Shulou(Shulou.com)06/03 Report--

This article mainly introduces "how to understand. Net Core Wechat service provider secondary feed development", in the daily operation, I believe many people in how to understand. Net Core Wechat service provider secondary feed development problems there are doubts, the editor consulted all kinds of materials, sorted out simple and easy-to-use methods of operation, hope to answer the "how to understand. Net Core Wechat service provider secondary feed development" doubt is helpful! Next, please follow the editor to study!

Recently, the mall has carried out the development of secondary parts for Wechat service providers, which roughly has several points.

First, signature of the service provider

Second, obtain the certificate of service provider

Third, upload pictures

Fourth, encryption of sensitive information

Fifth, query the status of incoming parts.

In addition, it is the assembly of input information.

E-commerce second-tier merchants purchase application form-status transfer

Signature of a service provider

First prepare the necessary configuration: merchant number, certificate, secret key, Mini Program appid, appsecret

# region service provider signature private string SrvPayBuildAuthAsync (string uri, string body, string method = "POST") {var timestamp = DateTimeOffset.Now.ToUnixTimeSeconds (); string nonce = Guid.NewGuid (). ToString (); string message = $"{method}\ n {uri}\ n {timestamp}\ n {nonce}\ n {body}\ n"; string signature = SrvSign (message) Return $"mchid=\" {_ wxCfg.SrvPayMerchantId}\ ", nonce_str=\" {nonce}\ ", timestamp=\" {timestamp}\ ", serial_no=\" {_ wxCfg.SrvPayCertNo}\ ", signature=\" {signature}\ ";} private string SrvSign (string message) {var bytes = Utils.ReadBytesIfExist (_ wxCfg.SrvPayCertFile) If (bytes is null) {return ";} X509Certificate2 cert = new (bytes, _ wxCfg.SrvPayMerchantId); RSA rsa = cert.GetRSAPrivateKey (); var signData = rsa.SignData (Encoding.UTF8.GetBytes (message), HashAlgorithmName.SHA256, RSASignaturePadding.Pkcs1); return Convert.ToBase64String (signData);} two obtain certificates

It is divided into: the first step is to obtain the certificate, and the second step is to decrypt the certificate

1 get the certificate

Https://api.mch.weixin.qq.com/v3/certificates

# region obtain platform certificate public async Task GetSrvCert () {string uri = "/ v3/certificates"; var auth = SrvPayBuildAuthAsync (uri, "", "GET") Var header = new Dictionary {{"Authorization", $"WECHATPAY2-SHA256-RSA2048 {auth}"}, {"Accept", "* / *"}, {"Accept-Encoding", "gzip,deflate,brn"}, {"User-Agent", "Mozilla/5.0 (Windows NT 10.0; Win64)" X64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46 "},}; return await GetUrlAsync (uri, header);} # endregion

Entity used: CertificatesOutModel

Public sealed class CertificatesOutModel: IWXResponse {[JsonPropertyName ("data")] public IEnumerable Data {get; set;} public string Code {get; set;} public string Message {get; set;}} public class Certificates {[JsonPropertyName ("serial_no")] public string SerialNo {get; set;} [JsonPropertyName ("effective_time")] public string EffectiveTime {get; set } [JsonPropertyName ("expire_time")] public string ExpireTime {get; set;} [JsonPropertyName ("encrypt_certificate")] public EncryptCertificate EncryptCertificate {get; set;}}

Request method: GetUrlAsync

Protected async Task GetUrlAsync (string url, Dictionary headers = null) {HttpResponseMessage res = null; try {if (headers! = null & & headers.Count > 0) {foreach (var header in headers) {_ client.DefaultRequestHeaders.TryAddWithoutValidation (header.Key, header.Value) }} res = await _ client.GetAsync (url); res.EnsureSuccessStatusCode (); var result = await res.Content.ReadAsStringAsync (); if (result = = null) {return default } return result.ToJson ();} catch {var result = await res.Content.ReadAsStringAsync (); if (result = = null) {return default;} return result.ToJson () }}

Decryption method

/ / obtain the certificate var cert = await _ wxClient.GetSrvCert (); var certificateModel = cert.Data.FirstOrDefault (); if (! cert.Data.Any ()) {return new MKResult (code: 400, msg: "platform certificate not obtained") } if (! string.IsNullOrEmpty (applyment.Body.SerialNo)) {certificateModel = cert.Data.SingleOrDefault (s = > s.SerialNo = = applyment.Body.SerialNo) } certificateModel.EncryptCertificate.Ciphertext = AESUtility.AesGcmDecrypt (_ wxCfg.SrvApiV3Key, certificateModel.EncryptCertificate.AssociatedData, certificateModel.EncryptCertificate.Nonce, certificateModel.EncryptCertificate.Ciphertext); third, upload pictures

Because my picture is saved in oss, first of all, I want to Bytes the network picture, and sha256 the picture. The method is at the back.

