top.javatool.payment.service.GooglePlayPaymentService Maven / Gradle / Ivy

Go to download
package top.javatool.payment.service;


import retrofit2.Call;
import retrofit2.Response;
import retrofit2.Retrofit;
import top.javatool.payment.api.GooglePlayOauthApi;
import top.javatool.payment.api.GooglePlayPaymentApi;
import top.javatool.payment.bean.GooglePlayOauthResponse;
import top.javatool.payment.bean.GooglePlayProductResponse;
import top.javatool.payment.bean.GooglePlaySubscriptionResponse;
import top.javatool.payment.client.RetrofitClient;
import top.javatool.payment.exception.TokenExpireException;
import top.javatool.payment.util.Base64;

import java.io.IOException;
import java.security.KeyFactory;
import java.security.PublicKey;
import java.security.Signature;
import java.security.spec.X509EncodedKeySpec;

/**
 *
 * google play 订单查询服务
 * Created by Yang Peng on 2017/5/11.
 *
 */
public class GooglePlayPaymentService {


    /**
     * google play 订单数据的本地验证的 rsa 公钥
     */
    private  String base64PublicKey = "";

    private static final String KEY_FACTORY_ALGORITHM = "RSA";

    private static final String SIGNATURE_ALGORITHM = "SHA1withRSA";

    private GooglePlayPaymentApi googlePlayPaymentApi;


    /**
     * google play 查询授权api
     */
    private GooglePlayOauthApi googlePlayOauthApi;


    /**
     * api 验证地址
     */
    private String baseUrl;


    public GooglePlayPaymentService(String baseUrl,String base64PublicKey) {
        this.baseUrl = baseUrl;
        this.base64PublicKey = base64PublicKey;
        Retrofit retrofit = new RetrofitClient(baseUrl).getRetrofit();
        googlePlayPaymentApi = retrofit.create(GooglePlayPaymentApi.class);
        googlePlayOauthApi = retrofit.create(GooglePlayOauthApi.class);
    }


    /**
     * 消耗购买验证
     *
     * @param packageName 产品包名
     * @param productId 产品id
     * @param token 订单 token
     * @param accessToken  自己的token
     * @return 订单查询结果
     * @throws IOException 如果用户token 过期，会查询失败
     */
    public GooglePlayProductResponse productVerify(String packageName, String productId, String token, String accessToken) throws IOException, TokenExpireException {
        Call call = googlePlayPaymentApi.getProduct(packageName, productId, token, accessToken);
        Response response = call.execute();
        if (response.code() == 401) {
            throw new TokenExpireException();
        }
        return response.body();
    }


    /**
     *  订阅购买验证
     * @param packageName 产品包名
     * @param subscriptionId 订阅产品id
     * @param token 订单token
     * @param accessToken  自己的token
     * @return 订单查询结果
     * @throws IOException
     */
    public Response subscriptionVerify(String packageName, String subscriptionId, String token, String accessToken) throws IOException {
        Call call = googlePlayPaymentApi.getSubscription(packageName, subscriptionId, token, accessToken);
        try {
            return call.execute();
        } catch (IOException e) {
            e.printStackTrace();
            return call.execute();
        }
    }



    public boolean checkSubPaymentState(Response response) throws TokenExpireException {
        if (response.code() == 401) {
            throw new TokenExpireException();
        }
        GooglePlaySubscriptionResponse body = response.body();
        if (body.getPaymentState() == 1) {
            return true;
        }
        return false;
    }


    /**
     * 获取 自己的 access_token
     *
     * @param code url 回调code
     * @param clientId app 产品id
     * @param clientSecret app 秘钥
     * @param redirectUri 回调url
     * @return access_token
     * @throws IOException 接口通信异常
     */
    public GooglePlayOauthResponse getToken(String code, String clientId, String clientSecret, String redirectUri) throws IOException {
        Call call = googlePlayOauthApi.oauth("authorization_code", code, clientId, clientSecret, redirectUri);
        Response execute = call.execute();
        return execute.body();
    }


    /**
     * 刷新 access_token
     *
     * @param clientId app的产品id
     * @param clientSecret app 秘钥
     * @param refreshToken 刷新token
     * @return access_token
     * @throws IOException 接口通信异常
     */
    public GooglePlayOauthResponse freshToken(String clientId, String clientSecret, String refreshToken) throws IOException {
        Call call = googlePlayOauthApi.refreshToken("refresh_token", refreshToken, clientId, clientSecret);
        Response execute = call.execute();
        return execute.body();
    }


    /**
     * 验证签名数据体
     *
     * @param signedData 客户端的数据体
     * @param signature 客户端加密串
     * @return 验证结果
     * @throws Exception 如果解密失败回抛出异常
     */
    public boolean verifyData(String signedData, String signature) throws Exception {
        PublicKey key = generatePublicKey(base64PublicKey);
        return verify(key, signedData, signature);
    }



    private PublicKey generatePublicKey(String encodedPublicKey) throws Exception {
        byte[] decodedKey = Base64.decode(encodedPublicKey, Base64.DEFAULT);
        KeyFactory keyFactory = KeyFactory.getInstance(KEY_FACTORY_ALGORITHM);
        return keyFactory.generatePublic(new X509EncodedKeySpec(decodedKey));
    }



    private boolean verify(PublicKey publicKey, String signedData, String signature) throws Exception {
        byte[] signatureBytes = Base64.decode(signature, Base64.DEFAULT);
        Signature sig = Signature.getInstance(SIGNATURE_ALGORITHM);
        sig.initVerify(publicKey);
        sig.update(signedData.getBytes());
        if (sig.verify(signatureBytes)) {
            return true;
        }
        return false;
    }




}