"""模块：支付管理器 SAAS 级支付编排器——子服务通过此管理器发起支付操作。 职责： 1. 根据租户UUID + 平台查询 PaymentGatewayConfig 2. 解密密钥构建 PaymentCredentials 3. 从网关注册表获取适配器类，创建网关实例 4. 执行支付操作并记录 PaymentTransaction 流水""" import uuid import datetime import logging from decimal import Decimal from gvsdsdk.payment.gateways.base import ( PaymentCredentials, PaymentRequest, PaymentResponse, RefundRequest, RefundResponse, TransferRequest, TransferResponse, QueryResponse, ) from gvsdsdk.payment.gateways.registry import payment_registry from gvsdsdk.payment.models import ( PaymentGatewayConfig, PaymentTransaction, EncryptField, ) logger = logging.getLogger(__name__) class PaymentError(Exception): def __init__(self, message, transaction=None): super().__init__(message) self.Transaction = transaction class PaymentManager: """支付编排器——SAAS 主服务器核心入口 用法: manager = PaymentManager(tenant_uuid='xxx') # 配置支付网关（SAAS 管理员操作） manager.ConfigureGateway( platform='wechat', app_id='wx123', mch_id='456', api_key='secret', notify_url='https://xxx.gvsds.com/api/payment/notify/wechat/', ) # 发起支付 tx = manager.Pay( platform='wechat', amount=Decimal('100.00'), subject='订单支付', method='jsapi', ) # 查询 manager.Query(out_trade_no='PY-xxx') # 退款 manager.Refund(out_trade_no='PY-xxx', amount=Decimal('100.00')) # 回调处理 manager.HandleNotify(platform='wechat', raw_data=body, headers=headers) """ def __init__(self, tenant_uuid): self.TenantUUID = tenant_uuid def ConfigureGateway(self, platform, app_id='', mch_id='', api_key='', private_key='', public_key='', cert_path='', cert_key_path='', notify_url='', return_url='', extra=None, set_default=False): """配置支付网关——SAAS 管理员为租户配置支付渠道 Args: platform: 支付平台 ('wechat', 'alipay', 'bank') app_id: 应用 ID mch_id: 商户号 api_key: API 密钥（将加密存储） private_key: 私钥（将加密存储） public_key: 公钥（将加密存储） cert_path: 证书路径 cert_key_path: 证书密钥路径 notify_url: 回调通知 URL return_url: 支付完成跳转 URL extra: 额外配置 set_default: 是否设为默认渠道 Returns: PaymentGatewayConfig 实例 """ config, created = PaymentGatewayConfig.objects.update_or_create( TenantUUID=self.TenantUUID, Platform=platform, defaults={ 'AppID': app_id, 'MchID': mch_id, 'APIKeyEncrypted': EncryptField(api_key) if api_key else '', 'PrivateKeyEncrypted': EncryptField(private_key) if private_key else '', 'PublicKeyEncrypted': EncryptField(public_key) if public_key else '', 'CertPath': cert_path, 'CertKeyPath': cert_key_path, 'NotifyURL': notify_url, 'ReturnURL': return_url, 'ConfigExtra': extra or {}, 'ConfigStatus': 1, 'UpdateTime': datetime.datetime.utcnow(), }, ) if set_default: PaymentGatewayConfig.objects.filter( TenantUUID=self.TenantUUID, ConfigDefault=True, ).update(ConfigDefault=False) config.ConfigDefault = True config.save(update_fields=['ConfigDefault']) logger.info(f'支付网关配置: {platform}@tenant={self.TenantUUID}') return config def Pay(self, platform, amount, subject='', body='', method='jsapi', open_id='', client_ip='', extra=None, expire_minutes=30): """发起支付 Args: platform: 支付平台 amount: 金额 subject: 商品标题 body: 商品描述 method: 支付方式 (jsapi/app/h5/native/miniapp) open_id: 用户 OpenID（JSAPI 必填） client_ip: 客户端 IP extra: 额外参数 expire_minutes: 过期分钟数 Returns: PaymentTransaction 实例 Raises: PaymentError: 支付失败 """ config = PaymentGatewayConfig.FromTenantAndPlatform(self.TenantUUID, platform) if config is None: raise PaymentError(f'租户未配置支付渠道: {platform}') creds = self._build_credentials(config) gateway = payment_registry.create(platform, creds) out_trade_no = f'PY-{uuid.uuid4().hex[:16].upper()}' req = PaymentRequest( OutTradeNO=out_trade_no, TotalAmount=Decimal(str(amount)), Subject=subject, Body=body, Method=method, OpenID=open_id, ClientIP=client_ip, ExpireMinutes=expire_minutes, Extra=extra or {}, ) tx = PaymentTransaction( TransactionUUID=uuid.uuid4().bytes, TenantUUID=self.TenantUUID, Platform=platform, TransactionType=PaymentTransaction.TX_PAY, OutTradeNO=out_trade_no, TotalAmount=Decimal(str(amount)), Subject=subject, RawRequest={ 'method': method, 'open_id': open_id, 'extra': extra or {}, }, ) tx.save() resp = gateway.Pay(req) tx.RawResponse = resp.RawResponse tx.UpdateTime = datetime.datetime.utcnow() if resp.Success: tx.ChannelTransactionID = resp.TransactionID tx.save(update_fields=['RawResponse', 'ChannelTransactionID', 'UpdateTime']) tx._prepay_info = resp.PayInfo return tx else: tx.MarkFailed() raise PaymentError('支付发起失败', transaction=tx) def Query(self, out_trade_no, platform=None): """查询订单状态 Args: out_trade_no: 商户订单号 platform: 支付平台（不传则从交易记录推断） Returns: QueryResponse """ try: tx = PaymentTransaction.objects.get(OutTradeNO=out_trade_no) except PaymentTransaction.DoesNotExist: raise PaymentError(f'交易记录不存在: {out_trade_no}') platform = platform or tx.Platform config = PaymentGatewayConfig.FromTenantAndPlatform(self.TenantUUID, platform) if config is None: raise PaymentError(f'租户未配置支付渠道: {platform}') creds = self._build_credentials(config) gateway = payment_registry.create(platform, creds) result = gateway.Query(out_trade_no) if result.IsPaid and not tx.IsSuccess: tx.MarkSuccess( channel_transaction_id=result.TransactionID, notify_data={'query_result': result.RawResponse}, ) elif result.IsRefunded: tx.TransactionStatus = PaymentTransaction.TX_CLOSED tx.RawResponse = result.RawResponse tx.UpdateTime = datetime.datetime.utcnow() tx.save(update_fields=['TransactionStatus', 'RawResponse', 'UpdateTime']) return result def Refund(self, out_trade_no, amount, reason='', platform=None, extra=None): """发起退款 Args: out_trade_no: 商户订单号 amount: 退款金额 reason: 退款原因 platform: 支付平台 extra: 额外参数 Returns: PaymentTransaction 实例 """ try: pay_tx = PaymentTransaction.objects.get(OutTradeNO=out_trade_no, TransactionType=PaymentTransaction.TX_PAY) except PaymentTransaction.DoesNotExist: raise PaymentError(f'原始交易不存在: {out_trade_no}') if not pay_tx.IsSuccess: raise PaymentError(f'原始交易未支付成功，无法退款: {out_trade_no}') platform = platform or pay_tx.Platform config = PaymentGatewayConfig.FromTenantAndPlatform(self.TenantUUID, platform) if config is None: raise PaymentError(f'租户未配置支付渠道: {platform}') creds = self._build_credentials(config) gateway = payment_registry.create(platform, creds) out_refund_no = f'RF-{uuid.uuid4().hex[:16].upper()}' amount = Decimal(str(amount)) if amount > pay_tx.TotalAmount: raise PaymentError(f'退款金额超过原始交易金额: {amount} > {pay_tx.TotalAmount}') req = RefundRequest( OutTradeNO=out_trade_no, OutRefundNO=out_refund_no, TotalAmount=pay_tx.TotalAmount, RefundAmount=amount, Reason=reason, Extra=extra or {}, ) rx = PaymentTransaction( TransactionUUID=uuid.uuid4().bytes, TenantUUID=self.TenantUUID, Platform=platform, TransactionType=PaymentTransaction.TX_REFUND, OutTradeNO=out_trade_no, OutRefundNO=out_refund_no, TotalAmount=amount, RawRequest={'refund_reason': reason, 'extra': extra or {}}, ) rx.save() resp = gateway.Refund(req) rx.RawResponse = resp.RawResponse if resp.Success: rx.MarkSuccess(channel_transaction_id=resp.RefundID) else: rx.MarkFailed() return rx def Transfer(self, platform, amount, payee_account='', payee_name='', description='', transfer_type='wallet', extra=None): """企业付款到零钱/银行卡 Args: platform: 支付平台 amount: 转账金额 