package com.jilongda.common.wxPay.certificate;
|
|
import static java.util.Objects.requireNonNull;
|
|
import com.wechat.pay.java.core.Config;
|
import com.wechat.pay.java.core.cipher.AeadAesCipher;
|
import com.wechat.pay.java.core.cipher.AeadCipher;
|
import com.wechat.pay.java.core.exception.HttpException;
|
import com.wechat.pay.java.core.exception.MalformedMessageException;
|
import com.wechat.pay.java.core.exception.ServiceException;
|
import com.wechat.pay.java.core.exception.ValidationException;
|
import com.wechat.pay.java.core.http.Constant;
|
import com.wechat.pay.java.core.http.DefaultHttpClientBuilder;
|
import com.wechat.pay.java.core.http.HostName;
|
import com.wechat.pay.java.core.http.HttpClient;
|
import com.wechat.pay.java.core.http.HttpMethod;
|
import com.wechat.pay.java.core.http.HttpRequest;
|
import com.wechat.pay.java.core.http.HttpResponse;
|
import com.wechat.pay.java.core.http.MediaType;
|
import com.wechat.pay.java.core.util.PemUtil;
|
import com.wechat.pay.java.service.certificate.model.Data;
|
import com.wechat.pay.java.service.certificate.model.DownloadCertificateResponse;
|
import com.wechat.pay.java.service.certificate.model.EncryptCertificate;
|
import java.nio.charset.StandardCharsets;
|
import java.security.cert.X509Certificate;
|
import java.util.ArrayList;
|
import java.util.Base64;
|
import java.util.List;
|
import java.util.function.Function;
|
|
/** 证书服务 */
|
public class CertificateService {
|
|
private final HttpClient httpClient;
|
private final HostName hostName;
|
|
private static final String RSA_URL = "https://api.mch.weixin.qq.com/v3/certificates";
|
|
private CertificateService(HttpClient httpClient, HostName hostName) {
|
this.httpClient = requireNonNull(httpClient);
|
this.hostName = hostName;
|
}
|
|
/** CertificateService构造器 */
|
public static class Builder {
|
|
private HttpClient httpClient;
|
private HostName hostName;
|
|
public Builder config(Config config) {
|
this.httpClient = new DefaultHttpClientBuilder().config(config).build();
|
return this;
|
}
|
|
public Builder httpClient(HttpClient httpClient) {
|
this.httpClient = requireNonNull(httpClient);
|
return this;
|
}
|
|
public Builder hostName(HostName hostName) {
|
this.hostName = hostName;
|
return this;
|
}
|
|
public CertificateService build() {
|
return new CertificateService(httpClient, hostName);
|
}
|
}
|
|
/**
|
* 下载微信支付平台证书列表，仅下载RSA证书
|
*
|
* @param apiV3Key 微信支付 APIv3 密钥
|
* @return 微信支付平台证书 X509Certificate 列表
|
* @throws HttpException 发送HTTP请求失败。例如构建请求参数失败、发送请求失败、I/O错误等。包含请求信息。
|
* @throws ValidationException 发送HTTP请求成功，验证微信支付返回签名失败。
|
* @throws ServiceException 发送HTTP请求成功，服务返回异常。例如返回状态码小于200或大于等于300。
|
* @throws MalformedMessageException 服务返回成功，content-type不为application/json、解析返回体失败。
|
*/
|
public List<X509Certificate> downloadCertificate(byte[] apiV3Key) {
|
AeadCipher aeadCipher = new AeadAesCipher(apiV3Key);
|
return downloadCertificate(aeadCipher);
|
}
|
|
/**
|
* 下载微信支付平台证书列表
|
*
|
* @param requestPath 下载证书的请求路径
|
* @param aeadCipher 认证加密器，用于解密证书
|
* @param certificateGenerator 从证书字符串到证书对象的生成器
|
* @return 微信支付平台证书 X509Certificate 列表
|
* @throws HttpException 发送HTTP请求失败。例如构建请求参数失败、发送请求失败、I/O错误等。包含请求信息。
|
* @throws ValidationException 发送HTTP请求成功，验证微信支付返回签名失败。
|
* @throws ServiceException 发送HTTP请求成功，服务返回异常。例如返回状态码小于200或大于等于300。
|
* @throws MalformedMessageException 服务返回成功，content-type不为application/json、解析返回体失败。
|
*/
|
public List<X509Certificate> downloadCertificate(
|
String requestPath,
|
AeadCipher aeadCipher,
|
Function<String, X509Certificate> certificateGenerator) {
|
if (hostName != null) {
|
requestPath = requestPath.replaceFirst(HostName.API.getValue(), hostName.getValue());
|
}
|
HttpRequest request =
|
new HttpRequest.Builder()
|
.httpMethod(HttpMethod.GET)
|
.url(requestPath)
|
.addHeader(Constant.ACCEPT, " */*")
|
.addHeader(Constant.CONTENT_TYPE, MediaType.APPLICATION_JSON.getValue())
|
.build();
|
HttpResponse<DownloadCertificateResponse> httpResponse =
|
httpClient.execute(request, DownloadCertificateResponse.class);
|
List<Data> dataList = httpResponse.getServiceResponse().getData();
|
List<X509Certificate> certificates = new ArrayList<>();
|
for (Data data : dataList) {
|
EncryptCertificate encryptCertificate = data.getEncryptCertificate();
|
String decryptCertificate =
|
aeadCipher.decrypt(
|
encryptCertificate.getAssociatedData().getBytes(StandardCharsets.UTF_8),
|
encryptCertificate.getNonce().getBytes(StandardCharsets.UTF_8),
|
Base64.getDecoder().decode(encryptCertificate.getCiphertext()));
|
|
certificates.add(certificateGenerator.apply(decryptCertificate));
|
}
|
return certificates;
|
}
|
|
/**
|
* 下载微信支付平台证书列表，仅下载RSA证书
|
*
|
* @param aeadCipher 认证加密器，用于解密证书
|
* @return 证书列表
|
* @throws HttpException 发送HTTP请求失败。例如构建请求参数失败、发送请求失败、I/O错误等。包含请求信息。
|
* @throws ValidationException 发送HTTP请求成功，验证微信支付返回签名失败。
|
* @throws ServiceException 发送HTTP请求成功，服务返回异常。例如返回状态码小于200或大于等于300。
|
* @throws MalformedMessageException 服务返回成功，content-type不为application/json、解析返回体失败。
|
*/
|
public List<X509Certificate> downloadCertificate(AeadCipher aeadCipher) {
|
return downloadCertificate(RSA_URL, aeadCipher, PemUtil::loadX509FromString);
|
}
|
}
|
