微信公衆號開發小計（三）微信支付

上週努努力，作完了app端的微信支付，走過了很多的坑坑窪窪，如今寫個小總結開發步驟以下：
1.開通微信的商戶平臺，在帳戶中心的api安全中下載安全證書

2.下載安全證書後，在api祕鑰中設置祕鑰。

3.代碼開發：

（1）在配置文件中設置基本信息

 <!--微信開放平臺審覈經過的應用APPID-->
    <add key="wx_appid" value=""/>

    <!--微信支付分配的商戶號APPID-->
    <add key="wx_mch_id" value=""/>

    <!--wx_key 微信key 密鑰-->
    <add key="wx_key" value=""/>
    <!--wxpay_notifyurl 請求回調網址-->
    <add key="wxpay_notifyurl" value=""/>

（2）建立預支付單

using System;
using System.Collections.Generic;
using System.Data;
using System.IO;
using System.Linq;
using System.Net;
using System.Net.Security;
using System.Security.Cryptography.X509Certificates;
using System.Text;
using System.Web;
using System.Web.Http;
using System.Xml;
using Travel.Api.AliPayAcc;
using Travel.Business.Order;
using Travel.Common;
using Travel.Common.Bases;
using Travel.Common.Enum;
using Travel.Model.Order;

namespace Travel.Api.Controllers
{
    public class WeChatPayController : ApiController
    {
        // GET: WrChatPay
        [HttpGet]
        public BaseResult GoToPay(Guid? orderId)
        {
            if (orderId.HasValue)
            {
                var orderinfo = OrderInfoManager.Instance.GetById(orderId);
                //微信支付 基礎配置信息
                string wx_appid = System.Web.Configuration.WebConfigurationManager.AppSettings["wx_appid"].ToString();
                //微信開放平臺審覈經過的應用
                string wx_mch_id = System.Web.Configuration.WebConfigurationManager.AppSettings["wx_mch_id"].ToString();
                //微信支付分配的商戶號
                string wx_nonce_str = GetRandomString(20); //隨機字符串，不長於32位

                string strcode = "驛馬旅行-購買產品";
                byte[] buffer = Encoding.UTF8.GetBytes(strcode);
                string wx_body = Encoding.UTF8.GetString(buffer, 0, buffer.Length);

                string wx_out_trade_no = orderinfo.OrderCode + GetRandomString(6);
                string wx_total_fee = (orderinfo.PayAmount * 100).ToString("f0"); //;//訂單總金額，單位爲分，詳見支付金額
                string wx_spbill_create_ip = GetWebClientIp(); ////     用戶端實際ip
                string wx_notify_url =
                    System.Web.Configuration.WebConfigurationManager.AppSettings["wxpay_notifyurl"].ToString();
                string wx_trade_type = "APP";

                var dic = new Dictionary<string, string>
                {
                    {"appid", wx_appid},
                    {"mch_id", wx_mch_id},
                    {"nonce_str", wx_nonce_str},
                    {"body", wx_body},
                    {"out_trade_no", wx_out_trade_no}, //商戶本身的訂單號碼
                    {"total_fee", wx_total_fee},
                    {"spbill_create_ip", wx_spbill_create_ip}, //服務器的IP地址
                    {"notify_url", wx_notify_url}, //異步通知的地址，不能帶參數
                    {"trade_type", wx_trade_type}
                };
                //加入簽名
                dic.Add("sign", GetSignString(dic));
                var sb = new StringBuilder();
                sb.Append("<xml>");
                foreach (var d in dic)
                {
                    sb.Append("<" + d.Key + ">" + d.Value + "</" + d.Key + ">");
                }
                sb.Append("</xml>");
                var xml = new XmlDocument();
                //  xml.LoadXml(GetPostString("https://api.mch.weixin.qq.com/pay/unifiedorder", sb.ToString()));
                CookieCollection coo = new CookieCollection();
                Encoding en = Encoding.GetEncoding("UTF-8");
                HttpWebResponse response = CreatePostHttpResponse("https://api.mch.weixin.qq.com/pay/unifiedorder",
                    sb.ToString(), en);
                //打印返回值
                Stream stream = response.GetResponseStream(); //獲取響應的字符串流
                StreamReader sr = new StreamReader(stream); //建立一個stream讀取流
                string html = sr.ReadToEnd(); //從頭讀到尾，放到字符串html
                CreateLog.SaveLogs(html, 1);
                //Console.WriteLine(html);
                xml.LoadXml(html);
                //對請求返回值 進行處理
                var root = xml.DocumentElement;
                DataSet ds = new DataSet();
                StringReader stram = new StringReader(html);
                XmlTextReader reader = new XmlTextReader(stram);
                ds.ReadXml(reader);
                string return_code = ds.Tables[0].Rows[0]["return_code"].ToString();

