支付宝接入

1.支付宝沙箱环境

登陆支付宝开放平台创建沙箱环境

支付宝开放平台 https://openhome.alipay.com/platform/appDaily.htm?tab=info
支付文档 https://docs.open.alipay.com/200/105311

2.创建密钥

1.生成应用公钥和秘钥
2.把应用公钥赋值并配置到当前的沙箱环境中
3.配置完公钥后,沙箱环境配置中会给一个支付宝公钥,复制并保存
4.在项目根目录中创建keys文件目录，存储应用私钥(rsa_private_key.txt)和支付宝公钥(rsa_public_key.txt)

ubuntu生成密钥和公钥

  1. #打开终端输入 
  2. openssl
  3. # 输入以下命令创建密钥
  4. genrsa -out rsa_private_key.txt 2048
  5. # 输入以下命令创建公钥
  6. rsa -in rsa_private_key.txt -pubout -out rsa_public_key.txt
  7. #输入 exit  推出 openssl
  8. exit
  9. # ls 查看当前目录下创建的密钥和公钥
  10. rsa_private_key.txt  rsa_public_key.txt

windows10 可以安装支付宝开放平台助手，创建密钥

https://docs.open.alipay.com/291/105971

注意：在项目中配置 keys应用 私钥和支付宝公钥 放进来

  1.     1,在项目中 创建 keys 目录 里面放入 秘钥文件
  3.     2,创建 rsa_private_key.txt 放入秘钥,加开始和结束的标记
  4.         -----BEGIN RSA PRIVATE KEY-----
  5.         .....
  6.         -----END RSA PRIVATE KEY-----
  7.     3,创建 rsa_public_key.txt 放入秘钥,加开始和结束的标记
  8.         -----BEGIN PUBLIC KEY-----
  9.         ....
  10.         -----END PUBLIC KEY-----

3. 支付宝配置 settings.py

1.settings.py
  1. # 支付宝相关配置
  2. # APPID
  3. # 沙箱APPID，生产环境须更改为应用APPID。
  4. ALIPAY_APPID = "2016092200571332"
  6. # 网关
  7. # 沙箱网关，生产环境须更改为正式网关。
  8. ALIPAY_URL = "https://openapi.alipaydev.com/gateway.do"
  9. # 正式网关，开发环境勿使用。
  10. # ALIPAY_URL = "https://openapi.alipay.com/gateway.do"
  12. # 回调通知地址
  13. ALIPAY_NOTIFY_URL = "http://47.114.147.247/order/pay_result"
  15. # 支付后的跳转地址
  16. ALIPAY_RETURN_URL = 'http://47.114.147.247/order/pay_result'
  18. # 应用私钥
  19. APP_PRIVATE_KEY_PATH = os.path.join(BASE_DIR, 'keys/rsa_private_key.txt')
  20. # 支付宝公钥
  21. ALIPAY_PUBLIC_KEY_PATH = os.path.join(BASE_DIR, 'keys/rsa_public_key.txt')

2.配置url路由和视图函数
  1. myhome/urls.py文件中添加回调路由
    1. # 支付回调地址
    2. path('order/pay_result',PayViews.pay_result,name="myhome_order_pay_result"),

  1. myhome/views/目录中创建Payviews.py并创建回调视图函数

    1. # myhome/views/Payviews.py
    2. # 支付宝回调地址
    3. def pay_result(request):
    5.  return HttpResponse('支付宝回调成功')

4.安装支付SDK及依赖环境

1.安装依赖环境
  1. aliyun-python-sdk-core-v3==2.13.11
  2. Django==2.2.11
  3. jmespath==0.10.0
  4. mysqlclient==1.4.6
  5. Pillow==6.2.1
  6. pycryptodome==3.9.7
  7. pytz==2020.1
  8. sqlparse==0.3.1

