[JAVA] A story that struggled with the introduction of Web Apple Pay

A story that struggled with the introduction of Web Apple Pay

Introduction

Hello. This is T.K. from Navitime Japan Travel Development.

Recently, many cashless payment apps have appeared. Therefore, in order to aim for a site that is easy for users to use We are increasing payments on the Web other than credit cards.

Among the additional payments, I would like to talk about the difficult introduction of Apple Pay.

Target audience

• Those who have payment such as credit
• Those who are considering / developing the introduction of Apple Pay
• Struggling to authenticate
• Doesn't work in Java
• Describes from authentication to acquisition of token

Range not covered

• Detailed contents such as DB and Java design are not described.
• We are proceeding on the premise that we have a contract with a payment company that can use Apple Pay.

table of contents

• Communication method leading to payment
• SandBox settings
• Register with Apple Developer
• development of
• Sites that introduced Apple Pay

Communication method leading to payment

First of all, the first thing I struggled with was the communication method leading to payment. Like a credit company, I thought it would be complete by communicating with one company. However, with payment methods such as Apple Pay, it is necessary to run communication between the Apple Pay company and the payment agency.

SandBox settings

Next is the SandBox settings. Apple Pay is used by linking a credit card to the iPhone. However, it is dangerous to tie your credit card at the time of development.

That's why Apple has a credit card for verification. Please refer to here when developing.

Points to worry about

• SandBox email registration is required on the Apple Developer site. Please note that it may not be displayed depending on the authority
• Emails registered in the SandBox must have never been registered in iTunes or the App Store. We recommend that you make a new one on Google.

Register with Apple Developer

Authentication between Apple and the payment agent is required to access the Apple Pay server. The registration method may differ slightly depending on the payment agent. Please note.

With the renewal of the Apple site, this is the most annoying part. This registration can be divided into the following five.

1. Add MerchantId
2. Register the CSR file
3. Registration of Merchant Domains
4. Register for Apple Pay Merchant Identity Certificate
5. P12 file creation

Add MerchantId

Create a merchant ID at Apple Developer (https://developer.apple.com/account/). If the merchant ID is provided by the payment agent, please register it. By registering this, you can determine the company information that Apple has settled.

1. Transition to "Certificates, Identifiers & Profiles / Identifiers / Merchant IDs" in Apple Developer
2. Press "+" of Identifiers, select "Merchant IDs", and register merchantId in Identifier.

Points to worry about

• If you do not have registration privileges for "Apple Developer Identifiers", try granting "App Manager, Customer Support, Sales, Developer".
• If you do not have permission for "Identifiers / Edit or Configure Merchant ID", you need to consent from the "Account Holder" account. Please ask the person who has the strongest authority to grant the authority

Register CSR file

Register the CSR file of the payment agency in Apple Developer to link the payment agency with Apple.

1. Register the CSR file from the MerchantId created by Apple Developer because it was provided by the payment agent in the "Apple Pay Payment Processing Certificate".
2. Download "apple_pay.cer" from 1 and have it registered with the payment agency.

Points to worry about

• 2 When I was developing without knowing the contents, the Token provided by Apple was rejected. Don't forget to add.

Registration of Merchant Domains

Register the site domain where you want to deploy Apple Pay payments. If you have multiple domains, you need to register for each domain.

1. Register your domain in "Merchant Domains" under Apple Developer (https://developer.apple.com/account/).
2. After registration, you can download "apple-developer-merchantid-domain-association.txt". Place it on the site of the registered domain. This time, it will be placed under "hoge".
3. From the apache settings, set the following and hit "/.well-known/apple-developer-merchantid-domain-association.txt", the contents of "apple-developer-merchantid-domain-association.txt" Is displayed.

RewriteRule ^/.well-known/apple-developer-merchantid-domain-association.txt /hoge/apple-developer-merchantid-domain-association.txt [L]

4. Click Verify to complete the authentication. If you register once, it is valid for 2 years.

point

• In a verification environment, communication may be restricted by basic authentication. If there is a communication restriction, you will not be able to authenticate, so please set it to pass Apple's IP.

Apple Pay Merchant Identity Certificate Registration

This is the last registration on the Apple site.

1. Using the previously created "apple_pay.cer", create a "CertificateSigningRequest.certSigningRequest" file with keychain access. (Reference)
2. Register the created "CertificateSigningRequest.certSigningRequest" file in the Apple Pay Merchant Identity Certificate of Apple Developer.
3. After registration, you can download "merchant_id.cer".

P12 file creation

The P12 file is used for client authentication during development. Create "ApplePayMerchantIdentity.p12" from "merchant_id.cer" with key chain access (Reference)

development of

The development was done with reference to GitHub of here. You can get a Token using Apple Pay.js provided by Apple.

In development, I was worried about client authentication with java. "Apple_pay_conf.php, apple_pay_comm.php" described on the GitHub site is described in php, and I could not find many reference sites for introducing Apple Pay in java.

The pem used in php cannot be used for client authentication in Java. So, use the p12 file you created earlier.

If you create Java by referring to the here site, authentication will pass and you can use the token of Apple Pay.

You will be able to make payments with Apple Pay by using the API of the payment agency for this token.

Other points I was worried about

JDK version

I can get the response information at the time of Java client authentication. For some reason, the phenomenon that only a certain environment is not displayed has occurred.

When I checked the difference, it was because of the difference in the JDK. If it doesn't work, try increasing the JDK version.

Sites that introduced Apple Pay

This time, Apple Pay has been introduced on the SP page of LCC and hotels. I hope you can refer to it. https://travel.navitime.co.jp/ja/booking/?reserveType=lcc&cid=qiita.article https://travel.navitime.co.jp/ja/booking/hotel?cid=qiita.article

Summary

Thank you for reading the long text to the end. The introduction of Apple Pay took a lot of time around registration and authentication. I hope that many people will be able to smoothly introduce payment in this article.