package com.taoke.autopay.controller; import com.google.gson.Gson; import com.taoke.autopay.dto.DYOrderDto; import com.taoke.autopay.dto.WXAppInfoDto; import com.taoke.autopay.entity.KeyOrder; import com.taoke.autopay.entity.SystemConfigKeyEnum; import com.taoke.autopay.entity.WxUserInfo; import com.taoke.autopay.exception.KeyOrderException; import com.taoke.autopay.exception.KeyVerifyException; import com.taoke.autopay.exception.WxOrderCountException; import com.taoke.autopay.manager.PayCountVerifyManager; import com.taoke.autopay.service.KeyOrderService; import com.taoke.autopay.service.SystemConfigService; import com.taoke.autopay.service.WxUserService; import com.taoke.autopay.utils.*; import com.taoke.autopay.vo.SubmitKeyInfo; import net.sf.json.JSONObject; import org.slf4j.Logger; import org.slf4j.LoggerFactory; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.stereotype.Controller; import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.ResponseBody; import org.yeshi.utils.UrlUtils; import javax.annotation.Resource; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession; import java.io.IOException; import java.util.*; @Controller @RequestMapping("webapi") public class WebApiController { Logger logger = LoggerFactory.getLogger(WebApiController.class); Logger wxLogger = LoggerFactory.getLogger("wxLogger"); Logger verifyLogger = LoggerFactory.getLogger("keyVerifyLogger"); @Resource private KeyOrderService keyOrderService; @Resource private WxUserService wxUserService; @Resource private SystemConfigService systemConfigService; @Autowired private PayCountVerifyManager payCountVerifyManager; private KeyOrder addKey(SubmitKeyInfo keyInfo, Long wxUid) throws KeyVerifyException, KeyOrderException, WxOrderCountException { // 查询没有处理的数量 long notProcessCount = keyOrderService.countUserNotDoOrder(wxUid, new Date(System.currentTimeMillis() - 1000 * 60 * 30)); if (notProcessCount > 0) { throw new WxOrderCountException("上一个口令尚未处理完!"); } // 解析链接 List urllist = UrlUtils.parseUrlsFromText(keyInfo.getKey()); String verifyAlipayKey = systemConfigService.getValueCache(SystemConfigKeyEnum.ALIPAY_KEY_VERIFY); DYOrderDto orderDto = null; int orderType = Constant.ORDER_TYPE_UNKNOWN; if (verifyAlipayKey != null && verifyAlipayKey.trim().equalsIgnoreCase("1")) { try { // 需要验证支付宝口令 if (urllist.isEmpty()) { throw new Exception("口令中不包含链接"); } AlipayOrderUtil.AlipayOrderTradeInfo tradeInfo = AlipayOrderUtil.getTradeInfo(urllist.get(0)); String orderStatus = ""; switch (tradeInfo.getStatus()) { case AlipayOrderUtil.AlipayOrderTradeInfo.STATUS_CANCELED: orderStatus = "订单已取消"; break; case AlipayOrderUtil.AlipayOrderTradeInfo.STATUS_PAY: orderStatus = "订单已支付"; break; case AlipayOrderUtil.AlipayOrderTradeInfo.STATUS_NOT_PAY: orderStatus = "订单未支付"; break; } if (tradeInfo == null) { throw new Exception("口令内容获取失败"); } orderType = AlipayOrderUtil.getOrderType(tradeInfo.getGoodsTitle()); // 验证内容 orderDto = keyOrderService.verifyKey(tradeInfo.getGoodsTitle(), orderStatus, tradeInfo.getItemRealAmount(), wxUid, null); } catch (KeyVerifyException ee) { try { verifyLogger.warn("校验不通过:【{}】-{}", keyInfo.getKey(), ee.getMessage()); } catch (Exception e) { } throw ee; } catch (Exception e) { throw new KeyVerifyException(KeyVerifyException.CODE_COMMON, e.getMessage()); } } KeyOrder order = keyOrderService.addKeyOrder(keyInfo, wxUid, TimeUtil.getGernalTime(System.currentTimeMillis(), Constant.DB_DAY_FORMAT), orderType, orderDto); Long uid = keyOrderService.getCanDistributeUid(Constant.MAX_PAY_ACCOUNT_QUEUE_SIZE); if (uid != null) { KeyOrder orderUpdate = new KeyOrder(); orderUpdate.setId(order.getId()); orderUpdate.setDistributeClientUid(uid); orderUpdate.setDistributeTime(new Date()); keyOrderService.update(orderUpdate); } return