paymentjs/src/gateways/alipay.js

A framework agnostic, multi-gateway payment processing library for Node.js, Inspired by Omnipay for PHP

import Payment from '../payment'
import Response from '../response'
import qs from 'qs'
import _ from 'lodash'
import md5 from 'blueimp-md5'
import request from 'axios'
import https from 'https'
import fs from 'fs'

function sign(params, options) {
    params = _.omit(params, ['sign', 'sign_type']);
    let params_signed = {};
    _.keys(params).sort().forEach(k => {
      params_signed[k] = params[k];
    });
    params_signed['sign'] = md5(qs.stringify(params), options.key);
    params_signed['sign_type'] = options.type;

    return params_signed;
}

export class AlipayResponse extends Response {
  get queryUrl(){
    return {
      'https': 'https://mapi.alipay.com/gateway.do?service=notify_verify&',
      'http': 'http://notify.alipay.com/trade/notify_query.do?'
    }
  }
  async isSuccess(){

    if (!this.body) {
      this.errors = 'body is empty';
      return false;
      // throw 'empty body';
    }
    let signed = sign(this.body, {
      key: this.config.key,
      type: this.config.sign_type
    });
    if (signed.sign !== this.body.sign) {
      this.errors = 'sign in is invalid';
      return false;
    }
    let options;
    if (this.config.cacert) {
      options = {
        httpsAgent: https.Agent({
          ca: fs.readFileSync(this.config.cacert)
        })
      }
    }
    let response = await request.get(`${this.queryUrl[this.config.transport]}?${qs.stringify({
      partner: this.config.partner,
      notify_id: this.body.notify_id,
    })}`, options);
    if (response.data != 'true') {
      this.errors = 'notify is not sent by alipay';
      return false;
    }
    return true;
  }
}

export default class Alipay extends Payment {
  get gateway(){
    return 'https://mapi.alipay.com/gateway.do';
  }
  get Response(){
    return AlipayResponse;
  }
  initialize(config = {}){
    return Object.assign({
      //合作身份者ID，签约账号，以2088开头由16位纯数字组成的字符串，查看地址：https://b.alipay.com/order/pidAndKey.htm
      partner: '',
      //收款支付宝账号，以2088开头由16位纯数字组成的字符串，一般情况下收款账号就是签约账号
      seller_id: '',
      // MD5密钥，安全检验码，由数字和字母组成的32位字符串，查看地址：https://b.alipay.com/order/pidAndKey.htm
      key: '',
      // 服务器异步通知页面路径  需http://格式的完整路径，不能加?id=123这类自定义参数，必须外网可以正常访问
      notify_url: '',
      // 页面跳转同步通知页面路径 需http://格式的完整路径，不能加?id=123这类自定义参数，必须外网可以正常访问
      return_url: '',
      //签名方式
      sign_type: 'MD5',
      //字符编码格式 目前支持 gbk 或 utf-8
      input_charset: 'utf-8',
      //ca证书路径地址，用于curl中ssl校验
      //请保证cacert.pem文件在当前文件夹目录中
      cacert: './cacert.pem',
      //访问模式,根据自己的服务器是否支持ssl访问，若支持请选择https；若不支持请选择http
      transport: 'http',
      // 支付类型 ，无需修改
      payment_type: 1,
      // 产品类型，无需修改
      service: 'create_direct_pay_by_user',
      // 防钓鱼时间戳  若要使用请调用类文件submit中的query_timestamp函数
      anti_phishing_key: '',
      // 客户端的IP地址 非局域网的外网IP地址，如：221.0.0.1
      exter_invoke_ip: '',
    }, config);
  }

  async purchase(order){
    let params = {
      service: this.config.service,
      partner: this.config.partner,
      seller_id: this.config.seller_id,
      payment_type: this.config.payment_type,
      notify_url: this.config.notify_url,
      return_url: this.config.return_url,
      anti_phishing_key: this.config.anti_phishing_key,
      exter_invoke_ip: this.config.exter_invoke_ip,
      out_trade_no: order.id,
      subject: order.title,
      total_fee: order.amount,
      body: order.contents,
      _input_charset: this.config.input_charset,
    };
    let signed = sign(params, {
      key: this.config.key,
      type: this.config.sign_type
    });
    return this.response(signed, {
      redirect: {
        url: this.gateway,
        method: 'get',
      }
    });
  }
}