The updates are as follows:
- Secret key management reform doc
- The server returns the sign
- New SDK return to sign deal
- New sandbox environment
The update of the key elements is the secret key management, a new platform for public private parties. As a result, there will be two sets of docking an open platform for public and private key, generated by a developer, generated by an open platform. In which the developer holds appKey, private developers, open platform public key. Alipay open platform to take over the students should be familiar.
After the new open platform for public and private key, the result will be returned once the signature, returned similar to the following format:
{
"alipay_story_find_response": {
"msg": "Success",
"code": "10000",
"name": "白雪公主",
"id": 1,
"gmtCreate": 1554193987378
},
"sign": "xxxxx"
}Wherein the sign of the field generating server signature string, so the SDK needs to verify the legitimacy of the signature. SDK treated as follows:
String url = "http://open.domian.com/api";
String appId = "2019032617262200001";
/** 开发者私钥 */
String privateKeyIsv = "开发者私钥";
/** 开放平台提供的公钥 */
String publicKeyPlatform = "开放平台提供的公钥";
OpenClient client = new OpenClient(url, appId, privateKeyIsv, publicKeyPlatform);Adding a public key development platform in the constructor, SDK automatically after this verification request.
This update adds sandbox environment that provides an interface for the call to the developer, the effect is shown below
About SOP
SOP(Simple Open Platform)
An open platform solution project, based on Spring Cloud to achieve the goal of allowing users to quickly get to build up their own open platform.
SOP provides two interface calls ways, namely: Alipay open platform invocation and Taobao Open Platform calls the way. By the simple configuration, your project will have the same interfaces and Alipay open platform provides the ability.
SOP package the most open platform features include: signature verification, exception handling unified, unified return content, business parameter validation (JSR-303), secret key management, the future will achieve more.
Project Features
- Simple access, the project does not conflict with the old, old projects registered with the registry, then you can add comments on the method.
- Loosely coupled architecture, business code implemented on their respective micro-services, SOP does not participate in the business to achieve, which is the benefits of Cloud Spring micro-service system.
- Extended Simple, open platform for the corresponding function independently, can be customized to achieve their demands, such as: change parameters, change the signature rules.
Who can use this project
- There are ready-made project, to be transformed into an open platform for others to call
- There are ready-made projects, which want to expose several interfaces and open platform for others by calling
- 想搭一个开放平台新项目，并结合微服务的方式去维护
- 对开放平台感兴趣的朋友
以上情况都可以考虑使用SOP
架构图
