ralipay 0.0.2 → 0.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 710a49c3f404fbad754bdb8800b408e8ab417199
-  data.tar.gz: 8306eff1acdc996510683b6b0afe6f388c9885b7
+  metadata.gz: 8106fe0016c5c10983d383d25986faaa9f95caa0
+  data.tar.gz: f0f4a072239c608e9d9cd4fee85b47ba250caf24
 SHA512:
-  metadata.gz: f981cf1358eed4aa939fb8eff7b5e42252a4f8458707ad924ddf425e2656fe5654be812dcd1521d0bc2ed33237d77ccfef34351c62970b65289be727a5d772c3
-  data.tar.gz: a72fa9c8608615c04268b2148e1bdc0df2c60f97878cd3e5eea07a69141324ba421c138cfc33eec4646573062476b4feb8f93383b5a0f07a5a1d99fad93b5fd0
+  metadata.gz: fdb04223b1a5b7e4d962e982e5ca093c12b5260ae7527acd99e1f38cbddb68431e7af883bb800c895331fc7007646659b24af495f18426328a2a8e87c4ccab5d
+  data.tar.gz: c6495e7562763e3e8b72e74468e550caad2373e932c8356adc92b3e990ed69ae587f0466ca5fba7eb47431de7067cd63f5689fe7d1ee2bab16f7aca6e6bd99da

data/lib/ralipay/common.rb

@@ -18,9 +18,13 @@ module Ralipay::Common
   end
 
   #把数组所有元素，排序后按照“参数=参数值”的模式用“&”字符拼接成字符串
-  def self.create_link_string hash
+  def self.create_link_string hash, sort = true
     result_string = ''
-    hash = hash.sort
+    #是否排序
+    if sort
+      hash = hash.sort
+    end
+
     hash.each{|key,value|
       result_string += (key.to_s + '=' + value.to_s + '&')
     }
@@ -45,7 +49,7 @@ module Ralipay::Common
 
   #MD5签名
   def self.md5_sign(for_sign_string)
-
+    #@todo md5签名方法
   end
 
   #验签

data/lib/ralipay/notify.rb

@@ -0,0 +1,42 @@
+require 'ralipay/common'
+require 'uri'
+require 'cgi'
+require 'nokogiri'
+
+include Ralipay::Common
+
+class Notify
+
+  def initialize
+
+  end
+
+  #对return_url的认证,以hash symbol方式输入get数组
+  def return_verify? gets
+    #@todo 入参合法性验证
+    in_hash = Ralipay::Common::para_filter gets
+    sort_hash  = in_hash.sort
+    sign = CGI::unescape gets[:sign]
+
+    for_sign_string = Ralipay::Common::create_link_string(sort_hash)
+    Ralipay::Common::verify?(for_sign_string, sign)
+  end
+
+  #对notify_url的认证,以hash symbol方式输入post数组
+  def notify_verify? posts
+    #@todo 入参合法性验证
+    #此处为固定顺序，支付宝Notify返回消息通知比较特殊，这里不需要升序排列
+    notify_hash = {
+        :service		 => posts[:service],
+        :v				   => posts[:v],
+        :sec_id		   => posts[:sec_id],
+        :notify_data => posts[:notify_data]
+    }
+    #解密notify_data
+    notify_hash[:notify_data] = Ralipay::Common::decrypt notify_hash[:notify_data]
+    sign = posts[:sign]
+    for_sign_string = Ralipay::Common::create_link_string(notify_hash,false)
+    Ralipay::Common::verify?(for_sign_string, sign)
+  end
+
+end

data/lib/ralipay/service.rb

@@ -71,7 +71,7 @@ class Service
     #生成签名
     @@my_sign = Ralipay::Common::build_sign sort_array
     #创建POST请求数据串
-    @@req_data = Ralipay::Common::create_link_string(@@parameter).to_s \
+    @@req_data = Ralipay::Common::create_link_string(sort_array).to_s \
                + '&sign='                                              \
                + CGI::escape(@@my_sign)
     #请求支付宝接口

data/lib/ralipay/version.rb

@@ -1,3 +1,3 @@
 module Ralipay
-  VERSION = "0.0.2"
+  VERSION = "0.0.3"
 end

data/lib/ralipay.rb

@@ -3,8 +3,10 @@ module Ralipay
   require 'ralipay/version'
   require 'ralipay/common'
   require 'ralipay/service'
+  require 'ralipay/notify'
   require 'json'
   require 'date'
+  require 'nokogiri'
 
   include Ralipay::Common
 
@@ -41,6 +43,7 @@ module Ralipay
       $global_configs = $global_configs.merge configs
     end
 
