Huifu.php 25 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547
  1. <?php
  2. namespace app\api\controller;
  3. use app\common\model\VideoOrder;
  4. use think\Log;
  5. class Huifu
  6. {
  7. const pay = 'https://api.huifu.com/v2/trade/payment/jspay';
  8. const micropay = 'https://api.huifu.com/v2/trade/payment/micropay';
  9. const refund = 'https://api.huifu.com/v2/trade/payment/scanpay/refund';
  10. const preorder = 'https://api.huifu.com/v2/trade/hosting/payment/preorder';
  11. const htRefund = 'https://api.huifu.com/v2/trade/hosting/payment/htRefund';
  12. private static $sys_id = '6666000157488006';
  13. private static $SDK_VERSION ='php#v2.0.11';
  14. private static $config = [
  15. ];
  16. /*
  17. private static $buyer_id = '6666000155248241';
  18. private static $rsa_merch_private_key = 'MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQDVzaC2yYLzmNosv9BLqAw2f6EqqbF7e01y4kLuhhLL0RhiIB3boex9egcb1Z4wuxo7uNOmLzkRgtQg/q+gwMIl6UpvGx+LdFBP5szQfu0T6NP1Q+IeN1Nl3hyNQrwhO0sqKGguv3rAXo58c9VZVH7BCpnsI+X0j8HTrtnADw+ixKKWAcmMKh9WbIJO0xYpPL7smmiMFuwYU2oYF5Y79RdzPYqTvs+M4WMdxfamHxggpVme40+3eJdc8nT/03ihhPumpHpyqorJx2Q2UhSg5fviOrh3LTKsoNwvsA4V9QeOt5PO67muR6wTvwJbXoiqPZ0xxP0cWUajs/FtQB57j+/RAgMBAAECggEAWU5mNlPgBj6vy4dny2Jrj4wqVvbA8xJjHHzUdmu8iDRUGhDOSALQFO2W8JJ/XF2bLJ0ck0sgbGcYkpuv4tcBgfJ7rANJXuf78BQ5M1IBV5KmjsmHNxXnGSL5DCx3Bu6MjBSKyBQlgxs8K1H7KTA5Lgtulgu8rzYpQXHE9QuVfWgf/9QrOJyxJ8ekOJT6CteOB0Hi2wvTh1MtLhS9apdAgSZVApeWJVB2oHi0txp6pF6UnhZqAYxyb0fu+EarFfav3woRh/6XVgxiJdc2+SOfP7DxJJM02ASoXaD32Sb7GhIDxcHkOpQi+oluZc7WrnXgxgNhr0oGcb+vE5aR5N/GEQKBgQDu92Mfv68X9kMFVlF1ZdfGbS/zhLpS/xtfxovNEuIZAxbiV3wmOOfEEcMRyCUC8zU8R+iV3tUkLU5gJBTZvt9gJ8YMYs6OwcOMw3wJJHU+/Y1u2HRjMrbmUEsmkR6q0AhE0HhXBi7ANZ4ngkXwDn0OcSrZzM9wB/KH3Eq9unX5rQKBgQDlCxGVqE81mwN5Uk7TAtbkoJibMXmVJpXJDSPM+26hGvppy6STOytAMbuHvH8QmLxxRgGGERlkeB8qNMQPVRgI/JU9LjkKBlDNrI9lMVKhpi2q+YNorm2D37yu8Ms2ekbaScMlMYsxUzdDDPeZX1hQLCdEBpIUXlVA3/k1JMYbNQKBgQDtreFJkr30d1vx0wjyW3liQveOnlU0d8giWrhyIHYBqrD4L0usOK1Mtt3uscMeTAiHDH6pkhktAmMR/NFAQjiqyuSRLTWFh/OX7ldQQJLdNBOYTHJ2t9py+SnGElEOVBvlVfRbmiqlwq6rXUdynPaFhsm4F527MCxqNRGh4/OzgQKBgQCvdbxB1o7fdOHDZf9GfM1clX5ynQMT9FwYib1cQVztg/pDY6Kuu0wVwEN15zu73hW1/LgcGStHoRHWxldPm5NvBvfYx3kgqdfqx3+OOKuhc+lWKhC197GjrZkgtwwlrqRqgslAy+Rio+oYrm1bDAReXoSyAwqTGfTbXvjM8l/k5QKBgQCjUpkWibbLxT3HhlCddwwZ1nYSktUw4yF6l91NOTLvzCJgAP6/ucq0W5uN4FPW87f4KkO64xOlTcWiGNUb9zZQXOPM9mFecZeorI+dPaR466vMA2jWDeYEaUi4973knKW8uaSAsykz0JahXNBQEYM2T/sLedsW6RUcexXlTFvBNg==';
  19. private static $public_key = 'MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn56S55hWOVW1d0b5LMASBhQ11TXjBo/gogo6YcmC6zpD3cL9WxHE8rfHbJhrLSOsHT2FM+meJ7l3InjIro6/dTNv3lQQsecjRM2Dlnlbr+lX3C20d52JMxFNGxGbY+ai/htlGNG9MEMDw0KgKbFs92pHhSGTlPubuRWu9XN07HmO3eTzzTFusKo8lzIPA3Dm2KM+L66OGiNQT0cGOV+JS12/OcSRP5+XX1GwqBF9TRENZnIeO9l+uS2x12QWMeezf6PaTMPLIUjR/mfz8uiYd3lfJDBd8hwWsfD16M0F/KqXrHykmEw0sTgA6dgIl43Hbo4u5DFHoB2C8QR04Y7ekwIDAQAB';
  20. */
  21. private static $buyer_id = '2088160921651421';
  22. private static $rsa_merch_private_key = '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';