2.导入支付宝支付接口类

在项目根目录创建utils包文件夹，创建pay.py模块写入支付接口类
bookshop\utils\pay.py

  1. from datetime import datetime
  2. from Crypto.PublicKey import RSA
  3. from Crypto.Signature import PKCS1_v1_5
  4. from Crypto.Hash import SHA256
  5. from urllib.parse import quote_plus
  6. from urllib.parse import urlparse, parse_qs
  7. from base64 import decodebytes, encodebytes
  8. import json
  10. class AliPay(object):
  11.     """
  12.     支付宝支付接口(PC端支付接口)
  13.     """
  15.     def __init__(self, appid, app_notify_url, app_private_key_path,
  16.                  alipay_public_key_path, return_url, debug=False):
  17.         self.appid = appid
  18.         self.app_notify_url = app_notify_url
  19.         self.app_private_key_path = app_private_key_path
  20.         self.app_private_key = None
  21.         self.return_url = return_url
  22.         with open(self.app_private_key_path) as fp:
  23.             self.app_private_key = RSA.importKey(fp.read())
  24.         self.alipay_public_key_path = alipay_public_key_path
  25.         with open(self.alipay_public_key_path) as fp:
  26.             self.alipay_public_key = RSA.importKey(fp.read())
  28.         if debug is True:
  29.             self.__gateway = "https://openapi.alipaydev.com/gateway.do"
  30.         else:
  31.             self.__gateway = "https://openapi.alipay.com/gateway.do"
  33.     def direct_pay(self, subject, out_trade_no, total_amount, return_url=None, **kwargs):
  34.         biz_content = {
  35.             "subject": subject,
  36.             "out_trade_no": out_trade_no,
  37.             "total_amount": total_amount,
  38.             "product_code": "FAST_INSTANT_TRADE_PAY",
  39.             # "qr_pay_mode":4
  40.         }
  42.         biz_content.update(kwargs)
  43.         data = self.build_body("alipay.trade.page.pay", biz_content, self.return_url)
  44.         return self.sign_data(data)
  46.     def build_body(self, method, biz_content, return_url=None):
  47.         data = {
  48.             "app_id": self.appid,
  49.             "method": method,
  50.             "charset": "utf-8",
  51.             "sign_type": "RSA2",
  52.             "timestamp": datetime.now().strftime("%Y-%m-%d %H:%M:%S"),
  53.             "version": "1.0",
  54.             "biz_content": biz_content
  55.         }
  57.         if return_url is not None:
  58.             data["notify_url"] = self.app_notify_url
  59.             data["return_url"] = self.return_url
  61.         return data
  63.     def sign_data(self, data):
  64.         data.pop("sign", None)
  65.         # 排序后的字符串
  66.         unsigned_items = self.ordered_data(data)
  67.         unsigned_string = "&".join("{0}={1}".format(k, v) for k, v in unsigned_items)
  68.         sign = self.sign(unsigned_string.encode("utf-8"))
  69.         # ordered_items = self.ordered_data(data)
  70.         quoted_string = "&".join("{0}={1}".format(k, quote_plus(v)) for k, v in unsigned_items)
  72.         # 获得最终的订单信息字符串
  73.         signed_string = quoted_string + "&sign=" + quote_plus(sign)
  74.         return signed_string
  76.     def ordered_data(self, data):
  77.         complex_keys = []
  78.         for key, value in data.items():
  79.             if isinstance(value, dict):
  80.                 complex_keys.append(key)
  82.         # 将字典类型的数据dump出来
  83.         for key in complex_keys:
  84.             data[key] = json.dumps(data[key], separators=(',', ':'))
  86.         return sorted([(k, v) for k, v in data.items()])
  88.     def sign(self, unsigned_string):
  89.         # 开始计算签名
  90.         key = self.app_private_key
  91.         signer = PKCS1_v1_5.new(key)
  92.         signature = signer.sign(SHA256.new(unsigned_string))
  93.         # base64 编码，转换为unicode表示并移除回车
  94.         sign = encodebytes(signature).decode("utf8").replace("\n", "")
  95.         return sign
  97.     def _verify(self, raw_content, signature):
  98.         # 开始计算签名
  99.         key = self.alipay_public_key
  100.         signer = PKCS1_v1_5.new(key)
  101.         digest = SHA256.new()
  102.         digest.update(raw_content.encode("utf8"))
  103.         if signer.verify(digest, decodebytes(signature.encode("utf8"))):
  104.             return True
  105.         return False
  107.     def verify(self, data, signature):
  108.         if "sign_type" in data:
  109.             sign_type = data.pop("sign_type")
  110.         # 排序后的字符串
  111.         unsigned_items = self.ordered_data(data)
  112.         message = "&".join(u"{}={}".format(k, v) for k, v in unsigned_items)
  113.         return self._verify(message, signature)

