import types 
from urllib import urlencode, urlopen 
from hashcompat import md5_constructor as md5<span style="white-space:pre">  </span>#見hashcompact.py 
from config import settings<span style="white-space:pre">     </span>#見config.py 
 
#字符串編解碼處理 
def smart_str(s, encoding='utf-8', strings_only=False, errors='strict'): 
  if strings_only and isinstance(s, (types.NoneType, int)): 
    return s 
  if not isinstance(s, basestring): 
    try: 
      return str(s) 
    except UnicodeEncodeError: 
      if isinstance(s, Exception): 
        return ' '.join([smart_str(arg, encoding, strings_only, 
            errors) for arg in s]) 
      return unicode(s).encode(encoding, errors) 
  elif isinstance(s, unicode): 
    return s.encode(encoding, errors) 
  elif s and encoding != 'utf-8': 
    return s.decode('utf-8', errors).encode(encoding, errors) 
  else: 
    return s 
 
# 網(wǎng)關地址 
_GATEWAY = 'https://mapi.alipay.com/gateway.do?' 
 
 
# 對數(shù)組排序并除去數(shù)組中的空值和簽名參數(shù) 
# 返回數(shù)組和鏈接串 
def params_filter(params): 
  ks = params.keys() 
  ks.sort() 
  newparams = {} 
  prestr = '' 
  for k in ks: 
    v = params[k] 
    k = smart_str(k, settings.ALIPAY_INPUT_CHARSET) 
    if k not in ('sign','sign_type') and v != '': 
      newparams[k] = smart_str(v, settings.ALIPAY_INPUT_CHARSET) 
      prestr += '%s=%s&' % (k, newparams[k]) 
  prestr = prestr[:-1] 
  return newparams, prestr 
 
 
# 生成簽名結(jié)果 
def build_mysign(prestr, key, sign_type = 'MD5'): 
  if sign_type == 'MD5': 
    return md5(prestr + key).hexdigest() 
  return '' 
 
 
# 即時到賬交易接口 
def create_direct_pay_by_user(tn, subject, body, bank, total_fee): 
  params = {} 
  params['service']    = 'create_direct_pay_by_user' 
  params['payment_type'] = '1'    #商品購買，只能選這個 
   
  # 獲取配置文件 
  params['partner']      = settings.ALIPAY_PARTNER 
  params['seller_id']     = settings.ALIPAY_PARTNER 
  params['seller_email']   = settings.ALIPAY_SELLER_EMAIL 
  params['return_url']    = settings.ALIPAY_RETURN_URL 
  params['notify_url']    = settings.ALIPAY_NOTIFY_URL 
  params['_input_charset']  = settings.ALIPAY_INPUT_CHARSET 
  params['show_url']     = settings.ALIPAY_SHOW_URL 
   
  # 從訂單數(shù)據(jù)中動態(tài)獲取到的必填參數(shù) 
  params['out_trade_no'] = tn    # 請與貴網(wǎng)站訂單系統(tǒng)中的唯一訂單號匹配 
  params['subject']    = subject  # 訂單名稱，顯示在支付寶收銀臺里的“商品名稱”里，顯示在支付寶的交易管理的“商品名稱”的列表里。 
  params['body']     = body   # 訂單描述、訂單詳細、訂單備注，顯示在支付寶收銀臺里的“商品描述”里，可以為空 
  params['total_fee']   = total_fee # 訂單總金額，顯示在支付寶收銀臺里的“應付總額”里，精確到小數(shù)點后兩位 
   
  # 擴展功能參數(shù)——網(wǎng)銀提前 
  if bank=='alipay' or bank=='': 
    params['paymethod'] = 'directPay'  # 支付方式，四個值可選：bankPay(網(wǎng)銀); cartoon(卡通); directPay(余額); CASH(網(wǎng)點支付) 
    params['defaultbank'] = ''     # 支付寶支付，這個為空 
  else: 
    params['paymethod'] = 'bankPay'   # 默認支付方式，四個值可選：bankPay(網(wǎng)銀); cartoon(卡通); directPay(余額); CASH(網(wǎng)點支付) 
    params['defaultbank'] = bank    # 默認網(wǎng)銀代號，代號列表見http://club.alipay.com/read.php?tid=8681379     
   
 
   
  params,prestr = params_filter(params) 
   
  params['sign'] = build_mysign(prestr, settings.ALIPAY_KEY, settings.ALIPAY_SIGN_TYPE) 
  params['sign_type'] = settings.ALIPAY_SIGN_TYPE 
   
  return _GATEWAY + urlencode(params) 
 
def notify_verify(post): 
  # 初級驗證--簽名 
  _,prestr = params_filter(post) 
  mysign = build_mysign(prestr, settings.ALIPAY_KEY, settings.ALIPAY_SIGN_TYPE) 
 
  if mysign != post.get('sign'): 
    return False 
   
  # 二級驗證--查詢支付寶服務器此條信息是否有效 
  params = {} 
  params['partner'] = settings.ALIPAY_PARTNER 
  params['notify_id'] = post.get('notify_id') 
 
  gateway = 'https://mapi.alipay.com/gateway.do?service=notify_verify&' 
  verify_result = urlopen(gateway, urlencode(params)).read() 
  if verify_result.lower().strip() == 'true': 
    return True 
  return False 

