Alipay Web Payments

# coding=utf-8
import hashlib
import requests
import datetime

environment = "https://test-openapi-hk.qfapi.com"
app_code = "YOUR_APP_CODE"
client_key = "YOUR_CLIENT_KEY"

def make_req_sign(data, key):
    keys = sorted(list(data.keys()))
    parts = []
    for k in keys:
        parts.append(f"{k}={data[k]}")
    sign_str = ("&".join(parts) + key).encode("utf-8")
    return hashlib.md5(sign_str).hexdigest().upper()

current_time = datetime.datetime.now().replace(microsecond=0).strftime("%Y-%m-%d %H:%M:%S")

data = {
    "txamt": "10",
    "txcurrcd": "HKD",
    "pay_type": "801101",
    "out_trade_no": "01234567890123",
    "txdtm": current_time,
    # "mchid": "ZaMVg*****"  # include only if provided by QFPay
}

headers = {
    "X-QF-APPCODE": app_code,
    "X-QF-SIGN": make_req_sign(data, client_key),
}

r = requests.post(environment + "/trade/v1/payment", data=data, headers=headers)
print(r.json())

import java.text.SimpleDateFormat;
import java.util.Date;
import java.util.HashMap;
import java.util.Map;

public class TestMain {
  public static void main(String[] args) {
    String appcode = "YOUR_APP_CODE";
    String key = "YOUR_CLIENT_KEY";

    String pay_type = "801101";
    String out_trade_no = "01234567890123";
    String txdtm = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss").format(new Date());

    Map<String, String> params = new HashMap<>();
    params.put("pay_type", pay_type);
    params.put("out_trade_no", out_trade_no);
    params.put("txdtm", txdtm);
    params.put("txamt", "10");
    params.put("txcurrcd", "HKD");
    // params.put("mchid", "ZaMVg*****"); // include only if provided by QFPay

    String data = QFPayUtils.getDataString(params);
    String md5 = QFPayUtils.getMd5Value(data + key);

    String url = "https://test-openapi-hk.qfapi.com";
    String resp = Requests.sendPostRequest(url + "/trade/v1/payment", data, appcode, md5);
    System.out.println(resp);
  }
}

const crypto = require("crypto");
const request = require("request");

const environment = "https://test-openapi-hk.qfapi.com";
const app_code = "YOUR_APP_CODE";
const client_key = "YOUR_CLIENT_KEY";

const txdtm = new Date().toISOString().replace("T", " ").replace(/\..+/, "");
const out_trade_no = String(Math.round(Math.random() * 1000000000));

const payload = {
  txamt: "10",
  txcurrcd: "HKD",
  pay_type: "801101",
  out_trade_no,
  txdtm
  // mchid: "ZaMVg*****" // include only if provided by QFPay
};

const ordered = Object.keys(payload).sort().map(k => `${k}=${payload[k]}`).join("&");
const signString = ordered + client_key;
const sign = crypto.createHash("md5").update(signString).digest("hex").toUpperCase();

request({
  uri: environment + "/trade/v1/payment",
  headers: {
    "X-QF-APPCODE": app_code,
    "X-QF-SIGN": sign
  },
  method: "POST",
  form: payload
}, function (error, response, body) {
  console.log(body);
});

<?php
function randStr($length) {
  $str = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
  $out = '';
  for ($i = 0; $i < $length; $i++) {
    $out .= $str[rand(0, strlen($str) - 1)];
  }
  return $out;
}

$url = 'https://test-openapi-hk.qfapi.com';
$api = '/trade/v1/payment';

$app_code = 'YOUR_APP_CODE';
$app_key = 'YOUR_CLIENT_KEY';

$fields = array(
  'pay_type' => '801101',
  'out_trade_no' => randStr(20),
  'txcurrcd' => 'HKD',
  'txamt' => '2200',
  'txdtm' => date("Y-m-d H:i:s")
  // 'mchid' => 'ZaMVg*****' // include only if provided by QFPay
);

ksort($fields);
$pairs = array();
foreach($fields as $k => $v) { $pairs[] = $k . '=' . $v; }
$fields_string = implode('&', $pairs);

$sign = strtoupper(md5($fields_string . $app_key));

$header = array(
  'X-QF-APPCODE: ' . $app_code,
  'X-QF-SIGN: ' . $sign
);

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url . $api);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);

$output = curl_exec($ch);
curl_close($ch);

echo $output;
?>