5.发起支付请求

from django.shortcuts import render,reverse
from django.http import HttpResponse,JsonResponse,HttpResponseRedirect
from myadmin import models
from .indexViews import GetNavData
from django.views.decorators.csrf import csrf_exempt



# 支付宝对象创建方法
from bookshop import settings
from utils.pay import AliPay

# AliPay 对象实例化
def Get_AliPay_Object():
    alipay = AliPay(
        appid=settings.ALIPAY_APPID,# APPID （沙箱应用）
        app_notify_url=settings.ALIPAY_NOTIFY_URL, # 回调通知地址
        return_url=settings.ALIPAY_RETURN_URL,# 支付完成后的跳转地址
        app_private_key_path=settings.APP_PRIVATE_KEY_PATH, # 应用私钥
        alipay_public_key_path=settings.ALIPAY_PUBLIC_KEY_PATH,  # 支付宝公钥
        debug=True,  # 默认False,
    )
    return alipay


# 发起支付请求
def pay_request(orderobj):
    # 获取支付对象
    alipay = Get_AliPay_Object()

    # 生成支付的url
    query_params = alipay.direct_pay(
        subject = '图书商城_书籍购买',  # 商品简单描述
        out_trade_no = orderobj.id,# 用户购买的商品订单号
        total_amount = orderobj.totalprice  # 交易金额(单位: 元 保留俩位小数)
    )
    # 支付宝网关地址（沙箱应用）
    pay_url = settings.ALIPAY_URL+"?{0}".format(query_params)

    # 页面重定向到支付页面
    return HttpResponseRedirect(pay_url)


# 支付宝回调地址 get post
from django.views.decorators.csrf import csrf_exempt
@csrf_exempt
def pay_result(request):
    # 获取对象
    alipay = Get_AliPay_Object()
    if request.method == "POST":
        # 检测是否支付成功
        # 去请求体中获取所有返回的数据：状态/订单号
        from urllib.parse import parse_qs
        body_str = request.body.decode('utf-8')
        post_data = parse_qs(body_str)
        post_dict = {}
        for k, v in post_data.items():
            post_dict[k] = v[0]
        sign = post_dict.pop('sign', None)
        status = alipay.verify(post_dict, sign)
        out_trade_no = post_dict['out_trade_no']
        # 修改订单状态
        ass = {'status':1,'paytime':post_dict['gmt_payment']}
        models.Order.objects.filter(id=out_trade_no).update(**ass)
        return HttpResponse('success')

    else:
        params = request.GET.dict()
        sign = params.pop('sign', None)
        status = alipay.verify(params, sign)
        return HttpResponse('<script>alert("支付成功");location.href="/order/mylist"</script>')

6.扫码支付

使用Android手机下载沙箱钱包进行

7.支付流程总结

title: 支付流程 participant 用户 as user participant 商户系统 as app participant 支付宝 as alipay user->app:1.选择商品下单 app->app:2.系统中创建订单 app->alipay:3.向支付宝发起支付请求 alipay-->user:4.返回支付页面 user-->alipay:5.进行扫码支付 alipay->app:6.get请求回调地址，同步返回参数 app->user:7.向用户显示支付成功，跳转到订单列表页面 alipay->app:8.post请求回调地址，异步通知参数（支付是否成功已异步通知为准） app->app:9.根据post请求修改订单状态 app->alipay:10.post请求后向支付宝响应success