Alipay WAP / H5 Payments

# coding=utf-8
import hashlib
import requests
import datetime

environment = "https://test-openapi-hk.qfapi.com"
app_code = "YOUR_APP_CODE"
client_key = "YOUR_CLIENT_KEY"

def make_req_sign(data, key):
    keys = sorted(list(data.keys()))
    parts = [f"{k}={data[k]}" for k in keys]
    sign_str = ("&".join(parts) + key).encode("utf-8")
    return hashlib.md5(sign_str).hexdigest().upper()

txdtm = datetime.datetime.now().replace(microsecond=0).strftime("%Y-%m-%d %H:%M:%S")

data = {
    "txamt": "10",
    "txcurrcd": "HKD",
    "pay_type": "801107",
    "out_trade_no": "01234567890123",
    "txdtm": txdtm,
    "goods_name": "test1",
    "return_url": "https://merchant.example/success",
    "notify_url": "https://merchant.example/notify"
    # "mchid": "ZaMVg*****"  # include only if provided by QFPay
    # "openid": "xxx"        # required for pay_type=800107 only
}

headers = {
    "X-QF-APPCODE": app_code,
    "X-QF-SIGN": make_req_sign(data, client_key)
}

resp = requests.post(environment + "/trade/v1/payment", data=data, headers=headers)
print(resp.json())

import java.text.SimpleDateFormat;
import java.util.Date;
import java.util.HashMap;
import java.util.Map;

public class AlipayWapExample {
  public static void main(String[] args) {
    String appcode = "YOUR_APP_CODE";
    String key = "YOUR_CLIENT_KEY";

    String txdtm = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss").format(new Date());

    Map<String, String> params = new HashMap<>();
    params.put("txamt", "10");
    params.put("txcurrcd", "HKD");
    params.put("pay_type", "801107");
    params.put("out_trade_no", "01234567890123");
    params.put("txdtm", txdtm);
    params.put("goods_name", "test1");
    params.put("return_url", "https://merchant.example/success");
    params.put("notify_url", "https://merchant.example/notify");
    // params.put("mchid", "ZaMVg*****"); // include only if provided by QFPay
    // params.put("openid", "xxx");       // required for pay_type=800107 only

    String data = QFPayUtils.getDataString(params);
    String sign = QFPayUtils.getMd5Value(data + key);

    String url = "https://test-openapi-hk.qfapi.com";
    String resp = Requests.sendPostRequest(url + "/trade/v1/payment", data, appcode, sign);
    System.out.println(resp);
  }
}

const crypto = require("crypto");
const request = require("request");

const environment = "https://test-openapi-hk.qfapi.com";
const app_code = "YOUR_APP_CODE";
const client_key = "YOUR_CLIENT_KEY";

const txdtm = new Date().toISOString().replace("T", " ").replace(/\..+/, "");

const payload = {
  txamt: "10",
  txcurrcd: "HKD",
  pay_type: "801107",
  out_trade_no: "01234567890123",
  txdtm,
  goods_name: "test1",
  return_url: "https://merchant.example/success",
  notify_url: "https://merchant.example/notify"
  // mchid: "ZaMVg*****",  // include only if provided by QFPay
  // openid: "xxx"         // required for pay_type=800107 only
};

const ordered = Object.keys(payload).sort().map(k => `${k}=${payload[k]}`).join("&");
const sign = crypto.createHash("md5").update(ordered + client_key).digest("hex").toUpperCase();

request({
  uri: environment + "/trade/v1/payment",
  headers: {
    "X-QF-APPCODE": app_code,
    "X-QF-SIGN": sign
  },
  method: "POST",
  form: payload
}, function (error, response, body) {
  console.log(body);
});

<?php
function buildSign($fields, $key) {
  ksort($fields);
  $pairs = array();
  foreach ($fields as $k => $v) { $pairs[] = $k . '=' . $v; }
  $str = implode('&', $pairs) . $key;
  return strtoupper(md5($str));
}

$url = "https://test-openapi-hk.qfapi.com/trade/v1/payment";
$app_code = "YOUR_APP_CODE";
$app_key = "YOUR_CLIENT_KEY";

$fields = array(
  "txamt" => "10",
  "txcurrcd" => "HKD",
  "pay_type" => "801107",
  "out_trade_no" => "01234567890123",
  "txdtm" => date("Y-m-d H:i:s"),
  "goods_name" => "test1",
  "return_url" => "https://merchant.example/success",
  "notify_url" => "https://merchant.example/notify"
  // "mchid" => "ZaMVg*****", // include only if provided by QFPay
  // "openid" => "xxx"        // required for pay_type=800107 only
);

$sign = buildSign($fields, $app_key);

$headers = array(
  "X-QF-APPCODE: " . $app_code,
  "X-QF-SIGN: " . $sign
);

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($fields));
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);

$output = curl_exec($ch);
curl_close($ch);

echo $output;
?>