503 lines
18 KiB
PHP
503 lines
18 KiB
PHP
<?php
|
||
/**
|
||
* 新生支付API
|
||
* @see https://www.yuque.com/chenyanfei-sjuaz/uhng8q
|
||
*/
|
||
class HnaPayApi
|
||
{
|
||
protected $mer_id;
|
||
protected $sign_type = '1'; //1：RSA 3：国密交易证书 4：国密密钥
|
||
protected $charset = '1';
|
||
private $platform_public_key;
|
||
private $merchant_private_key;
|
||
|
||
public function __construct($mer_id, $platform_public_key, $merchant_private_key, $key_type = 0)
|
||
{
|
||
$this->mer_id = $mer_id;
|
||
if($key_type == 2){
|
||
$platform_public_key_path = PLUGIN_ROOT.'hnapay/cert/hnapaypay.pem';
|
||
if(file_exists(PLUGIN_ROOT.'hnapay/cert/'.$mer_id.'/pay.key')){
|
||
$merchant_private_key_path = PLUGIN_ROOT.'hnapay/cert/'.$mer_id.'/pay.key';
|
||
}else{
|
||
$merchant_private_key_path = PLUGIN_ROOT.'hnapay/cert/pay.key';
|
||
}
|
||
if(!file_exists($merchant_private_key_path)) {
|
||
throw new Exception('商户私钥文件pay.key不存在');
|
||
}
|
||
$this->platform_public_key = $this->loadPublicKeyFile($platform_public_key_path);
|
||
$this->merchant_private_key = $this->loadPrivateKeyFile($merchant_private_key_path);
|
||
}elseif($key_type == 1){
|
||
$platform_public_key_path = PLUGIN_ROOT.'hnapay/cert/hnapay.pem';
|
||
if(file_exists(PLUGIN_ROOT.'hnapay/cert/'.$mer_id.'/mch.key')){
|
||
$merchant_private_key_path = PLUGIN_ROOT.'hnapay/cert/'.$mer_id.'/mch.key';
|
||
}else{
|
||
$merchant_private_key_path = PLUGIN_ROOT.'hnapay/cert/mch.key';
|
||
}
|
||
if(!file_exists($merchant_private_key_path)) {
|
||
throw new Exception('商户私钥文件mch.key不存在');
|
||
}
|
||
$this->platform_public_key = $this->loadPublicKeyFile($platform_public_key_path);
|
||
$this->merchant_private_key = $this->loadPrivateKeyFile($merchant_private_key_path);
|
||
}else{
|
||
$this->platform_public_key = $this->loadPublicKey($platform_public_key);
|
||
$this->merchant_private_key = $this->loadPrivateKey($merchant_private_key);
|
||
}
|
||
}
|
||
|
||
//扫码支付
|
||
public function scanPay($params){
|
||
$apiurl = 'https://gateway.hnapay.com/website/scanPay.do';
|
||
$publicParams = [
|
||
'tranCode' => 'WS01',
|
||
'version' => '2.1',
|
||
'merId' => $this->mer_id,
|
||
'payType' => 'QRCODE_B2C',
|
||
'charset' => $this->charset,
|
||
'signType' => $this->sign_type
|
||
];
|
||
$params = array_merge($publicParams, $params);
|
||
|
||
$sign_order = ['tranCode', 'version', 'merId', 'submitTime', 'merOrderNum', 'tranAmt', 'payType', 'orgCode', 'notifyUrl', 'charset', 'signType'];
|
||
$params['signMsg'] = $this->generateSignOld($params, $sign_order);
|
||
|
||
$response = get_curl($apiurl, http_build_query($params));
|
||
$arr = json_decode($response, true);
|
||
|
||
if(isset($arr['resultCode']) && $arr['resultCode'] == '0000'){
|
||
if(!empty($arr['signMsg'])){
|
||
$sign_order = ['tranCode', 'version', 'merId', 'merOrderNum', 'tranAmt', 'submitTime', 'qrCodeUrl', 'hnapayOrderId', 'resultCode', 'charset', 'signType'];
|
||
if(!$this->verifySignOld($arr, $sign_order, $arr['signMsg'])){
|
||
throw new Exception('返回结果验签失败');
