进度: notifyurl的配置未完成。

Author: mtianyan

.gitattributes

@@ -0,0 +1,20 @@
+# Auto detect text files and perform LF normalization
+* text=auto
+
+# Custom for Visual Studio
+*.cs     diff=csharp
+
+# Standard to msysgit
+*.doc	 diff=astextplain
+*.DOC	 diff=astextplain
+*.docx diff=astextplain
+*.DOCX diff=astextplain
+*.dot  diff=astextplain
+*.DOT  diff=astextplain
+*.pdf  diff=astextplain
+*.PDF	 diff=astextplain
+*.rtf	 diff=astextplain
+*.RTF	 diff=astextplain
+*.js linguist-language=python
+*.css linguist-language=python
+*.html linguist-language=python

.gitignore

@@ -0,0 +1,48 @@
+# Windows image file caches
+Thumbs.db
+ehthumbs.db
+
+# Folder config file
+Desktop.ini
+
+# Recycle Bin used on file shares
+$RECYCLE.BIN/
+
+# Windows Installer files
+*.cab
+*.msi
+*.msm
+*.msp
+
+# Windows shortcuts
+*.lnk
+
+# =========================
+# Operating System Files
+# =========================
+
+# OSX
+# =========================
+
+.DS_Store
+.AppleDouble
+.LSOverride
+
+# Thumbnails
+._*
+
+# Files that might appear in the root of a volume
+.DocumentRevisions-V100
+.fseventsd
+.Spotlight-V100
+.TemporaryItems
+.Trashes
+.VolumeIcon.icns
+
+# Directories potentially created on remote AFP share
+.AppleDB
+.AppleDesktop
+Network Trash Folder
+Temporary Items
+/VueDjangoFrameWorkShop/local_settings.py
+/VueDjangoFrameWorkShop/dev_settings.py

.idea/deployment.xml

@@ -13,6 +13,8 @@
 import os
 import sys
 # Build paths inside the project like this: os.path.join(BASE_DIR, ...)
+from past.builtins import execfile
+
 BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
 sys.path.insert(0,BASE_DIR)
 sys.path.insert(0,os.path.join(BASE_DIR, 'apps'))
@@ -27,7 +29,7 @@
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = True
 
-ALLOWED_HOSTS = []
+ALLOWED_HOSTS = ['*']
 
 # 设置邮箱和用户名和手机号均可登录
 AUTHENTICATION_BACKENDS = (
@@ -106,8 +108,8 @@
         'ENGINE': 'django.db.backends.mysql',
         'NAME': 'vue_shop',
         'USER': 'root',
-        'PASSWORD': 'tp158917',
-        'HOST':'127.0.0.1',
+        'PASSWORD': '123456',
+        'HOST': '127.0.0.1',
         "OPTIONS": {"init_command": "SET default_storage_engine=INNODB;"}
     }
 }
@@ -175,4 +177,17 @@
 REGEX_MOBILE = "^1[358]\d{9}$|^147\d{8}$|^176\d{8}$"
 
 # 云片网设置
-APIKEY = 'd6c4ddbf50ab36611d2f52041a0b949e'
+APIKEY = ''
+
+REMOTE_DEBUG = False
+PROJECT_ROOT = os.path.join(BASE_DIR, 'VueDjangoFrameWorkShop')
+if DEBUG:
+    try:
+        execfile(os.path.join(PROJECT_ROOT, 'local_settings.py'))
+    except IOError:
+        pass
+else:
+    try:
+        execfile(os.path.join(PROJECT_ROOT, 'dev_settings.py'))
+    except IOError:
+        pass

.idea/workspace.xml

@@ -93,3 +93,94 @@ def perform_create(self, serializer):
 
