yunzerwebsite/pay
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

first commit

Browse Source
This commit is contained in:
hero920103
2025-11-28 10:08:12 +08:00
commit 09a14bf0a3
1088 changed files with 145132 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
plugins/kuaiqian/inc/CryptoProcessor.php
+189
View File
@@ -0,0 +1,189 @@
<?php
namespace kuaiqian;
use Exception;
class CryptoProcessor
{
//商户证书
private $merchantCert;
//商户私钥
private $merchantKey;
//快钱证书
private $kuaiqianCert;
private $temp_path = PLUGIN_ROOT.'kuaiqian/temp/';
public function __construct($merchantCertPath, $merchantCertPath_password, $kuaiqianCertPath)
{
$pfx = file_get_contents($merchantCertPath);
if(!openssl_pkcs12_read($pfx, $certs, $merchantCertPath_password)){
throw new Exception("商户证书读取失败！");
}
$this->merchantCert = $certs['cert'];
$this->merchantKey = $certs['pkey'];
$this->kuaiqianCert = file_get_contents($kuaiqianCertPath);
}
/**
* 商户端加密加签
* @param String $originalData 加密前明文
* @param String $salt 盐值，防止并发请求下，加解密txt文件的内容被覆写，可自定义
* @return string 请求快钱的body
*/
public function seal(string $originalData,string $salt){
$Body_final['signedData'] = $this->getSignedData($originalData,$salt);
$Body_final['envelopedData'] = $this->getEnvelopedData($originalData,$salt);
if(0==strlen($Body_final['signedData']) || 0==strlen($Body_final['envelopedData'])){
throw new Exception("请求出错，signedData或envelopedData为空！");
}
return $Body_final;
}
/**
* 商户端解密验签
* @param String $signedData 快钱返回的签名
* @param String $envelopedData 快钱返回的密文
* @param String $salt 盐值，防止并发请求下，加解密txt文件的内容被覆写，可自定义
* @return string 解密后的明文
*/
public function unseal(string $signedData,string $envelopedData,string $salt){
$responseDecryptData = $this->getDecryptData($envelopedData,$salt);
$verifyResult = $this->getVerifyFlag($responseDecryptData,$signedData,$salt);
if(0==strlen($responseDecryptData)){
throw new Exception("客户端解密失败！");
}
if(!$verifyResult){
throw new Exception("客户端验签失败！");
}
return $responseDecryptData;
}
/**
* 获取密文 快钱证书加密
*/
public function getEnvelopedData(string $originalData,string $salt):string {
//定义一个data文件，写入明文body
$originalDataPath = $this->temp_path . 'data_' . $salt . '.txt';
if(!file_put_contents($originalDataPath, $originalData)){
throw new Exception("获取密文失败，写入文件失败！");
}
//获取证书内容
$publickey = $this->kuaiqianCert;
//定义一个endata文件，存放加密后数据
$enDataPath = $this->temp_path . 'endata_' . $salt . '.txt';
openssl_pkcs7_encrypt($originalDataPath,$enDataPath,$publickey,null,
PKCS7_BINARY,OPENSSL_CIPHER_AES_128_CBC);
//获取密文及字符处理
$enData = file_get_contents($enDataPath);
$finalEnData = str_replace(array("\r\n","\r","\n","\\"),"",
substr($enData,191,strlen($enData)));
//返回
unlink($originalDataPath);
unlink($enDataPath);
return $finalEnData;
}
/**获取签名 商户证书签名
* @return Base64string
*/
public function getSignedData(string $originalData,string $salt):string {
$originalDataPath = $this->temp_path . 'origdata_' . $salt . '.txt';
if(!file_put_contents($originalDataPath, $originalData)){
throw new Exception("获取签名失败，写入文件失败！");
}
$signdataPath = $this->temp_path . 'signdata_' . $salt . '.txt';
openssl_pkcs7_sign($originalDataPath,$signdataPath,
$this->merchantCert,
$this->merchantKey,
[],
PKCS7_BINARY);
$signdata = file_get_contents($signdataPath);
$finalsigndata = str_replace(array("\r\n","\r","\n"),array(""),
substr($signdata,186,strlen($signdata)));
unlink($originalDataPath);
unlink($signdataPath);
return $finalsigndata;
}
/**返回解密 商户证书解密
* @return string
*/
