SpringBoot整合支付宝沙箱支付的完整案例

APP_ID: 9021000122691234（沙箱专用）
应用私钥: 生成的 RSA2 私钥
支付宝公钥: 生成的 RSA2 公钥
服务器异步通知地址: http://你的地址/pay/notify

买家账号: rixwby5818@sandbox.com
登录密码: 111111
支付密码: 111111

<dependency>
    <groupId>com.alipay.sdk</groupId>
    <artifactId>alipay-sdk-java</artifactId>
    <version>4.38.200.ALL</version>
</dependency>

alipay:
  app-id: 9021000122691234
  app-private-key: |
    -----BEGIN RSA PRIVATE KEY-----
    MIIEowIBAAKCAQ...
    （你的应用私钥，不要写在配置里！建议用Jasypt加密）
    -----END RSA PRIVATE KEY-----
  alipay-public-key: |
    -----BEGIN PUBLIC KEY-----
    MIIBIjANBgk...
    （支付宝公钥）
    -----END PUBLIC KEY-----
  notify-url: http://你的公网IP/pay/notify
  return-url: http://localhost:9090/pay/return
  gateway-url: https://openapi-sandbox.dl.alipaydev.com/gateway.do

@Configuration
@ConfigurationProperties(prefix = "alipay")
@Data
public class AlipayConfig {
    private String appId;
    private String appPrivateKey;
    private String alipayPublicKey;
    private String notifyUrl;
    private String returnUrl;
    private String gatewayUrl;

    @Bean
    public AlipayClient alipayClient() {
        return new DefaultAlipayClient(
            gatewayUrl, appId, appPrivateKey,
            "json", "utf-8", alipayPublicKey, "RSA2"
        );
    }
}

@Service
public class AlipayService {

    @Autowired
    private AlipayClient alipayClient;

    @Autowired
    private AlipayConfig alipayConfig;

    /**
     * 创建支付订单，返回支付页面表单
     */
    public String createPay(String orderNo, BigDecimal amount, String subject) {
        AlipayTradePagePayRequest request = new AlipayTradePagePayRequest();

        // 同步回调地址（用户支付完成后跳转）
        request.setReturnUrl(alipayConfig.getReturnUrl());
        // 异步回调地址（支付宝服务器通知）
        request.setNotifyUrl(alipayConfig.getNotifyUrl());

        JSONObject biz = new JSONObject();
        biz.put("out_trade_no", orderNo);       // 商户订单号
        biz.put("total_amount", amount.toString()); // 支付金额
        biz.put("subject", subject);            // 订单标题
        biz.put("product_code", "FAST_INSTANT_TRADE_PAY"); // 电脑网站支付

        request.setBizContent(biz.toJSONString());

        try {
            AlipayTradePagePayResponse response = alipayClient.pageExecute(request);
            if (response.isSuccess()) {
                return response.getBody();  // 返回 HTML 表单
            }
        } catch (AlipayApiException e) {
            throw new RuntimeException("支付宝下单失败", e);
        }
        return null;
    }
}

@RestController
@RequestMapping("/pay")
public class PayController {

    @Autowired
    private AlipayService alipayService;

    /**
     * 发起支付
     */
    @PostMapping("/create")
    public ResultVO<String> createPay(@RequestBody PayDTO dto) {
        // 生成订单号
        String orderNo = "ORD" + IdUtil.simpleUUID().toUpperCase();
        String form = alipayService.createPay(orderNo, dto.getAmount(), dto.getSubject());
        return ResultVO.success(form);
    }

    /**
     * 同步回调（用户支付完成后跳转到此页面）
     */
    @GetMapping("/return")
    public String returnUrl(HttpServletRequest request) {
        // 获取支付宝返回的参数
        Map<String, String> params = getParamsFromRequest(request);
        try {
            // 验签
            AlipaySignature.rsaCheckV1(
                params, alipayConfig.getAlipayPublicKey(), "utf-8", "RSA2");
            String orderNo = params.get("out_trade_no");
            String tradeNo = params.get("trade_no");
            return "支付成功！订单号: " + orderNo;
        } catch (AlipayApiException e) {
            return "验签失败";
        }
    }

    /**
     * 异步回调（支付宝服务器通知，必须返回 success）
     */
    @PostMapping("/notify")
    public String notifyUrl(HttpServletRequest request) {
        Map<String, String> params = getParamsFromRequest(request);
        try {
            boolean signVerified = AlipaySignature.rsaCheckV1(
                params, alipayConfig.getAlipayPublicKey(), "utf-8", "RSA2");

            if (signVerified) {
                String orderNo = params.get("out_trade_no");
                String tradeNo = params.get("trade_no");
                String tradeStatus = params.get("trade_status");

                // 支付成功
                if ("TRADE_SUCCESS".equals(tradeStatus)) {
                    // 更新订单状态、归还库存等业务逻辑
                    updateOrderStatus(orderNo, tradeNo);
                }
                return "success";  // 必须返回 success，否则支付宝会重复通知
            }
        } catch (AlipayApiException e) {
            e.printStackTrace();
        }
        return "fail";
    }

    private Map<String, String> getParamsFromRequest(HttpServletRequest request) {
        Map<String, String> params = new HashMap<>();
        Map<String, String[]> requestParams = request.getParameterMap();
        for (String name : requestParams.keySet()) {
            params.put(name, request.getParameter(name));
        }
        return params;
    }
}

@Service
public class PayService {

    @Autowired
    private OrderService orderService;

    @Autowired
    private ProductService productService;

    /**
     * 支付成功回调处理
     */
    @Transactional
    public void handlePaySuccess(String orderNo, String tradeNo) {
        // 1. 查询订单
        SeckillOrder order = orderService.lambdaQuery()
            .eq(SeckillOrder::getOrderNo, orderNo)
            .one();

        if (order == null || order.getStatus() != 0) {
            return;  // 订单不存在或已处理
        }

        // 2. 更新订单状态为已支付
        order.setStatus(1);
        order.setPayTime(LocalDateTime.now());
        order.setTradeNo(tradeNo);
        orderService.updateById(order);

        // 3. 记录支付日志
        log.info("支付成功: 订单={}, 支付宝交易号={}", orderNo, tradeNo);
    }
}

<button onclick="pay()">支付宝支付</button>
<script>
async function pay() {
    const resp = await fetch('/pay/create', {
        method: 'POST',
        headers: {'Content-Type': 'application/json'},
        body: JSON.stringify({
            amount: 99.99,
            subject: '秒杀商品 - iPhone 15'
        })
    });
    const result = await resp.json();
    if (result.code === 200) {
        // 把返回的 HTML 表单写到页面并自动提交
        document.body.innerHTML = result.data;
        document.forms[0].submit();  // 自动跳转到支付宝
    }
}
</script>