com.alipay.api.internal.util.AlipaySignature#rsaCheckV2

Source File: RSACheckTest.java From alipay-sdk-java-all with Apache License 2.0

6 votes

@Test
public void should_pass_rsa_check_when_sign_type_is_rsa() throws AlipayApiException {
    //given
    Map<String, String> parameters = new HashMap<String, String>() {};
    parameters.put("method", "koubei.marketing.data.indicator.query");
    parameters.put("app_id", "2019090366875133");
    parameters.put("sign_type", "RSA");
    parameters.put("sign",
            "RkEZgdCVF4TF48+tVZlPLEUMgrOoff3TGynWtXRUmzMXxmsCX8Y9YtpZE+NNg/JGpYQ5htTDd8PXVqiG5fqvzE2g4ugDutr"
                    + "++BeQ2eJQ1uhasp6VIPTSAPWHRD7FSXqZfOoWvxeFHF9WGnzXw5eueOdGMZYXdjhR6srj+ZAeJxyR402FVNbRuI"
                    + "/hDZVq27xWi4CQ2ffdV0lf7E2V/HMUPXECbIKkTnLXrwJBmsLgTGbTDGf7pGo0y0rkRvdsg9BmPPswfTeq"
                    + "/o2rlxD0XxrK1MPZ4uSPFhpdWVEyNchtXEfKoVsaYeVXV3cMfZi9zcKc6RCE8ezF9LxRJp1R0BxKEg==");
    //when
    boolean result = AlipaySignature.rsaCheckV2(parameters, publicKey, "utf-8", "RSA");
    //then
    assertThat(result, is(true));
}

Source File: RSACheckTest.java From alipay-sdk-java-all with Apache License 2.0

6 votes

@Test
public void should_pass_rsa_check_when_sign_type_is_rsa2() throws AlipayApiException {
    //given
    Map<String, String> parameters = new HashMap<String, String>();
    parameters.put("method", "koubei.marketing.data.indicator.query");
    parameters.put("app_id", "2019090366875133");
    parameters.put("sign_type", "RSA2");
    parameters.put("sign",
            "JzoDc8VxY1/w6yN9WdWV10aipS3YcRpK"
                    + "+jw4xfLybf90ZK9L3AHLUJbNLWVnHW3IuLoJbBeSGVxSbPBhe4ggPklcYUkPowgtlZ6YlthuQDtjF23h2obXuXkQRd"
                    + "+RPbDWvOA5AYQjsKH8uSHil5aRARewPIPhukl9Mn4HEovUccsBR/RirQFSGmGYiMM0zvhVSR7pXZDEhiADzvzAkvVVTI1"
                    + "/HbNqcoBU4ctSPAGsuDPO/mah1+IwGQAuPP6xoEPL"
                    + "+3zQ0wztQCwHT2o8aQmxFJ9a09q8ybRprHaNjCgTaLDeTWE0o1pllZIE8c7wnG3cOuj6quYjTcQyLm6P4M87Zw==");
    //when
    boolean result = AlipaySignature.rsaCheckV2(parameters, publicKey, "utf-8", "RSA2");
    //then
    assertThat(result, is(true));
}

Source File: RSACheckTest.java From alipay-sdk-java-all with Apache License 2.0

5 votes

@Test
public void should_pass_rsa_check_when_charset_is_utf8() throws AlipayApiException {
    Map<String, String> parameters = new HashMap<String, String>();
    parameters.put("method", "koubei.marketing.data.indicator.query");
    parameters.put("app_id", "2019090366875133");
    parameters.put("extra", "中文测试");
    parameters.put("sign_type", "RSA2");
    parameters.put("sign",
            "KrRGUY3/2JX3KtlLgus8CbK0xuUIBDCpOdJkVzJDefez6HvlA8RA6uCVj2rrMd7DgVfarG5SROdSnkZbf8MLKHbVoFqi9w0QCvto9mc8n3ezfWejZECJVCZhbJ3OslB+4gij9+F70usrnCNEJZm02ntyNdVzcqMbgdRMB93BJIRC1jjmCotpXgXWrRdTb/SfhIAkoHqgGi2aCUHuLDInLGZCn8NeziGWMnFOic6/sE/nMpwriOmwLb2nyzD0fGiolwuuxlOGMcBHAb22J8XqchFHyCpbs2A/rWdJMjhUfqsErbtZQM93fi1xfL2pUa9RMWX0Q81Qk7iSEeHCR+NGyQ==");