order; } private void verifySubmitKey(String key) throws Exception { List urllist = UrlUtils.parseUrlsFromText(key); if (urllist.isEmpty() || !urllist.get(0).contains("ur.alipay.com")) { throw new Exception("不包含支付宝链接"); } if (!key.contains("支付宝")) { throw new Exception("没包含支付宝汉字"); } } private Map ipInfoMap = new HashMap<>(); @ResponseBody @RequestMapping(value = "submitKeyV4") public String submitKeyV4(SubmitKeyInfo keyInfo, HttpSession session, HttpServletRequest request) { String referer = request.getHeader("Referer"); keyInfo.setReferer(referer); WxUserInfo user = (WxUserInfo) session.getAttribute(Constant.SESSION_KEY_USER); if (StringUtil.isNullOrEmpty(keyInfo.getKey())) { return JsonUtil.loadFalseResult("请上传key"); } String ip = IPUtil.getRemotIP(request); keyInfo.setIp(ip); if (!ipInfoMap.containsKey(ip)) { try { IPUtil.IPInfo ipInfo = IPUtil.getLocalIPInfo(ip); ipInfoMap.put(ip, ipInfo); } catch (Exception e) { throw new RuntimeException(e); } } keyInfo.setIpInfo(ipInfoMap.get(ip)); String citys = systemConfigService.getValueCache(SystemConfigKeyEnum.FORBIDDEN_SUBMIT_CITYS); if (citys != null && ipInfoMap.get(ip) != null) { List cityList = Arrays.asList(citys.split(",")); if (cityList.contains(ipInfoMap.get(ip).getCity())) { LogUtil.loggerDebug.warn("区域屏蔽:{}-{}", ip, new Gson().toJson(ipInfoMap.get(ip))); return JsonUtil.loadFalseResult("暂时无法上传口令"); } } try { verifySubmitKey(keyInfo.getKey()); } catch (Exception e) { return JsonUtil.loadFalseResult("支付宝口令不正确"); } // 验证提交时间 String timeStr = systemConfigService.getValueCache(SystemConfigKeyEnum.KEY_SUBMIT_TIME_RANGE); if (StringUtil.isNullOrEmpty(timeStr)) { return JsonUtil.loadFalseResult("尚未配置生效时间"); } String startTime = timeStr.split(",")[0].trim().replace(":", ""); String endTime = timeStr.split(",")[1].trim().replace(":", ""); String now = TimeUtil.getGernalTime(System.currentTimeMillis(), "HHmmss"); if (Integer.parseInt(now) < Integer.parseInt(startTime) || Integer.parseInt(now) > Integer.parseInt(endTime)) { return JsonUtil.loadFalseResult(String.format("口令提交时间段为:%s-%s", timeStr.split(",")[0], timeStr.split(",")[1])); } if (user == null) { // 先保存KEY session.setAttribute(Constant.SESSION_KEY_TEMP_ALIPAY_KEY, keyInfo); wxLogger.info("微信没有授权:" + session.getId()); String redictLink = systemConfigService.getValueCache(SystemConfigKeyEnum.WX_REDIRECT_LINK); if (StringUtil.isNullOrEmpty(redictLink)) { return JsonUtil.loadFalseResult("无法获取到授权链接"); } redictLink = redictLink.replace("snsapi_base", "snsapi_userinfo"); // 没有登录,返回登录链接 JSONObject root = new JSONObject(); root.put("link", redictLink); return JsonUtil.loadTrueResult(Constant.RESULT_CODE_NEED_LOGIN, root); } wxLogger.info("微信有授权:" + session.getId()); LogUtil.loggerDebug.warn("GEO信息:{}-{}-{}", user.getId(), ip, new Gson().toJson(ipInfoMap.get(ip))); try { KeyOrder order = addKey(keyInfo, user.getId()); JSONObject data = new JSONObject(); data.put("id", order.getId()); return JsonUtil.loadTrueResult(data); } catch (KeyOrderException e) { e.printStackTrace(); return JsonUtil.loadFalseResult(e.getMessage()); } catch (WxOrderCountException e) { return JsonUtil.loadFalseResult(e.getMessage()); } catch (KeyVerifyException e) { LogUtil.loggerDebug.debug("口令校验失败:{}-{}-{}", keyInfo.getKey(), e.getCode(), e.getMessage()); switch (e.getCode()) { case KeyVerifyException.CODE_KEY_MONEY_NOT_MATCH: return JsonUtil.loadFalseResult("该笔订单有误,不予提交"); case KeyVerifyException.CODE_ORDER_MONEY_NOT_MATCH: return JsonUtil.loadFalseResult("提交金额不匹配"); case KeyVerifyException.CODE_ORDER_NO_REPEAT: return JsonUtil.loadFalseResult("重复提交订单"); } return JsonUtil.loadFalseResult(e.getMessage()); } } @RequestMapping(value = "wxLogin") public void wxLogin(String code, String