浏览代码

支付加sign校验

周箭河 5 年之前
父节点
当前提交
af23a76e80

+ 5 - 5
mec-student/src/main/java/com/ym/mec/student/controller/StudentOrderController.java

@@ -154,17 +154,17 @@ public class StudentOrderController extends BaseController {
     public Object executePayment(BigDecimal amount, String orderNo, String payChannel, String notifyUrl, String returnUrl, String orderSubject, String orderBody, String sign, String code, String platform) throws Exception {
     public Object executePayment(BigDecimal amount, String orderNo, String payChannel, String notifyUrl, String returnUrl, String orderSubject, String orderBody, String sign, String code, String platform) throws Exception {
         Map<String, Object> signParams = new LinkedHashMap<>();
         Map<String, Object> signParams = new LinkedHashMap<>();
         signParams.put("appId", ConfigInit.appId);
         signParams.put("appId", ConfigInit.appId);
-        signParams.put("amount", amount);
+        signParams.put("amount", amount.setScale(2,BigDecimal.ROUND_HALF_UP));
         signParams.put("orderNo", orderNo);
         signParams.put("orderNo", orderNo);
-        signParams.put("notifyUrl", notifyUrl);
-        signParams.put("returnUrl", returnUrl);
+//        signParams.put("notifyUrl", notifyUrl);
+//        signParams.put("returnUrl", returnUrl);
         signParams.put("orderSubject", orderSubject);
         signParams.put("orderSubject", orderSubject);
         signParams.put("orderBody", orderBody);
         signParams.put("orderBody", orderBody);
         signParams.put("wxAppId", ConfigInit.wxAppId);
         signParams.put("wxAppId", ConfigInit.wxAppId);
 
 
         String originalStr = JSONObject.toJSONString(signParams);
         String originalStr = JSONObject.toJSONString(signParams);
         String mewSign = DigestUtils.md5DigestAsHex(originalStr.getBytes());
         String mewSign = DigestUtils.md5DigestAsHex(originalStr.getBytes());
-        if (mewSign.equals(sign)) {
+        if (!mewSign.equals(sign)) {
             return failed("请勿非法请求");
             return failed("请勿非法请求");
         }
         }
 
 
@@ -213,7 +213,7 @@ public class StudentOrderController extends BaseController {
         paymentParams.put("app_id", ConfigInit.appId);
         paymentParams.put("app_id", ConfigInit.appId);
         paymentParams.put("order_no", orderNo);
         paymentParams.put("order_no", orderNo);
         paymentParams.put("pay_channel", payChannel);
         paymentParams.put("pay_channel", payChannel);
-        paymentParams.put("pay_amt", amount);
+        paymentParams.put("pay_amt", amount.setScale(2,BigDecimal.ROUND_HALF_UP));
         paymentParams.put("goods_title", orderSubject);
         paymentParams.put("goods_title", orderSubject);
         paymentParams.put("goods_desc", orderBody);
         paymentParams.put("goods_desc", orderBody);
         paymentParams.put("time_expire", timeExpire);
         paymentParams.put("time_expire", timeExpire);

+ 2 - 2
mec-thirdparty/src/main/java/com/ym/mec/thirdparty/adapay/Payment.java

@@ -179,8 +179,8 @@ public class Payment extends ConfigInit {
         paymentParams.put("appId", appId);
         paymentParams.put("appId", appId);
         paymentParams.put("amount", amount.setScale(2, BigDecimal.ROUND_HALF_UP));
         paymentParams.put("amount", amount.setScale(2, BigDecimal.ROUND_HALF_UP));
         paymentParams.put("orderNo", orderNo);
         paymentParams.put("orderNo", orderNo);
-        paymentParams.put("notifyUrl", notifyUrl);
-        paymentParams.put("returnUrl", returnUrl);
+//        paymentParams.put("notifyUrl", notifyUrl);
+//        paymentParams.put("returnUrl", returnUrl);
         paymentParams.put("orderSubject", orderSubject);
         paymentParams.put("orderSubject", orderSubject);
         paymentParams.put("orderBody", orderBody);
         paymentParams.put("orderBody", orderBody);
         paymentParams.put("wxAppId", wxAppId);
         paymentParams.put("wxAppId", wxAppId);