订单异步通知

import java.util.*;
import javax.servlet.http.HttpServletRequest;

/** 异步通知处理示例 */
@PostMapping("/notify")
public String handleNotify(HttpServletRequest request) {
    try {
        // 获取回调参数
        Map<String, String> params = new TreeMap<>();
        params.put("userId", request.getParameter("userId"));
        params.put("orderNo", request.getParameter("orderNo"));
        params.put("transactionNo", request.getParameter("transactionNo"));
        
        params.put("amount", request.getParameter("amount"));
        
        String sign = request.getParameter("sign");
        
        // 验证签名
        boolean verifyResult = verifySign(params, sign);
        
        if (verifyResult) {
            String outTradeNo = params.get("orderNo");
            
            // 幂等判断
            Order order = orderService.findByOutTradeNo(outTradeNo);
            if (order != null && order.getStatus() == 1) {
                return "SUCCESS";
            }
            
            // 更新订单状态
            orderService.updatePayStatus(outTradeNo, 
                params.get("transactionNo"), 
                params.get("amount"));
            
            return "SUCCESS";
        } else {
            return "sign fail";
        }
    } catch (Exception e) {
        log.error("处理异步通知异常", e);
        return "error";
    }
}

/** MD5验签 */
private boolean verifySign(Map<String, String> params, String sign) {
    StringBuilder sb = new StringBuilder();
    for (Map.Entry<String, String> entry : params.entrySet()) {
        if (sb.length() > 0) sb.append("&");
        sb.append(entry.getKey()).append("=").append(entry.getValue());
    }
    sb.append(md5Key);
    String calculatedSign = DigestUtils.md5Hex(sb.toString());
    return calculatedSign.equals(sign);
}

from flask import Flask, request
import hashlib

app = Flask(__name__)

@app.route('/notify', methods=['POST'])
def handle_notify():
    """异步通知处理"""
    try:
        # 获取回调参数
        params = {
            'userId': request.form.get('userId'),
            'orderNo': request.form.get('orderNo'),
            'transactionNo': request.form.get('transactionNo'),
            
            'amount': request.form.get('amount'),
        }
        
        sign = request.form.get('sign')
        
        # 验证签名
        if verify_sign(params, sign):
            orderNo = params['orderNo']
            
            # 幂等判断
            order = Order.query.filter_by(orderNo=orderNo).first()
            if order and order.status == 1:
                return 'SUCCESS'
            
            # 更新订单状态
            order.status = 1
            order.transactionNo = params['transactionNo']
            order.pay_time = datetime.now()
            db.session.commit()
            
            return 'SUCCESS'
        else:
            return 'sign fail'
    except Exception as e:
        print(f"处理异步通知异常: {e}")
        return 'error'

def verify_sign(params, sign):
    """MD5验签"""
    md5_key = 'your_md5_key'
    sorted_params = sorted(params.items())
    sign_str = '&'.join([f'{k}={v}' for k, v in sorted_params])
    sign_str += md5_key
    calculated_sign = hashlib.md5(sign_str.encode()).hexdigest()
    return calculated_sign == sign

if __name__ == '__main__':
    app.run(debug=True)