                //通訊成功
                string result_code = ds.Tables[0].Rows[0]["result_code"].ToString(); //業務結果
                if (result_code.ToUpper() == "SUCCESS")
                {
                    string str = GetTimeStamp();
                    var res = new Dictionary<string, string>
                    {
                        {"appid", wx_appid},
                        {"partnerid", wx_mch_id},
                        {"prepayid", root.SelectSingleNode("/xml/prepay_id").InnerText},
                        {"noncestr", dic["nonce_str"]},
                        {"timestamp",str},
                        {"package", "Sign=WXPay"}
                    };

                    var paySing = GetSignString(dic);
                    var obj = new
                    {
                        appid = wx_appid,
                        partnerid = wx_mch_id,
                        prepayid = ds.Tables[0].Rows[0]["prepay_id"].ToString(),
                        noncestr = wx_nonce_str,
                        timestamp = str,
                        sign = GetSignString(res),
                    };
                    return new BaseResult(true, obj);
                }
                else
                {
                    return new BaseResult(false, null, "請求失敗");
                }
            }
            else
            {
                return new BaseResult(false, null, "參數錯誤");
            }
        }

        [HttpGet]
        public string WeChatPayCallBack()
        {
            try
            {
                CreateLog.SaveLogs("==========================================", 1);
                HttpContextBase context = (HttpContextBase)Request.Properties["MS_HttpContext"];
                HttpRequestBase request = context.Request;
                string status = request["result_code"];
                if (status == "SUCCESS")
                {
                    var oderInfo = OrderInfoManager.Instance.GetByField("OrderCode", request["out_trade_no"].Substring(0, request["out_trade_no"].ToString().Length - 6)).FirstOrDefault();
                    if (oderInfo != null)
                    {
                        PaymentInfo info = new PaymentInfo()
                        {
                            OrderGuid = oderInfo.Guid,
                            PayState = 1,
                            PayMethod = (int)PayMethod.支付寶支付,
                            Guid = Guid.NewGuid(),
                            Mark = (int)DataMark.正常,
                            PayDateTime = DateTime.Now,
                            PayMoney = Convert.ToDecimal(request["total_fee"]) / 100,
                            Qid = request["transaction_id"]
                        };
                        PaymentInfoManager.Instance.Insert(info);
                    }
                }
            }
            catch (Exception e)
            {

                e.WriteLog(e.Message);
            }
            return "111111111";
        }
        #region 微信輔助方法
        /// <summary>
        /// 從字符串裏隨機獲得，規定個數的字符串.
        /// </summary>
        /// <param name="allChar"></param>
        /// <param name="CodeCount"></param>
        /// <returns></returns>
        public static string GetRandomString(int CodeCount)
        {
            string allChar = "1,2,3,4,5,6,7,8,9,A,B,C,D,E,F,G,H,i,J,K,L,M,N,O,P,Q,R,S,T,U,V,W,X,Y,Z";
            string[] allCharArray = allChar.Split(',');
            string RandomCode = "";
            int temp = -1;
            Random rand = new Random();
            for (int i = 0; i < CodeCount; i++)
            {
                if (temp != -1)
                {
                    rand = new Random(temp * i * ((int)DateTime.Now.Ticks));
                }
                int t = rand.Next(allCharArray.Length - 1);
                while (temp == t)
                {
                    t = rand.Next(allCharArray.Length - 1);
                }
                temp = t;
                RandomCode += allCharArray[t];
            }

