Browse Source

#828 优化支付结果通知类的checkResult方法

该方法重写了基类中的同名方法。
return_code为SUCCESS时,如果sign为空,则该通知请求是非微信通知请求,因此抛出异常。
否则,调用基类同名方法。
master
SunshineTech Zhang 6 years ago
committed by Binary Wang
parent
commit
f379769c1e
1 changed files with 19 additions and 1 deletions
  1. +19
    -1
      weixin-java-pay/src/main/java/com/github/binarywang/wxpay/bean/notify/WxPayOrderNotifyResult.java

+ 19
- 1
weixin-java-pay/src/main/java/com/github/binarywang/wxpay/bean/notify/WxPayOrderNotifyResult.java View File

@@ -284,7 +284,25 @@ public class WxPayOrderNotifyResult extends BaseWxPayResult {
*/
@XStreamAlias("version")
private String version;

/**
* 校验返回结果签名.
*
* @param wxPayService the wx pay service
* @param signType 签名类型
* @param checkSuccess 是否同时检查结果是否成功
* @throws WxPayException the wx pay exception
*/
@Override
public void checkResult(WxPayService wxPayService, String signType, boolean checkSuccess) throws WxPayException {
//防止伪造成功通知
if ("SUCCESS".equals(getReturnCode()) && getSign() == null) {
throw new WxPayException("伪造的通知!");
}
super.checkResult(wxPayService, signType, checkSuccess);
}
/**
* From xml wx pay order notify result.
*


Loading…
Cancel
Save