Xiaoyu Peng
Software Engineer at Tencent
Shanghai, Shanghai, China
Summary
🤩
RockstarXiaoyu Peng is a seasoned software engineer based in Shanghai with 11 years of experience building secure, production-grade back-end systems at Tencent. He specializes in payment integrations and cryptography, contributing significant refactors and security hardening to the official WeChat Pay SDKs in Java and Go as well as tooling like Postman scripts. Xiaoyu’s work shows a pragmatic focus on testability and interface-driven design—extracting HTTP client behaviors into interfaces and improving test coverage—while also addressing subtle security concerns such as domain validation, replay protection, and certificate handling. Comfortable across languages and ecosystems, he blends deep protocol-level understanding with practical engineering to make integrations robust and maintainable.
11 years of coding experience
1 year of employment as a software developer
Github Skills (23)
apim10
javascript10
apidoc10
testing10
wechat10
authentication10
user-authentication10
apache-http-client10
java10
security10
javas10
http-client10
go10
api10
sdk10
Programming languages (5)
Github contributions (5)
wechatpay-apiv3/wechatpay-postman-script
May 2019 - Nov 2022
微信支付 APIv3 的调试工具
Role in this project:
Back-end Developer
Back-end DeveloperContributions:8 reviews, 28 commits, 12 PRs in 3 years 6 months
Contributions summary:Xiaoyu primarily focused on enhancing the functionality of the WeChat Pay APIv3 Postman scripts. Their contributions include refactoring code, particularly switching from `eval` to function-based loading for dependencies, and addressing critical bug fixes, like resolving POST request body issues. Furthermore, the user made improvements to the underlying cryptographic libraries used for signature generation, integrating Tencent's SM (ShangMi) library and correcting errors related to parsing public keys. These changes reflect a strong understanding of API integration and cryptography.
apiv3apiapi-clientwechatwechatpay-apiv3
wechatpay-apiv3/wechatpay-apache-httpclient
May 2019 - Jan 2023
微信支付 APIv3 Apache HttpClient装饰器（decorator）
Role in this project:Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:8 releases, 78 reviews, 31 commits in 3 years 8 months
Contributions summary:Xiaoyu made several contributions to the project, primarily focused on enhancing the security and robustness of the WeChat Pay Apache HttpClient integration. They addressed issues related to character encoding, domain validation for signature verification, and certificate handling for secure communication with WeChat Pay servers. Key improvements include adding logging and implementing time-based validation to prevent replay attacks. They also incorporated sensitive information encryption/decryption functionalities.
apache-httpcomponentsweixindecoratorsapache-httpclientsdk
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.