  23. private static $public_key = 'MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE/txn9A63HmNInKbfLPuzPWXWuVZ7e6SR0ENRB1Bl8l1w9bGpmF+/LH4+ItXI4s1EcedBS2GU/PEHo4v4wB1H3+U4PF8z4IQMmtbOIKMNBtzguKnYStVfKsmGnVea/emxbKzYaUyoQd9hXGN/4BmpLXey5huN8qxulicjBAl4ywXmQBfdmp77XABPFOcFBuRw1ejP4npcE+lU4RHjgUPAaGIqlISg95HNBjtM8Ce06sYu4Ev7yTBwaHsUnjVMhvfw1TnrdHW9hmoQ4J5udDyUT4tDra5pvh3f7oKkYJn54uRmXxxSfhhAfSgJu0Oy4t8+QKEJ8Dc+NboGVyL0ojMwIDAQAB';
  24. private static $product_id = 'HSK';
  25. // private static $notify_url = "https://ts.shanghairongxuan.top/api/hj/notify";
  26. private static $notify_url = "https://ts.shanghairongxuan.top/api/pay/notify";
  27. private static $refund_notify_url = "https://ts.shanghairongxuan.top/api/hj/refund";
  28. # 请求头
  29. private static $httpHeaders;
  30. # 网络应答码
  31. private static $httpStateCode;
  32. # 请求数据
  33. private static $reqDatas;
  34. # 应答数据
  35. private static $rspDatas;
  36. # 请求报错
  37. private static $error = null;
  38. public static function curlRequest( $url, $postFields = null, $file = null, $headers = array('Content-type: application/json'), $is_json=true) {
  39. // $postFields['needSign'] 是否需要添加签名, $postFields['needVerfySign'] 是否需要验证签名
  40. $needSign = isset($postFields['needSign']) ? $postFields['needSign'] : true;
  41. $needVerfySign = isset($postFields['needVerfySign']) ? $postFields['needVerfySign'] : true;
  42. unset($postFields['needSign'],$postFields['needVerfySign']);
  43. $ch = curl_init();
  44. curl_setopt($ch, CURLOPT_URL, $url);
  45. curl_setopt($ch, CURLOPT_FAILONERROR, false);
  46. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  47. curl_setopt($ch, CURLOPT_HEADER, false);
  48. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  49. if (is_array($postFields) && 0 < count($postFields)) {
  50. curl_setopt($ch, CURLOPT_POST, true);
  51. $body = self::createBody( $postFields, $file);
  52. if (!$needSign) {
  53. unset($body['sign']);
  54. }
  55. if ($is_json) {
  56. $json_data = json_encode($body);
  57. array_push($headers, "Content-Length:" . strlen($json_data));
  58. curl_setopt($ch, CURLOPT_POSTFIELDS, $json_data);
  59. } else {
  60. curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
  61. }
  62. self::$reqDatas = $body;
  63. }
  64. # 拼装请求头
  65. self::$httpHeaders = self::createHeaders($headers);
  66. curl_setopt($ch, CURLOPT_HTTPHEADER, self::$httpHeaders );
  67. # 执行网络请求
  68. $resultString = curl_exec($ch);
  69. # 处理系统的报错
  70. if (curl_errno($ch)) {
  71. self::$error = curl_error($ch);
  72. curl_close($ch);
  73. return self::$error;
  74. }
  75. # http应答码
  76. self::$httpStateCode = curl_getinfo($ch,CURLINFO_HTTP_CODE);
  77. # 关闭本次会话
  78. curl_close($ch);
  79. self::$rspDatas = json_decode($resultString, true);
  80. @file_put_contents('hfcuel.txt',json_encode(self::$rspDatas)."\r\n");
  81. @file_put_contents('hfcuel.txt',json_encode(self::$httpStateCode),8);
  82. $resp_sign = isset(self::$rspDatas['sign']) ? self::$rspDatas['sign'] : '';
  83. # 不需要对应答数据验签的逻辑分支,斗拱存在一些不用验签的接口,例如:页面版的快捷支付、手机网页支等
