微信小程序支付踩的坑(支付验证签名失败)

以你之姓@ 2023-06-17 03:55 5阅读 0赞

##### 微信小程序支付踩的坑(支付验证签名失败) #####

最近有需求是微信小程序支付，用的是微信自带的sdk，曾做过微信APP支付，微信扫用户码支付，都是OK的，现在把做微信小程序支付流程写下来，还有在调用过程踩的坑，下面为步骤

###### 一.先查看API ######

地址： [https://pay.weixin.qq.com/wiki/doc/api/index.html][https_pay.weixin.qq.com_wiki_doc_api_index.html]  
![官网API][API]  
我是后端的，前端调用是用我们返回的值  
地址： [https://pay.weixin.qq.com/wiki/doc/api/wxa/wxa\_api.php?chapter=9\_1][https_pay.weixin.qq.com_wiki_doc_api_wxa_wxa_api.php_chapter_9_1]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4_size_16_color_FFFFFF_t_70]  
查看api可以知道我们需要的值，其他的还好说，其中有一个需要特别注意一下：刚好小程序的trade\_type就是JSAPI  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4_size_16_color_FFFFFF_t_70 1]

###### 二.查看流程图 ######

开始我以为这个前端来传就可以了，后来前端也说他只能获得一个登录code，于是我看了流程：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4_size_16_color_FFFFFF_t_70 2]

###### 三.获取openid ######

那就我们来获取openid吧，后端还比较安全，于是我找到了这个地址：  
地址： [https://developers.weixin.qq.com/miniprogram/dev/api-backend/open-api/login/auth.code2Session.html][https_developers.weixin.qq.com_miniprogram_dev_api-backend_open-api_login_auth.code2Session.html]  
具体调用如下代码：

//拼成get方式的请求体
    String params = "appid=" + tParamPayment.getApp_id() + "&secret=" + tParamPayment.getPay_key() + "&js_code=" + authcode + "&grant_type="
                        + Consts.GRANT_TYPE;
    String responseContent = WXPayRequest.sendGet(Consts.GET_OPENID_URL, params);
    Map mSepRet = gson.fromJson(responseContent, Map.class);
    logger.info("get openid:" + gson.toJson(mSepRet));
    if (null == mSepRet.get("openid")) { 
         //自定义错误
         return ResultUtil.error(PltResult.RESULT_PA36.getpCode(), PltResult.RESULT_PA36.getpName());
    }
    String openid = (String) mSepRet.get("openid");
    //注：appid是小程序appid,秘钥是小程序的appSecret
    public static String GET_OPENID_URL = "https://api.weixin.qq.com/sns/jscode2session";//请求地址
    public static String GRANT_TYPE = "authorization_code";//grant_type：固定的

###### 四.调用统一下单接口(防坑) ######

放上微信的SDK，做了简单改动，更贴近现实开发  
链接：[https://pan.baidu.com/s/1AEpdsXyVzcFvXXrOpJeFug ][https_pan.baidu.com_s_1AEpdsXyVzcFvXXrOpJeFug]  
提取码：9bif  
然后我在调用接口的时候也发现是没问题的，代码如下：

