因为项目中需要用到微信支付，这里对自己对接的流程做一个记录
一、接入前准备
1.申请应用appId与商户号，配置apiV3秘钥
2.生成商户证书
首先登录微信商家平台，进入"账户中心–>账户设置–>API安全",申请API证书（此证书为商户证书，跟下文的微信平台支付证书不一样），下载安装方式见官方文档
经过上面链接中的教程，你将会在本地得到如下三个文件：
我们将用到apiclient_key.pem文件，为商户私钥
3.生成微信支付平台证书
这一步至关重要，因为很多人接入的时候由于官方文档写的很笼统而忽略此步，再调用API的时候错误的使用的商户证书，导致签名验证微信返回的内容时不成功，而爆出如下的错误：应答的微信支付签名验证失败
关于这个错误，其实只需要按照本文的此步生成微信支付平台证书即可。
3.1下载微信支付平台证书生成工具
下载jar包
3.2.执行命令生成微信支付平台证书
执行:“java -jar CertificateDownloader-1.2.0-jar-with-dependencies.jar -f 商户私钥文件路径 -k 证书解密的密钥 -m 商户号 -o 证书保存路径 -s 商户证书序列号”就行了。
这条命令的参数搞清楚3点：
a）“商户私钥文件路径”是账号中心->API安全->API证书中设置并下载的证书（就是其中的apiclient_key.pem，下载还会获得apiclient_cert.pem，我之前把这个当做支付证书了，其实不是，apiclient_cert.pem这用不着）
b)“商户证书序列号”这个东西也是设置API证书那里知道；
c)“证书解密的密钥”在账号中心->API安全->APIv3密钥中设置的（注意api密钥和apiv3密钥是2个东西）。
执行完了是个类似wechatpay_525846BC3402533386FD3D9DF7C13AA9D3CBBBC4.pem的文件，这个就是微信支付平台证书
**
二、java后台接入微信支付
**
1.引入微信支付服务端sdk
<dependency><groupId>com.github.wechatpay-apiv3</groupId><artifactId>wechatpay-apache-httpclient</artifactId><version>0.4.4</version>
</dependency>
2.创建一个微信支付工具类（我这里是用流的方式加载商户私钥与平台证书文件）
import com.alibaba.fastjson.JSONObject;
import com.wechat.pay.contrib.apache.httpclient.WechatPayHttpClientBuilder;
import com.wechat.pay.contrib.apache.httpclient.util.PemUtil;
import lombok.Data;
import org.apache.http.HttpEntity;
import org.apache.http.HttpResponse;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.entity.StringEntity;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.util.EntityUtils;import org.springframework.stereotype.Component;import java.io.FileInputStream;
import java.io.FileNotFoundException;
import java.security.PrivateKey;
import java.security.Signature;
import java.security.cert.X509Certificate;
import java.util.ArrayList;
import java.util.Base64;@Component
@Data
public class WxPayUtil {public static final String mchId = ""; // 商户号public static final String appId = ""; // appIdpublic static final String apiV3Key = ""; // apiV3秘钥//商户私钥路径public static final String privateKeyUrl = "";//平台证书路径public static final String wechatPayCertificateUrl = "";//第一步申请完证书后，在API证书哪里点击管理证书就能看到public static final String mchSerialNo = ""; // 商户证书序列号private CloseableHttpClient httpClient;public void setup() {// PrivateKey merchantPrivateKey = PemUtil.loadPrivateKey(privateKey);PrivateKey merchantPrivateKey = null;X509Certificate wechatPayCertificate = null;try {merchantPrivateKey = PemUtil.loadPrivateKey(new FileInputStream(privateKeyUrl));wechatPayCertificate = PemUtil.loadCertificate(new FileInputStream(wechatPayCertificateUrl));} catch (FileNotFoundException e) {e.printStackTrace();}ArrayList<X509Certificate> listCertificates = new ArrayList<>();listCertificates.add(wechatPayCertificate);WechatPayHttpClientBuilder builder = WechatPayHttpClientBuilder.create().withMerchant(mchId, mchSerialNo, merchantPrivateKey).withWechatPay(listCertificates);httpClient = builder.build();}/*** wxMchid商户号* wxCertno证书编号* wxCertPath证书地址* wxPaternerKey v3秘钥* url 下单地址* body 构造好的消息体*/public JSONObject doPostWexinV3(String url, String body) {if (httpClient == null) {setup();}HttpPost httpPost = new HttpPost(url);httpPost.addHeader("Content-Type", "application/json;chartset=utf-8");httpPost.addHeader("Accept", "application/json");try {if (body == null) {throw new IllegalArgumentException("data参数不能为空");}StringEntity stringEntity = new StringEntity(body, "utf-8");httpPost.setEntity(stringEntity);// 直接执行execute方法，官方会自动处理签名和验签，并进行证书自动更新HttpResponse httpResponse = httpClient.execute(httpPost);HttpEntity httpEntity = httpResponse.getEntity();if (httpResponse.getStatusLine().getStatusCode() == 200) {String jsonResult = EntityUtils.toString(httpEntity);return JSONObject.parseObject(jsonResult);} else {System.err.println("微信支付错误信息" + EntityUtils.toString(httpEntity));}} catch (Exception e) {e.printStackTrace();}return null;}//获取签名public String getSign(String appId, long timestamp, String nonceStr, String pack){String message = buildMessage(appId, timestamp, nonceStr, pack);String paySign= null;try {paySign = sign(message.getBytes("utf-8"));} catch (Exception e) {e.printStackTrace();}return paySign;}private String buildMessage(String appId, long timestamp, String nonceStr, String pack) {return appId + "\n"+ timestamp + "\n"+ nonceStr + "\n"+ pack + "\n";}private String sign(byte[] message) throws Exception{PrivateKey merchantPrivateKey = null;X509Certificate wechatPayCertificate = null;try {merchantPrivateKey = PemUtil.loadPrivateKey(new FileInputStream(privateKeyUrl));wechatPayCertificate = PemUtil.loadCertificate(new FileInputStream(wechatPayCertificateUrl));} catch (FileNotFoundException e) {e.printStackTrace();}Signature sign = Signature.getInstance("SHA256withRSA");//这里需要一个PrivateKey类型的参数，就是商户的私钥。sign.initSign(merchantPrivateKey);sign.update(message);return Base64.getEncoder().encodeToString(sign.sign());}