  84. if (!$resp_sign || self::$httpStateCode== 401) {
  85. if ($needVerfySign) {
  86. self::$error = array(
  87. 'code' => 'RESP_SIGN_VERIFY_UNDO',
  88. 'msg' => '无法对应答数据进行验签',
  89. );
  90. }
  91. if (!self::$rspDatas) {
  92. # 无法解析出json格式的情况,就直接就把应答数据返回出去,针对返回数据为html页面的接口,例如:页面版的快捷支付等
  93. self::$rspDatas = $resultString;
  94. }
  95. return self::$error;;
  96. }
  97. $resp_data = isset(self::$rspDatas['data']) ? self::$rspDatas['data'] : '';
  98. // TODO response 应答错误 hardcode 待优化 --- Charles.huang 2021/09/09
  99. # 对返回数据验签失败的逻辑分支
  100. if (!self::verifySign_sort($resp_sign, $resp_data, self::$public_key)) {
  101. self::$error = array(
  102. 'code' => 'RESP_SIGN_VERIFY_FAILED',
  103. 'msg' => '接口结果返回签名验证失败',
  104. );
  105. return self::$error;
  106. }
  107. # 应答码异常情况
  108. if (self::$httpStateCode < 200 || self::$httpStateCode >= 400) {
  109. self::$error = array(
  110. 'code' => 'HTTP_REQUEST_FAILED',
  111. 'msg' => "请求失败: HTTP_STATE_CODE-".self::$httpStateCode,
  112. );
  113. return self::$error;
  114. }
  115. return self::$rspDatas;
  116. }
  117. private static function createHeaders($header_data = array()){
  118. $headers = $header_data;
  119. if (empty($header_data)){
  120. $headers = array('Content-type: application/x-www-form-urlencoded');
  121. }
  122. array_push($headers, 'sdk_version:' .self::$SDK_VERSION);
  123. array_push($headers, 'charset:UTF-8');
  124. return $headers;
  125. }
  126. private static function createBody($post_data, $file = null){
  127. $body = array();
  128. $body['sys_id'] = self::$sys_id;
  129. $body['product_id'] =self::$product_id;
  130. ksort($post_data); // 根据key排序
  131. $body['data'] = $post_data;
  132. # 执行签名
  133. $sign = self::sha_with_rsa_sign(
  134. json_encode($post_data, JSON_UNESCAPED_SLASHES|JSON_UNESCAPED_UNICODE), // 数据里有中文和斜杠都不转码
  135. self::$rsa_merch_private_key);
  136. $body['sign'] = $sign;
  137. if(!empty($file)){
  138. $body['file'] = $file;
  139. $body['data'] = json_encode($post_data, JSON_UNESCAPED_UNICODE);
  140. }
  141. return $body;
  142. }
  143. /**
  144. * 本次请求的http头信息
  145. */
  146. public static function getHttpHeaders()
  147. {
  148. return self::$httpHeaders;
  149. }
  150. /**
  151. * 本次请求应答的 http状态码
  152. */
  153. public static function getHttpStateCode()
  154. {
  155. return self::$httpStateCode;
  156. }
  157. /**
  158. * 本次请求的数据
  159. */
  160. public static function getReqDatas()
  161. {
  162. return self::$reqDatas;
  163. }
  164. /**
  165. * 本次请求的应答数据
  166. */
  167. public static function getRspDatas()
  168. {
  169. return self::$rspDatas;
  170. }
  171. /**
  172. * 获取请求执行失败信息
  173. */
  174. public static function getErrorInfo()
  175. {
  176. return self::$error;
  177. }
  178. /**
  179. * 请求是否成功执行
  180. */
  181. public static function isError()
  182. {
  183. return self::$error != null;
  184. }
  185. public static function wxJsPay($OpenId,$order_id,$order_amount,$order_name,$attach='product')
  186. {
