String gross_amount = paymentNotice.getGross_amount();
|
String sha_512_securePassword = get_SHA_512_SecurePassword(order_id + status_code + gross_amount + sandbox_serverKey);
|
if(!signature_key.equals(sha_512_securePassword)){
|
System.err.println("签名校验失败");
|
return null;
|
}
|
return paymentNotice;
|
}
|
|
|
/**
|
* 支付回调解析
|
* @param request
|
* @return
|
*/
|
public static PaymentNotice payResultNotification(HttpServletRequest request){
|
String param = null;
|
try {
|
param = getParam(request);
|
} catch (IOException e) {
|
e.printStackTrace();
|
}
|
|
System.err.println("支付回调结果：========》" + param);
|
|
PaymentNotice paymentNotice = JSON.parseObject(param, PaymentNotice.class);
|
if(null == paymentNotice){
|
System.err.println("回调结果解析失败");
|
return null;
|
}
|
String signature_key = paymentNotice.getSignature_key();
|
String order_id = paymentNotice.getOrder_id();
|
String status_code = paymentNotice.getStatus_code();
|
if("400".equals(status_code)){
|
System.err.println("数据丢失或无效");
|
return null;
|
}
|
if("401".equals(status_code)){
|
System.err.println("授权错误");
|
return null;
|
}
|
if("404".equals(status_code)){
|
System.err.println("找不到请求的资源");
|
return null;
|
}
|
String gross_amount = paymentNotice.getGross_amount();
|
String sha_512_securePassword = get_SHA_512_SecurePassword(order_id + status_code + gross_amount + sandbox_serverKey);
|
if(!signature_key.equals(sha_512_securePassword)){
|
System.err.println("签名校验失败");
|
return null;
|
}
|
return paymentNotice;
|
}
|
|
|
/**
|
* 退款交易
|
* @param transaction_id 支付订单id
|
* @param refund_key 商户退款id
|
* @param amount 退款金额
|
* @param reason 退款说明
|
* @return
|
*/
|
public static DirectRefundTransaction directRefundTransaction(String transaction_id, String refund_key, String amount, String reason){
|
//沙箱环境
|
Midtrans.serverKey = sandbox_serverKey;
|
Midtrans.clientKey = sandbox_clientKey;
|
Midtrans.isProduction = false;
|
|
//生产环境
|
// Midtrans.serverKey = serverKey;
|
// Midtrans.clientKey = clientKey;
|
// Midtrans.isProduction = true;
|
|
Map<String, String> requestBody = new HashMap<>();
|
requestBody.put("refund_key", refund_key);
|
requestBody.put("amount", amount);
|
requestBody.put("reason", reason);
|
|
JSONObject jsonObject = null;
|
try {
|
jsonObject = TransactionApi.directRefundTransaction(transaction_id, requestBody);
|
} catch (MidtransError midtransError) {
|
midtransError.printStackTrace();
|
}
|
/**
|
* {
|
* "status_code": "200",
|
* "status_message": "Success, refund request is approved by the bank",
|
* "transaction_id": "fddb5889-fd39-46fe-809d-30679fe42434",
|
* "order_id": "MID-1620622357",
|
* "gross_amount": "10000.00",
|
* "payment_type": "credit_card",
|
* "transaction_time": "2016-06-28 09:42:20",
|
* "transaction_status": "refund",
|
* "refund_chargeback_id": 47594,
|
* "refund_amount": "10000.00",
|
* "refund_key": "01f1f771-b75c-48ef-b21d-193a79f8aa5b"
|
* }
|
*/
|
|
DirectRefundTransaction directRefundTransaction = JSON.parseObject(jsonObject.toString(), DirectRefundTransaction.class);
|
if(null == directRefundTransaction){
|
System.err.println("退款结果解析失败");
|
return null;
|
}
|
String status_code = directRefundTransaction.getStatus_code();
|
if("400".equals(status_code)){
|
System.err.println("数据丢失或无效");
|
return null;
|
}
|
if("401".equals(status_code)){
|
System.err.println("授权错误");
|
return null;
|
}
|
if("404".equals(status_code)){
|
System.err.println("找不到请求的资源");
|
return null;
|
}
|
return directRefundTransaction;
|
}
|
|
|
|
|
/**
|
* 获取请求内容
|
* @param request
|
* @return
|
* @throws IOException
|
*/
|
private static String getParam(HttpServletRequest request) throws IOException {
|
// 读取参数
|
InputStream inputStream;
|
StringBuilder sb = new StringBuilder();
|
inputStream = request.getInputStream();
|
String s;
|
BufferedReader in = new BufferedReader(new InputStreamReader(inputStream, "UTF-8"));
|
while ((s = in.readLine()) != null) {
|
sb.append(s);
|
}
|
in.close();
|
inputStream.close();
|
return sb.toString();
|
}
|
|
|
private static String get_SHA_512_SecurePassword(String passwordToHash){
|
String generatedPassword = null;
|
try {
|
MessageDigest md = MessageDigest.getInstance("SHA-512");
|
byte[] bytes = md.digest(passwordToHash.getBytes(StandardCharsets.UTF_8));
|
StringBuilder sb = new StringBuilder();
|
for(int i=0; i< bytes.length ;i++){
|
sb.append(Integer.toString((bytes[i] & 0xff) + 0x100, 16).substring(1));
|
}
|
generatedPassword = sb.toString();
|
} catch (NoSuchAlgorithmException e) {
|
e.printStackTrace();
|
}
|
return generatedPassword;
|
}
|
|
|
}
|
