Pārlūkot izejas kodu

fix: 通知验签简化—DB有证书用rsaCertCheckV1,没有用rsaCheckV1

alphaH 11 stundas atpakaļ
vecāks
revīzija
7c287a612e

+ 1 - 2
java/src/main/java/com/payment/platform/module/payment/notification/service/NotificationService.java

@@ -106,9 +106,8 @@ public class NotificationService {
                     }
                 }
             }
-            // 证书模式优先,回退普通公钥
+            // 服务商配置了证书则用证书验签,否则回退普通公钥
             boolean verified = StrUtil.isNotBlank(alipayPublicCert)
-                    && !alipayPublicCert.equals(alipayConfig.getAlipayPublicKey())
                     ? AlipaySignature.rsaCertCheckV1(params, alipayPublicCert,
                             alipayConfig.getCharset(), alipayConfig.getSignType())
                     : AlipaySignature.rsaCheckV1(params, alipayPublicKey,