  187. $order_amount = bcmul($order_amount,'1',2);
  188. $data['time_expire'] = date('YmdHis',time()+60);
  189. $data['req_date'] = date('Ymd');
  190. $data['req_seq_id'] = $order_id;
  191. $data['huifu_id'] = self::$sys_id;
  192. $data['goods_desc'] = $order_name;
  193. $data['trans_amt'] = $order_amount;
  194. $data['trade_type'] = 'T_MINIAPP';
  195. $data['wx_data']['attach'] = $attach;
  196. if($OpenId) {
  197. $data['wx_data']['sub_appid'] = 'wx9d53e46a38eda4b9';
  198. $data['wx_data']['sub_openid'] = $OpenId;
  199. }
  200. if($attach=='user_recharge') {
  201. $huifu_id = '6666000158522222';
  202. $rs['acct_infos'] = [
  203. [
  204. 'huifu_id' => $huifu_id,
  205. 'percentage_div' => '100.00'
  206. ],
  207. [
  208. 'huifu_id' => self::$sys_id,
  209. 'percentage_div' => '0.00'
  210. ]
  211. ];
  212. $rs['percentage_flag'] = 'Y';
  213. $rs['is_clean_split'] = 'Y';
  214. $data['acct_split_bunch'] = json_encode($rs, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
  215. }
  216. elseif($attach=='product') {
  217. $order1 = explode('_',$order_id);
  218. if(sizeof($order1)==2) $order_id = $order1[1];
  219. $store_id = VideoOrder::where('out_trade_no', $order_id)->value('store_id');
  220. }
  221. $data['notify_url'] = self::$notify_url."/weixin";
  222. $result = self::curlRequest(self::pay,$data);
  223. return $result;
  224. if (!$result || self::isError()) { //失败处理
  225. var_dump(self::getErrorInfo());
  226. } else { //成功处理
  227. var_dump($result);
  228. }
  229. }
  230. public static function Ali_NATIVE($order_id,$order_amount,$order_name,$attach='product')
  231. {
  232. $order_amount = bcmul($order_amount,'1',2);
  233. $data['pay_scene'] = '02';
  234. $data['time_expire'] = date('YmdHis',time()+60);
  235. $data['req_date'] = date('Ymd');
  236. $data['req_seq_id'] = $order_id;
  237. $data['huifu_id'] = self::$sys_id;
  238. $data['goods_desc'] = $order_name;
  239. $data['trans_amt'] = $order_amount;
  240. $data['trade_type'] = 'A_NATIVE';
  241. $data['alipay_data']['buyer_id'] = self::$buyer_id;
  242. $data['notify_url'] = self::$notify_url."/alipay";
  243. $result = self::curlRequest(self::pay,$data);
  244. if (!$result || self::isError()) { //失败处理
  245. var_dump(self::getErrorInfo());
  246. } else { //成功处理
  247. var_dump($result);
  248. }
  249. }
  250. public static function micropay($auth_code,$order_id,$order_amount,$order_name,$attach='product')
  251. {
  252. $order_amount = bcmul($order_amount,'1',2);
  253. $data['pay_scene'] = '02';
  254. $data['time_expire'] = date('YmdHis',time()+60);
  255. $data['req_date'] = date('Ymd');
  256. $data['req_seq_id'] = $order_id;
  257. $data['huifu_id'] = self::$sys_id;
  258. $data['goods_desc'] = $order_name;
  259. $data['trans_amt'] = $order_amount;
  260. $data['auth_code'] = $auth_code;
  261. if($attach=='user_recharge') {
  262. $huifu_id = '6666000158522222';
  263. $rs['acct_infos'] = [
  264. [
  265. 'huifu_id' => $huifu_id,
  266. 'percentage_div' => '100.00'
  267. ],
  268. [