    boolean result = AlipaySignature.rsaCheckV2(parameters, publicKey, "utf-8", "RSA2");

    assertThat(result, is(true));
}

Source File: PtcPayController.java From paascloud-master with Apache License 2.0

5 votes

/**
 * 支付宝回调信息.
 *
 * @param request the request
 *
 * @return the object
 */
@PostMapping("/alipayCallback")
@ApiOperation(httpMethod = "POST", value = "支付宝回调信息")
public Object alipayCallback(HttpServletRequest request) {
	logger.info("收到支付宝回调信息");
	Map<String, String> params = Maps.newHashMap();

	Map requestParams = request.getParameterMap();
	for (Object o : requestParams.keySet()) {
		String name = (String) o;
		String[] values = (String[]) requestParams.get(name);
		String valueStr = "";
		for (int i = 0; i < values.length; i++) {

			valueStr = (i == values.length - 1) ? valueStr + values[i] : valueStr + values[i] + ",";
		}
		params.put(name, valueStr);
	}
	logger.info("支付宝回调,sign:{},trade_status:{},参数:{}", params.get("sign"), params.get("trade_status"), params.toString());

	//非常重要,验证回调的正确性,是不是支付宝发的.并且呢还要避免重复通知.

	params.remove("sign_type");
	try {
		boolean alipayRSACheckedV2 = AlipaySignature.rsaCheckV2(params, Configs.getAlipayPublicKey(), "utf-8", Configs.getSignType());

		if (!alipayRSACheckedV2) {
			return WrapMapper.error("非法请求,验证不通过,再恶意请求我就报警找网警了");
		}
	} catch (AlipayApiException e) {
		logger.error("支付宝验证回调异常", e);
	}

	//todo 验证各种数据
	Wrapper serverResponse = ptcAlipayService.aliPayCallback(params);
	if (serverResponse.success()) {
		return PtcApiConstant.AlipayCallback.RESPONSE_SUCCESS;
	}
	return PtcApiConstant.AlipayCallback.RESPONSE_FAILED;
}

Source File: OrderController.java From MMall_JAVA with GNU General Public License v3.0

5 votes

@RequestMapping("alipay_callback.do")
public Object alipayCallback(HttpServletRequest request) {
    Map<String, String> params = Maps.newHashMap();

    Map requestParams = request.getParameterMap();
    for (Iterator iter = requestParams.keySet().iterator(); iter.hasNext(); ) {
        String name = (String) iter.next();
        String[] values = (String[]) requestParams.get(name);
        String valueStr = "";
        for (int i = 0; i < values.length; i++) {
            valueStr = (i == values.length - 1) ? valueStr + values[i] : valueStr + values[i] + ",";
        }
        params.put(name, valueStr);
    }
    logger.info("支付宝回调,sign:{},trade_status:{},参数:{}", params.get("sign"), params.get("trade_status"), params.toString());

    //非常重要的一点，验证回调的正确性（确认是支付宝发送的），并且避免重复通知
    params.remove("sign_type");
    try {
        boolean alipayRSACheckedV2 = AlipaySignature.rsaCheckV2(params, Configs.getAlipayPublicKey(), "utf-8", Configs.getSignType());

        if (!alipayRSACheckedV2) {
            return ServerResponse.createByErrorMessage("非法结束，验证不通过，再恶意请求将报警。");
        }

    } catch (AlipayApiException e) {
        logger.error("支付宝验证回调异常", e);
    }

    //todo 验证各种数据

    ServerResponse serverResponse = iOrderService.aliCallback(params);
    if (serverResponse.isSuccess()) {
        return Const.AlipayCallback.RESPONSE_SUCCESS;
    }
    return Const.AlipayCallback.RESPONSE_FAILED;
}

Source File: AlipayServiceWindowController.java From jeewx with Apache License 2.0

