yunzerwebsite/pay
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

first commit

Browse Source
This commit is contained in:
hero920103
2025-11-28 10:08:12 +08:00
commit 09a14bf0a3
1088 changed files with 145132 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
plugins/ysepay/inc/YsepayClient.php
+246
View File
@@ -0,0 +1,246 @@
<?php
require_once 'YsepayResponse.php';
/**
* https://open.ysepay.com/openDocs/summary/
*/
class YsepayClient
{
//服务商商户号
private $partnerId;
//银盛公钥证书
private $businessgateCertPath;
//私钥证书文件
private $privateCertPath;
//私钥密码
private $privateKeyPwd;
private $charset = 'UTF-8';
private $signType = 'RSA';
public $notifyUrl;
public $returnUrl;
public function __construct($partnerId, $privateKeyPwd){
$this->partnerId = $partnerId;
$this->privateKeyPwd = $privateKeyPwd;
$this->businessgateCertPath = PAY_ROOT.'cert/businessgate.cer';
$this->privateCertPath = PAY_ROOT.'cert/client.pfx';
if(!file_exists($this->businessgateCertPath)){
throw new \Exception('银盛公钥证书文件businessgate.cer不存在');
}
if(!file_exists($this->privateCertPath)){
throw new \Exception('商户私钥证书文件client.pfx不存在');
}
}
//扫码支付
public function execute($method, $bizContent){
$url = 'https://qrcode.ysepay.com/gateway.do';
$params = [
'method' => $method,
'partner_id' => $this->partnerId,
'timestamp' => date("Y-m-d H:i:s"),
'charset' => $this->charset,
'sign_type' => $this->signType,
'version' => '3.5'
];
if (!empty($this->notifyUrl)) {
$params["notify_url"] = $this->notifyUrl;
}
if (!empty($this->returnUrl)) {
$params["return_url"] = $this->returnUrl;
}
$params['biz_content'] = json_encode($bizContent, JSON_UNESCAPED_SLASHES|JSON_UNESCAPED_UNICODE);
$params['sign'] = $this->generateSign($params);
$raw = $this->curl($url, $params);
$response = new YsepayResponse($raw, $method);
$this->verifyResponse($response);
return $response;
}
//页面跳转支付
public function pageExecute($method, $bizParams){
$url = 'https://openapi.ysepay.com/gateway.do';
$params = [
'method' => $method,
'partner_id' => $this->partnerId,
'timestamp' => date("Y-m-d H:i:s"),
'charset' => $this->charset,
'sign_type' => $this->signType,
'version' => '3.0'
];
if (!empty($this->notifyUrl)) {
$params["notify_url"] = $this->notifyUrl;
}
if (!empty($this->returnUrl)) {
$params["return_url"] = $this->returnUrl;
}
$params = array_merge($params, $bizParams);
$params['sign'] = $this->generateSign($params);
$html = "<form id='alipaysubmit' name='alipaysubmit' action='{$url}' method='POST'>";
foreach ($params as $key => $value) {
if ($this->isEmpty($value)) {
continue;
}
$value = htmlentities($value, ENT_QUOTES | ENT_HTML5);
$html .= "<input type='hidden' name='{$key}' value='{$value}'/>";
}
$html .= "<input type='submit' value='ok' style='display:none;'></form>";
$html .= "<script>document.forms['alipaysubmit'].submit();</script>";
return $html;
}
//异步通知回调验签
public function verify($params)
{
if (!$params || !isset($params['sign'])) {
return false;
}
$sign = $params['sign'];
$data = $this->getSignContent($params);
try {
return $this->rsaPubilcVerify($data, $sign);
} catch (\Exception $ex) {
return false;
}
}
//验证返回内容签名
private function verifyResponse(YsepayResponse $response)
{
$signData = $response->getSignData();
$sign = $response->getSign();
if ($this->isEmpty($signData) || $this->isEmpty($sign)) {
throw new \Exception('返回数据解析签名失败');
}
$checkResult = $this->rsaPubilcVerify($signData, $sign);
if (!$checkResult) {
if (strpos($signData, '\/') > 0) {
$signData = str_replace('\/', '/', $signData);
$checkResult = $this->rsaPubilcVerify($signData, $sign);
}
if (!$checkResult) {
throw new \Exception('对返回数据使用银盛公钥验签失败');
}
}
}
private function generateSign($params){
return $this->rsaPrivateSign($this->getSignContent($params));
}
private function getSignContent($params){
ksort($params);
unset($params['sign']);
$stringToBeSigned = "";
foreach ($params as $k => $v) {
if($this->isEmpty($v) || substr($v, 0, 1) == '@') continue;
$stringToBeSigned .= "&{$k}={$v}";
}
$stringToBeSigned = substr($stringToBeSigned, 1);
return $stringToBeSigned;
}
private function isEmpty($value)
{
return $value === null || trim($value) === '';
}
//银盛公钥
private function getPublicKey()
{
$file = file_get_contents($this->businessgateCertPath);
