1 创建网页/移动应用
2 配置接口加签方式
涉及到金额的需要上传证书，在上传页面有教程，
在支付宝开放平台秘钥工具中生成CSR证书，会自动保存应用公钥和私钥到电脑上，调用支付宝接口需要应用私钥进行加签
上传完CSR证书后会有三个证书下载， 分别是： alipayRootCert.crt（支付宝根证书）， alipayCertPublicKey_RSA2.crt（支付宝证书公钥）， appCertPublicKey_网站应用id.crt（网站应用公钥），下载到本地，后续调用接口的时候加签要用到
3 绑定红包产品
发红包需要绑定红包、营销活动红包产品功能
配置完成后，对该网站应用进行上线申请，审核通过后就可以使用了
4 代码实现
现金红包接口文档： /open/029yy9
4.1 实现加签
可参考 /tm_tsm/article/details/105124809 文章，有点区别在 encode_for_sign 函数中，最后拼接才需要 urllib quote
import timeimport binasciiimport jsonimport urllibimport urllib.parsefrom Cryptodome.Hash import SHA, SHA256from Cryptodome.PublicKey import RSAfrom Cryptodome.Signature import PKCS1_v1_5prv_key = "-----BEGIN RSA PRIVATE KEY-----\n" \"应用私钥" \"\n-----END RSA PRIVATE KEY-----"class SignRSA:MAXLINESIZE = 76 # Excluding the CRLFMAXBINSIZE = (MAXLINESIZE // 4) * 3def __init__(self, **kwargs):self.kwargs = kwargsself.sign_type = "RSA2" # rsa 用sha, rsa2方式用SHA256self.private_key = prv_key@staticmethoddef get_ordered_data(data: dict):# 还没生成签名 前不能传 sign 和 sign_type 进行排序complex_keys = [k for k, v in data.items() if isinstance(v, dict)]# 将字典类型的数据dump出来for key in complex_keys:data[key] = json.dumps(data[key], separators=(',', ':'))return sorted([(k, v) for k, v in data.items()])@staticmethoddef encode_for_sign(ordered_items, quote=False):ordered_items.sort()if quote:unsigned_str = "&".join('''{}={}'''.format(k, urllib.parse.quote(v)) for k, v in ordered_items)else:unsigned_str = "&".join('''{}={}'''.format(k, v) for k, v in ordered_items)return unsigned_str.encode('utf-8').decode('unicode_escape')def verify_with_public_key(self, sign):""":parameter sign:The signature that needs to be validated.:type sign: byte string"""ordered_item = self.get_ordered_data(self.kwargs)params = "&".join(u"{}={}".format(k, v) for k, v in ordered_item)# 公钥验签signer = PKCS1_v1_5.new(RSA.importKey(self.public_key))if self.sign_type == 'RSA':msg_hash = SHA.new()else:msg_hash = SHA256.new()msg_hash.update(params.encode("utf8"))# sign = urllib.parse.unquote_plus(sign)# sign = self.decodebytes(sign.encode()) # 反操作：base64 编码，转换为unicode表示并移除回车return signer.verify(msg_hash, self.decodebytes(sign.encode("utf8"))) # true / falsedef sign_with_private_key(self):ordered_item = self.get_ordered_data(self.kwargs)unsigned_str = self.encode_for_sign(ordered_item)signer = PKCS1_v1_5.new(RSA.importKey(self.private_key))print("加签参数： ", unsigned_str)# rsa 用sha, rsa2方式用SHA256if self.sign_type == 'RSA':rand_hash = SHA.new()else:rand_hash = SHA256.new()rand_hash.update(unsigned_str.encode())signature = signer.sign(rand_hash)# base64 编码，转换为unicode表示并移除回车sign = self.encodebytes(signature).decode("utf8").replace("\n", "")data = self.kwargsdata['sign'] = signdata['sign_type'] = self.sign_typeordered_data = self.get_ordered_data(data)print("加签结果：", sign)# 在最后拼接的时候才需要 urllib quotereturn f'''{self.encode_for_sign(ordered_data, quote=True)}'''def encodebytes(self, s):"""Encode a bytestring into a bytes object containing multiple linesof base-64 data."""self._input_type_check(s)pieces = []for i in range(0, len(s), self.MAXBINSIZE):chunk = s[i: i + self.MAXBINSIZE]pieces.append(binascii.b2a_base64(chunk))return b"".join(pieces)def decodebytes(self, byte_str):"""Decode a bytestring of base-64 data into a bytes object."""self._input_type_check(byte_str)return binascii.a2b_base64(byte_str)@staticmethoddef _input_type_check(s):try:m = memoryview(s)except TypeError as err:msg = "expected bytes-like object, not %s" % s.__class__.__name__raise TypeError(msg) from errif m.format not in ('c', 'b', 'B'):msg = ("expected single byte elements, not %r from %s" %(m.format, s.__class__.__name__))raise TypeError(msg)if m.ndim != 1:msg = ("expected 1-D data, not %d-D data from %s" %(m.ndim, s.__class__.__name__))raise TypeError(msg)
4.2 支付宝根证书sn码、网站应用sn码获取
代码来源： /weixin_37309049/article/details/105319729
