311 lines
14 KiB
Python
311 lines
14 KiB
Python
|
import base64
|
|||
|
|
import json
|
|||
|
|
import string
|
|||
|
|
from datetime import datetime, timedelta
|
|||
|
|
from decimal import Decimal
|
|||
|
|
|
|||
|
|
import requests
|
|||
|
|
import time
|
|||
|
|
import random
|
|||
|
|
from xml.etree import ElementTree as ET
|
|||
|
|
from Crypto.Hash import SHA256
|
|||
|
|
from Crypto.PublicKey import RSA
|
|||
|
|
from Crypto.Signature import pkcs1_15
|
|||
|
|
from cryptography.hazmat.primitives.ciphers.aead import AESGCM
|
|||
|
|
from django.http import JsonResponse, HttpResponse
|
|||
|
|
from django.views.decorators.csrf import csrf_exempt
|
|||
|
|
from django.conf import settings
|
|||
|
|
from .models import TransactionLog, MembershipType,User
|
|||
|
|
from .API_Log import get_logger
|
|||
|
|
log_file = '支付日志.log'
|
|||
|
|
logger = get_logger('支付日志', log_file, when='midnight', backup_count=7)
|
|||
|
|
|
|||
|
|
|
|||
|
|
def wx_pay(request):
|
|||
|
|
request_data = json.loads(request.body)
|
|||
|
|
type = request_data.get('type', 'default')
|
|||
|
|
wx_price = request_data['total_fee'] # 从请求获取订单金额
|
|||
|
|
openid = request_data['openid'] # 从请求获取用户openid
|
|||
|
|
transaction_type = request_data['transaction_type'] # 续费或者开通
|
|||
|
|
up_time = datetime.now()
|
|||
|
|
|
|||
|
|
# 从数据库中动态获取 body_map
|
|||
|
|
membership_types = MembershipType.objects.all()
|
|||
|
|
body_map = {membership_type.type: membership_type.title for membership_type in membership_types}
|
|||
|
|
|
|||
|
|
body_description = body_map.get(type)
|
|||
|
|
|
|||
|
|
# 以交易日期生成交易号
|
|||
|
|
transactionNo = str(up_time).replace('.', '').replace('-', '').replace(':', '').replace(' ', '')
|
|||
|
|
|
|||
|
|
membership_type = MembershipType.objects.get(type=type)
|
|||
|
|
price = membership_type.price
|
|||
|
|
newTransaction = TransactionLog.objects.create(
|
|||
|
|
transaction_no=transactionNo,
|
|||
|
|
transaction_status='pending',
|
|||
|
|
user_openid=openid,
|
|||
|
|
transaction_type=transaction_type,
|
|||
|
|
transaction_amount=price,
|
|||
|
|
remark=type,
|
|||
|
|
created_at=up_time
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
# 打印和记录日志
|
|||
|
|
logger.info("生成订单：")
|
|||
|
|
logger.info(f"商户订单号：{transactionNo}")
|
|||
|
|
logger.info(f"用户OpenID：{openid}")
|
|||
|
|
logger.info(f"type：{type}")
|
|||
|
|
logger.info(f"transaction_type：{transaction_type}")
|
|||
|
|
logger.info(f"成功时间：{up_time}")
|
|||
|
|
logger.info(f"金额（前端）：{wx_price}")
|
|||
|
|
logger.info(f"金额（后端）：{price}")
|
|||
|
|
|
|||
|
|
# 生成统一下单的报文body
|
|||
|
|
url = 'https://api.mch.weixin.qq.com/v3/pay/transactions/jsapi'
|
|||
|
|
body = {
|
|||
|
|
"appid": settings.WX_APP_ID,
|
|||
|
|
"mchid": settings.WX_MCH_ID,
