python manage.py startapp demo

pip3 install alipay-sdk-python

-----BEGIN PUBLIC KEY-----
你的支付宝公钥
-----END PUBLIC KEY-----

-----BEGIN RSA PRIVATE KEY-----
你的应用私钥
-----END RSA PRIVATE KEY-----

alipay_demo/                  # 项目根目录
├── alipay/              # 主配置目录
│   ├── settings.py
│   ├── urls.py
│   └── ...
├── demo/                   # 应用（新建）
│   ├── models.py          # 订单模型
│   ├── views.py           # 支付相关视图
│   ├── templates          # 支付模板
│   └── urls.py
├── keys/                  # 存放密钥（新建）
│   ├── app_private_key.pem  # 应用私钥
│   └── alipay_public_key.pem # 支付宝公钥
└── manage.py

INSTALLED_APPS = [
    'django.contrib.admin',
    'django.contrib.auth',
    'django.contrib.contenttypes',
    'django.contrib.sessions',
    'django.contrib.messages',
    'django.contrib.staticfiles',
    'demo', # 注册demo应用
]

# 支付宝沙箱配置
ALIPAY_SETTINGS = {
    "appid": "9021000155669214",
    "app_return_url": "http://项目公网地址/pay/success/",    # 同步回调地址
    "app_notify_url": "http://项目公网地址/alipay/notify/",  # 异步回调地址
    "app_private_key_path": os.path.join(BASE_DIR, "keys/app_private_key.pem"),  # 应用私钥路径
    "alipay_public_key_path": os.path.join(BASE_DIR, "keys/alipay_public_key.pem"),  # 支付宝公钥路径
    "sign_type": "RSA2",  # 签名方式
    "debug": True,  # 沙箱环境为True
}


# 读取密钥内容
from Crypto.PublicKey import RSA
# 1. 读取应用私钥
with open(ALIPAY_SETTINGS['app_private_key_path'], 'r') as f:
    app_private_key_content = f.read()
    private_key = RSA.import_key(app_private_key_content) # 主要是对文件内容进行处理，移除空格，换行，以及类似-----BEGIN PUBLIC KEY-----的样式
    app_private_key = private_key.export_key().decode('utf-8')
    ALIPAY_SETTINGS['app_private_key'] = app_private_key
# 2. 读取支付宝公钥
with open(ALIPAY_SETTINGS['alipay_public_key_path'], 'r') as f:
    alipay_public_key_content = f.read()
    public_key = RSA.import_key(alipay_public_key_content)
    alipay_public_key = public_key.export_key().decode('utf-8')
    ALIPAY_SETTINGS['alipay_public_key'] = alipay_public_key

urlpatterns = [
    path('admin/', admin.site.urls),
    path('product/', views.product, name="product"),
    path('order/<int:product_id>/', views.order, name="order"),
    path('order_list/', views.order_list, name="order_list"),
    path('alipay/notify/', views.alipay_notify, name="alipay_notify"),
    path('pay/result/', views.alipay_return, name="alipay_return"),
    path('pay/<str:order_id>/', views.pay, name="pay"), # 字符串类型，且需要放在最后一位
]

class Product(models.Model):
    name = models.CharField(max_length=256)
    price = models.DecimalField(max_digits=11, decimal_places=2)  # 精确到分(支付宝限制参数)

class Order(models.Model):
    order_id = models.CharField(max_length=64, unique=True)
    total_amount = models.DecimalField(max_digits=11, decimal_places=2)  # 精确到分(支付宝限制参数)
    product = models.ForeignKey(Product, on_delete=models.CASCADE)

    # 订单状态选择：待支付、已支付、已取消
    ORDER_STATUS_CHOICES = [
        ("待支付", "待支付"),
        ("已支付", "已支付"),
        ("已取消", "已取消"),
    ]
    status = models.CharField(max_length=20, default="待支付", choices=ORDER_STATUS_CHOICES)
    created_at = models.DateTimeField(auto_now_add=True)

