退款 API 指南

import hashlib
import requests
import datetime
import random
import string

environment = "https://test-openapi-hk.qfapi.com"
app_code = "D5589D2A1F2E42A9A60C37**********"
client_key = "0E32A59A8B454940A2FF39**********"

def make_req_sign(data, key):
  keys = sorted(data.keys())
  p = [f"{k}={data[k]}" for k in keys]
  unsign_str = ("&".join(p) + key).encode("utf-8")
  return hashlib.md5(unsign_str).hexdigest().upper()

current_time = datetime.datetime.now().replace(microsecond=0).strftime("%Y-%m-%d %H:%M:%S")
refund_out_trade_no = "".join(random.choices(string.ascii_uppercase + string.digits, k=32))

data = {
  "mchid": "ZaMVg*****",                 # 若未配置 mchid，請勿傳入
  "txamt": "10",
  "syssn": "20191227000200020061752831", # 原始付款交易號
  "out_trade_no": refund_out_trade_no,   # 退款單號（唯一）
  "txdtm": current_time
}

r = requests.post(
  environment + "/trade/v1/refund",
  data=data,
  headers={
      "X-QF-APPCODE": app_code,
      "X-QF-SIGN": make_req_sign(data, client_key),
  },
)

print(r.json())

import java.text.SimpleDateFormat;
import java.util.Date;
import java.util.HashMap;
import java.util.Map;

public class Refund {
public static void main(String[] args) {
  String appcode = "D5589D2A1F2E42A9A60C37**********";
  String key = "0E32A59A8B454940A2FF39**********";
  String mchid = "ZaMVg*****"; // 若未配置 mchid，請勿傳入

  SimpleDateFormat df = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss");
  String txdtm = df.format(new Date());

  Map<String, String> payload = new HashMap<>();
  payload.put("mchid", mchid);
  payload.put("txamt", "15");
  payload.put("syssn", "20191227000300020061662295"); // 原始付款交易號
  payload.put("out_trade_no", "REFUND_22333444455555"); // 退款單號（唯一）
  payload.put("txdtm", txdtm);

  // 簽名與送出請求請沿用你們現有的工具方法：
  // 1) payload key 依 ASCII 升冪排序組成 key=value&...
  // 2) 字串尾端加上 client_key
  // 3) MD5 後轉大寫作為 X-QF-SIGN
  // 4) POST x-www-form-urlencoded，並帶上 X-QF-APPCODE / X-QF-SIGN header
}
}

const crypto = require("crypto");
const request = require("request");

const environment = "https://test-openapi-hk.qfapi.com";
const app_code = "D5589D2A1F2E42A9A60C37**********";
const client_key = "0E32A59A8B454940A2FF3***********";

const payload = {
mchid: "ZaMVg*****", // 若未配置 mchid，請勿傳入
syssn: "20191231000300020063521806", // 原始付款交易號
txamt: "10",
out_trade_no: String(Math.round(Math.random() * 1000000000)),
txdtm: new Date().toISOString().replace(/T/, " ").replace(/\..+/, "")
};

const sorted = Object.keys(payload)
.sort()
.map(k => `${k}=${payload[k]}`)
.join("&");

const sign = crypto
.createHash("md5")
.update(sorted + client_key)
.digest("hex")
.toUpperCase();

request({
uri: environment + "/trade/v1/refund",
headers: {
  "X-QF-APPCODE": app_code,
  "X-QF-SIGN": sign
},
method: "POST",
form: payload
}, function (error, response, body) {
console.log(body);
});

<?php
function GetRandStr($length){
$str='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
$len=strlen($str)-1;
$randstr='';
for($i=0;$i<$length;$i++){
  $num=mt_rand(0,$len);
  $randstr .= $str[$num];
}
return $randstr;
}

$url = 'https://test-openapi-hk.qfapi.com/trade/v1/refund';
$app_code = 'FF2FF74F2F2E42769A4A73*********';
$app_key  = '7BE791E0FD2E48E6926043B*********';
$now_time = date("Y-m-d H:i:s");

$fields = array(
// 'mchid' => 'ZaMVg*****', // 若未配置 mchid，請勿傳入
'syssn' => '20200311066100020000977840', // 原始付款交易號
'out_trade_no' => GetRandStr(20),
'txamt' => 2200,
'txdtm' => $now_time
);

ksort($fields);

$fields_string = '';
foreach($fields as $k=>$v) { 
$fields_string .= $k.'='.$v.'&';
}
$fields_string = substr($fields_string, 0, -1);

$sign = strtoupper(md5($fields_string . $app_key));

$header = array();
$header[] = 'X-QF-APPCODE: ' . $app_code;
$header[] = 'X-QF-SIGN: ' . $sign;

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
$output = curl_exec($ch);
curl_close($ch);

print_r(json_decode($output, true));
?>