            return RandomCode;
        }

        public static string GetWebClientIp()
        {
            string userIP = "IP";

            try
            {
                if (System.Web.HttpContext.Current == null
            || System.Web.HttpContext.Current.Request == null
            || System.Web.HttpContext.Current.Request.ServerVariables == null)
                    return "";

                string CustomerIP = "";

                //CDN加速後取到的IP   
                CustomerIP = System.Web.HttpContext.Current.Request.Headers["Cdn-Src-Ip"];
                if (!string.IsNullOrEmpty(CustomerIP))
                {
                    return CustomerIP;
                }

                CustomerIP = System.Web.HttpContext.Current.Request.ServerVariables["HTTP_X_FORWARDED_FOR"];


                if (!String.IsNullOrEmpty(CustomerIP))
                    return CustomerIP;

                if (System.Web.HttpContext.Current.Request.ServerVariables["HTTP_VIA"] != null)
                {
                    CustomerIP = System.Web.HttpContext.Current.Request.ServerVariables["HTTP_X_FORWARDED_FOR"];
                    if (CustomerIP == null)
                        CustomerIP = System.Web.HttpContext.Current.Request.ServerVariables["REMOTE_ADDR"];
                }
                else
                {
                    CustomerIP = System.Web.HttpContext.Current.Request.ServerVariables["REMOTE_ADDR"];

                }

                if (string.Compare(CustomerIP, "unknown", true) == 0)
                    return System.Web.HttpContext.Current.Request.UserHostAddress;
                return CustomerIP;
            }
            catch { }

            return userIP;
        }

        private static bool CheckValidationResult(object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors errors)
        {
            return true; //老是接受   
        }

        public static HttpWebResponse CreatePostHttpResponse(string url, string datas, Encoding charset)
        {
            HttpWebRequest request = null;
            //HTTPSQ請求
            ServicePointManager.ServerCertificateValidationCallback = new RemoteCertificateValidationCallback(CheckValidationResult);
            request = WebRequest.Create(url) as HttpWebRequest;
            request.ProtocolVersion = HttpVersion.Version10;
            request.Method = "POST";
            request.ContentType = "application/x-www-form-urlencoded";

            //若是須要POST數據   
            //if (!(parameters == null || parameters.Count == 0))
            //{
            StringBuilder buffer = new StringBuilder();
            //int i = 0;
            //foreach (string key in parameters.Keys)
            //{
            //    if (i > 0)
            //    {
            //        buffer.AppendFormat("&{0}={1}", key, parameters[key]);
            //    }
            //    else
            //    {
            //        buffer.AppendFormat("{0}={1}", key, parameters[key]);
            //    }
            //    i++;
            //}
            buffer.AppendFormat(datas);
            byte[] data = charset.GetBytes(buffer.ToString());
            using (Stream stream = request.GetRequestStream())
            {
                stream.Write(data, 0, data.Length);
            }
            //}
            return request.GetResponse() as HttpWebResponse;
        }

        public string GetSignString(Dictionary<string, string> dic)
        {
            string key = System.Web.Configuration.WebConfigurationManager.AppSettings["wx_key"].ToString(); ;//商戶平臺 API安全裏面設置的KEY  32位長度
            //排序
            dic = dic.OrderBy(d => d.Key).ToDictionary(d => d.Key, d => d.Value);
            //鏈接字段
            var sign = dic.Aggregate("", (current, d) => current + (d.Key + "=" + d.Value + "&"));
            sign += "key=" + key;
            //MD5
            sign = System.Web.Security.FormsAuthentication.HashPasswordForStoringInConfigFile(sign, "MD5").ToUpper();

            return sign;
        }

        /// <summary>  
        /// 獲取時間戳  
        /// </summary>  
        /// <returns></returns>  
        public static string GetTimeStamp()
        {
            TimeSpan ts = DateTime.UtcNow - new DateTime(1970, 1, 1, 0, 0, 0, 0);
            return Convert.ToInt64(ts.TotalSeconds).ToString();
        }
        #endregion
    }
}