}
2.调用微信app支付下单接口，返回返回预交易prepay_id，通过prepay_id，appid,随机字符串，时间戳，计算得到签名，返回给客户端调起支付
public CommonResult WxPayApp(){com.alibaba.fastjson.JSONObject amountJson = new com.alibaba.fastjson.JSONObject();amountJson.put("total",Integer.valueOf(1));amountJson.put("currency","CNY");//基础信息jsoncom.alibaba.fastjson.JSONObject json = new com.alibaba.fastjson.JSONObject();// json.put("appid","wx043e87691cbad09f");json.put("appid", WxPayUtil.appId);json.put("mchid",WxPayUtil.mchId);json.put("description","测试");json.put("out_trade_no","1111223344456");json.put("notify_url","https://www.baidu.com");json.put("amount",amountJson);com.alibaba.fastjson.JSONObject jsonObject1 = wxPayUtil.doPostWexinV3("https://api.mch.weixin.qq.com/v3/pay/transactions/app", json.toJSONString());log.info("结果："+jsonObject1.toJSONString());String prepay_id = jsonObject1.getString("prepay_id");//时间戳Long timestamp = System.currentTimeMillis()/1000;//随机串String nonceStr = UUID.randomUUID().toString().replace("-","");String sign = wxPayUtil.getSign(WxPayUtil.appId,timestamp,nonceStr,prepay_id);log.info("签名:"+sign);Map payMap = new HashMap();payMap.put("prepayid",prepay_id);payMap.put("timestamp",timestamp+"");payMap.put("noncestr",nonceStr);payMap.put("sign",sign);payMap.put("appid",WxPayUtil.appId);payMap.put("package","Sign=WXPay");payMap.put("extData","sign");payMap.put("partnerid",WxPayUtil.mchId);return CommonResult.success(payMap);}
3.微信回调处理，微信会向通过基础下单接口中的请求参数“notify_url”设置的接口地址推送支付结果信息
public void wxCallback(HttpServletRequest request, HttpServletResponse response) throws Exception {log.info("微信支付回调");//获取报文String body = getRequestBody(request);//随机串String nonce = request.getHeader("Wechatpay-Nonce");//微信传递过来的签名String signature = request.getHeader("Wechatpay-Signature");//证书序列号（微信平台）String wechatPaySerial = request.getHeader("Wechatpay-Serial");//时间戳String timestamp = request.getHeader("Wechatpay-Timestamp");PrivateKey merchantPrivateKey = PemUtil.loadPrivateKey(new FileInputStream(WxPayUtil.privateKeyUrl));// 获取证书管理器实例CertificatesManager certificatesManager = CertificatesManager.getInstance();// 向证书管理器增加需要自动更新平台证书的商户信息certificatesManager.putMerchant(WxPayUtil.mchId, new WechatPay2Credentials(WxPayUtil.mchId,new PrivateKeySigner(WxPayUtil.mchSerialNo, merchantPrivateKey)),WxPayUtil.apiV3Key.getBytes(StandardCharsets.UTF_8));// 从证书管理器中获取verifierVerifier verifier = certificatesManager.getVerifier(WxPayUtil.mchId);// 构建request，传入必要参数NotificationRequest notificationRequest = new NotificationRequest.Builder().withSerialNumber(wechatPaySerial).withNonce(nonce).withTimestamp(timestamp).withSignature(signature).withBody(body).build();NotificationHandler handler = new NotificationHandler(verifier, WxPayUtil.apiV3Key.getBytes(StandardCharsets.UTF_8));// 验签和解析请求体Notification notification = handler.parse(notificationRequest);Assert.assertNotNull(notification);String result = notification.getDecryptData();log.info("解密报文："+result);com.alibaba.fastjson.JSONObject resultJson = JSON.parseObject(result);String trade_state = resultJson.getString("trade_state").trim();String out_trade_no = resultJson.getString("out_trade_no").trim();String trade_type = resultJson.getString("trade_type").trim();log.info("微信支付交易状态码:"+trade_state);log.info("微信支付交易订单号:"+out_trade_no);log.info("微信支付交易类型:"+trade_type);if("SUCCESS".equals(trade_state)){//支付成功，你的业务逻辑}}}
4.getRequestBody方法
private String getRequestBody(HttpServletRequest request) {StringBuffer sb = new StringBuffer();try (ServletInputStream inputStream = request.getInputStream();BufferedReader reader = new BufferedReader(new InputStreamReader(inputStream));) {String line;while ((line = reader.readLine()) != null) {sb.append(line);}} catch (IOException e) {log.error("读取数据流异常:{}", e);}return sb.toString();}
通过上面的步骤，可以完成微信支付了！!
支付宝扫一扫
微信扫一扫
.png)
.png)
.png)