""" 
The md5 and sha modules are deprecated since Python 2.5, replaced by the 
hashlib module containing both hash algorithms. Here, we provide a common 
interface to the md5 and sha constructors, preferring the hashlib module when 
available. 
""" 
 
try: 
  import hashlib 
  md5_constructor = hashlib.md5 
  md5_hmac = md5_constructor 
  sha_constructor = hashlib.sha1 
  sha_hmac = sha_constructor 
except ImportError: 
  import md5 
  md5_constructor = md5.new 
  md5_hmac = md5 
  import sha 
  sha_constructor = sha.new 
  sha_hmac = sha 

#-*- coding:utf-8 -*- 
 
class settings: 
 # 安全檢驗碼，以數(shù)字和字母組成的32位字符 
 ALIPAY_KEY = 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx' 
 
 ALIPAY_INPUT_CHARSET = 'utf-8' 
 
 # 合作身份者ID，以2088開頭的16位純數(shù)字 
 ALIPAY_PARTNER = 'xxxxxxxxxxxxxxxx' 
 
 # 簽約支付寶賬號或賣家支付寶帳戶 
 ALIPAY_SELLER_EMAIL = 'ls@abc.com' 
 
 ALIPAY_SIGN_TYPE = 'MD5' 
 
 # 付完款后跳轉(zhuǎn)的頁面（同步通知） 要用 http://格式的完整路徑，不允許加?id=123這類自定義參數(shù) 
 ALIPAY_RETURN_URL='http://www.xxx.com/alipay/return/' 
 
 # 交易過程中服務器異步通知的頁面 要用 http://格式的完整路徑，不允許加?id=123這類自定義參數(shù) 
 ALIPAY_NOTIFY_URL='http://www.xxx.com/alipay/notify/' 

#確認支付 
def pay(request): 
  cbid=request.POST.get('id') 
  try: 
    cb=cBill.objects.get(id=cbid) 
  except ObjectDoesNotExist: 
    return HttpResponseRedirect("/err/no_object") 
   
  #如果網(wǎng)關是支付寶 
  if cb.cbank.gateway=='alipay': 
      tn=cb.id 
      subject='' 
      body='' 
      bank=cb.cbank.id 
      tf='%.2f' % cb.amount 
      url=create_direct_pay_by_user (tn,subject,body,bank,tf) 
 
  #如果網(wǎng)關是財付通 
  elif cb.cbank.gateway=='tenpay': 
    pass 
   
  #去支付頁面 
  return HttpResponseRedirect (url) 
 
#alipay異步通知 
 
@csrf_exempt 
def alipay_notify_url (request): 
  if request.method == 'POST': 
    if notify_verify (request.POST): 
      #商戶網(wǎng)站訂單號 
      tn = request.POST.get('out_trade_no') 
      #支付寶單號 
      trade_no=request.POST.get('trade_no') 
      #返回支付狀態(tài) 
      trade_status = request.POST.get('trade_status') 
      cb = cBill.objects.get(pk=tn) 
       
      if trade_status == 'TRADE_SUCCESS': 
        cb.exe() 
        log=Log(operation='notify1_'+trade_status+'_'+trade_no) 
        log.save() 
        return HttpResponse("success") 
      else: 
        #寫入日志 
        log=Log(operation='notify2_'+trade_status+'_'+trade_no) 
        log.save() 
        return HttpResponse ("success") 
    else: 
      #黑客攻擊 
      log=Log(operation='hack_notify_'+trade_status+'_'+trade_no+'_'+'out_trade_no') 
      log.save() 
  return HttpResponse ("fail") 
 
#同步通知 
 
def alipay_return_url (request): 
  if notify_verify (request.GET): 
    tn = request.GET.get('out_trade_no') 
    trade_no = request.GET.get('trade_no') 
    trade_status = request.GET.get('trade_status') 
      
    cb = cBill.objects.get(pk=tn) 
    log=Log(operation='return_'+trade_status+'_'+trade_no) 
    log.save() 
    return HttpResponseRedirect ("/public/verify/"+tn) 
  else: 
    #錯誤或者黑客攻擊 
    log=Log(operation='err_return_'+trade_status+'_'+trade_no) 
    log.save() 
    return HttpResponseRedirect ("/") 
 
 
#外部跳轉(zhuǎn)回來的鏈接session可能丟失，無法再進入系統(tǒng)。 
#客戶可能通過xxx.com操作，但是支付寶只能返回www.xxx.com，域名不同，session丟失。 
def verify(request,cbid): 
  try: 
    cb=cBill.objects.get(id=cbid) 
    #如果訂單時間距現(xiàn)在超過1天，跳轉(zhuǎn)到錯誤頁面！ 
    #避免網(wǎng)站信息流失 
     
    return render_to_response('public_verify.html',{'cb':cb},RequestContext(request)) 
  except ObjectDoesNotExist: 
    return HttpResponseRedirect("/err/no_object")