|
||
}
|
||
}
|
||
$arr['qrCodeUrl'] = getSubstr($arr['qrCodeUrl'], 'qrContent=', '&sign=');
|
||
return $arr;
|
||
}elseif(isset($arr['resultCode'])){
|
||
throw new Exception('['.$arr['resultCode'].']'.$arr['msgExt']);
|
||
}else{
|
||
throw new Exception('返回数据解析失败');
|
||
}
|
||
}
|
||
|
||
//扫码支付查单
|
||
public function scanQuery($trade_no){
|
||
$apiurl = 'https://gateway.hnapay.com/website/queryOrderResult.htm';
|
||
$param = [
|
||
'version' => "2.8",
|
||
'serialID' => date("YmdHis").rand(11111,99999),
|
||
'mode' => '1',
|
||
'type' => "1",
|
||
'orderID' => $trade_no,
|
||
'partnerID' => $this->mer_id,
|
||
'signType' => $this->sign_type,
|
||
'charset' => $this->charset,
|
||
];
|
||
|
||
$sign_order = ['version', 'serialID', 'mode', 'type', 'orderID', 'beginTime', 'endTime', 'partnerID', 'remark', 'charset', 'signType'];
|
||
$signStr = '';
|
||
foreach($sign_order as $key){
|
||
$signStr .= $key.'='.$param[$key].'&';
|
||
}
|
||
$signStr = substr($signStr, 0, -1);
|
||
$param['signMsg'] = $this->rsaPrivateSign($signStr, true);
|
||
|
||
$response = get_curl($apiurl, http_build_query($param));
|
||
$arr = [];
|
||
parse_str($response, $arr);
|
||
|
||
if(isset($arr['resultCode']) && $arr['resultCode'] == '0000'){
|
||
return $arr;
|
||
}elseif(isset($arr['resultCode'])){
|
||
throw new Exception('['.$arr['resultCode'].']'.$arr['ErrorCode']);
|
||
}else{
|
||
throw new Exception('返回数据解析失败');
|
||
}
|
||
}
|
||
|
||
//扫码支付回调验签
|
||
public function scanVerify($param){
|
||
if(!$param['signMsg']) return false;
|
||
$sign_order = ['tranCode', 'version', 'merId', 'merOrderNum', 'tranAmt', 'submitTime', 'hnapayOrderId', 'tranFinishTime', 'respCode', 'charset', 'signType'];
|
||
return $this->verifySignOld($param, $sign_order, $param['signMsg']);
|
||
}
|
||
|
||
//JSAPI支付
|
||
public function jsapiPay($params, $trade_no){
|
||
$apiurl = 'https://gateway.hnapay.com/ita/inCharge.do';
|
||
$param = [
|
||
'version' => "2.0",
|
||
'tranCode' => "ITA10",
|
||
'merId' => $this->mer_id,
|
||
'merOrderId' => $trade_no,
|
||
'submitTime' => substr($trade_no, 0, 14),
|
||
'signType' => $this->sign_type,
|
||
'charset' => $this->charset,
|
||
];
|
||
|
||
$param['msgCiphertext'] = $this->encryptParams($params);
|
||
|
||
$sign_order = ['version', 'tranCode', 'merId', 'merOrderId', 'submitTime', 'msgCiphertext'];
|
||
$param['signValue'] = $this->generateSign($param, $sign_order);
|
||
|
||
$response = get_curl($apiurl, http_build_query($param));
|
||
$arr = json_decode($response, true);
|
||
//print_r($arr);exit;
|
||
|
||
if(isset($arr['resultCode']) && $arr['resultCode'] == '0000'){
|
||
if(!empty($arr['signValue'])){
|
||
$sign_order = ['version', 'tranCode', 'merOrderId', 'merId', 'charset', 'signType', 'resultCode', 'errorCode', 'hnapayOrderId', 'payInfo'];
|
||
if(!$this->verifySign($arr, $sign_order, $arr['signValue'])){
|
||
throw new Exception('返回结果验签失败');
|
||
}
|
||
}
|
||
return $arr;
|
||
}elseif(isset($arr['errorCode'])){
|
||