+    #生成wap支付地址
     def generate_wap_pay_url
       params = {
           :_input_charset => $input_charset_gbk,
@@ -104,8 +107,65 @@ module Ralipay
       }
 
       #调用alipay_Wap_Auth_AuthAndExecute接口方法,生成支付地址
-      wap_pay_url = Service.new.alipay_wap_auth_and_execute(req_hash)
-      return wap_pay_url
+      Service.new.alipay_wap_auth_and_execute(req_hash)
+    end
+
+    #同步回调验证,支付后跳转,前端GET方式获得参数,传入hash symbol,该方法只返回bool
+    def callback_verify? gets
+      (Notify.new.return_verify? gets) && (gets[:result] == 'success')
+    end
+
+    #同步回调验证,支付后跳转,前端GET方式获得参数,传入hash symbol,该方法返回支付状态,并安全的返回回调参数hash,失败返回false
+    def callback_verify gets
+      if (Notify.new.return_verify? gets) && (gets[:result] == 'success')
+        {
+            :out_trade_no => gets[:out_trade_no], #外部交易号
+            :trade_no     => gets[:trade_no]      #支付宝交易号
+        }
+      else
+         false #交易失败/验证失败返回false
+      end
+    end
+
+    #异步回调验证,支付宝主动通知,前端POST xml方式获得参数,该方法只返回bool
+    #成功请自行向支付宝打印纯文本success
+    #如验签失败或未输出success支付宝会24小时根据策略重发总共7次,需考虑重复通知的情况
+    def notify_verify? posts
+      if Notify.new.notify_verify? posts
+        #解密并解析返回参数的xml
+        xml    = Ralipay::Common::decrypt posts[:notify_data]
+        doc    = Nokogiri::XML xml
+        status = doc.xpath('/notify/trade_status').text
+        #获得可信的交易状态
+        status == 'TRADE_FINISHED' ? true : false
+      else
+         false
+      end
+    end
+
+    #异步回调验证,支付宝主动通知,前端POST xml方式获得参数,该方法返回支付状态,并安全的返回回调参数hash,失败返回false
+    #成功请自行向支付宝打印纯文本success
+    #如验签失败或未输出success支付宝会24小时根据策略重发总共7次,需考虑重复通知的情况
+    def notify_verify posts
+      if Notify.new.notify_verify? posts
+        #解密并解析返回参数的xml
+        xml    = Ralipay::Common::decrypt posts[:notify_data]
+        doc    = Nokogiri::XML xml
+        status = doc.xpath('/notify/trade_status').text
+        #获得可信的交易状态
+        if status == 'TRADE_FINISHED'
+          {
+              :out_trade_no => doc.xpath('/notify/out_trade_no').text,
+              :subject      => doc.xpath('/notify/subject').text,
+              :price        => doc.xpath('/notify/price').text,
+              :trade_no     => doc.xpath('/notify/trade_no').text
+          }
+        else
+          false
+        end
+      else
+        false
+      end
     end
 
   end

data/test/test_ralipay.rb

@@ -10,9 +10,9 @@ class TestRalipay < Test::Unit::TestCase
         :rsa_private_key_path => '/Users/ZhouYT/Desktop/rsa_private_key.pem',
         :rsa_public_key_path  => '/Users/ZhouYT/Desktop/alipay_public_key.pem',
         :subject => '测试商品',
-        :out_trade_no => '1222222232',
-        :total_fee => '1',
-        :notify_url => 'http://www.iiseeuu.com',
+        :out_trade_no => '1222222233',
+        :total_fee => '0.01',
+        :notify_url => 'http://180.110.74.118/post.php',
         :merchant_url => 'http://www.iiseeuu.com',
         :call_back_url => 'http://www.iiseeuu.com'
     }
@@ -20,6 +20,56 @@ class TestRalipay < Test::Unit::TestCase
                  Ralipay::Payment.new(configs).generate_wap_pay_url
   end
 
