PHP接入PayPal支付的2两种方式

霞觀小刺 發表於 2024-3-1 15:39:00

<h1>1、SDK接入贝宝支付v1接口</h1>
注：底下有sdk的文档说明，如是代码问题可直接参考底部官方sdk文档
<h2>安装SDK</h2>
<div class="cnblogs_code">
<pre>composer require paypal/rest-api-sdk-php:*</pre>
</div>
 
<h2>生成支付链接</h2>
<div class="cnblogs_code">
<pre>class Paypal
{
protected $apiContext;
protected $amount;
protected $orderId;

public function __construct()
{
 // CLIENT_ID、SECRET_KEY从Apps & Credentials->API Credentials->REST API apps列表中获取，参考图01
 $this->apiContext = new ApiContext(
 new OAuthTokenCredential(
 "CLIENT_ID",
 "SECRET_KEY"
 )
 );

 $this->apiContext->setConfig(
 [
 'mode' => 'sandbox', //sandbox沙箱或 'live'生产环境，根据你的环境设置
 'log.LogEnabled' => true,
 'log.FileName' => LOG_PATH . 'pay/paypal.log',
 'log.LogLevel' => 'DEBUG'
 ]
 );
}

/**
* 设置金额
* @param string $amount
* @return $this
*/
public function setAmount(string $amount): Paypal
{
 $this->amount = $amount;
 return $this;
}

/**
* 设置订单号
* @param string $orderId
* @return $this
*/
public function setOrderId(string $orderId): Paypal
{
 $this->orderId = $orderId;
 return $this;
}

/**
* 拉起支付
* @return string|null
* @throws Exception
*/
public function pay()
{

 // 设置付款金额
 $payment = new Payment();
 $payment->setIntent("sale");

 // 设置payer信息
 $payer = new Payer();
 $payer->setPaymentMethod('paypal');

 $payment->setPayer($payer);
 // 设置付款金额
 $amount = new Amount();
 $amount->setTotal($this->amount);
 $amount->setCurrency('USD');

 // 创建交易
 $transaction = new Transaction();
 $transaction->setAmount($amount);
 $transaction->setCustom($this->orderId);

 // 将交易添加到付款
 $payment->addTransaction($transaction);

 // 设置重定向 URL
 $redirectUrls = new RedirectUrls();
 $redirectUrls->setReturnUrl("支付成功跳转链接")
 ->setCancelUrl("支付失败或取消支付跳转链接");
 $payment->setRedirectUrls($redirectUrls);
 // 创建付款并获取批准 URL
 try {
 $payment->create($this->apiContext); // 获取支付链接，直接做跳转就行了跳转效果参考图02
 return $payment->getApprovalLink();
 } catch (\PayPalConnectionException $e) {
 throw new Exception($e->getMessage());
 }
}
}</pre>
</div>
图01
<img src="https://img2024.cnblogs.com/blog/830000/202403/830000-20240301151124203-1403308924.png">
 
图02（注：测试支付时，在沙箱模式下用沙箱个人账号登录就可以支付，企业账号那是收款账号）
<img src="https://img2024.cnblogs.com/blog/830000/202403/830000-20240301151516653-1805053537.png">
选择支付方式，点击继续查看订单就能跳转到支付成功的地方了
<h2>WebHook</h2>
从参考图01中的Default Application点击进去，在最底部有个Add WebHook
添加你的Webhook Url 然后选择Event types，
选择事件Event types的时候碰到一些坑。
1、支付成功之后设定的Webhook Url没有接收到Webhook，网站找了好些事件都没收到，干脆选择了ALL Events所有事件，就有收到Webhook的消息。
2、设置webhook成功之后，可以使用paypal上的Webhooks simulator，模拟Webhooks请求来确认设定的webhook url是否能被paypal调用。（需要注意的是，这个只是用来测试链接是都可用，不能用来做webhook的回调验证）
<img src="https://img2024.cnblogs.com/blog/830000/202403/830000-20240301153121596-1875978246.png">
 设定成功之后，Webhook ID要用来做webhook通知的验证
<div class="cnblogs_Highlighter">
<pre class="brush:csharp;gutter:true;">public function completed()
{

