支付 API 接入文档

import hashlib, json, time, urllib.request
BASE, APPKEY, SECRET = 'https://平台域名', '商户AppKey', '商户AppSecret'
def sign(p):
    items = sorted((k, str(v)) for k, v in p.items() if k != 'sign' and str(v) != '')
    return hashlib.md5(('&'.join(f'{k}={v}' for k, v in items) + '&key=' + SECRET).encode()).hexdigest().upper()
p = {'merchantOrderNo': 'NO%d' % time.time(), 'amount': 1000, 'subject': '测试商品',
     'notifyUrl': 'https://商户域名/notify', 'payMethod': 'alipay'}
p['sign'] = sign(p)
req = urllib.request.Request(BASE + '/api/gateway/orders', data=json.dumps(p).encode(),
    headers={'Content-Type': 'application/json', 'X-App-Key': APPKEY})
print(json.load(urllib.request.urlopen(req))['data']['cashierUrl'])
# 回调验签：同一 sign() 重算比对，status==SUCCESS 后发货并响应 SUCCESS

const crypto = require('crypto');
const BASE = 'https://平台域名', APPKEY = '商户AppKey', SECRET = '商户AppSecret';
const sign = p => {
  const raw = Object.keys(p).filter(k => p[k] !== '' && p[k] != null && k !== 'sign')
    .sort().map(k => k + '=' + p[k]).join('&') + '&key=' + SECRET;
  return crypto.createHash('md5').update(raw).digest('hex').toUpperCase();
};
const p = { merchantOrderNo: 'NO' + Date.now(), amount: 1000, subject: '测试商品',
  notifyUrl: 'https://商户域名/notify', payMethod: 'alipay' };
p.sign = sign(p);
const r = await fetch(BASE + '/api/gateway/orders', {
  method: 'POST', headers: { 'Content-Type': 'application/json', 'X-App-Key': APPKEY },
  body: JSON.stringify(p) });
const j = await r.json();
console.log(j.data.cashierUrl);
// 回调验签（Express）：app.post('/notify', express.json(), (req, res) => {
//   const { sign: s, ...p } = req.body;
//   if (sign(p) === s && p.status === 'SUCCESS') { /* 发货 */ res.send('SUCCESS'); }
// });

import java.net.URI; import java.net.http.*; import java.nio.charset.StandardCharsets;
import java.security.MessageDigest; import java.util.*;

public class PayDemo {
    static final String BASE = "https://平台域名", APPKEY = "商户AppKey", SECRET = "商户AppSecret";
    static String sign(Map<String, String> p) throws Exception {
        TreeMap<String, String> t = new TreeMap<>(p); t.remove("sign");
        StringBuilder sb = new StringBuilder();
        t.forEach((k, v) -> { if (v != null && !v.isEmpty()) sb.append(k).append('=').append(v).append('&'); });
        sb.append("key=").append(SECRET);
        byte[] d = MessageDigest.getInstance("MD5").digest(sb.toString().getBytes(StandardCharsets.UTF_8));
        StringBuilder hex = new StringBuilder();
        for (byte b : d) hex.append(String.format("%02X", b));
        return hex.toString();
    }
    public static void main(String[] args) throws Exception {
        Map<String, String> p = new LinkedHashMap<>();
        p.put("merchantOrderNo", "NO" + System.currentTimeMillis());
        p.put("amount", "1000"); p.put("subject", "测试商品");
        p.put("notifyUrl", "https://商户域名/notify"); p.put("payMethod", "alipay");
        p.put("sign", sign(p));
        HttpRequest req = HttpRequest.newBuilder()
            .uri(URI.create(BASE + "/api/gateway/orders"))
            .header("Content-Type", "application/json").header("X-App-Key", APPKEY)
            .POST(HttpRequest.BodyPublishers.ofString(new JSONObject(p).toString())).build();
        System.out.println(HttpClient.newHttpClient().send(req, HttpResponse.BodyHandlers.ofString()).body());
    }
}

func sign(p map[string]string, secret string) string {
    keys := []string{}
    for k, v := range p { if v != "" && k != "sign" { keys = append(keys, k) } }
    sort.Strings(keys)
    parts := []string{}
    for _, k := range keys { parts = append(parts, k+"="+p[k]) }
    sum := md5.Sum([]byte(strings.Join(parts, "&") + "&key=" + secret))
    return strings.ToUpper(hex.EncodeToString(sum[:]))
}
// 下单：POST JSON 到 /api/gateway/orders，头带 X-App-Key
// 回调验签：同一 sign() 重算比对，status==SUCCESS 后发货并响应 SUCCESS

public static string Sign(Dictionary<string, string> p, string secret)
{
    var raw = string.Join("&", p
        .Where(kv => kv.Key != "sign" && !string.IsNullOrEmpty(kv.Value))
        .OrderBy(kv => kv.Key, StringComparer.Ordinal)
        .Select(kv => kv.Key + "=" + kv.Value)) + "&key=" + secret;
    using var md5 = MD5.Create();
    return Convert.ToHexString(md5.ComputeHash(Encoding.UTF8.GetBytes(raw)));
}
// 下单：POST JSON 到 /api/gateway/orders，头带 X-App-Key（.NET 6+，无第三方依赖）
// 回调验签：同一 Sign() 重算比对，status==SUCCESS 后发货并响应 SUCCESS

require 'digest'
def sign(p, secret)
  raw = p.reject { |k, v| k.to_s == 'sign' || v.nil? || v.to_s.empty? }
         .sort_by { |k, _| k.to_s }
         .map { |k, v| "#{k}=#{v}" }.join('&') + '&key=' + secret
  Digest::MD5.hexdigest(raw).upcase
end
# 下单：POST JSON 到 /api/gateway/orders，头带 X-App-Key（仅标准库）
# 回调验签：同一 sign() 重算比对，status==SUCCESS 后发货并响应 'SUCCESS'