5 votes

/**
 * 验签
 * 
 * @param request
 * @return
 */
private void verifySign(Map<String, String> params) throws AlipayApiException {

    if (!AlipaySignature.rsaCheckV2(params, AlipayServiceEnvConstants.ALIPAY_PUBLIC_KEY,
        AlipayServiceEnvConstants.SIGN_CHARSET)) {

        throw new AlipayApiException("verify sign fail.");
    }
}

Source File: OrderController.java From mmall20180107 with Apache License 2.0

4 votes

@RequestMapping("alipay_callback.do")
@ResponseBody
public Object alipayCallback(HttpServletRequest request){
    Map<String,String> params = Maps.newHashMap();

    Map requestParams = request.getParameterMap();
    for(Iterator iter = requestParams.keySet().iterator(); iter.hasNext();){
        String name = (String)iter.next();
        String[] values = (String[]) requestParams.get(name);
        String valueStr = "";
        for(int i = 0 ; i <values.length;i++){

            valueStr = (i == values.length -1)?valueStr + values[i]:valueStr + values[i]+",";
        }
        params.put(name,valueStr);
    }
    logger.info("支付宝回调,sign:{},trade_status:{},参数:{}",params.get("sign"),params.get("trade_status"),params.toString());

    //非常重要,验证回调的正确性,是不是支付宝发的.并且呢还要避免重复通知.

    params.remove("sign_type");
    try {
        boolean alipayRSACheckedV2 = AlipaySignature.rsaCheckV2(params, Configs.getAlipayPublicKey(),"utf-8",Configs.getSignType());

        if(!alipayRSACheckedV2){
            return ServerResponse.createByErrorMessage("非法请求,验证不通过,再恶意请求我就报警找网警了");
        }
    } catch (AlipayApiException e) {
        logger.error("支付宝验证回调异常",e);
    }

    //todo 验证各种数据


    //
    ServerResponse serverResponse = iOrderService.aliCallback(params);
    if(serverResponse.isSuccess()){
        return Const.AlipayCallback.RESPONSE_SUCCESS;
    }
    return Const.AlipayCallback.RESPONSE_FAILED;
}

Source File: OrderController.java From mmall-kay-Java with Apache License 2.0

4 votes

/**
 * 支付宝回调处理接口
 * @param request
 * @return
 */
@RequestMapping("alipay_callback.do")
@ResponseBody
public Object alipayCallback(HttpServletRequest request){
    Map<String, String> params = Maps.newHashMap();

    Map requestParams = request.getParameterMap();
    for (Iterator iterator =requestParams.keySet().iterator();iterator.hasNext();) {
        String name = (String) iterator.next();
        String[] values = (String[]) requestParams.get(name);
        String valueStr="";
        for (int i = 0; i < values.length; i++) {
            //拼接 valueStr,用逗号拼接，最后一次不加逗号
            valueStr = (i == values.length - 1) ? valueStr + values[i] : valueStr + values[i] + ",";
        }

        params.put(name, valueStr);
    }
    log.info("支付宝回调,sign:{},trade_status:{},参数:{}", params.get("sign"), params.get("trade_status"), params.toString());

    // todo 根据官方文档验证签名

    //todo 非常重要：根据官方文档需要移除 sign ,sign_type 两个参数,但支付宝提供的源码里只移除了sign,故需要我们自己移除 sign_type，否则付款成功却验签会失败
    params.remove("sign_type");

    try {
        boolean alipayRSACheckV2 = AlipaySignature.rsaCheckV2(params, Configs.getAlipayPublicKey(), "utf-8", Configs.getSignType());
        if(!alipayRSACheckV2){
            return ServerResponse.createByErrorMessage("非法请求，验证不通过，再恶意请求将报警找网警");
        }
    } catch (AlipayApiException e) {
        log.error("支付宝验证回调异常",e);
    }

    //验证业务数据
    ServerResponse response = iOrderService.alipayCallback(params);
    if (response.isSuccess()) {
        return Const.AlipayCallback.RESPONSE_SUCCESS;
    }
    return Const.AlipayCallback.RESPONSE_FAILED;
}

Source File: GatewayServlet.java From jeewx with Apache License 2.0

4 votes

private void verifySign(Map<String, String> params) throws AlipayApiException {
	if (!AlipaySignature.rsaCheckV2(params, AlipayServiceEnvConstants.ALIPAY_PUBLIC_KEY,
            AlipayServiceEnvConstants.SIGN_CHARSET)) {
            throw new AlipayApiException("verify sign fail.");
        }
}

Java Code Examples for com.alipay.api.internal.util.AlipaySignature#rsaCheckV2()