public function getDecryptData(string $encryptoData,string $salt):string {
$respdecryptoDataPath = $this->temp_path . 'respDecryptoData_' . $salt . '.txt';
//txt内容须遵守SMIME格式规范，请勿做增删、对齐等操作
$txt ="MIME-Version: 1.0
Content-Disposition: attachment; filename=\"smime.p7m\"
Content-Type: application/x-pkcs7-mime; smime-type=enveloped-data; name=\"smime.p7m\"
Content-Transfer-Encoding: base64"."\n\n\n".$encryptoData;
if(!file_put_contents($respdecryptoDataPath, $txt)){
throw new Exception("返回解密失败，写入文件失败！");
}
$decryptoDataPath = $this->temp_path . 'decryptoData_' . $salt . '.txt';
if(openssl_pkcs7_decrypt($respdecryptoDataPath,$decryptoDataPath,
$this->merchantCert,
$this->merchantKey)){
$decryptoData = file_get_contents($decryptoDataPath);
//Log::info('解密成功！快钱返回明文body为：'.$decryptoData);
unlink($decryptoDataPath);
unlink($respdecryptoDataPath);
return $decryptoData;
}else{
unlink($respdecryptoDataPath);
unlink($decryptoDataPath);
throw new Exception('返回数据解密失败！failed to decrypt!');
}
}
/**返回验签 快钱证书验签
* @return bool
*/
public function getVerifyFlag(string $decryptoData,string $signedData,string $salt):bool {
$respsignedDataPath = $this->temp_path . 'respSignedData_' . $salt . '.txt';
$txt =$signedData;
file_put_contents($respsignedDataPath,$this->formatSmimeSignData($txt,$decryptoData));
$unSignDataPath = $this->temp_path . 'unSignData_' . $salt . '.txt';
$flag = openssl_pkcs7_verify($respsignedDataPath,PKCS7_NOVERIFY,$unSignDataPath);
unlink($respsignedDataPath);
unlink($unSignDataPath);
return $flag == 1;
}
/**
* @return String $signData 内容须遵守SMIME格式规范，请勿做增删、对齐等操作
*/
public function formatSmimeSignData($txt,$decryptoData)
{
$signData = chunk_split($txt, 76, "\n");
$boundary = "----" . md5($signData);
$signData = <<<EOD
MIME-Version: 1.0
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha256; boundary="$boundary"
This is an S/MIME signed message
--$boundary
$decryptoData
--$boundary
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
$signData
--$boundary--
EOD;
return $signData;
}
}
plugins/kuaiqian/inc/PayApp.class.php
+248
View File
@@ -0,0 +1,248 @@
<?php
namespace kuaiqian;
require 'CryptoProcessor.php';
use Exception;
class PayApp
{
public $gateway_url = 'https://umgw.99bill.com/umgw/common/distribute.html';
protected $member_code;
private $merchat_key_pwd;
private $ssl_cert_pwd;
private $platform_cert_path;
private $merchat_key_path;
private $ssl_cert_path;
public function __construct($memberCode, $merchat_key_pwd, $ssl_cert_pwd)
{
$this->member_code = $memberCode;
$this->merchat_key_pwd = $merchat_key_pwd;
$this->ssl_cert_pwd = $ssl_cert_pwd;
if(file_exists(PLUGIN_ROOT.'kuaiqian/cert/'.$memberCode.'/cert.cer') && file_exists(PLUGIN_ROOT.'kuaiqian/cert/'.$memberCode.'/key.pfx')){
$this->platform_cert_path = PLUGIN_ROOT.'kuaiqian/cert/'.$memberCode.'/cert.cer';
$this->merchat_key_path = PLUGIN_ROOT.'kuaiqian/cert/'.$memberCode.'/key.pfx';
$this->ssl_cert_path = PLUGIN_ROOT.'kuaiqian/cert/'.$memberCode.'/ssl.pfx';
}else{
$this->platform_cert_path = PLUGIN_ROOT.'kuaiqian/cert/cert.cer';
$this->merchat_key_path = PLUGIN_ROOT.'kuaiqian/cert/key.pfx';
$this->ssl_cert_path = PLUGIN_ROOT.'kuaiqian/cert/ssl.pfx';
}
}
//发起API请求
public function execute($head, $body){
$apiurl = $this->gateway_url;
//$apiurl = 'https://sandbox.99bill.com:7445/umgw/common/distribute.html';
$cryptoProcessor = new CryptoProcessor($this->merchat_key_path, $this->merchat_key_pwd, $this->platform_cert_path);
//对明文body进行加密加签
$salt = $head['memberCode'] . '_' . $this->getMillisecond();