state, HttpServletRequest request, HttpServletResponse response, HttpSession session) throws IOException { // 根据code获取openid SubmitKeyInfo alipayKeyInfo = (SubmitKeyInfo) session.getAttribute(Constant.SESSION_KEY_TEMP_ALIPAY_KEY); wxLogger.info("微信授权回调:{} code-{} referer-{}", session.getId(), code, alipayKeyInfo.getReferer()); String failLink = systemConfigService.getValueCache(SystemConfigKeyEnum.WX_LOGIN_FAIL_LINK); String referer = alipayKeyInfo.getReferer(); try { WXAppInfoDto wxApp = systemConfigService.getWxAppInfoCache(); String successLink = systemConfigService.getValueCache(SystemConfigKeyEnum.WX_LOGIN_SUCCESS_LINK); if (!StringUtil.isNullOrEmpty(referer)) { Map params = HttpUtil.getPramsFromUrl(referer); params.put("state", "SUCCESS"); successLink = HttpUtil.getWholeUrl(HttpUtil.getUrlWithoutParams(referer), params); } WxApiUtil.WXAccessTokenInfo tokenInfo = WxApiUtil.getAcessTokenInfo(code, wxApp); if (tokenInfo != null && !StringUtil.isNullOrEmpty(tokenInfo.getOpenid())) { WxApiUtil.WXUserInfo wxUserInfo = null; if (tokenInfo.getScope() != null && tokenInfo.getScope().contains("snsapi_userinfo")) { try { wxUserInfo = WxApiUtil.getUserInfo(tokenInfo.getAccess_token(), tokenInfo.getOpenid()); wxLogger.info("解析结果", new Gson().toJson(wxUserInfo)); } catch (Exception e) { wxLogger.error("解析出错", e); } } if (wxUserInfo == null) { wxUserInfo = new WxApiUtil.WXUserInfo(); wxUserInfo.setOpenid(tokenInfo.getOpenid()); } WxUserInfo user = wxUserService.login(wxUserInfo); session.setAttribute(Constant.SESSION_KEY_USER, user); wxLogger.info("微信保存用户信息:{} id-{}", session.getId(), user.getId()); wxLogger.info("从session读取到key:{}", alipayKeyInfo); if (alipayKeyInfo != null) { if (!ipInfoMap.containsKey(alipayKeyInfo.getIp())) { try { IPUtil.IPInfo ipInfo = IPUtil.getLocalIPInfo(alipayKeyInfo.getIp()); ipInfoMap.put(alipayKeyInfo.getIp(), ipInfo); } catch (Exception e) { throw new RuntimeException(e); } } addKey(alipayKeyInfo, user.getId()); } response.sendRedirect(successLink); return; } } catch (Exception e) { wxLogger.error("授权失败:{}", e.getMessage()); if (!StringUtil.isNullOrEmpty(referer)) { Map params = HttpUtil.getPramsFromUrl(referer); params.put("state", "FAIL"); failLink = HttpUtil.getWholeUrl(HttpUtil.getUrlWithoutParams(referer), params); } } response.sendRedirect(failLink); } /** * 查询口令提交结果 * * @param id * @param request * @return */ @ResponseBody @RequestMapping(value = "queryKeyResult") public String queryKeyResult(String id, HttpServletRequest request) { KeyOrder keyOrder = keyOrderService.selectById(id); if (keyOrder == null) { return JsonUtil.loadFalseResult("口令不存在"); } String desc = ""; switch (keyOrder.getState()) { case KeyOrder.STATE_NOT_PROCESS: if (keyOrder.getDistributeClientUid() == null) { desc = "口令已提交,等待支付中..."; } else { desc = "支付排队中..."; } break; case KeyOrder.STATE_NOT_PAY: desc = "正在支付中,支付完成后才可继续提交口令。"; break; case KeyOrder.STATE_PAY: desc = "支付成功"; break; case KeyOrder.STATE_REJECT_PAY: desc = keyOrder.getStateDesc(); break; } JSONObject data = new JSONObject(); data.put("state_desc", desc); data.put("finish", keyOrder.getState() == KeyOrder.STATE_PAY || keyOrder.getState() == KeyOrder.STATE_REJECT_PAY ? 1 : 0); return JsonUtil.loadTrueResult(data); } /** * 查询支付剩余次数 * * @param session * @param request * @return */ @ResponseBody @RequestMapping(value = "queryPayLeftCount") public String queryPayLeftCount(HttpSession session, HttpServletRequest request) { WxUserInfo user = (WxUserInfo) session.getAttribute(Constant.SESSION_KEY_USER); if (user == null || user.getId() == null) { return JsonUtil.loadFalseResult("用户尚未登录"); } // 查询支付剩余次数 Map map = payCountVerifyManager.computeUserLeftPayCount(user.getId()); return JsonUtil.loadTrueResult(new Gson().toJson(map)); } }