微信H5支付中如何获取用户真实的IP地址

分手后的思念是犯贱 2022-03-14 09:44 1162阅读 0赞

**背景介绍：**

H5支付要求商户在统一下单接口中上传用户真实ip地址“spbill\_create\_ip”，为保证微信端获取的用户ip地址与商户端获取的一致，提供了以下获取用户ip的指引，希望对大家有所帮助

### 没有代理的情况 ###

在商户的前端接入层没有做代理的情况下获取ip的方式比较简单，直接获取'REMOTE\_ADDR '即可。

### 有代理的情况 ###

在有代理的情况下，因为要代替客户端去访问服务器，所以，当请求包经过反向代理后，在代理服务器这里这个IP数据包的IP包头做了修改，最终后端WEB服务器得到的数据包的头部源IP地址是代理服务器的IP地址。这样一来，后端服务器的程序就无法获取用户的真实ip。

nginx有代理的情况:
    
    在nginx中配置中加入
    
    proxy_set_header Host $host;
    
    proxy_set_header X-Real-IP $remote_addr;
    
    proxy_set_header X-Real-Port $remote_port;
    
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    
     
    
    Apache有代理的情况：
    
    vi /usr/local/apache/conf/httpd.conf 
    
    Include conf/extra/httpd-remoteip.conf 
    
    vi /usr/local/apache/conf/extra/httpd-remoteip.conf 
    
    LoadModule remoteip_module modules/mod_remoteip.so 
    
    RemoteIPHeader X-Forwarded-For 
    
    RemoteIPInternalProxy 127.0.0.1 
    
    代码 示例
    
    string GetClientIp(CgiInput* poInput)  {  
    
        string client_ip = "";  
    
        string strClientIPList;  
    
        GetHttpHeader("X-Forwarded-For", strClientIPList);  
    
     
        if (strClientIPList.empty())  {  
    
            GetHttpHeader("X-Real-IP", strClientIPList);  
    
        }  
    
    
        if (!strClientIPList.empty())  {  
    
            size_t iPos = strClientIPList.find( "," );  
    
            if( iPos != std::string::npos )  {  
    
                client_ip = strClientIPList.substr( iPos );  
    
            }  else  {  
    
                client_ip = strClientIPList;  
    
            }  
    
        }  
    
    
        if (client_ip.empty())  {  
    
            GetHttpHeader("PROXY_FORWARDED_FOR", strClientIPList);  
    
            // 做下兼容  
    
            if(strClientIPList.empty())  {  
    
                client_ip = getRemoteAddr();  
    
            }  else  {  
    
                size_t iPos = strClientIPList.find( "," );  
    
                if( iPos != std::string::npos )  {  
    
                    client_ip = strClientIPList.substr( iPos );  
                }  else  {  
    
                    client_ip = strClientIPList;  
                }   
    
            }  
    
        }   
    
        if(!MMPayCommFunc::IsIp(client_ip))  
    
            client_ip = getRemoteAddr();  
    
            return client_ip;  
    
        }

### **java服务端从**HttpServletRequest 中获取 ###

/**
    	 * 从request中获取请求方IP
    	 * @param request
    	 * @return
    	 */
    	public static String getIpAddress(HttpServletRequest request) {  
            String ip = request.getHeader("x-forwarded-for");  
            if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
                ip = request.getHeader("Proxy-Client-IP");  
            }  
            if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
                ip = request.getHeader("WL-Proxy-Client-IP");  
            }  
            if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
                 ip = request.getHeader("HTTP_CLIENT_IP");  
            }  
            if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
                ip = request.getHeader("HTTP_X_FORWARDED_FOR");  
            }  
            if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {  
                 // 若以上方式均为获取到ip则证明获得客户端并没有采用反向代理直接使用getRemoteAddr()获取客户端的ip地址
                 ip = request.getRemoteAddr();  
            }  
            // 多个路由时，取第一个非unknown的ip
            final String[] arr = ip.split(",");
            for (final String str : arr) {
                if (!"unknown".equalsIgnoreCase(str)) {
                    ip = str;
                    break;
                }
            }
            return ip;  
         }