DotNetCore.SKIT.FlurlHttpClient.Wechat/samples/SKIT.FlurlHttpClient.Wechat.TenpayV3.Sample_NetFramework47/Controllers/TenpayNotifyController.cs

namespace SKIT.FlurlHttpClient.Wechat.TenpayV3.Sample.Controllers
{
    [RoutePrefix("api/notify")]
    public class TenpayNotifyController : ApiController
    {
        private readonly Services.HttpClients.IWechatTenpayHttpClientFactory _tenpayHttpClientFactory;

        public TenpayNotifyController(
            Services.HttpClients.IWechatTenpayHttpClientFactory tenpayHttpClientFactory)
        {
            _tenpayHttpClientFactory = tenpayHttpClientFactory;
        }


        [HttpPost]
        [Route("m-{merchant_id}/message-push")]
        public async Task<IHttpActionResult> ReceiveMessage([FromUri(Name = "merchant_id")] string merchantId, CancellationToken cancellationToken)
        {
            using (var stream = await Request.Content.ReadAsStreamAsync())
            using (var reader = new StreamReader(stream, Encoding.UTF8))
            {
                string timestamp = Request.Headers.TryGetValues("Wechatpay-Timestamp", out _) ? Request.Headers.GetValues("Wechatpay-Timestamp").First() : null;
                string nonce = Request.Headers.TryGetValues("Wechatpay-Nonce", out _) ? Request.Headers.GetValues("Wechatpay-Nonce").First() : null;
                string signature = Request.Headers.TryGetValues("Wechatpay-Signature", out _) ? Request.Headers.GetValues("Wechatpay-Signature").First() : null;
                string serialNumber = Request.Headers.TryGetValues("Wechatpay-Serial", out _) ? Request.Headers.GetValues("Wechatpay-Serial").First() : null;
                string content = await reader.ReadToEndAsync();
                Debug.WriteLine("接收到微信支付推送的数据：{0}", content);

                var client = _tenpayHttpClientFactory.Create(merchantId);
                bool valid = client.VerifyEventSignature(
                    callbackTimestamp: timestamp,
                    callbackNonce: nonce,
                    callbackBody: content,
                    callbackSignature: signature,
                    callbackSerialNumber: serialNumber
                );
                if (!valid)
                {
                    // NOTICE:
                    //   需提前注入 CertificateManager、并添加平台证书，才可以使用扩展方法执行验签操作。
                    //   有关 CertificateManager 的用法请参阅《开发文档 / 基础用法 / 如何验证回调通知事件签名？》。
                    //   后续如何解密并反序列化，请参阅《开发文档 / 基础用法 / 如何解密回调通知事件中的敏感数据？》。

                    return Json(new { code = "FAIL", message = "验签失败" });
                }

                var callbackModel = client.DeserializeEvent(content);
                var eventType = callbackModel.EventType?.ToUpper();
                switch (eventType)
                {
                    case "TRANSACTION.SUCCESS":
                        {
                            var callbackResource = client.DecryptEventResource<Events.TransactionResource>(callbackModel);
                            Debug.WriteLine("接收到微信支付推送的订单支付成功通知，商户订单号：{0}", callbackResource.OutTradeNumber);
                            // 后续处理略
                        }
                        break;

                    default:
                        {
                            // 其他情况略
                        }
                        break;
                }

                return Json(new { code = "SUCCESS", message = "成功" });
            }
        }
    }
}