|
|||
|
|
"description": body_description,
|
|||
|
|
"out_trade_no": transactionNo,
|
|||
|
|
"notify_url": settings.WX_NOTIFY_URL, # 后端接收回调通知的接口
|
|||
|
|
"amount": {"total": int(float(price) * 100), "currency": "CNY"}, # 微信金额单位为分
|
|||
|
|
"payer": {"openid": openid},
|
|||
|
|
"attach": json.dumps({"type": type, "transaction_type": transaction_type})
|
|||
|
|
}
|
|||
|
|
data = json.dumps(body)
|
|||
|
|
|
|||
|
|
# 定义生成签名的函数
|
|||
|
|
def get_sign(sign_str):
|
|||
|
|
rsa_key = RSA.importKey(open(settings.WX_KEY_PATH).read())
|
|||
|
|
signer = pkcs1_15.new(rsa_key)
|
|||
|
|
digest = SHA256.new(sign_str.encode('utf8'))
|
|||
|
|
sign = base64.b64encode(signer.sign(digest)).decode('utf-8')
|
|||
|
|
return sign
|
|||
|
|
|
|||
|
|
# 生成请求随机串
|
|||
|
|
random_str = ''.join(random.choice(string.ascii_uppercase + string.digits) for _ in range(32))
|
|||
|
|
|
|||
|
|
# 生成请求时间戳
|
|||
|
|
time_stamps = str(int(time.time()))
|
|||
|
|
|
|||
|
|
# 生成签名串
|
|||
|
|
sign_str = f"POST\n/v3/pay/transactions/jsapi\n{time_stamps}\n{random_str}\n{data}\n"
|
|||
|
|
|
|||
|
|
# 生成签名
|
|||
|
|
sign = get_sign(sign_str)
|
|||
|
|
|
|||
|
|
# 生成HTTP请求头
|
|||
|
|
headers = {
|
|||
|
|
'Content-Type': 'application/json',
|
|||
|
|
'Accept': 'application/json',
|
|||
|
|
'User-Agent': '*/*',
|
|||
|
|
'Authorization': 'WECHATPAY2-SHA256-RSA2048 ' + f'mchid="{settings.WX_MCH_ID}",nonce_str="{random_str}",signature="{sign}",timestamp="{time_stamps}",serial_no="{settings.WX_SERIAL_NO}"',
|
|||
|
|
'Wechatpay-Serial': '66DB35F836EFD4CBEC66F3815D283A2892310324'
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
# 发送请求获得prepay_id
|
|||
|
|
response = requests.post(url, data=data, headers=headers) # 获取预支付交易会话标识（prepay_id）
|
|||
|
|
|
|||
|
|
# 应答签名验证
|
|||
|
|
wechatpaySerial = response.headers['Wechatpay-Serial'] # 获取HTTP头部中包括回调报文的证书序列号
|
|||
|
|
wechatpaySignature = response.headers['Wechatpay-Signature'] # 获取HTTP头部中包括回调报文的签名
|
|||
|
|
wechatpayTimestamp = response.headers['Wechatpay-Timestamp'] # 获取HTTP头部中包括回调报文的时间戳
|
|||
|
|
wechatpayNonce = response.headers['Wechatpay-Nonce'] # 获取HTTP头部中包括回调报文的随机串
|
|||
|
|
|
|||
|
|
# 获取微信平台证书
|
|||
|
|
url2 = "https://api.mch.weixin.qq.com/v3/certificates"
|
|||
|
|
|
|||
|
|
# 生成证书请求随机串
|
|||
|
|
random_str2 = ''.join(random.choice(string.ascii_uppercase + string.digits) for _ in range(32))
|
|||
|
|
|
|||
|
|
# 生成证书请求时间戳
|
|||
|
|
time_stamps2 = str(int(time.time()))
|
|||
|
|
|
|||
|
|
# 生成请求证书的签名串
|
|||
|
|
data2 = ""
|
|||
|
|
sign_str2 = f"GET\n/v3/certificates\n{time_stamps2}\n{random_str2}\n{data2}\n"
|
|||
|
|
|
|||
|
|
# 生成签名
|
|||
|
|
sign2 = get_sign(sign_str2)
|
|||
|
|
|
|||
|
|
# 生成HTTP请求头
|
|||
|
|
headers2 = {
|
|||
|
|
'Content-Type': 'application/json',
