1.前言
本博客是經歷過多個項目檢驗的, 絕對真實, 適應於對蘋果iap內購稍微有些了解的JAVA開發人員, 認真看, 定能完美解決蘋果內購問題.
蘋果IAP內購支付實際上是"將客戶端支付后的一些信息傳給后台, 后台拿着這些信息在傳給蘋果支付平台, 來驗證客戶端支付是否有效"的一個過程, 中間的難點有三個.
一是沙盒測試數據和線上測試數據的問題. 剛開始接入蘋果內購時,網上的各種測試一大堆, 幾乎你就找不到兩篇相同的數據, 這導致我剛開始做的時候踩了很多坑, 對於這種情況建議各位java開發者以實際測試數據為准, 因為我認為, 隨着時間往后, 蘋果平台返回的測試數據還會變化, 請以真實得到的數據為准. 下面貼一下我當時項目的測試數據(這個項目是2017年11月左右的數據)
這個是沙箱測試數據(經過檢驗,正式的測試數據與沙箱測試數據結構是一樣,所以采用同一套代碼即可)
{
"status": 0,
"environment": "Sandbox",
"receipt": {
"receipt_type": "ProductionSandbox",
"adam_id": 0,
"app_item_id": 0,
"bundle_id": "com.jiuying.twelveAnimal",
"application_version": "0",
"download_id": 0,
"version_external_identifier": 0,
"receipt_creation_date": "2018-01-05 10:06:12 Etc/GMT",
"receipt_creation_date_ms": "1515146772000",
"receipt_creation_date_pst": "2018-01-05 02:06:12 America/Los_Angeles",
"request_date": "2018-01-05 10:06:14 Etc/GMT",
"request_date_ms": "1515146774645",
"request_date_pst": "2018-01-05 02:06:14 America/Los_Angeles",
"original_purchase_date": "2013-08-01 07:00:00 Etc/GMT",
"original_purchase_date_ms": "1375340400000",
"original_purchase_date_pst": "2013-08-01 00:00:00 America/Los_Angeles",
"original_application_version": "1.0",
"in_app": [
{
"quantity": "1",
"product_id": "com.jiuying.twelveAnimal.6", //這個6是關鍵, 6就是蘋果客戶端支付的金額, 我們取到這個值,進行我們的業務邏輯即可
"transaction_id": "1000000364151484",
"original_transaction_id": "1000000364151484",
"purchase_date": "2018-01-05 10:06:11 Etc/GMT",
"purchase_date_ms": "1515146771000",
"purchase_date_pst": "2018-01-05 02:06:11 America/Los_Angeles",
"original_purchase_date": "2018-01-05 10:06:11 Etc/GMT",
"original_purchase_date_ms": "1515146771000",
"original_purchase_date_pst": "2018-01-05 02:06:11 America/Los_Angeles",
"is_trial_period": "false"
}
]
}
}
得到前端支付數據,發給蘋果平台,進行二次驗證
/**
* @throws Exception
* 蘋果內購支付
* @Title: doIosRequest
* @Description:Ios客戶端內購支付
* @param TransactionID ：交易單號 需要客戶端傳過來的參數1
* @param Payload：需要客戶端傳過來的參數2
* @throws
*/
public Map<String, Object> doIosRequest(String TransactionID,String Payload, int userId) throws Exception {
Map<String, Object> map = new HashMap<String, Object>();
Map<String, Object> mapChange = new HashMap<String, Object>();
System.out.println("客戶端傳過來的值1："+TransactionID+"客戶端傳過來的值2："+Payload);
String verifyResult = IosVerifyUtil.buyAppVerify(Payload,1); //1.先線上測試 發送平台驗證
if (verifyResult == null) { // 蘋果服務器沒有返回驗證結果
System.out.println("無訂單信息!");
} else { // 蘋果驗證有返回結果
System.out.println("線上，蘋果平台返回JSON:"+verifyResult);
JSONObject job = JSONObject.parseObject(verifyResult);
String states = job.getString("status");
if("21007".equals(states)){ //是沙盒環境，應沙盒測試，否則執行下面
verifyResult = IosVerifyUtil.buyAppVerify(Payload,0); //2.再沙盒測試 發送平台驗證
System.out.println("沙盒環境，蘋果平台返回JSON:"+verifyResult);
job = JSONObject.parseObject(verifyResult);
states = job.getString("status");
}
System.out.println("蘋果平台返回值：job"+job);
if (states.equals("0")){ // 前端所提供的收據是有效的 驗證成功
String r_receipt = job.getString("receipt");
JSONObject returnJson = JSONObject.parseObject(r_receipt);
String in_app = returnJson.getString("in_app");
JSONObject in_appJson = JSONObject.parseObject(in_app.substring(1, in_app.length()-1));
String product_id = in_appJson.getString("product_id");
String transaction_id = in_appJson.getString("transaction_id"); // 訂單號
/************************************************+自己的業務邏輯**********************************************************/
//如果單號一致 則保存到數據庫
if(TransactionID.equals(transaction_id)){
String [] moneys = product_id.split("\\.");