$cert = chunk_split(base64_encode($file), 64, "\n");
$cert = "-----BEGIN CERTIFICATE-----\n" . $cert . "-----END CERTIFICATE-----\n";
$res = openssl_pkey_get_public($cert);
if (!$res) {
throw new \Exception('从银盛公钥证书获取公钥失败');
}
return $res;
}
//商户私钥
private function getPrivateKey()
{
$file = file_get_contents($this->privateCertPath);
if (!openssl_pkcs12_read($file, $cert, $this->privateKeyPwd)) {
throw new \Exception('商户私钥证书解析失败');
}
return openssl_pkey_get_private($cert['pkey']);
}
//私钥加签
private function rsaPrivateSign($data)
{
$prikey = $this->getPrivateKey();
$result = openssl_sign($data, $sign, $prikey);
if (!$result) throw new \Exception('sign error');
return base64_encode($sign);
}
//公钥验签
public function rsaPubilcVerify($data, $sign)
{
$pubkey = $this->getPublicKey();
$result = openssl_verify($data, base64_decode($sign), $pubkey);
return $result === 1;
}
private function curl($url, $postFields = null)
{
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_FAILONERROR, false);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
if (is_array($postFields) && 0 < count($postFields)) {
$postMultipart = false;
foreach ($postFields as &$value) {
if(substr($value, 0, 1) == '@' && class_exists('CURLFile')){
$postMultipart = true;
$file = substr($value, 1);
if(file_exists($file)){
$value = new \CURLFile($file);
}
}
}
curl_setopt($ch, CURLOPT_POST, true);
if($postMultipart){
curl_setopt($ch, CURLOPT_POSTFIELDS, $postFields);
}else{
curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($postFields));
}
}
$response = curl_exec($ch);
if (curl_errno($ch) > 0) {
$errmsg = curl_error($ch);
curl_close($ch);
throw new \Exception($errmsg, 0);
}
$httpStatusCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
if ($httpStatusCode != 200) {
curl_close($ch);
throw new \Exception($response, $httpStatusCode);
}
curl_close($ch);
return $response;
}
}
plugins/ysepay/inc/YsepayResponse.php
+149
View File
@@ -0,0 +1,149 @@
<?php
class YsepayResponse
{
/**
* 响应签名节点名
*/
const SIGN_NODE = 'sign';
/**
* 响应数据节点后缀
*/
const RESPONSE_SUFFIX = '_response';
/**
* 原始响应
*
* @var string
*/
protected $raw;
/**
* 已解析的响应
*
* @var mixed
*/
protected $parsed;
/**
* 数据节点名称
*/
protected $nodeName;
/**
* 待验签数据
*/
protected $signData;
/**
* @param $raw 原始数据
* @param $apiName 接口名称
*/
public function __construct($raw, $apiName)
{
$this->raw = $raw;
$this->parsed = json_decode($raw, true);
if (!$this->parsed) {
$error = function_exists('json_last_error_msg') ? json_last_error_msg() : json_last_error();
throw new \Exception('返回数据解析失败:'.$error);
}
$this->parseResponseData($apiName);
}
/**
* 获取原始响应的被签名数据，用于验证签名.
*
* @param $apiName
*/
protected function parseResponseData($apiName)
{
$nodeName = str_replace(".", "_", $apiName) . self::RESPONSE_SUFFIX;
$nodeIndex = strpos($this->raw, $nodeName);
if (!$nodeIndex) {
throw new \Exception('Response data not found');
}
$this->nodeName = $nodeName;
$signDataStartIndex = $nodeIndex + strlen($nodeName) + 2;
$signIndex = strrpos($this->raw, '"'.static::SIGN_NODE.'"');
$signDataEndIndex = $signIndex - 1;
$indexLen = $signDataEndIndex - $signDataStartIndex;
if ($indexLen < 0) {
$signIndex = strrpos($this->raw, "}");
$signDataEndIndex = $signIndex;
$indexLen = $signDataEndIndex - $signDataStartIndex;
}
$this->signData = substr($this->raw, $signDataStartIndex, $indexLen);
}
/**
* 获取待验签数据
*
* @return string
*/
public function getSignData()
{
return $this->signData;
}
/**
* 获取响应内的签名.
*
* @return string
*/
public function getSign()
{
if (isset($this->parsed[static::SIGN_NODE])) {
return $this->parsed[static::SIGN_NODE];
}
return null;
}
/**
* 获取响应内的数据.
*
* @param bool $assoc
*
* @return mixed|object
*/
public function getData($assoc = true)
{
if (!isset($this->parsed[$this->nodeName])){
return null;
}
$result = $this->parsed[$this->nodeName];
if ($assoc == false) {
$result = (object) ($result);
}
return $result;
}
/**
* 判断响应是否成功.
*
* @return bool
*/
public function isSuccess()
{
if (!isset($this->parsed[$this->nodeName])){
return false;
}
$data = $this->parsed[$this->nodeName];
return isset($data['code']) && $data['code'] == '10000';
}
/**
* 获取原始响应.
*
* @return string
*/
public function getRaw()
{
return $this->raw;
}
}