支付中台接入方案

# 抽象层核心：ChannelAdapter 接口 + 注册中心 interface ChannelAdapter: def create_payment(order) -> PaymentParams # 返回拉起参数 def verify_notify(payload) -> PaymentResult # 验签 + 幂等 def query(trade_no) -> PaymentResult # 兜底查单 def refund(order, amount) -> RefundResult # 原路退款 def fetch_bill(date) -> BillFile # 对账单拉取 class PaymentGateway: adapters = {"wechat": WechatAdapter(), "alipay": AlipayAdapter(), "huawei": HuaweiAdapter(), "unionpay": UnionpayAdapter()} def charge(self, channel, order): return self.adapters[channel].create_payment(order) # 探活：通道失败 3 次/分钟 → 标记降级，路由自动切换备用通道

// 1. 前端请求创建订单 POST /payment/charge { "package_id": "pkg_1200", "channel": "wechat" } // 2. 后端 → 微信支付 API：创建订单 POST https://api.mch.weixin.qq.com/v3/pay/transactions/app Headers: Authorization: WECHATPAY2-SHA256-RSA2048 ... Body: { "appid": "wx_xxx", "mchid": "mch_xxx", "description": "Vocalink 1200 金币", "out_trade_no": "ord_xxx", "notify_url": "https://api.vocalink.cn/v1/payment/notify/wechat", "amount": { "total": 990, "currency": "CNY" } } // 3. 微信返回预支付参数 Response: { "prepay_id": "wx_xxx" } // 4. 客户端调起微信支付 → 微信异步回调 POST /payment/notify/wechat { "out_trade_no": "ord_xxx", "transaction_id": "wx_123", "trade_state": "SUCCESS", "amount": {...} } // 5. 后端验签 → 发放金币 → WebSocket 通知客户端

// 1. 后端创建支付宝订单 AlipayTradeAppPayRequest request = new AlipayTradeAppPayRequest(); request.setNotifyUrl("https://api.vocalink.cn/v1/payment/notify/alipay"); request.setBizContent("{" + "\"out_trade_no\":\"ord_xxx\"," + "\"total_amount\":\"9.90\"," + "\"subject\":\"Vocalink 1200 金币\"," + "\"product_code\":\"QUICK_MSECURITY_PAY\"}"); // 2. 返回 orderStr 给前端 Response: { "orderStr": "alipay_sdk=alipay-sdk-java..." } // 3. 前端拉起支付宝 → 支付宝异步通知 POST /payment/notify/alipay { "out_trade_no": "ord_xxx", "trade_no": "2026081522001", "trade_status": "TRADE_SUCCESS", "total_amount": "9.90", "sign": "..." } // 4. 后端验签（RSA2）+ 幂等 + 发放金币

// 1. iOS 客户端完成购买 → 获取 receipt let receiptData = try! Data(contentsOf: Bundle.main.appStoreReceiptURL!) let receiptString = receiptData.base64EncodedString() // 2. 客户端发送 receipt 到后端验证 POST /payment/subscription { "plan_id": "vip_month", "channel": "apple_iap", "receipt_data": receiptString } // 3. 后端 → Apple VerifyReceipt API（国内网络可达性评估，必要时走合规通道） POST https://buy.itunes.apple.com/verifyReceipt { "receipt-data": receiptString, "password": "shared_secret" } // 4. Apple 返回验证结果 { "status": 0, "receipt": {...}, "latest_receipt_info": [{ "product_id": "cn.vocalink.vip.month", "expires_date_ms": "1718000000000" }] } // 5. 后端验证 + 发放 VIP + 记录原始交易 ID（用于续订）

# 风控引擎（Payment Service 内） class RiskEngine: def evaluate(self, payment_request): risk_score = 0 user = get_user(payment_request.user_id) # 规则 1：高频 if self._count_recent_payments(user.id, hours=1) > 5: risk_score += 30 # 规则 2：大额 if payment_request.amount_cny > 500: risk_score += 20 # 规则 3：异常地区 if payment_request.ip_region in BLOCK_LIST: risk_score += 25 # 规则 4：新账号 if (now() - user.created_at) < 24h and payment_request.amount_cny > 200: risk_score += 35 # 规则 5：未实名 / 疑似未成年 if not user.real_name_verified: risk_score += 40 # 决策 if risk_score >= 70: return "block", "High risk score" elif risk_score >= 40: return "review", "Manual review needed" else: return "allow", "Low risk"