    # 单号随机生成且不重复，使用uuid4
    def save(self, *args, **kwargs):
        if not self.order_id:
            self.order_id = f"{uuid.uuid4().hex[:16].upper()}"
        super().save(*args, **kwargs)

from django.contrib import admin
from .models import Product, Order

admin.site.register(Product)
admin.site.register(Order)

 python manage.py createsuperuser

# 初始化客户端配置对象AlipayClientConfig
alipay_client_config = AlipayClientConfig()     # 初始化支付宝客户端配置对象
alipay_client_config.server_url = 'https://openapi-sandbox.dl.alipaydev.com/gateway.do'     # 沙箱环境  正式环境为：'https://openapi.alipay.com/gateway.do'
alipay_client_config.app_id = settings.ALIPAY_SETTINGS['appid']    # 应用ID
alipay_client_config.app_private_key = settings.ALIPAY_SETTINGS['app_private_key']    # 应用私钥
alipay_client_config.alipay_public_key = settings.ALIPAY_SETTINGS['alipay_public_key']    # 支付宝公钥
alipay_client_config.sign_type = settings.ALIPAY_SETTINGS['sign_type']  # 签名类型（默认RSA2）

# 创建客户端DefaultAlipayClient实例（一个配置对应一个客户端，配置不可动态修改）
# 如果想使用不同的配置，请定义不同的DefaultAlipayClient
alipay_client = DefaultAlipayClient(alipay_client_config)     # 创建默认的支付宝客户端对象实例

def pay(request, order_id):
    if request.method == 'POST':
        # 获取订单数据
        order = Order.objects.get(order_id=order_id)

        # 1. 创建订单参数模型（AlipayTradePagePayModel）
        page_pay_model = AlipayTradePagePayModel()
        page_pay_model.out_trade_no = order_id  # 商户订单号（唯一）
        page_pay_model.total_amount = "{0:.2f}".format(order.total_amount)  # 订单金额
        page_pay_model.subject = order.product.name  # 订单标题
        page_pay_model.product_code = "FAST_INSTANT_TRADE_PAY"  # 销售产品码，电脑网站固定为FAST_INSTANT_TRADE_PAY

        # 2. 创建支付请求对象
        page_pay_request = AlipayTradePagePayRequest(biz_model=page_pay_model)  # 关联订单参数模型
        page_pay_request.return_url = settings.ALIPAY_SETTINGS["app_return_url"]  # 同步回调地址（用户支付后跳转）
        page_pay_request.notify_url = settings.ALIPAY_SETTINGS["app_notify_url"]  # 异步通知地址（核心状态通知）

        # 3. 生成支付链接，前端跳转支付页面
        pay_url = alipay_client.page_execute(page_pay_request, http_method='GET')  # 调用page_execute方法生成支付链接（http_method可选"GET"或"POST"）

        return HttpResponse(f'<script>window.location.href="{pay_url}";</script>')  # 返回支付URL，前端跳转至支付宝支付页面

https://openhome.alipay.com/platform/home.htm?charset=utf-8&out_trade_no=page20187272054511544764&method=alipay.trade.page.pay.return&total_amount=0.01&sign=QGyeDPIpPnBkEVQKGAGNTxZ4Tvo0NWgPH6AVk6C9mQC0EzfkeLbW7riaaWavEAhxpja%2Fajmv%2Fd0v%2FLjGWZYmAhjmb%2FNw1PN1UlLqbZzrDTGY90HRmC4vhzxTAsU3SdSDiSsOMDAuGzXyCgp4YP8p7bmKjYV7UWLGsTi8qwTApYEk0GtPtn2EboEDvJR1VCEFI2Mk696%2FiEIkark25ldlrTu%2BcwdpLihLsKK7UcyUApKuy93NeBSXy801HBokg36RUhOC45goaYuiWvI1L6CP1pvuRSVGWHfsRiewDJJu2t9fnfogS6xSpatcYyUac2U1j7DHChAeX9XLKVj44g4Fyw%3D%3D&trade_no=2020032622001409860523801721&auth_app_id=2014**********22&version=1.0&app_id=2014**********22&sign_type=RSA2&seller_id=2088**********35&timestamp=2020-03-26+16%3A32%3A04