|
|||
|
|
'Accept': 'application/json',
|
|||
|
|
'Authorization': 'WECHATPAY2-SHA256-RSA2048 ' + f'mchid="{settings.WX_MCH_ID}",nonce_str="{random_str2}",signature="{sign2}",timestamp="{time_stamps2}",serial_no="{settings.WX_SERIAL_NO}"'
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
# 发送请求获得证书
|
|||
|
|
response2 = requests.get(url2, headers=headers2) # 只需要请求头
|
|||
|
|
cert = response2.json()
|
|||
|
|
|
|||
|
|
# 证书解密
|
|||
|
|
def decrypt(nonce, ciphertext, associated_data):
|
|||
|
|
key = settings.WX_API_KEY
|
|||
|
|
key_bytes = str.encode(key)
|
|||
|
|
nonce_bytes = str.encode(nonce)
|
|||
|
|
ad_bytes = str.encode(associated_data)
|
|||
|
|
data = base64.b64decode(ciphertext)
|
|||
|
|
aesgcm = AESGCM(key_bytes)
|
|||
|
|
return aesgcm.decrypt(nonce_bytes, data, ad_bytes)
|
|||
|
|
|
|||
|
|
nonce = cert["data"][0]['encrypt_certificate']['nonce']
|
|||
|
|
ciphertext = cert["data"][0]['encrypt_certificate']['ciphertext']
|
|||
|
|
associated_data = cert["data"][0]['encrypt_certificate']['associated_data']
|
|||
|
|
serial_no = cert["data"][0]['serial_no']
|
|||
|
|
certificate = decrypt(nonce, ciphertext, associated_data)
|
|||
|
|
|
|||
|
|
# 签名验证
|
|||
|
|
if wechatpaySerial == serial_no: # 应答签名中的序列号同证书序列号应相同
|
|||
|
|
print('serial_no match')
|
|||
|
|
|
|||
|
|
def verify(data, signature): # 验签函数
|
|||
|
|
key = RSA.importKey(certificate) # 直接使用解密后的证书
|
|||
|
|
verifier = pkcs1_15.new(key)
|
|||
|
|
hash_obj = SHA256.new(data.encode('utf8'))
|
|||
|
|
return verifier.verify(hash_obj, base64.b64decode(signature))
|
|||
|
|
|
|||
|
|
data3 = f"{wechatpayTimestamp}\n{wechatpayNonce}\n{response.text}\n"
|
|||
|
|
try:
|
|||
|
|
verify(data3, wechatpaySignature)
|
|||
|
|
|
|||
|
|
# 生成调起支付API需要的参数并返回前端
|
|||
|
|
res = {
|
|||
|
|
'timeStamp': time_stamps,
|
|||
|
|
'nonceStr': random_str,
|
|||
|
|
'package': 'prepay_id=' + response.json()['prepay_id'],
|
|||
|
|
'paySign': get_sign(
|
|||
|
|
f"{settings.WX_APP_ID}\n{time_stamps}\n{random_str}\n{'prepay_id=' + response.json()['prepay_id']}\n"),
|
|||
|
|
}
|
|||
|
|
print(f'签名有效: {res}')
|
|||
|
|
logger.info(f'签名有效: {res}')
|
|||
|
|
return HttpResponse(json.dumps(res), content_type='application/json')
|
|||
|
|
except (ValueError, TypeError):
|
|||
|
|
logger.info(f'签名无效')
|
|||
|
|
print('签名无效')
|
|||
|
|
return HttpResponse(json.dumps({'msg': "支付失败"}), content_type='application/json')
|
|||
|
|
|
|||
|
|
def wx_resource(nonce, ciphertext, associated_data):
|
|||
|
|
key_bytes = str.encode(settings.WX_API_KEY) # APIv3_key(商户平台设置)
|
|||
|
|
nonce_bytes = str.encode(nonce)
|
|||
|
|
ad_bytes = str.encode(associated_data)
|
|||
|
|
data = base64.b64decode(ciphertext)
|
|||
|
|
aesgcm = AESGCM(key_bytes)
|