（3）設置回調方法

using System;
using System.Collections.Generic;
using System.Data;
using System.IO;
using System.Linq;
using System.Text;
using System.Web;
using System.Web.Mvc;
using System.Xml;
using Travel.Business.Order;
using Travel.Common.Enum;
using Travel.Model.Order;
using Travel.WeChat.WeCahtCode;

namespace Travel.WeChat.Controllers
{
    public class WeChatPayController : Controller
    {
        // GET: WeChatPay
        public ActionResult Index()
        {
             CreateLog.SaveLogs("========開始============", 1);
            String xmlData = getPostStr();//獲取請求數據
            //CreateLog.SaveLogs(xmlData, 1);
            if (xmlData == "")
            {

            }
            else
            {
                // CreateLog.SaveLogs("22222222222222222222", 1);
                var dic = new Dictionary<string, string>
                {
                    {"return_code", "SUCCESS"},
                    {"return_msg","OK"}
   
                };
                var sb = new StringBuilder();
                sb.Append("<xml>");


                foreach (var d in dic)
                {
                    sb.Append("<" + d.Key + ">" + d.Value + "</" + d.Key + ">");
                }
                sb.Append("</xml>");





                //把數據從新返回給客戶端
                DataSet ds = new DataSet();
                StringReader stram = new StringReader(xmlData);
                XmlTextReader datareader = new XmlTextReader(stram);
                ds.ReadXml(datareader);
                if (ds.Tables[0].Rows[0]["return_code"].ToString() == "SUCCESS")
                {


                    string wx_appid = "";//微信開放平臺審覈經過的應用APPID
                    string wx_mch_id = "";//微信支付分配的商戶號

                    string wx_nonce_str = "";//     隨機字符串，不長於32位
                    string wx_sign = "";//簽名，詳見簽名算法
                    string wx_result_code = "";//SUCCESS/FAIL

                    string wx_return_code = "";
                    string wx_openid = "";//用戶在商戶appid下的惟一標識
                    string wx_is_subscribe = "";//用戶是否關注公衆帳號，Y-關注，N-未關注，僅在公衆帳號類型支付有效
                    string wx_trade_type = "";//     APP
                    string wx_bank_type = "";//     銀行類型，採用字符串類型的銀行標識，銀行類型見銀行列表
                    string wx_fee_type = "";//     貨幣類型，符合ISO4217標準的三位字母代碼，默認人民幣：CNY，其餘值列表詳見貨幣類型


                    string wx_transaction_id = "";//微信支付訂單號
                    string wx_out_trade_no = "";//商戶系統的訂單號，與請求一致。
                    string wx_time_end = "";//     支付完成時間，格式爲yyyyMMddHHmmss，如2009年12月25日9點10分10秒錶示爲20091225091010。其餘詳見時間規則
                    int wx_total_fee = -1;//     訂單總金額，單位爲分
                    int wx_cash_fee = -1;//現金支付金額訂單現金支付金額，詳見支付金額


                    #region  數據解析
                    //列 是否存在
                    string signstr = "";//須要前面的字符串
                    //wx_appid
                    if (ds.Tables[0].Columns.Contains("appid"))
                    {
                        wx_appid = ds.Tables[0].Rows[0]["appid"].ToString();
                        if (!string.IsNullOrEmpty(wx_appid))
                        {
                            signstr += "appid=" + wx_appid;
                        }
                    }