+  def test_callback_verify
+    configs = {
+        :partner => '2088701817081672',
+        :seller_email => 'service@iiseeuu.com',
+        :rsa_private_key_path => '/Users/ZhouYT/Desktop/rsa_private_key.pem',
+        :rsa_public_key_path  => '/Users/ZhouYT/Desktop/alipay_public_key.pem',
+        :subject => '测试商品',
+        :out_trade_no => '1222222232',
+        :total_fee => '1',
+        :notify_url => 'http://180.110.74.118/post.php',
+        :merchant_url => 'http://www.iiseeuu.com',
+        :call_back_url => 'http://www.iiseeuu.com'
+    }
+    #'out_trade_no=1222222232&request_token=requestToken&result=success&trade_no=2013032325639837&sign=cANAWkI1dgF1WeyRpp%2F0xzfKXXo50JxRyUxcDh6z%2BZbps1YFiWYRTSUmdCx7HT%2BjAG79ebMWEVIf2HmdIYEIzQDJwu2nl0fElqRgcm9%2BT%2B5b75DbtUg9COla1tr34NLpOcM0P0lcq6byNM0wFbdycUIIoH5Z6JKu66B1YuQLNag%3D&sign_type=0001'
+    gets = {
+        :out_trade_no => '1222222232',
+        :request_token  => 'requestToken',
+        :result => 'success',
+        :trade_no => '2013032325639837',
+        :sign => 'cANAWkI1dgF1WeyRpp%2F0xzfKXXo50JxRyUxcDh6z%2BZbps1YFiWYRTSUmdCx7HT%2BjAG79ebMWEVIf2HmdIYEIzQDJwu2nl0fElqRgcm9%2BT%2B5b75DbtUg9COla1tr34NLpOcM0P0lcq6byNM0wFbdycUIIoH5Z6JKu66B1YuQLNag%3D',
+        :sign_type => '0001'
+    }
+    assert_equal true,
+                 Ralipay::Payment.new(configs).callback_verify?(gets)
+  end
+
+  def test_notify_verify
+    configs = {
+        :partner => '2088701817081672',
+        :seller_email => 'service@iiseeuu.com',
+        :rsa_private_key_path => '/Users/ZhouYT/Desktop/rsa_private_key.pem',
+        :rsa_public_key_path  => '/Users/ZhouYT/Desktop/alipay_public_key.pem',
+        :subject => '测试商品',
+        :out_trade_no => '1222222233',
+        :total_fee => '1',
+        :notify_url => 'http://180.110.74.118/post.php',
+        :merchant_url => 'http://www.iiseeuu.com',
+        :call_back_url => 'http://www.iiseeuu.com'
+    }
+    posts = {
+        :service => 'alipay.wap.trade.create.direct',
+        :sign => 'pCEWVfxBWqvpndkXmCPbd70Tqfo7IG3tP68WmH4wWuUDylb6Rv2RzOghs7m+ANtAx+NyCIuE4KpoonS4qZrc16Qh7/bnwZL2C4FHQJ903HrV0c4n/Pdko0owksnb9VYUGMEppVEBvYPap0bP1GZsbCtI1iuXb2cI1h4vlKJjdGw=',
+        :sec_id => '0001',
+        :v => '1.0',
+        :notify_data => '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'
+    }
+    assert_equal true,
+                 Ralipay::Payment.new(configs).notify_verify?(posts)
+  end
+
   def test_para_filter
     input_para = {:a => 'abc', :sign_type => 'abc', :c => '', :d => nil}
     assert_equal ({:a => 'abc'}),

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ralipay
 version: !ruby/object:Gem::Version
-  version: 0.0.2
+  version: 0.0.3
 platform: ruby
 authors:
 - RaymondChou
@@ -66,6 +66,7 @@ files:
 - Rakefile
 - lib/ralipay.rb
 - lib/ralipay/common.rb
+- lib/ralipay/notify.rb
 - lib/ralipay/service.rb
 - lib/ralipay/version.rb
 - ralipay.gemspec