|||
|
|
plaintext = aesgcm.decrypt(nonce_bytes, data, ad_bytes)
|
|||
|
|
plaintext_str = bytes.decode(plaintext)
|
|||
|
|
|
|||
|
|
return eval(plaintext_str)
|
|||
|
|
|
|||
|
|
def update_user_membership_or_quota(openid, membership_type):
|
|||
|
|
current_time = int(time.time()) # 获取当前时间戳
|
|||
|
|
|
|||
|
|
try:
|
|||
|
|
user = User.objects.get(openid=openid)
|
|||
|
|
|
|||
|
|
if membership_type.is_quota:
|
|||
|
|
# 如果是额度充值，更新用户的金币数量
|
|||
|
|
user.coins += membership_type.coins
|
|||
|
|
logger.info(f'用户 {user.id} (openid: {openid}) 充值额度卡，增加金币 {membership_type.coins}')
|
|||
|
|
else:
|
|||
|
|
# 如果是会员充值，更新会员状态和时间
|
|||
|
|
user.is_member = True
|
|||
|
|
|
|||
|
|
if user.member_start_time is None: # 如果用户是第一次开会员
|
|||
|
|
user.member_start_time = current_time
|
|||
|
|
logger.info(f'第一次开会员：{current_time} -- {current_time + membership_type.duration_days * 24 * 3600}')
|
|||
|
|
elif user.member_end_time is None or user.member_end_time < current_time: # 如果会员已经过期
|
|||
|
|
logger.info(f'过期：{current_time} -- {current_time + membership_type.duration_days * 24 * 3600}')
|
|||
|
|
user.member_start_time = current_time
|
|||
|
|
|
|||
|
|
# 计算会员到期时间
|
|||
|
|
if user.member_end_time is None or user.member_end_time < current_time:
|
|||
|
|
logger.info(f'第一次开会员2：{user.member_end_time} -- {current_time + membership_type.duration_days * 24 * 3600}')
|
|||
|
|
user.member_end_time = current_time + membership_type.duration_days * 24 * 3600 # 将天数转换为秒
|
|||
|
|
else: # 如果会员尚未过期，则在现有会员结束时间上添加续费的天数
|
|||
|
|
logger.info(f'续费：{user.member_end_time} -- {user.member_end_time + membership_type.duration_days * 24 * 3600}')
|
|||
|
|
user.member_end_time += membership_type.duration_days * 24 * 3600
|
|||
|
|
|
|||
|
|
# 会员充值赠送金币
|
|||
|
|
user.coins += membership_type.coins
|
|||
|
|
|
|||
|
|
user.save()
|
|||
|
|
return True
|
|||
|
|
except User.DoesNotExist:
|
|||
|
|
# 处理用户不存在的情况
|
|||
|
|
logger.error(f'用户 {openid} 不存在')
|
|||
|
|
return False
|
|||
|
|
except Exception as e:
|
|||
|
|
logger.error(f'更新会员或额度充值时出错: {str(e)}')
|
|||
|
|
return False
|
|||
|
|
|
|||
|
|
|
|||
|
|
@csrf_exempt
|
|||
|
|
def wx_pay_notify(request):
|
|||
|
|
webData = json.loads(request.body)
|
|||
|
|
logger.info(f'回调返回信息：{webData}')
|
|||
|
|
ciphertext = webData['resource']['ciphertext']
|
|||
|
|
nonce = webData['resource']['nonce']
|
|||
|
|
associated_data = webData['resource']['associated_data']
|
|||
|
|
try:
|
|||
|
|
callback_data = wx_resource(nonce, ciphertext, associated_data)
|
|||
|
|
logger.info(f'回调返回信息：{callback_data}')
|
|||
|
|
mchid = callback_data.get('mchid')
|
|||
|
|
appid = callback_data.get('appid')
|
|||
|
|
out_trade_no = callback_data.get('out_trade_no')
|
|||
|
|