                    //wx_bank_type
                    if (ds.Tables[0].Columns.Contains("bank_type"))
                    {
                        wx_bank_type = ds.Tables[0].Rows[0]["bank_type"].ToString();
                        if (!string.IsNullOrEmpty(wx_bank_type))
                        {
                            signstr += "&bank_type=" + wx_bank_type;
                        }
                    }
                    //wx_cash_fee
                    if (ds.Tables[0].Columns.Contains("cash_fee"))
                    {
                        wx_cash_fee = Convert.ToInt32(ds.Tables[0].Rows[0]["cash_fee"].ToString());

                        signstr += "&cash_fee=" + wx_cash_fee;
                    }
                    //wx_fee_type
                    if (ds.Tables[0].Columns.Contains("fee_type"))
                    {
                        wx_fee_type = ds.Tables[0].Rows[0]["fee_type"].ToString();
                        if (!string.IsNullOrEmpty(wx_fee_type))
                        {
                            signstr += "&fee_type=" + wx_fee_type;
                        }
                    }

                    //wx_is_subscribe
                    if (ds.Tables[0].Columns.Contains("is_subscribe"))
                    {
                        wx_is_subscribe = ds.Tables[0].Rows[0]["is_subscribe"].ToString();
                        if (!string.IsNullOrEmpty(wx_is_subscribe))
                        {
                            signstr += "&is_subscribe=" + wx_is_subscribe;
                        }
                    }

                    //wx_mch_id
                    if (ds.Tables[0].Columns.Contains("mch_id"))
                    {
                        wx_mch_id = ds.Tables[0].Rows[0]["mch_id"].ToString();
                        if (!string.IsNullOrEmpty(wx_mch_id))
                        {
                            signstr += "&mch_id=" + wx_mch_id;
                        }
                    }

                    //wx_nonce_str
                    if (ds.Tables[0].Columns.Contains("nonce_str"))
                    {
                        wx_nonce_str = ds.Tables[0].Rows[0]["nonce_str"].ToString();
                        if (!string.IsNullOrEmpty(wx_nonce_str))
                        {
                            signstr += "&nonce_str=" + wx_nonce_str;
                        }
                    }

                    //wx_openid
                    if (ds.Tables[0].Columns.Contains("openid"))
                    {
                        wx_openid = ds.Tables[0].Rows[0]["openid"].ToString();
                        if (!string.IsNullOrEmpty(wx_openid))
                        {
                            signstr += "&openid=" + wx_openid;
                        }
                    }

                    //wx_out_trade_no
                    if (ds.Tables[0].Columns.Contains("out_trade_no"))
                    {
                        wx_out_trade_no = ds.Tables[0].Rows[0]["out_trade_no"].ToString();
                        if (!string.IsNullOrEmpty(wx_out_trade_no))
                        {
                            signstr += "&out_trade_no=" + wx_out_trade_no;
                        }
                    }

                    //wx_result_code 
                    if (ds.Tables[0].Columns.Contains("result_code"))
                    {
                        wx_result_code = ds.Tables[0].Rows[0]["result_code"].ToString();
                        if (!string.IsNullOrEmpty(wx_result_code))
                        {
                            signstr += "&result_code=" + wx_result_code;
                        }
                    }

                    //wx_result_code 
                    if (ds.Tables[0].Columns.Contains("return_code"))
                    {
                        wx_return_code = ds.Tables[0].Rows[0]["return_code"].ToString();
                        if (!string.IsNullOrEmpty(wx_return_code))
                        {
                            signstr += "&return_code=" + wx_return_code;
                        }
                    }

                    //wx_sign 
                    if (ds.Tables[0].Columns.Contains("sign"))
                    {
                        wx_sign = ds.Tables[0].Rows[0]["sign"].ToString();
                    }

                    //wx_time_end
                    if (ds.Tables[0].Columns.Contains("time_end"))
                    {
                        wx_time_end = ds.Tables[0].Rows[0]["time_end"].ToString();
                        if (!string.IsNullOrEmpty(wx_time_end))
                        {
                            signstr += "&time_end=" + wx_time_end;
                        }
                    }