payee_account: 收款账户 payee_name: 收款人姓名 description: 转账备注 transfer_type: 转账类型 (wallet/bank) extra: 额外参数 Returns: PaymentTransaction 实例 """ config = PaymentGatewayConfig.FromTenantAndPlatform(self.TenantUUID, platform) if config is None: raise PaymentError(f'租户未配置支付渠道: {platform}') creds = self._build_credentials(config) gateway = payment_registry.create(platform, creds) out_transfer_no = f'TF-{uuid.uuid4().hex[:16].upper()}' amount = Decimal(str(amount)) req = TransferRequest( OutTransferNO=out_transfer_no, Amount=amount, PayeeAccount=payee_account, PayeeName=payee_name, Description=description, TransferType=transfer_type, Extra=extra or {}, ) tx = PaymentTransaction( TransactionUUID=uuid.uuid4().bytes, TenantUUID=self.TenantUUID, Platform=platform, TransactionType=PaymentTransaction.TX_TRANSFER, OutTradeNO=out_transfer_no, TotalAmount=amount, Subject=description, RawRequest={ 'payee_account': payee_account, 'payee_name': payee_name, 'transfer_type': transfer_type, 'extra': extra or {}, }, ) tx.save() try: resp = gateway.Transfer(req) except NotImplementedError as e: tx.MarkFailed(raw_response={'error': str(e)}) raise PaymentError(str(e), transaction=tx) tx.RawResponse = resp.RawResponse if resp.Success: tx.MarkSuccess(channel_transaction_id=resp.TransferID) else: tx.MarkFailed() return tx def HandleNotify(self, platform, raw_data, headers=None): """处理支付回调通知 Args: platform: 支付平台 raw_data: 原始回调数据 (bytes) headers: 请求头字典 Returns: PaymentTransaction 实例或 None """ config = PaymentGatewayConfig.FromTenantAndPlatform(self.TenantUUID, platform) if config is None: logger.error(f'租户未配置支付渠道: {platform}') return None creds = self._build_credentials(config) gateway = payment_registry.create(platform, creds) if not gateway.VerifyNotify(raw_data, headers or {}): logger.warning(f'支付回调签名验证失败: {platform}') return None notify_data = gateway.ParseNotify(raw_data) out_trade_no = notify_data.get('out_trade_no', '') if not out_trade_no: logger.warning('回调缺少 out_trade_no') return None try: tx = PaymentTransaction.objects.get(OutTradeNO=out_trade_no) except PaymentTransaction.DoesNotExist: logger.warning(f'回调对应交易不存在: {out_trade_no}') return None trade_state = notify_data.get('trade_state', '') transaction_id = notify_data.get('transaction_id', '') if trade_state in ('SUCCESS', 'TRADE_SUCCESS', 'TRADE_FINISHED'): tx.MarkSuccess( channel_transaction_id=transaction_id, notify_data=notify_data, ) elif trade_state in ('CLOSED', 'REVOKED', 'TRADE_CLOSED'): tx.MarkClosed() elif trade_state in ('REFUND', 'TRADE_REFUND'): tx.TransactionStatus = PaymentTransaction.TX_CLOSED tx.NotifyData = notify_data tx.UpdateTime = datetime.datetime.utcnow() tx.save(update_fields=['TransactionStatus', 'NotifyData', 'UpdateTime']) return tx def GetGatewayInstance(self, platform): """直接获取网关实例——供子服务自定义操作 Args: platform: 支付平台 Returns: AbstractPaymentGateway 实例 Raises: PaymentError: 租户未配置支付渠道 """ config = PaymentGatewayConfig.FromTenantAndPlatform(self.TenantUUID, platform) if config is None: raise PaymentError(f'租户未配置支付渠道: {platform}') creds = self._build_credentials(config) return payment_registry.create(platform, creds) def _build_credentials(self, config): """从数据库配置构建 PaymentCredentials""" return PaymentCredentials( AppID=config.AppID, MchID=config.MchID, APIKey=config.DecryptAPIKey(), PrivateKey=config.DecryptPrivateKey(), PublicKey=config.DecryptPublicKey(), CertPath=config.CertPath, CertKeyPath=config.CertKeyPath, NotifyURL=config.NotifyURL, ReturnURL=config.ReturnURL, Extra=config.ConfigExtra, )