Spring Boot 实现苹果支付同步验证

代码

package com.yuezhi.controller.pay;

import java.io.BufferedOutputStream;
import java.io.BufferedReader;
import java.io.InputStreamReader;
import java.net.URL;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.util.Date;
import java.util.List;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.web.bind.annotation.RestController;
import org.springframework.web.bind.annotation.RequestMapping;
import com.alibaba.fastjson.JSONArray;
import com.alibaba.fastjson.JSONObject;

/**
 * @ProjectName yuezhi
 * @ClassName ApplePay
 * @Description 苹果支付
 * @Author Wednesday
 * @Date 2019/9/19 15:17
 * @Version 1.0
 **/
@RestController
@RequestMapping("/pay")
public class ApplePayController {
    // 购买凭证验证地址
    private static final String certificateUrl = "https://buy.itunes.apple.com/verifyReceipt";
    // 测试的购买凭证验证地址
    private static final String certificateUrlTest = "https://sandbox.itunes.apple.com/verifyReceipt";

    private static Logger logger = LoggerFactory
            .getLogger(ApplePayController.class);

    @Value("${chooseEnv}")
    private Boolean chooseEnv;

    @Autowired
    private PayTypeService payTypeService;

    @Autowired
    private UserOrderService userOrderService;


    @Autowired
    private UserPropertyService userPropertyService;

    private static List<PayType> payTypes = null;

    /**
     * 重写X509TrustManager
     */
    private static TrustManager myX509TrustManager = new X509TrustManager() {
        public X509Certificate[] getAcceptedIssuers() {
            return null;
        }

        public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
        }

        public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
        }
    };

    /**
     * 接收iOS端发过来的购买凭证
     *
     * @param receipt 苹果的receipt
     */
    @RequestMapping("/applePayIap")
    public JsonView sendHttpsCoon(String receipt, String test) {
        JsonView jsonView = new JsonView();
        System.out.println(receipt);
        System.out.println(test);

        String url = chooseEnv == true ? certificateUrl : certificateUrlTest;
        try {

            UserRegis userRegis = UserThreadLocal.get();
            if (userRegis == null) {
                jsonView.setCode(JsonView.TOKEN_TIME_OUT_OR_NULL);
                jsonView.setData(0);
                jsonView.setMessage("请登录!");
                return jsonView;
            }

            // 设置SSLContext
            SSLContext ssl = SSLContext.getInstance("SSL");
            ssl.init(null, new TrustManager[]{myX509TrustManager}, null);

            // 打开连接
            HttpsURLConnection conn = (HttpsURLConnection) new URL(url).openConnection();
            // 设置套接工厂
            conn.setSSLSocketFactory(ssl.getSocketFactory());
            // 加入数据
            conn.setRequestMethod("POST");
            conn.setDoOutput(true);
            conn.setRequestProperty("Content-type", "application/json");
            conn.setRequestProperty("Proxy-Connection", "Keep-Alive");
            JSONObject obj = new JSONObject();
            obj.put("receipt-data", receipt);
            // 获取输出流
            BufferedOutputStream buffOutStr = new BufferedOutputStream(conn.getOutputStream());
            buffOutStr.write(obj.toString().getBytes());
            buffOutStr.flush();
            buffOutStr.close();
            // 获取输入流
            BufferedReader reader = new BufferedReader(new InputStreamReader(conn.getInputStream()));

            String line = null;
            StringBuffer sb = new StringBuffer();
            while ((line = reader.readLine()) != null) {
                sb.append(line);
            }
            String verifyResult = sb.toString();
            conn.getInputStream().close();
            logger.error("苹果返回的验证信息-->  " + verifyResult);

            //=============================↑↑↑验证逻辑代码↑↑↑===============================
            //
            //------------------------------------------------------------------------------------
            if (verifyResult == null) {
                jsonView.setMessage("苹果验证失败，返回数据为空");
                jsonView.setData(1);
                jsonView.setCode(JsonView.BALANCE_NULL2);
                return jsonView;
            } else {
			 	//以上接收碰过返回的交易信息。之后逻辑根据自己的业务需求进行
            }
        return jsonView;
    }
}

苹果返回相应状态码

	/**
	* 苹果支付检验返回状态码 描述
	* 21000 App Store无法读取你提供的JSON数据
	* 21002 收据数据不符合格式
	* 21003 收据无法被验证
	* 21004 你提供的共享密钥和账户的共享密钥不一致
	* 21005 收据服务器当前不可用
	* 21006 收据是有效的，但订阅服务已经过期。当收到这个信息时，解码后的收据信息也包含在返回内容中
	* 21007 收据信息是测试用（sandbox），但却被发送到产品环境中验证
	* 21008 收据信息是产品环境中使用，但却被发送到测试环境中验证
	*/