             shop_cart.delete()
         return order
+
+#
+# from rest_framework.views import APIView
+# from utils.alipay import AliPay
+# from MxShop.settings import ali_pub_key_path, private_key_path
+# from rest_framework.response import Response
+# class AlipayView(APIView):
+#     def get(self, request):
+#         """
+#         处理支付宝的return_url返回
+#         :param request:
+#         :return:
+#         """
+#         processed_dict = {}
+#         for key, value in request.GET.items():
+#             processed_dict[key] = value
+#
+#         sign = processed_dict.pop("sign", None)
+#
+#         alipay = AliPay(
+#             appid="",
+#             app_notify_url="http://127.0.0.1:8000/alipay/return/",
+#             app_private_key_path=private_key_path,
+#             alipay_public_key_path=ali_pub_key_path,  # 支付宝的公钥，验证支付宝回传消息使用，不是你自己的公钥,
+#             debug=True,  # 默认False,
+#             return_url="http://127.0.0.1:8000/alipay/return/"
+#         )
+#
+#         verify_re = alipay.verify(processed_dict, sign)
+#
+#         if verify_re is True:
+#             order_sn = processed_dict.get('out_trade_no', None)
+#             trade_no = processed_dict.get('trade_no', None)
+#             trade_status = processed_dict.get('trade_status', None)
+#
+#             existed_orders = OrderInfo.objects.filter(order_sn=order_sn)
+#             for existed_order in existed_orders:
+#                 existed_order.pay_status = trade_status
+#                 existed_order.trade_no = trade_no
+#                 existed_order.pay_time = datetime.now()
+#                 existed_order.save()
+#
+#             response = redirect("index")
+#             response.set_cookie("nextPath","pay", max_age=3)
+#             return response
+#         else:
+#             response = redirect("index")
+#             return response
+#
+#     def post(self, request):
+#         """
+#         处理支付宝的notify_url
+#         :param request:
+#         :return:
+#         """
+#         processed_dict = {}
+#         for key, value in request.POST.items():
+#             processed_dict[key] = value
+#
+#         sign = processed_dict.pop("sign", None)
+#
+#         alipay = AliPay(
+#             appid="",
+#             app_notify_url="http://127.0.0.1:8000/alipay/return/",
+#             app_private_key_path=private_key_path,
+#             alipay_public_key_path=ali_pub_key_path,  # 支付宝的公钥，验证支付宝回传消息使用，不是你自己的公钥,
+#             debug=True,  # 默认False,
+#             return_url="http://127.0.0.1:8000/alipay/return/"
+#         )
+#
+#         verify_re = alipay.verify(processed_dict, sign)
+#
+#         if verify_re is True:
+#             order_sn = processed_dict.get('out_trade_no', None)
+#             trade_no = processed_dict.get('trade_no', None)
+#             trade_status = processed_dict.get('trade_status', None)
+#
+#             existed_orders = OrderInfo.objects.filter(order_sn=order_sn)
+#             for existed_order in existed_orders:
+#                 order_goods = existed_order.goods.all()
+#                 for order_good in order_goods:
+#                     goods = order_good.goods
+#                     goods.sold_num += order_good.goods_num
+#                     goods.save()
+#
+#                 existed_order.pay_status = trade_status
+#                 existed_order.trade_no = trade_no
+#                 existed_order.pay_time = datetime.now()
+#                 existed_order.save()
+#
+#             return Response("success")

