ai_v/services/alipay_service.py

from alipay import AliPay
from flask import current_app
import os
import logging

logger = logging.getLogger(__name__)

class AlipayService:
    def __init__(self):
        self.app_id = current_app.config.get('ALIPAY_APP_ID')
        self.private_key = current_app.config.get('ALIPAY_APP_PRIVATE_KEY')
        self.public_key = current_app.config.get('ALIPAY_PUBLIC_KEY')
        self.return_url = current_app.config.get('ALIPAY_RETURN_URL')
        self.notify_url = current_app.config.get('ALIPAY_NOTIFY_URL')
        self.debug = current_app.config.get('ALIPAY_DEBUG', True)

    def get_alipay_client(self):
        """获取支付宝客户端实例"""
        return AliPay(
            appid=self.app_id,
            app_notify_url=self.notify_url,
            app_private_key_string=self.private_key,
            alipay_public_key_string=self.public_key,
            sign_type="RSA2",
            debug=self.debug
        )

    def create_order_url(self, out_trade_no, total_amount, subject):
        """生成支付链接 (电脑网站支付)"""
        alipay = self.get_alipay_client()
        order_string = alipay.api_alipay_trade_page_pay(
            out_trade_no=out_trade_no,
            total_amount=str(total_amount),
            subject=subject,
            return_url=self.return_url,
            notify_url=self.notify_url
        )
        # 拼接支付网关 (使用最新的支付宝沙箱域名)
        gateway = "https://openapi-sandbox.dl.alipaydev.com/gateway.do" if self.debug else "https://openapi.alipay.com/gateway.do"
        return f"{gateway}?{order_string}"

    def verify_notify(self, data, signature):
        """验证通知签名"""
        try:
            logger.info(f"开始验证支付宝签名，数据: {data}")
            logger.info(f"签名值: {signature}")
            
            # 验证必要参数
            if not signature:
                logger.error("签名为空")
                return False
            
            if not data:
                logger.error("数据为空")
                return False
            
            # 创建数据副本，避免修改原数据
            verify_data = data.copy()
            
            # 移除sign和sign_type，这两个字段不参与验证
            verify_data.pop('sign', None)
            verify_data.pop('sign_type', None)
            
            alipay = self.get_alipay_client()
            result = alipay.verify(verify_data, signature)
            
            if result:
                logger.info("签名验证成功")
            else:
                logger.error("签名验证失败")
                logger.error(f"验证数据: {verify_data}")
                logger.error(f"公钥配置: {self.public_key[:50]}...")
                # 额外调试信息
                logger.error(f"App ID: {self.app_id}")
                logger.error(f"是否调试模式: {self.debug}")
            
            return result
            
        except Exception as e:
            logger.error(f"验证签名时发生异常: {str(e)}", exc_info=True)
            return False