//System.out.println("用戶ID："+userId+",要充值的鑽石數："+moneys[moneys.length-1]);
mapChange = charge(Integer.parseInt(moneys[moneys.length-1]), 5, userId);
map.put("money", moneys[moneys.length-1]);
}
/************************************************+自己的業務邏輯end**********************************************************/
if((boolean) mapChange.get("success")){//用戶鑽石數量新增成功
map.put("success", true);
map.put("message", "充值鑽石成功！");
//map.put("status", states);
}else{
map.put("success", false);
map.put("message", "充值鑽石失敗！");
}
} else {
map.put("success", false);
map.put("message", "receipt數據有問題");
map.put("status", states);
}
}
return map;
}
上面的方法用到了一個工具類,如下
package com.miracle9.animal.util;
import java.io.BufferedOutputStream;
import java.io.BufferedReader;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.net.URL;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.util.Locale;
import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
/**
* 蘋果IAP內購驗證工具類
* @ClassName: IosVerify
* @Description:Apple Pay
*/
public class IosVerifyUtil {
private static class TrustAnyTrustManager implements X509TrustManager {
public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
}
public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
}
public X509Certificate[] getAcceptedIssuers() {
return new X509Certificate[] {};
}
}
private static class TrustAnyHostnameVerifier implements HostnameVerifier {
public boolean verify(String hostname, SSLSession session) {
return true;
}
}
private static final String url_sandbox = "https://sandbox.itunes.apple.com/verifyReceipt";
private static final String url_verify = "https://buy.itunes.apple.com/verifyReceipt";
/**
* 蘋果服務器驗證
*
* @param receipt
* 賬單
* @url 要驗證的地址
* @return null 或返回結果 沙盒 https://sandbox.itunes.apple.com/verifyReceipt
*
*/
public static String buyAppVerify(String receipt,int type) {
//環境判斷 線上/開發環境用不同的請求鏈接
String url = "";
if(type==0){
url = url_sandbox; //沙盒測試
}else{
url = url_verify; //線上測試
}
//String url = EnvUtils.isOnline() ?url_verify : url_sandbox;
try {
SSLContext sc = SSLContext.getInstance("SSL");
sc.init(null, new TrustManager[] { new TrustAnyTrustManager() }, new java.security.SecureRandom());
URL console = new URL(url);
HttpsURLConnection conn = (HttpsURLConnection) console.openConnection();
conn.setSSLSocketFactory(sc.getSocketFactory());
conn.setHostnameVerifier(new TrustAnyHostnameVerifier());
conn.setRequestMethod("POST");
conn.setRequestProperty("content-type", "text/json");
conn.setRequestProperty("Proxy-Connection", "Keep-Alive");
conn.setDoInput(true);
conn.setDoOutput(true);
BufferedOutputStream hurlBufOus = new BufferedOutputStream(conn.getOutputStream());
String str = String.format(Locale.CHINA, "{\"receipt-data\":\"" + receipt + "\"}");//拼成固定的格式傳給平台
hurlBufOus.write(str.getBytes());
hurlBufOus.flush();
InputStream is = conn.getInputStream();
BufferedReader reader = new BufferedReader(new InputStreamReader(is));
String line = null;
StringBuffer sb = new StringBuffer();
while ((line = reader.readLine()) != null) {
sb.append(line);
}
return sb.toString();
} catch (Exception ex) {
System.out.println("蘋果服務器異常");
ex.printStackTrace();
}
return null;
}
/**
* 用BASE64加密
*
* @param str
* @return
*/
public static String getBASE64(String str) {
byte[] b = str.getBytes();
String s = null;
if (b != null) {
s = new sun.misc.BASE64Encoder().encode(b);
}
return s;
}
}
---------------------
作者：藝術2333
來源：CSDN
原文：https://blog.csdn.net/jianzhonghao/article/details/79343887
版權聲明：本文為博主原創文章，轉載請附上博文鏈接！