VueDjangoFrameWorkShop/settings.py

@@ -0,0 +1,166 @@
+# encoding: utf-8
+__author__ = 'mtianyan'
+__date__ = '2018/3/12 0012 17:07'
+
+from datetime import datetime
+from Crypto.PublicKey import RSA
+from Crypto.Signature import PKCS1_v1_5
+from Crypto.Hash import SHA256
+from base64 import b64encode, b64decode
+from urllib.parse import quote_plus
+from urllib.parse import urlparse, parse_qs
+from urllib.request import urlopen
+from base64 import decodebytes, encodebytes
+
+import json
+
+
+class AliPay(object):
+    """
+    支付宝支付接口
+    """
+
+    def __init__(self, appid, app_notify_url, app_private_key_path,
+                 alipay_public_key_path, return_url, debug=False):
+        self.appid = appid
+        self.app_notify_url = app_notify_url
+        self.app_private_key_path = app_private_key_path
+        self.app_private_key = None
+        self.return_url = return_url
+        with open(self.app_private_key_path) as fp:
+            self.app_private_key = RSA.importKey(fp.read())
+
+        self.alipay_public_key_path = alipay_public_key_path
+        with open(self.alipay_public_key_path) as fp:
+            self.alipay_public_key = RSA.import_key(fp.read())
+
+        if debug is True:
+            self.__gateway = "https://openapi.alipaydev.com/gateway.do"
+        else:
+            self.__gateway = "https://openapi.alipay.com/gateway.do"
+
+    def direct_pay(self, subject, out_trade_no, total_amount, return_url=None, **kwargs):
+        biz_content = {
+            "subject": subject,
+            "out_trade_no": out_trade_no,
+            "total_amount": total_amount,
+            "product_code": "FAST_INSTANT_TRADE_PAY",
+            # "qr_pay_mode":4
+        }
+
+        biz_content.update(kwargs)
+        data = self.build_body("alipay.trade.page.pay", biz_content, self.return_url)
+        return self.sign_data(data)
+
+    def build_body(self, method, biz_content, return_url=None):
+        data = {
+            "app_id": self.appid,
+            "method": method,
+            "charset": "utf-8",
+            "sign_type": "RSA2",
+            "timestamp": datetime.now().strftime("%Y-%m-%d %H:%M:%S"),
+            "version": "1.0",
+            "biz_content": biz_content
+        }
+
+        if return_url is not None:
+            data["notify_url"] = self.app_notify_url
+            data["return_url"] = self.return_url
+
+        return data
+
+    def sign_data(self, data):
+        data.pop("sign", None)
+        # 排序后的字符串
+        unsigned_items = self.ordered_data(data)
+        unsigned_string = "&".join("{0}={1}".format(k, v) for k, v in unsigned_items)
+        sign = self.sign(unsigned_string.encode("utf-8"))
+        # ordered_items = self.ordered_data(data)
+        quoted_string = "&".join("{0}={1}".format(k, quote_plus(v)) for k, v in unsigned_items)
+
+        # 获得最终的订单信息字符串
+        signed_string = quoted_string + "&sign=" + quote_plus(sign)
+        return signed_string
+
+    def ordered_data(self, data):
+        complex_keys = []
+        for key, value in data.items():
+            if isinstance(value, dict):
+                complex_keys.append(key)
+
+        # 将字典类型的数据dump出来
+        for key in complex_keys:
+            data[key] = json.dumps(data[key], separators=(',', ':'))
+
+        return sorted([(k, v) for k, v in data.items()])
+
+    def sign(self, unsigned_string):
+        # 开始计算签名
+        key = self.app_private_key
+        signer = PKCS1_v1_5.new(key)
+        signature = signer.sign(SHA256.new(unsigned_string))
+        # base64 编码，转换为unicode表示并移除回车
+        sign = encodebytes(signature).decode("utf8").replace("\n", "")
+        return sign
+
+    def _verify(self, raw_content, signature):
+        # 开始计算签名
+        key = self.alipay_public_key
+        signer = PKCS1_v1_5.new(key)
+        digest = SHA256.new()
+        digest.update(raw_content.encode("utf8"))
+        if signer.verify(digest, decodebytes(signature.encode("utf8"))):
+            return True
+        return False
+
+    def verify(self, data, signature):
+        if "sign_type" in data:
+            sign_type = data.pop("sign_type")
+        # 排序后的字符串
+        unsigned_items = self.ordered_data(data)
+        message = "&".join(u"{}={}".format(k, v) for k, v in unsigned_items)
+        return self._verify(message, signature)
+
+
+if __name__ == "__main__":
+    # return_url = ''
+    # o = urlparse(return_url)
+    # query = parse_qs(o.query)
+    # processed_query = {}
+    # ali_sign = query.pop("sign")[0]
+
+    # 测试用例
+    alipay = AliPay(
+        # appid在沙箱环境中就可以找到
+        appid="2016091200490210",
+        # 这个值先不管，在与vue的联调中介绍
+        app_notify_url="http://127.0.0.1:8000/alipay/return/",
+        # 我们自己商户的密钥
+        app_private_key_path="../trade/keys/private_2048.txt",
+        # 支付宝的公钥
+        alipay_public_key_path="../trade/keys/alipay_key_2048.txt",  # 支付宝的公钥，验证支付宝回传消息使用，不是你自己的公钥,
+        # debug为true时使用沙箱的url。如果不是用正式环境的url
+        debug=True,  # 默认False,
+
+        # 先不用管，后面vue解释
+        return_url="http://127.0.0.1:8000/alipay/return/"
+    )
+
+    # for key, value in query.items():
+    #     processed_query[key] = value[0]
+    # print (alipay.verify(processed_query, ali_sign))
+
+    # 直接支付:生成请求的字符串。
+    url = alipay.direct_pay(
+        # 订单标题
+        subject="测试订单",
+        # 我们商户自行生成的订单号
+        out_trade_no="20180312mtianyan002",
+        # 订单金额
+        total_amount=9999,
+        return_url="http://115.159.122.64:8000/alipay/return/"
+    )
+    # 将生成的请求字符串拿到我们的url中进行拼接
+    re_url = "https://openapi.alipaydev.com/gateway.do?{data}".format(data=url)
+
+    print(re_url)