$body = json_encode($body,JSON_UNESCAPED_UNICODE);
$request_Body_Final = $cryptoProcessor->seal($body,$salt);
$request_Final['head'] = $head;
$request_Final['requestBody'] = $request_Body_Final;
//echo json_encode($request_Final,JSON_UNESCAPED_UNICODE);exit;
//开始请求快钱，获取返回
$result = $this->curl_ssl($apiurl,json_encode($request_Final,JSON_UNESCAPED_UNICODE));
$responseMessage = json_decode($result,true);
if(isset($responseMessage['head']['responseCode']) && $responseMessage['head']['responseCode'] == '0000'){
//对返回body解密验签，拿到原文
$signedData = $responseMessage['responseBody']['signedData'];
$envelopedData = $responseMessage['responseBody']['envelopedData'];
$salt = $responseMessage['head']['memberCode'] . '_' . $this->getMillisecond();
$response_Body = $cryptoProcessor->unseal($signedData,$envelopedData,$salt);
return json_decode($response_Body,true);
}elseif(isset($responseMessage['head']['responseCode'])){
throw new Exception('['.$responseMessage['head']['responseCode'].']'.$responseMessage['head']['responseTextMessage']);
}else{
throw new Exception('返回数据解析失败');
}
}
public function notifyProcess(&$result){
$json = file_get_contents('php://input');
$requestMessage = json_decode($json,true);
if(!$requestMessage) throw new Exception('no data');
//对返回body解密验签，拿到原文
$cryptoProcessor = new CryptoProcessor($this->merchat_key_path, $this->merchat_key_pwd, $this->platform_cert_path);
$signedData = $requestMessage['requestBody']['signedData'];
$envelopedData = $requestMessage['requestBody']['envelopedData'];
$salt = $requestMessage['head']['memberCode'] . '_' . $this->getMillisecond();
$request_Body = $cryptoProcessor->unseal($signedData,$envelopedData,$salt);
$result = ['head' => $requestMessage['head'], 'body' => json_decode($request_Body,true)];
$head = [
'version' => '1.0.0',
'messageType' => 'A9005',
'memberCode' => $requestMessage['head']['memberCode'],
'externalRefNumber' => $requestMessage['head']['externalRefNumber'],
];
$body = [
'merchantId' => $result['body']['merchantId'],
'refNumber' => $result['body']['refNumber'],
'isReceived' => '1'
];
//对明文body进行加密加签
$salt = $head['memberCode'] . '_' . $this->getMillisecond();
$body = json_encode($body,JSON_UNESCAPED_UNICODE);
$response_Body_Final = $cryptoProcessor->seal($body,$salt);
$response_Final['head'] = $head;
$response_Final['responseBody'] = $response_Body_Final;
return json_encode($response_Final);
}
public function notifyProcessComplain(&$result){
$json = file_get_contents('php://input');
$requestMessage = json_decode($json,true);
if(!$requestMessage) throw new Exception('no data');
//对返回body解密验签，拿到原文
$cryptoProcessor = new CryptoProcessor($this->merchat_key_path, $this->merchat_key_pwd, $this->platform_cert_path);
$signedData = $requestMessage['requestBody']['signedData'];
$envelopedData = $requestMessage['requestBody']['envelopedData'];
$salt = $requestMessage['head']['memberCode'] . '_' . $this->getMillisecond();
$request_Body = $cryptoProcessor->unseal($signedData,$envelopedData,$salt);
$result = ['head' => $requestMessage['head'], 'body' => json_decode($request_Body,true)];
$head = [
'version' => '1.0.0',
'messageType' => 'A9005',
'memberCode' => $requestMessage['head']['memberCode'],
];
$body = [
'isReceived' => '1'
];
//对明文body进行加密加签
$salt = $head['memberCode'] . '_' . $this->getMillisecond();
$body = json_encode($body,JSON_UNESCAPED_UNICODE);
$response_Body_Final = $cryptoProcessor->seal($body,$salt);
$response_Final['head'] = $head;
$response_Final['responseBody'] = $response_Body_Final;