# 通知参数处理函数
def get_dic_sorted_params(org_dic_params):
    content = ''
    org_dic_params.pop('sign')
    org_dic_params.pop('sign_type')  # 去除sign、sigh_type
    new_list = sorted(org_dic_params, reverse=False)  # 待验签参数进行排序
    for i in new_list:
        p = i + '=' + org_dic_params.get(i) + '&'
        content += p
    sorted_params = content.strip('&')  # 重组字符串，将{k:v}形式的字典类型原始响应值--》转换成'k1=v1&k2=v2'形式的字符串格式
    return sorted_params


# 支付宝同步通知回调视图函数
def alipay_return(request):
    # 获取支付宝返回的所有参数
    params = request.GET.dict()
    # 提取签名
    sign = params.get('sign')
    # 对通知参数进行处理
    org_message = get_dic_sorted_params(params)
    # 转换成字节串
    message = bytes(org_message, encoding='utf-8')

    # 验证签名(同步回调参数不包含trade_status只需验证签名通过，即可认为支付流程完成)
    verified = verify_with_rsa(
        public_key=settings.ALIPAY_SETTINGS['alipay_public_key'],
        message=message,
        sign=sign,
    )
    print('同步', params)
    if verified:
        # 验签成功且交易状态有效（仅用于前端展示）
        order_id = params.get("out_trade_no")  # 商户订单号
        order = get_object_or_404(Order, order_id=order_id)
        return render(request, "success.html", {"order": order})
    else:
        # 验签失败或交易状态异常
        return render(request, "fail.html")

# 支付宝异步通知回调视图函数
@csrf_exempt    # 禁用CSRF防护，确保支付宝异步通知可以正常接收
def alipay_notify(request):
    if request.method == 'POST':
        # 1. 获取支付宝发送的通知参数（POST形式）
        params = request.POST.dict()
        # 2. 提取签名（用于验证）
        sign = params.get('sign')
        # 3. 对通知参数进行处理
        org_message = get_dic_sorted_params(params)
        # 4. 转换成字节串
        message = bytes(org_message, encoding='utf-8')

        # 5. verify_with_rsa方法验证签名
        verified = verify_with_rsa(
            public_key=settings.ALIPAY_SETTINGS['alipay_public_key'],
            message=message,
            sign=sign,
        )

        # 6. 检查验证状态
        if not verified:
            print("支付宝异步通知：签名验证失败")
            return HttpResponse("fail")  # 签名验证失败返回fail，这是支付宝接口的硬性要求

        trade_status = params.get('trade_status')
        if trade_status not in ['TRADE_SUCCESS', 'TRADE_FINISHED']:
            logging.info(f"支付未成功，状态：{trade_status}")
            return HttpResponse("success")  # 支付宝要求非成功状态也返回success

        # 7. 数据更新逻辑
        try:
            out_trade_no = params.get('out_trade_no')
            order = Order.objects.get(order_id=out_trade_no)

            # 幂等性处理：如果已经支付成功，直接返回
            if order.status == "已支付":
                return HttpResponse("success")

            order.status = "已支付"  # 更新订单状态
            order.save()
            logging.info(f"订单{out_trade_no}支付成功，状态已更新")
        except Exception as e:
            logging.error(f"处理订单失败：{str(e)}")
            return HttpResponse("fail")
        return HttpResponse("success")
    return HttpResponse("fail")  # 非POST请求返回fail

natapp.exe -authtoken=你的隧道的authtoken

ALLOWED_HOSTS = ['公网地址', 'localhost']

{
  "app_id": "沙盒APPID",
  "method": "alipay.trade.page.pay",
  "format": "JSON",
  "charset": "UTF-8",
  "sign_type": "RSA2",
  "timestamp": "2025-10-15 14:30:00",
  "version": "1.0",
  "biz_content": {
    "out_trade_no": "202510150001",
    "total_amount": "100.00",
    "subject": "测试商品",
    "product_code": "FAST_INSTANT_TRADE_PAY",
    "timeout_express": "15m"  // 沙盒限制超时时间≤15小时
  },
  "return_url": "https://your-domain.com/pay/success",  // 同步跳转地址
  "notify_url": "https://your-domain.com/pay/notify"   // 异步回调地址
}