import OpenSSLimport hashlibimport redef md5(string):return hashlib.md5(string.encode('utf-8')).hexdigest()# 应用公钥证书序列号def get_app_cert_cn(cert_str=None):cert_str = cert_str or open("appCertPublicKey_网站应用id.crt").read()cert = OpenSSL.crypto.load_certificate(OpenSSL.crypto.FILETYPE_PEM, cert_str)try:res = cert.get_signature_algorithm()# 根据其他语言算法应该剔除不是sha加密的部分python2 可以用r'sha.+WithRSAEncryption'但是python３必须是b'sha.+WithRSAEncryption'if not re.match(b'sha.+WithRSAEncryption', res):return Noneexcept:return Nonecert_issue = cert.get_issuer()op = ''b = list(cert_issue.get_components())# 证书签发机构排序方式应该是倒序的for i in range(len(b)):a = list(b[len(b) - 1 - i])# 在Python3中直接读取的a[0]为bytes,会影响加密结果，进行decode，兼容python2opp = "{}={}".format(a[0].decode(), a[1].decode())op = op + opp + ','return md5(op[:-1] + str(cert.get_serial_number()))# 根证书序列号def get_root_cn_sn():root_cert = open("alipayRootCert.crt").read()cert_list = root_cert.split('-----BEGIN CERTIFICATE-----')root_cert_sn = ''for i in cert_list:# print i, len(i)if not len(i):continuecert_sn = get_app_cert_cn('-----BEGIN CERTIFICATE-----' + i)if cert_sn is not None:root_cert_sn = root_cert_sn + cert_sn + '_'return root_cert_sn[:-1]if __name__ == "__main__":print("根证书sn：", get_root_cn_sn())print("应用证书sn:", get_app_cert_cn())
4.3 创建现金红包
import timeimport requests# 导入上面加签的代码import alipay_countersigndate_str = time.strftime('%Y-%m-%d %H:%M:%S', time.localtime())alipay_params = {"app_id": "网站应用id","method": "alipay.marketing.campaign.cash.create","charset": 'UTF-8',"sign_type": "RSA2","timestamp": date_str,"version": "1.0","alipay_root_cert_sn": "支付宝根证书sn码","app_cert_sn": "网站应用sn码","biz_content": {"coupon_name": "answer activity", # 营销活动名称，暂时只能是英文，中文会报验签错误，应该是上面加签的代码还有点问题"prize_type": "fixed","total_money": "10.00","total_num": "50","prize_msg": "answer activity", # 红包详情页展示的文案"start_time": "NowTime","end_time": "-03-10 12:00:00"}}sign_rsa = alipay_countersign.SignRSA(**alipay_params)order_info = sign_rsa.sign_with_private_key()url = "/gateway.do?" + order_infoheaders = {"content-type": "application/json"}data = requests.post(url, headers=headers)print(data)print(data.text)
4.4 红包发放
import timeimport requests# 加签代码import alipay_countersigndate_str = time.strftime('%Y-%m-%d %H:%M:%S', time.localtime())alipay_params = {"app_id": "网站应用id","method": "alipay.marketing.campaign.cash.trigger","charset": 'UTF-8',"sign_type": "RSA2","timestamp": date_str,"version": "1.0","alipay_root_cert_sn": "支付宝根证书sn码","app_cert_sn": "网站应用sn码","biz_content": {"user_id": "用户id","crowd_no": "创建现金红包活动的活动号",}}sign_rsa = alipay_countersign.SignRSA(**alipay_params)order_info = sign_rsa.sign_with_private_key()url = "/gateway.do?" + order_infoheaders = {"content-type": "application/json"}data = requests.post(url, headers=headers)print(data)print(data.text)
红包发放成功后在支付宝app–账单，或者红包–我的红包中可以看到红包流水，个人商家发的红包是没有支付消息通知的，需要在这两个地方才能看到流水详情
4.5 用户id获取
import timeimport requests# 加签import alipay_countersigndate_str = time.strftime('%Y-%m-%d %H:%M:%S', time.localtime())alipay_params = {"app_id": "网站应用id","method": "alipay.system.oauth.token","charset": 'UTF-8',"sign_type": "RSA2","timestamp": date_str,"version": "1.0","grant_type": "authorization_code","alipay_root_cert_sn": "支付宝根证书sn码","app_cert_sn": "网站应用sn码","code": "f0361800bf764a0c858dbc87671cVX20" # h5获取到的auth_code}sign_rsa = alipay_countersign.SignRSA(**alipay_params)order_info = sign_rsa.sign_with_private_key()url = "/gateway.do?" + order_infoheaders = {"content-type": "application/json"}data = requests.post(url, headers=headers)print(data)print(data.text)
4.6 h5获取授权code
<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><metaname="viewport"content="width=750,user-scalable=yes,target-densitydpi=device-dpi"/><title></title><link href="css/ttqhb.css" rel="stylesheet" type="text/css" /><script src="js/jquery.min.js"></script><script src="js/index.js"></script></head><body style="background: #c72211"></body><a onclick="get_red_packet()"><img src="images/btn.png" class="btnimg" /></a><img src="images/redbao.jpg" class="img100" /><script>function getQueryString(name) {var reg = new RegExp("(^|&)" + name + "=([^&]*)(&|$)", "i");var r = window.location.search.substr(1).match(reg);if (r != null) {return unescape(r[2]);}return null;}var url ="/oauth2/publicAppAuthorize.htm?app_id=网站应用id&scope=auth_base&redirect_uri=";var red_uri = encodeURIComponent("//index.html" // 授权成功回跳地址);url += red_uri;var auth_code = getQueryString("auth_code");if (!auth_code) {window.location.href = url;}</script></html>
在支付宝上进入该页面会自动进行授权回调，授权成功后回调改url页面，在url参数中就会有授权auth_code
5 注意事项
需要是签约的商户才能使用转账功能，如果商户未签约需要进行签约