  269. 'huifu_id' => self::$sys_id,
  270. 'percentage_div' => '0.00'
  271. ]
  272. ];
  273. $rs['percentage_flag'] = 'Y';
  274. $rs['is_clean_split'] = 'Y';
  275. $data['acct_split_bunch'] = json_encode($rs, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
  276. }
  277. elseif($attach=='product') {
  278. $order1 = explode('_',$order_id);
  279. if(sizeof($order1)==2) $order_id = $order1[1];
  280. $store_id = StoreOrder::where('order_id', $order_id)->value('store_id');
  281. if ($store_id > 0) {
  282. $huifu_id = \app\model\store\SystemStore::where('id', $store_id)->value('huifu_id');
  283. if ($huifu_id) {
  284. $rs['acct_infos'] = [
  285. [
  286. 'huifu_id' => $huifu_id,
  287. 'percentage_div' => '100.00'
  288. ],
  289. [
  290. 'huifu_id' => self::$sys_id,
  291. 'percentage_div' => '0.00'
  292. ]
  293. ];
  294. $rs['percentage_flag'] = 'Y';
  295. $rs['is_clean_split'] = 'Y';
  296. $data['acct_split_bunch'] = json_encode($rs, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
  297. }
  298. } else {
  299. }
  300. }
  301. $data['risk_check_data']['ip_addr'] = app()->request->ip();
  302. $data['notify_url'] = self::$notify_url."/micropay?attach=".$attach;
  303. @file_put_contents("micropay.txt",json_encode($data)."\r\n");
  304. $rs = self::curlRequest(self::micropay,$data);
  305. @file_put_contents("micropay.txt",json_encode($rs),FILE_APPEND);
  306. if($rs['data']['resp_code']=='00000000' && $rs['data']['trans_stat']=='S') {
  307. (new Hook(PayNotifyServices::class, 'huifu'))->listen($attach, $order_id, $rs['data']['out_trans_id'],$rs['data']['req_seq_id']);
  308. return $rs;
  309. }elseif($rs['data']['resp_code']=='00000100')
  310. {
  311. return $rs;
  312. }
  313. else
  314. {
  315. self::$error = $rs['data']['resp_desc'];
  316. return false;
  317. }
  318. }
  319. public static function refund($order_id,$pay_time,$refund_amount,$refund_reason,$attach="product")
  320. {
  321. $data['req_date'] = date('Ymd');
  322. $data['req_seq_id'] = 'ref'.uniqid(true);
  323. $data['huifu_id'] = self::$sys_id;
  324. $data['ord_amt'] = bcmul($refund_amount,'1',2);
  325. $data['remark'] = $refund_reason;
  326. $data['org_req_date'] = date("Ymd",$pay_time);
  327. $data['org_req_seq_id'] = $order_id;
  328. $data['notify_url'] = self::$refund_notify_url."/micropay?attach=".$attach;
  329. $result = self::curlRequest(self::refund,$data);
  330. @file_put_contents("hf1.txt", json_encode($result));
  331. if(($result['data']['trans_stat']=='S' || $result['data']['trans_stat']=='P')) {
  332. return true;
  333. }
  334. else
  335. {
  336. return false;
  337. }
  338. }
  339. public static function miniapp_pay($OpenId,$order_id,$order_amount,$order_name,$attach='product')
  340. {
  341. //$data['time_expire'] = date('YmdHis',time()+120);
  342. $order_amount = bcmul($order_amount,'1',2);
  343. $data['req_date'] = date('Ymd');
  344. $data['req_seq_id'] = $order_id;
  345. $data['huifu_id'] = self::$sys_id;
  346. $data['goods_desc'] = $order_name;
  347. $data['trade_type'] = 'T_MINIAPP';