 $requestBody = file_get_contents('php://input');
 // getallheaders() 并非 PHP 标准库中的内置函数。这个函数通常是由 Apache 或 Nginx 提供的服务器软件自带的，用于获取 HTTP 请求的所有报头信息
 // 可以参考 https://php.net/manual/en/function.getallheaders.php 参考图03自己写一个
 $headers = getallheaders();
 $headers = array_change_key_case($headers, CASE_UPPER);
 $signatureVerification = new VerifyWebhookSignature();
 $signatureVerification->setAuthAlgo($headers['PAYPAL-AUTH-ALGO']);
 $signatureVerification->setTransmissionId($headers['PAYPAL-TRANSMISSION-ID']);
 $signatureVerification->setCertUrl($headers['PAYPAL-CERT-URL']);
 $signatureVerification->setWebhookId("7NR07992TT6909325"); // 此处填写Webhook id 参考上图
 $signatureVerification->setTransmissionSig($headers['PAYPAL-TRANSMISSION-SIG']);
 $signatureVerification->setTransmissionTime($headers['PAYPAL-TRANSMISSION-TIME']);

 $signatureVerification->setRequestBody($requestBody);
 $request = clone $signatureVerification;
 try {
 $output = $signatureVerification->post($this->apiContext);
 } catch (\Exception $ex) {
 log_message('验证webhook失败' . $request, 'log', LOG_PATH . 'pay/notify/paypal/');
 http_response_code(400);
 exit(1);
 }
 $checkArray = json_decode($output);
 if ($checkArray['verification_status'] !== "SUCCESS") {
 log_message('验证失败' . $output, 'log', LOG_PATH . 'pay/notify/paypal/');
 http_response_code(400);
 exit(1);
 }
 $body = json_decode($requestBody, true);
 $event = $body['event_type'];
 // 事件验证
 if ($event != 'PAYMENTS.PAYMENT.CREATED') {
 exit(1);
 }
 // todo 获取自定义订单号从$requestBody中获取就行了,底部有附上webhook post过来的数据

 // 此处需要调用execute函数否则不会扣款
 // 获取payment_id
 $paymentId = $body['resource']['id'] ?? "";
 // 获取payer_id
 $payer_id = $body['resource']['payer']['payer_info']['payer_id'] ?? "";
 $payment = Payment::get($paymentId, $this->apiContext);
 $execution = new PaymentExecution();
 $execution->setPayerId($payerId);
 //todo 当前步骤应放在支付成功页面用户确认可以扣款的时候执行，此处通知execute可以扣款 $payment->execute($execution, $this->apiContext); http_response_code(200); }</pre>
</div>
　　
图03
<img src="https://img2024.cnblogs.com/blog/830000/202403/830000-20240301153608722-841184087.png">
 
附上sdk代码说明：
第一次调用：https://github.com/paypal/PayPal-PHP-SDK/wiki/Making-First-Call
webhook验证：https://github.com/paypal/PayPal-PHP-SDK/blob/master/sample/notifications/ValidateWebhookEvent.php
 
<div class="cnblogs_code">
<pre> 1 {
 2 "id": "WH-xxxxx29646",
 3 "event_version": "1.0",
 4 "create_time": "2024-03-01T06:05:05.071Z",
 5 "resource_type": "payment",
 6 "event_type": "PAYMENTS.PAYMENT.CREATED",
 7 "summary": "Checkout payment is created and approved by buyer",
 8 "resource": {
 9 "update_time": "2024-03-01T06:05:05Z",
10 "create_time": "2024-03-01T06:04:17Z",
11 "redirect_urls": {
12 "return_url": "不给你看/success?order_id=xxxx17092730559494713269&paymentId=PAYID-MXQW7YQ1WK07543WU5660207",
13 "cancel_url": "不给你看/cancel?order_id=xxxx17092730559494713269"
14 },
15 "links": [{
16 "href": "https://api.sandbox.paypal.com/v1/payments/payment/PAYID-MXQW7YQ1WK07543WU5660207",
17 "rel": "self",
18 "method": "GET"
19 }, {
20 "href": "https://api.sandbox.paypal.com/v1/payments/payment/PAYID-MXQW7YQ1WK07543WU5660207/execute",
21 "rel": "execute",
22 "method": "POST"
23 }, {
24 "href": "https://www.sandbox.paypal.com/cgi-bin/webscr?cmd=_express-checkout&token=EC-88T51633HV219313S",
25 "rel": "approval_url",
26 "method": "REDIRECT"
27 }],
28 "id": "PAYID-MXQW7YQ1WKX07543WU5660207",
29 "state": "created",
30 "transactions": [{
31 "amount": {
32 "total": "10.00",
33 "currency": "USD"
34 },
35 "payee": {
36 "merchant_id": "56LKGLM7XKYZS",
37 "email": "sb-pst2f29464466@business.example.com"
38 },
39 "custom": "xxxx17092730559494713269",
40 "item_list": {
41 "shipping_address": {
42 "recipient_name": "Doe John",
43 "line1": "NO 1 Nan Jin Road",
44 "city": "Shanghai",
45 "state": "Shanghai",
46 "postal_code": "200000",
47 "country_code": "C2"
48 }
49 },
50 "related_resources": []
51 }],
52 "intent": "sale",
53 "payer": {
54 "payment_method": "paypal",
55 "status": "VERIFIED",
56 "payer_info": {
57 "email": "sb-bmgd529469552@personal.example.com",
58 "first_name": "John",
59 "last_name": "Doe",
60 "payer_id": "3X3PG26EMGJUXA",
61 "shipping_address": {
62 "recipient_name": "Doe John",
63 "line1": "NO 1 Nan Jin Road",
64 "city": "Shanghai",
65 "state": "Shanghai",
66 "postal_code": "200000",
67 "country_code": "C2"
68 },
69 "country_code": "C2"
70 }
71 },
72 "cart": "88T51633HV219313S"
73 },
74 "links": [{
75 "href": "https://api.sandbox.paypal.com/v1/notifications/webhooks-events/WH-9X625867WT536171R-0TU00941FP4129646",
76 "rel": "self",
77 "method": "GET"
78 }, {
79 "href": "https://api.sandbox.paypal.com/v1/notifications/webhooks-events/WH-9X625867WT536171R-0TU00941FP4129646/resend",
80 "rel": "resend",
81 "method": "POST"
82 }]
83 }</pre>
</div>
 