transaction_id = callback_data.get('transaction_id')
|
|||
|
|
trade_state = callback_data.get('trade_state')
|
|||
|
|
openid = callback_data.get('payer').get('openid')
|
|||
|
|
attach = callback_data.get('attach')
|
|||
|
|
attach = attach.replace("'", "\"")
|
|||
|
|
attach = json.loads(attach)
|
|||
|
|
type = attach.get('type')
|
|||
|
|
transaction_type = attach.get('transaction_type')
|
|||
|
|
success_time_str = callback_data.get('success_time')
|
|||
|
|
amount_total = callback_data.get('amount').get('total')
|
|||
|
|
success_time = datetime.strptime(success_time_str, "%Y-%m-%dT%H:%M:%S%z")
|
|||
|
|
logger.info("交易结果：")
|
|||
|
|
logger.info(f"商户号：{mchid}")
|
|||
|
|
logger.info(f"AppID：{appid}")
|
|||
|
|
logger.info(f"商户订单号：{out_trade_no}")
|
|||
|
|
logger.info(f"微信订单号：{transaction_id}")
|
|||
|
|
logger.info(f"交易状态：{trade_state}")
|
|||
|
|
logger.info(f"用户OpenID：{openid}")
|
|||
|
|
logger.info(f"type：{type}")
|
|||
|
|
logger.info(f"transaction_type：{transaction_type}")
|
|||
|
|
logger.info(f"成功时间：{success_time}")
|
|||
|
|
logger.info(f"金额（分）：{amount_total}")
|
|||
|
|
transaction_log = TransactionLog.objects.get(transaction_no=out_trade_no)
|
|||
|
|
membership_type = MembershipType.objects.get(type=type) # 获取会员类型对象
|
|||
|
|
|
|||
|
|
# 验证订单信息一致性
|
|||
|
|
if (transaction_log.user_openid == openid) and (transaction_log.transaction_amount * 100 == amount_total) and (
|
|||
|
|
membership_type.price * 100 == amount_total):
|
|||
|
|
# 更新交易状态为完成
|
|||
|
|
transaction_log.transaction_status = 'completed'
|
|||
|
|
transaction_log.save()
|
|||
|
|
logger.info(f'交易记录更新成功：{transaction_log}')
|
|||
|
|
|
|||
|
|
# 更新用户的会员或额度
|
|||
|
|
success = update_user_membership_or_quota(openid, membership_type)
|
|||
|
|
|
|||
|
|
# 给邀请人返利
|
|||
|
|
user = User.objects.get(openid=openid)
|
|||
|
|
if user.inviter_nickname:
|
|||
|
|
inviter = User.objects.filter(nickname=user.inviter_nickname).first()
|
|||
|
|
if inviter:
|
|||
|
|
rebate_amount = round(Decimal(amount_total) * Decimal(0.35) / Decimal(100), 2) # 保留两位小数，单位为元
|
|||
|
|
inviter.balance += rebate_amount
|
|||
|
|
inviter.save()
|
|||
|
|
logger.info(f'邀请人{inviter.nickname}返利{rebate_amount}元成功')
|
|||
|
|
return HttpResponse(json.dumps({"code": "SUCCESS", "message": "成功"}))
|
|||
|
|
else:
|
|||
|
|
logger.warning('回调数据与订单记录不一致')
|
|||
|
|
return HttpResponse(json.dumps({"code": "FAIL", "message": "回调数据与订单记录不一致"}))
|
|||
|
|
except TransactionLog.DoesNotExist:
|
|||
|
|
logger.error(f'交易记录不存在')
|
|||
|
|
return HttpResponse(json.dumps({"code": "FAIL", "message": "交易记录不存在"}))
|
|||
|
|
except Exception as e:
|
|||
|
|
logger.error(f'处理回调时出错：{str(e)}')
|
|||
|
|
return HttpResponse(json.dumps({"code": "FAIL", "message": "处理回调时出错"}))
|
|||
|
|
|