  348. $data['trans_amt'] = $order_amount;
  349. if($OpenId) {
  350. $data['wx_data']['sub_appid'] = 'wx9d53e46a38eda4b9';
  351. $data['wx_data']['sub_openid'] = $OpenId;
  352. }
  353. $data['openid'] = $OpenId;
  354. if($attach=='user_recharge') {
  355. $huifu_id = '6666000158522222';
  356. $rs['acct_infos'] = [
  357. [
  358. 'huifu_id' => $huifu_id,
  359. 'percentage_div' => '100.00'
  360. ],
  361. [
  362. 'huifu_id' => self::$sys_id,
  363. 'percentage_div' => '0.00'
  364. ]
  365. ];
  366. $rs['percentage_flag'] = 'Y';
  367. $rs['is_clean_split'] = 'Y';
  368. $data['acct_split_bunch'] = json_encode($rs, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
  369. }
  370. elseif($attach=='product') {
  371. $order1 = explode('_',$order_id);
  372. if(sizeof($order1)==2) $order_id = $order1[1];
  373. $store_id = StoreOrder::where('order_id', $order_id)->value('store_id');
  374. if ($store_id > 0) {
  375. $huifu_id = \app\model\store\SystemStore::where('id', $store_id)->value('huifu_id');
  376. if ($huifu_id) {
  377. $rs['acct_infos'] = [
  378. [
  379. 'huifu_id' => $huifu_id,
  380. 'percentage_div' => '100.00'
  381. ],
  382. [
  383. 'huifu_id' => self::$sys_id,
  384. 'percentage_div' => '0.00'
  385. ]
  386. ];
  387. $rs['percentage_flag'] = 'Y';
  388. $rs['is_clean_split'] = 'Y';
  389. $data['acct_split_bunch'] = json_encode($rs, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
  390. }
  391. } else {
  392. }
  393. }
  394. $data['notify_url'] = self::$notify_url."/weixin?attach=".$attach;
  395. @file_put_contents("miniapp_pay.txt", json_encode($data));
  396. $result = self::curlRequest(self::pay,$data);
  397. return $result;
  398. }
  399. public static function notify( callable $notifyFn)
  400. {
  401. if(input('resp_code')!='00000000') return false;
  402. $data = json_decode(input('resp_data'),true);
  403. //商户订单号
  404. $postOrder['out_trade_no'] = $data['req_seq_id'];
  405. $postOrder['req_seq_id'] = $data['req_seq_id'];
  406. //支付宝交易号
  407. $postOrder['trade_no'] = $data['out_trans_id'];
  408. $postOrder['out_trans_id'] = $data['out_trans_id'];
  409. //交易状态
  410. $postOrder['trade_status'] = $data['trans_stat'];
  411. //备注
  412. $postOrder['attach'] = input('attach','product');
  413. if($data['trans_stat']=='S')
  414. {
  415. try {
  416. if ($notifyFn((object)$postOrder)) {
  417. return 'SUCCESS';
  418. }
  419. } catch
  420. (\Exception $e) {
  421. Log::error('辉聚异步会回调成功,执行函数错误。错误单号:' . $postOrder['out_trade_no'] . PHP_EOL . $e->getMessage());
  422. }
  423. }
  424. return 'FAIL';
  425. }
  426. /**
  427. * 私钥加签(对数据源排序),可用于 V2 版本接口数据加签
  428. *
  429. * @param @param array $data 原数据( 排序后的json字符串; 数组参数排序后转json字符串(数据的中文和斜杠均不转码):
  430. ksort($post_data); json_encode($post_data, JSON_UNESCAPED_SLASHES|JSON_UNESCAPED_UNICODE); )
  431. * @param string $rsaPrivateKey 私钥
  432. * @param int $alg 默认 OPENSSL_ALGO_SHA256
  433. *
  434. * @return string 签名串
  435. */
  436. public static function sha_with_rsa_sign($data, $rsaPrivateKey, $alg=OPENSSL_ALGO_SHA256){