<h1>2、不用SDK接入API v2接口</h1>
《官方接口文档地址》
注：原先以为用sdk会比较快也没有仔细的查看下文档，后来看了文档之后觉得直接接入接口还比较快，
还有一个是我觉得webhook会有延时，没有很实时。写的比较仓促，对你有帮助的话记得一键三连哈！！！
<h2>授权</h2>
我用用到的接口授权可以使用 <Access-Token> 也可以使用 <client_id:secret> 看你的需求去使用，主要看接口支不支持，看有没有必要省去获取<Access-Token>这一步
<img src="https://img2024.cnblogs.com/blog/830000/202403/830000-20240320151805325-736417345.png">
<h3> 1、获取Access-Token</h3>
<div class="cnblogs_code">
<pre> 1 const PAYPAL_API_TOKEN = 'paypal:token';
 2 protected $api;
 3
 4 public function __construct(){
 5 // api地址
 6 // 正式：https://api-m.paypal.com
 7 // 测试：https://api-m.sandbox.paypal.com
 8 $this->api = "https://api-m.sandbox.paypal.com";
 9 }
10 /**
11 * 获取token，一般返回来的access token有效时是9个小时
12 **/
13 public function getToken()
14 {
15 try {
16 // 获取缓存中是否有存在
17 $redis = Cache::store('redis');
18 $tokens = $redis->get(self::PAYPAL_API_TOKEN);
19 if ($tokens != null) {
20 // 有存在直接返回 access_token
21 $array = json_decode($tokens, true);
22 return resultArray(1, 'SUCCESS', [
23 'access_token' => $array['access_token']
24 ]);
25 }
26 // 使用测试pay
27 $clientId = '你的clientId';
28 $clientSecret = '你的secret';
29 // 对凭证base64编码
30 $credentials = base64_encode($clientId . ':' . $clientSecret);
31 $url =$this->api . '/v1/oauth2/token';
32
33 $ch = curl_init();
34 curl_setopt($ch, CURLOPT_URL, $url);
35 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
36 curl_setopt($ch, CURLOPT_POST, 1);
37 curl_setopt($ch, CURLOPT_POSTFIELDS, 'grant_type=client_credentials');
38 curl_setopt($ch, CURLOPT_HTTPHEADER, array(
39 'Content-Type: application/x-www-form-urlencoded',
40 'Authorization: Basic ' . $credentials
41 ));
42
43
44 $result = curl_exec($ch);
45 if (curl_errno($ch)) {
46 return resultArray(0, curl_error($ch));
47 }
48 curl_close($ch);
49 // 获取成功写入缓存
50 $array = json_decode($result, true);
51 $flag = $redis->set(self::PAYPAL_API_TOKEN, $result, $array['expires_in']);
52 if ($flag) {
53 return resultArray(1, 'SUCCESS', [
54 'access_token' => $array['access_token']
55 ]);
56 }
57 } catch (\Exception $e) {
58 return resultArray(0, curl_error($ch));
59 }
60 return resultArray(0, '获取token失败');
61 }</pre>
</div>
<h3>2、封装CURL请求(包含<Access-Token> OR <client_id:secret>)</h3>
<div class="cnblogs_code">
<pre> 1 /**
 2 * curl 请求 todo ①注释是access-token方式 ②是base64加密凭证
 3 * @param string $url
 4 * @param array $data
 5 * @param string $method
 6 * @return array
 7 */
 8 public function curl(string $url, array $data = [], string $method = 'GET'): array
 9 {
10 try {
11 $payload = empty($data) ? '' : json_encode($data);
12
13 /*
14 *todo ① Access-Token方式，我的是放缓存，需要从缓存获取，缓存没有话会重新去请求拉取
15 $tokens = $this->getToken();
16 if ($tokens['code'] != 1) {
17 return resultArray(0, $tokens['msg']);
18 }
19 $token = $tokens['data']['access_token'];
20 */
21
22 // todo ② 凭证编码
23 $token = base64_encode("你的client" . ':' . "你的secret");
24
25 $ch = curl_init();
26 curl_setopt($ch, CURLOPT_URL, $url);
27 // 将凭证放入请求头
28 curl_setopt($ch, CURLOPT_HTTPHEADER, array(
29 'Content-Type: application/json',
30 /* todo ①Access-Token方式请求头
31 'Authorization: Bearer ' . $token
32 */
33 // todo ② 直接使用base64加密凭证
34 'Authorization: Basic ' . $token
35 ));
36 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
37 if ($method === 'POST') {
38 curl_setopt($ch, CURLOPT_POST, true);
39 curl_setopt($ch, CURLOPT_POSTFIELDS, $payload);
40 } elseif ($method === 'GET') {
41 curl_setopt($ch, CURLOPT_HTTPGET, true);
42 }
43
44 $result = curl_exec($ch);
45 if (curl_errno($ch)) {
46 return resultArray(0, curl_error($ch));
47 }
48
49 $data = json_decode($result, true);
50 $httpStatusCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
51 if ($httpStatusCode == 422) {
52 $message = $data['message'] ?? "";
53 return resultArray(0, 'HTTP 422 Unprocessable entity ERROR:' . $message);
54 } else if ($httpStatusCode == 504) {
55 return resultArray(0, 'HTTP 504 Gateway Timeout');
56 }
57
58 curl_close($ch);
59 return resultArray(1, '', $data);
60 } catch (\Exception $e) {
61 return resultArray(0, $e->getMessage());
62 }
63 }</pre>
</div>
<h2>创建订单</h2>
<div class="cnblogs_code">
<pre>public function create()
{
 // OrderId是我的自定义订单号
 $successUrl = 'http://{支付成功跳转地址}?OrderId=' . $inserData['order_id'];
 $cancelUrl = 'http://{支付失败跳转地址}?OrderId=' . $inserData['order_id'];