Protected async Task GetUrlBytesAsync (string url, Dictionary headers = null) {try {if (headers! = null & & headers.Count > 0) {foreach (var header in headers) {_ client.DefaultRequestHeaders.TryAddWithoutValidation (header.Key, header.Value) } var res = await _ client.GetAsync (url); res.EnsureSuccessStatusCode (); return await res.Content.ReadAsByteArrayAsync ();} catch {return default;}}

Then upload the picture.

/ upload picture / public async Task UploadFile (string url) {string fileContentType; string filetype; if (urlroom.Concluded (".bmp", StringComparison.OrdinalIgnoreCase)) {fileContentType = "image/bmp" Filetype = ".bmp";} else if (urlroom.Conception (".jpg", StringComparison.OrdinalIgnoreCase)) {fileContentType = "image/jpeg"; filetype = ".jpg" } else if (urlbear.Conception (".jpeg", StringComparison.OrdinalIgnoreCase)) {fileContentType = "image/jpeg"; filetype = ".jpeg";} else {fileContentType = "image/png"; filetype = ".png" } UploadMerchantMediaImageRequest meta = new (); var fileBytes = await GetUrlBytesAsync (url); / / get network picture Bytes if ((fileBytes?.Length? 0) = = 0) {return new MKResult (code: 400, msg: "failed to convert picture");} meta.FileHash = GetHash (fileBytes) Meta.FileName = Guid.NewGuid (). ToString ("N"). ToLower () + filetype; string boundary = "- BOUNDARY--" + DateTimeOffset.Now.Ticks.ToString ("x"); using var fileContent = new ByteArrayContent (fileBytes); using var metaContent = new StringContent (meta.ToJson (), Encoding.UTF8, "application/json"); using var httpContent = new MultipartFormDataContent (boundary) HttpContent.Add (metaContent, "\" meta\ "); / / meta must be in double quotes httpContent.Add (fileContent,"\ "file\", "\" + meta.FileName + "\"); / / double quotation marks httpContent.Headers.ContentType = MediaTypeHeaderValue.Parse ("multipart/form-data; boundary=" + boundary) must be added. / / boundary cannot be quoted metaContent.Headers.ContentType = MediaTypeHeaderValue.Parse ("application/json"); fileContent.Headers.ContentType = MediaTypeHeaderValue.Parse (fileContentType); var uri = $"/ v3/merchant/media/upload"; var res = await V3UpLoadFile (uri, meta.ToJson (), httpContent); return new MKResult (res, 1) } private async Task V3UpLoadFile (string uri, string meta, MultipartFormDataContent content) {var auth = SrvPayBuildAuthAsync (uri, meta) Var header = new Dictionary {{"Authorization", $"WECHATPAY2-SHA256-RSA2048 {auth}"}, {"Accept", "* / *"}, {"Accept-Encoding", "gzip,deflate,brn"}, {"User-Agent", "Mozilla/5.0 (Windows NT 10.0; Win64)" X64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46 "},}; return await V3PostFileAsync (uri, header, content);} protected async Task V3PostFileAsync (string url, Dictionary headers, MultipartFormDataContent content) {HttpResponseMessage res = null Try {if (headers! = null & & headers.Count > 0) {foreach (var header in headers) {_ client.DefaultRequestHeaders.TryAddWithoutValidation (header.Key, header.Value) }} res = await _ client.PostAsync (url, content); res.EnsureSuccessStatusCode (); var result = await res.Content.ReadAsStringAsync (); if (result = = null) {return default } return result.ToJson ();} catch {var result = await res.Content.ReadAsStringAsync (); if (result = = null) {return default;} return result.ToJson () } finally {if (content! = null) {content.Dispose ();} # region binary content sha256 private static string GetHash (byte [] bytes) {if (bytes = = null) throw new ArgumentNullException (nameof (bytes)) Using SHA256 sha = SHA256.Create (); byte [] hashBytes = sha.ComputeHash (bytes); return BitConverter.ToString (hashBytes) .replace ("-", ") .ToLower ();} IV, encryption of sensitive information

Encrypt using the obtained certificate certificateModel

Public static class RSAUtility {public static string RSAEncrypt (string text, Certificates certificateModel) {var bytes = Encoding.UTF8.GetBytes (certificateModel.EncryptCertificate.Ciphertext); using var x509 = new X509Certificate2 (bytes); var rsaParam = x509.GetRSAPublicKey (). ExportParameters (false); var rsa = new RSACryptoServiceProvider (); rsa.ImportParameters (rsaParam) Var buff = rsa.Encrypt (Encoding.UTF8.GetBytes (text), true); return Convert.ToBase64String (buff);}} five, query input status

Directly use the Id returned by the input, and call the API to query the Ok.

At this point, the study on "how to understand. Net Core Wechat service provider secondary feed development" is over. I hope to be able to solve your doubts. The collocation of theory and practice can better help you learn, go and try it! If you want to continue to learn more related knowledge, please continue to follow the website, the editor will continue to work hard to bring you more practical articles!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.