                    //wx_total_fee
                    if (ds.Tables[0].Columns.Contains("total_fee"))
                    {
                        wx_total_fee = Convert.ToInt32(ds.Tables[0].Rows[0]["total_fee"].ToString());

                        signstr += "&total_fee=" + wx_total_fee;
                    }

                    //wx_trade_type
                    if (ds.Tables[0].Columns.Contains("trade_type"))
                    {
                        wx_trade_type = ds.Tables[0].Rows[0]["trade_type"].ToString();
                        if (!string.IsNullOrEmpty(wx_trade_type))
                        {
                            signstr += "&trade_type=" + wx_trade_type;
                        }
                    }

                    //wx_transaction_id
                    if (ds.Tables[0].Columns.Contains("transaction_id"))
                    {
                        wx_transaction_id = ds.Tables[0].Rows[0]["transaction_id"].ToString();
                        if (!string.IsNullOrEmpty(wx_transaction_id))
                        {
                            signstr += "&transaction_id=" + wx_transaction_id;
                        }
                    }

                    #endregion
                    //追加key 密鑰
                    signstr += "&key=" + System.Web.Configuration.WebConfigurationManager.AppSettings["wx_key"].ToString();
                    CreateLog.SaveLogs("簽名字符串" + signstr, 1);
                    //簽名正確
                    string orderStrwhere = "ordernumber='" + wx_out_trade_no + "'"; 
                    if (wx_sign == System.Web.Security.FormsAuthentication.HashPasswordForStoringInConfigFile(signstr, "MD5").ToUpper())
                    {
                        CreateLog.SaveLogs("開始付款",1);
                        //簽名正確   處理訂單操做邏輯
                        var oderInfo = OrderInfoManager.Instance.GetByField("OrderCode", wx_out_trade_no.Substring(0, wx_out_trade_no.ToString().Length - 6)).FirstOrDefault();
                        if (oderInfo.OrderState != (int) OrderState.代付款)
                        {
                            CreateLog.SaveLogs("支付成功！可是在此發出請求" , 1);
                            return null;
                        }
                        if (oderInfo != null)
                        {
                            PaymentInfo info = new PaymentInfo()
                            {
                                OrderGuid = oderInfo.Guid,
                                PayState = 1,
                                PayMethod = (int)PayMethod.微信支付,
                                Guid = Guid.NewGuid(),
                                Mark = (int)DataMark.正常,
                                PayDateTime = DateTime.Now,
                                PayMoney = Convert.ToDecimal(wx_total_fee) / 100,
                                Qid = wx_transaction_id
                            };
                            PaymentInfoManager.Instance.Insert(info);
                        }
                        CreateLog.SaveLogs("狀態修改結束", 1);
                    }
                    else
                    {
                        
                    }
                    {
                        //追加備註信息
                        CreateLog.SaveLogs("簽名失敗", 1);
                    }

                }
                else
                {
                    // 返回信息，如非空，爲錯誤緣由  簽名失敗 參數格式校驗錯誤
                    string return_msg = ds.Tables[0].Rows[0]["return_msg"].ToString();
                    CreateLog.SaveLogs("支付失敗", 1);

                }

            }
            return View();
        }


        //得到Post過來的數據
        public string getPostStr()
        {
            Int32 intLen = Convert.ToInt32(Request.InputStream.Length);
            byte[] b = new byte[intLen];
            Request.InputStream.Read(b, 0, intLen);
            return System.Text.Encoding.UTF8.GetString(b);
        }
    }
}

注意：在生成預支付訂單的時候要進行兩次簽名，第一次請求預支付訂單號的簽名一次，生成以後再進行一次簽名，將數據返回給app端 而後app端調用就好，否則在安卓端會沒有效果，而在蘋果端會提示簽名失敗