Xiaoyu Peng
Software Engineer at Tencent
Shanghai, Shanghai, China
Summary
🤩
RockstarXiaoyu Peng is a seasoned software engineer based in Shanghai with 11 years of experience building secure, production-grade back-end systems at Tencent. He specializes in payment integrations and cryptography, contributing significant refactors and security hardening to the official WeChat Pay SDKs in Java and Go as well as tooling like Postman scripts. Xiaoyu’s work shows a pragmatic focus on testability and interface-driven design—extracting HTTP client behaviors into interfaces and improving test coverage—while also addressing subtle security concerns such as domain validation, replay protection, and certificate handling. Comfortable across languages and ecosystems, he blends deep protocol-level understanding with practical engineering to make integrations robust and maintainable.
11 years of coding experience
1 year of employment as a software developer
Github Skills (23)
apim10
javascript10
apidoc10
testing10
wechat10
authentication10
apache-http-client10
user-authentication10
java10
security10
javas10
http-client10
go10
api10
sdk10
Programming languages (5)
Github contributions (5)
wechatpay-apiv3/wechatpay-java
May 2022 - Jan 2023
微信支付 APIv3 的官方 Java Library
Role in this project:
Back-end Developer
Back-end DeveloperContributions:13 releases, 127 reviews, 40 commits in 7 months
Contributions summary:Xiaoyu primarily contributed to refactoring the `wechatpay-java` library, focusing on the HTTP client implementations. They moved the `get`, `post`, `patch`, `put`, and `delete` methods to the `HttpClient` interface, making them default methods. The user also added test interfaces and classes for the `HttpClient` and `OkHttpClientAdapter`, improving the test coverage. Further contributions involved refactoring the AeadCipher to be an interface with an abstract implementation.
javasdkwechatpayweixinweixin-pay
wechatpay-apiv3/wechatpay-apache-httpclient
May 2019 - Jan 2023
微信支付 APIv3 Apache HttpClient装饰器（decorator）
Role in this project:Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:8 releases, 78 reviews, 31 commits in 3 years 8 months
Contributions summary:Xiaoyu made several contributions to the project, primarily focused on enhancing the security and robustness of the WeChat Pay Apache HttpClient integration. They addressed issues related to character encoding, domain validation for signature verification, and certificate handling for secure communication with WeChat Pay servers. Key improvements include adding logging and implementing time-based validation to prevent replay attacks. They also incorporated sensitive information encryption/decryption functionalities.
apache-httpcomponentsweixindecoratorsapache-httpclientsdk
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.