 // 创建订单
 $url = $this->api . "/v2/checkout/orders";
 $data = array(
 'intent' => 'CAPTURE',
 'purchase_units' => [
 [
 'reference_id' => "{你的自定义单号}",
 'description' => "{订单描述}",
 'amount' => [
 // 货币缩写美元
 'currency_code' => 'USD',
 // 金额支持小数后两位
 'value' => 0.01
 ]
 ]
 ],
 'application_context' => [
 'shipping_preference' => 'NO_SHIPPING',
 'return_url' => $successUrl,
 'cancel_url' => $cancelUrl,
 ]
 );
 // 调用上面封装的curl
 $result = $this->curl($url, $data, 'POST');
 if ($result['code'] == 1) {
 
 // 下单成功之后直接跳转到支付链接（links数组中的第二个是支付页面的链接）
 $links = $result['data']['links']['href'];
 header("Location: {$links}");
 exit(0);
 }
}</pre>
</div>
<h2>捕获订单付款</h2>
用户支付成功之后会跳转到你定义的支付成功页面，你可以获取token然后请求capture接口来完成订单
<div class="cnblogs_code">
<pre> public function success()
{ $token = request()->get('token'); $url = $this->api . "/v2/checkout/orders/{$token}/capture";
 $result = $this->curl($url, [], 'POST');
 // todo 此处可以根据捕获的订单信息，做订单验证、完结等业务逻辑
}</pre>
</div>
  
来源：https://www.cnblogs.com/chenjiangbin/p/18047103

頁: [1]

琼殿技术论坛's Archiver

PHP接入PayPal支付的2两种方式