Map<String, String> parameters = new HashMap<String, String>();
    MyConfig config = new MyConfig(tParamPayment.getMerchant_key(), tParamPayment.getMerchant_id(), tParamPayment.getApp_id());
    WXPay wxpay = new WXPay(config);
    parameters.put("body", "根据实际情况填写");// 商品详情
    parameters.put("nonce_str", WXPayUtil.generateNonceStr());
    parameters.put("out_trade_no", "根据实际情况填写" ); parameters.put("spbill_create_ip", "127.0.0.1");// 调用微信支付API的机器IP
    parameters.put("total_fee", ordamt);// 总额
    parameters.put("openid", openid);// 上面获取的openid
    parameters.put("notify_url", tParamPayment.getNotify_url());// 回调地址
    parameters.put("trade_type", "JSAPI");// 类型
    String sign = WXPayUtil.generateSignature(parameters, tParamPayment.getMerchant_key());
    parameters.put("sign", sign);// 签名
     logger.debug("wxpay request：" + gson.toJson(parameters));
    Map<String, String> resXmlMap = wxpay.unifiedOrder(parameters);
    logger.debug("wxpay response：" + gson.toJson(resXmlMap));
    if (Consts.SUCCESS.equals(resXmlMap.get("return_code")) && Consts.OK.equals(resXmlMap.get("return_msg"))) { 
        Map<String, String> payparamsMap = new HashMap<String, String>();
        Date currDate = new Date();
        long timestamp = currDate.getTime() / 1000;
        payparamsMap.put("appId", tParamPayment.getApp_id());
        payparamsMap.put("package", "prepay_id=" + resXmlMap.get("prepay_id"));
        payparamsMap.put("timeStamp", timestamp + "");
        payparamsMap.put("nonceStr", WXPayUtil.generateNonceStr());// 
        payparamsMap.put("signType", WXPayConstants.MD5);
        String newSign = WXPayUtil.generateSignature(payparamsMap, tParamPayment.getMerchant_key());
        payparamsMap.put("paySign", newSign);
        logger.debug("response data:" + gson.toJson(payparamsMap));
        returnParam.put("payparams", payparamsMap);
        //注：MyConfig config = new MyConfig("商户秘钥", "商户id", "小程序appid");
    
    }

值也得获取了：下面这些值  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4_size_16_color_FFFFFF_t_70 3]  
然后小程序的同事告诉我签名错误。  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4_size_16_color_FFFFFF_t_70 4]  
我们把获取的值用MD5加密了一下，发现加密也是没问题的，那真是很奇怪。  
后来想到是不是在调用微信拿这些值的时候出了什么错，但是微信为什么能通过呢，这就是微信最大坑的地方了  
`wxpay.unifiedOrder(parameters)中的unifiedOrder`方法  
进去以后是这个  
![\`\`\`][20191127141106393.png]  
再点进去是这个  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4_size_16_color_FFFFFF_t_70 5]  
其中：注意行数  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4_size_16_color_FFFFFF_t_70 6]  
MD5用的是在沙箱环境下我们改一下  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4_size_16_color_FFFFFF_t_70 7]  
搞定把值返回给前端，可以调起微信支付  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4_size_16_color_FFFFFF_t_70 8]  
微信还是挺坑的，但是我们要自己提高适应，我看了好多网上的调用，改了好多都不行，也有传加密方式的，我都试过不行，希望这个博文可以帮助还在微信小程序坑里的人

[https_pay.weixin.qq.com_wiki_doc_api_index.html]: https://pay.weixin.qq.com/wiki/doc/api/index.html
[API]: https://img-blog.csdnimg.cn/20191127133344849.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4,size_16,color_FFFFFF,t_70
[https_pay.weixin.qq.com_wiki_doc_api_wxa_wxa_api.php_chapter_9_1]: https://pay.weixin.qq.com/wiki/doc/api/wxa/wxa_api.php?chapter=9_1
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20191127133443997.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20191127133741356.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/2019112713450392.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4,size_16,color_FFFFFF,t_70
[https_developers.weixin.qq.com_miniprogram_dev_api-backend_open-api_login_auth.code2Session.html]: https://developers.weixin.qq.com/miniprogram/dev/api-backend/open-api/login/auth.code2Session.html
[https_pan.baidu.com_s_1AEpdsXyVzcFvXXrOpJeFug]: https://pan.baidu.com/s/1AEpdsXyVzcFvXXrOpJeFug
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/20191127140338819.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4_size_16_color_FFFFFF_t_70 4]: https://img-blog.csdnimg.cn/20191127141507892.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4,size_16,color_FFFFFF,t_70
[20191127141106393.png]: https://img-blog.csdnimg.cn/20191127141106393.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4_size_16_color_FFFFFF_t_70 5]: https://img-blog.csdnimg.cn/20191127141121757.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4_size_16_color_FFFFFF_t_70 6]: https://img-blog.csdnimg.cn/20191127141303456.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4_size_16_color_FFFFFF_t_70 7]: https://img-blog.csdnimg.cn/20191127141408375.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4_size_16_color_FFFFFF_t_70 8]: https://img-blog.csdnimg.cn/20191127141551721.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0NoYXJsZXNfbHh4,size_16,color_FFFFFF,t_70