  437. $key = "-----BEGIN PRIVATE KEY-----\n".wordwrap($rsaPrivateKey, 64, "\n", true)."\n-----END PRIVATE KEY-----";
  438. $signature= '';
  439. try {
  440. openssl_sign($data, $signature, $key, $alg);
  441. } catch (\Exception $e) {
  442. echo $e->getMessage();
  443. }
  444. return base64_encode($signature);
  445. }
  446. public static function encrypt_with_rsa_pubkey($data, $rsaPublicKey, $padding=OPENSSL_PKCS1_PADDING){
  447. $key = "-----BEGIN PUBLIC KEY-----\n".wordwrap($rsaPublicKey, 64, "\n", true)."\n-----END PUBLIC KEY-----";
  448. $encryptResult= '';
  449. try {
  450. openssl_public_encrypt($data, $encryptResult, $key, $padding);
  451. } catch (\Exception $e) {
  452. echo $e->getMessage();
  453. }
  454. return base64_encode($encryptResult);
  455. }
  456. /**
  457. * 使用公钥验签,可用于异步应答验签
  458. *
  459. * @param string $signature 签文
  460. * @param string $data 原数据(string)
  461. * @param string $rsaPublicKey 公钥
  462. * @param int $alg 默认 OPENSSL_ALGO_SHA256
  463. *
  464. * @return false|int 验证结果:成功/失败
  465. */
  466. public static function verifySign($signature, $data, $rsaPublicKey, $alg=OPENSSL_ALGO_SHA256){
  467. $key = "-----BEGIN PUBLIC KEY-----\n".wordwrap($rsaPublicKey, 64, "\n", true)."\n-----END PUBLIC KEY-----";
  468. return openssl_verify($data, base64_decode($signature), $key, $alg);
  469. }
  470. /**
  471. * 使用公钥验签(对数据源排序),可用于 V2 版本接口返回数据验签
  472. *
  473. * @param string $signature 签文
  474. * @param array $data 原数据(array)
  475. * @param string $rsaPublicKey 公钥
  476. * @param int $alg 默认 OPENSSL_ALGO_SHA256
  477. *
  478. * @return false|int 验证结果:成功/失败
  479. */
  480. public static function verifySign_sort($signature, $data, $rsaPublicKey, $alg=OPENSSL_ALGO_SHA256){
  481. $key = "-----BEGIN PUBLIC KEY-----\n".wordwrap($rsaPublicKey, 64, "\n", true)."\n-----END PUBLIC KEY-----";
  482. ksort($data);
  483. $data = json_encode($data, JSON_UNESCAPED_SLASHES|JSON_UNESCAPED_UNICODE);
  484. $data = str_replace("\n","\\n",$data);
  485. $data = str_replace('"enter_fee":0,','"enter_fee":0.00,',$data); // 单独替换指定类型格式不正确的字段 如 enter_fee
  486. return openssl_verify($data, base64_decode($signature), $key, $alg);
  487. }
  488. public static function checkEmpty($value) {
  489. return !isset($value) || trim($value) === "";
  490. }
  491. public static function endWith($str, $suffix) {
  492. $length = strlen($suffix);
  493. if($length == 0){
  494. return false;
  495. }
  496. return (substr($str, -$length) === $suffix);
  497. }
  498. /**
  499. * 校验 webhook 返回报文签名
  500. *
  501. * @param string $signature 签文
  502. * @param array $data 原数据(array)
  503. * @param string $key 加签 key
  504. * @param int $alg 默认 OPENSSL_ALGO_SHA256
  505. *
  506. * @return true|false 验证结果:成功/失败
  507. */
  508. public static function verify_webhook_sign($signature, $data, $key){
  509. $sign = md5(json_encode($data, JSON_UNESCAPED_SLASHES|JSON_UNESCAPED_UNICODE).$key);
  510. return $sign == strtolower($signature);
  511. }
  512. }