return json_encode($response_Final);
}
//请求参数签名
public function generateSign($param){
$signstr = '';
foreach($param as $k => $v){
if($k != "signMsg" && $v!==''){
$signstr .= $k.'='.$v.'&';
}
}
$signstr = substr($signstr, 0, -1);
return $this->rsaPrivateSign($signstr);
}
//回调验签
public function verifyNotify($param){
if(empty($param['signMsg'])) return false;
$param_order = ['merchantAcctId','version','language','signType','payType','bankId','orderId','orderTime','orderAmount','bindCard','bindMobile','dealId','bankDealId','dealTime','payAmount','fee','ext1','ext2','payResult','aggregatePay','errCode','period'];
$signstr = '';
foreach($param_order as $k){
if(!empty($param[$k])){
$signstr .= $k.'='.$param[$k].'&';
}
}
$signstr = substr($signstr, 0, -1);
//公钥验签
return $this->rsaPubilcSign($signstr, $param['signMsg']);
}
//商户私钥签名
private function rsaPrivateSign($data){
$pkcs12 = file_get_contents($this->merchat_key_path);
openssl_pkcs12_read($pkcs12, $keyarr, $this->merchat_key_pwd);
$private_key = openssl_pkey_get_private($keyarr["pkey"]);
if(!$private_key){
throw new Exception('签名失败，商户私钥不正确');
}
openssl_sign($data, $signature, $private_key, OPENSSL_ALGO_SHA256);
return base64_encode($signature);
}
//平台公钥验签
private function rsaPubilcSign($data, $signature){
$keyFile = file_get_contents($this->platform_cert_path);
$public_key = openssl_pkey_get_public($keyFile);
if(!$public_key){
throw new Exception('验签失败，平台公钥不正确');
}
$result = openssl_verify($data, base64_decode($signature), $public_key, OPENSSL_ALGO_SHA256);
return $result === 1;
}
public function curl_ssl($url, $str){
if(!file_exists($this->ssl_cert_path)){
throw new Exception('SSL双向证书不存在');
}
$header[] = "Content-type: application/json;charset=utf-8";
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $str);
curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
curl_setopt($ch, CURLOPT_SSLCERTTYPE, 'P12');
curl_setopt($ch, CURLOPT_SSLCERT, $this->ssl_cert_path);
curl_setopt($ch, CURLOPT_SSLCERTPASSWD, $this->ssl_cert_pwd);
$output = curl_exec($ch);
if (curl_errno($ch) > 0) {
$errmsg = curl_error($ch);
curl_close($ch);
throw new \Exception($errmsg, 0);
}
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
if ($httpCode != 200) {
curl_close($ch);
throw new \Exception('http状态码异常[' . $httpCode . ']', 0);
}
return $output;
}
public function curl($url, $body, $cookie = null){
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
$httpheader[] = "Accept: */*";
$httpheader[] = "Accept-Encoding: gzip,deflate,sdch";
$httpheader[] = "Accept-Language: zh-CN,zh;q=0.8";
$httpheader[] = "Connection: close";
curl_setopt($ch, CURLOPT_HEADER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, $httpheader);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Linux; Android 12; M2011K2C Build/SKQ1.211006.001) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.74 Mobile Safari/537.36");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
curl_setopt($ch, CURLOPT_ENCODING, "gzip");
if ($cookie) {
curl_setopt($ch, CURLOPT_COOKIE, $cookie);
}
$data = curl_exec($ch);
if (curl_errno($ch) > 0) {
$errmsg = curl_error($ch);
curl_close($ch);
throw new \Exception($errmsg, 0);
}
$headerSize = curl_getinfo($ch, CURLINFO_HEADER_SIZE);
$header = substr($data, 0, $headerSize);
$body = substr($data, $headerSize);
curl_close($ch);
return [$header, $body];
}
private function getMillisecond()
{
list($s1, $s2) = explode(' ', microtime());
return sprintf('%.0f', (floatval($s1) + floatval($s2)) * 1000);
}
}