throw new Exception('['.$arr['errorCode'].']'.$arr['errorMsg']);
|
||
}else{
|
||
throw new Exception('返回数据解析失败');
|
||
}
|
||
}
|
||
|
||
//JSAPI支付与H5支付查单
|
||
public function jsapiQuery($trade_no){
|
||
$apiurl = 'https://gateway.hnapay.com/exp/query.do';
|
||
$param = [
|
||
'version' => "2.0",
|
||
'tranCode' => "EXP08",
|
||
'merId' => $this->mer_id,
|
||
'merOrderId' => $trade_no,
|
||
'submitTime' => substr($trade_no, 0, 8),
|
||
'signType' => $this->sign_type,
|
||
'charset' => $this->charset,
|
||
];
|
||
|
||
$sign_order = ['version', 'tranCode', 'merId', 'merOrderId', 'submitTime'];
|
||
$param['signValue'] = $this->generateSign($param, $sign_order);
|
||
|
||
$response = get_curl($apiurl, http_build_query($param));
|
||
$arr = json_decode($response, true);
|
||
|
||
if(isset($arr['resultCode']) && $arr['resultCode'] == '0000'){
|
||
return $arr;
|
||
}elseif(isset($arr['errorCode'])){
|
||
throw new Exception('['.$arr['errorCode'].']'.$arr['errorMsg']);
|
||
}else{
|
||
throw new Exception('返回数据解析失败');
|
||
}
|
||
}
|
||
|
||
//JSAPI回调验签
|
||
public function jsapiVerify($param){
|
||
if(!$param['signValue']) return false;
|
||
$sign_order = ['version', 'tranCode', 'merOrderId', 'merId', 'merAttach', 'charset', 'signType', 'hnapayOrderId', 'resultCode', 'tranAmt', 'submitTime', 'tranFinishTime'];
|
||
return $this->verifySign($param, $sign_order, $param['signValue']);
|
||
}
|
||
|
||
//支付宝H5支付
|
||
public function h5Pay($params, $trade_no){
|
||
$apiurl = 'https://gateway.hnapay.com/multipay/h5.do';
|
||
$param = [
|
||
'version' => "2.0",
|
||
'tranCode' => "MUP11",
|
||
'merId' => $this->mer_id,
|
||
'merOrderId' => $trade_no,
|
||
'submitTime' => substr($trade_no, 0, 14),
|
||
'signType' => $this->sign_type,
|
||
'charset' => $this->charset,
|
||
];
|
||
|
||
$param['msgCiphertext'] = $this->encryptParams($params);
|
||
|
||
$sign_order = ['version', 'tranCode', 'merId', 'merOrderId', 'submitTime', 'signType', 'charset', 'msgCiphertext'];
|
||
$param['signValue'] = $this->generateSign($param, $sign_order);
|
||
|
||
$html = "<form id='alipaysubmit' name='alipaysubmit' action='{$apiurl}' method='POST'>";
|
||
foreach ($param as $key => $value) {
|
||
$value = htmlentities($value, ENT_QUOTES | ENT_HTML5);
|
||
$html .= "<input type='hidden' name='{$key}' value='{$value}'/>";
|
||
}
|
||
$html .= "<input type='submit' value='ok' style='display:none;'></form>";
|
||
$html .= "<script>document.forms['alipaysubmit'].submit();</script>";
|
||
|
||
return $html;
|
||
}
|
||
|
||
//支付宝H5回调验签
|
||
public function alipayh5Verify($param){
|
||
if(!$param['signValue']) return false;
|
||
$sign_order = ['version', 'tranCode', 'merOrderId', 'merId', 'charset', 'signType', 'resultCode', 'hnapayOrderId'];
|
||
return $this->verifySign($param, $sign_order, $param['signValue']);
|
||
}
|
||
|
||
//退款
|
||
public function refund($params, $trade_no){
|
||
$apiurl = 'https://gateway.hnapay.com/exp/refund.do';
|
||
$param = [
|
||
'version' => "2.0",
|
||
'tranCode' => "EXP09",
|
||
'merId' => $this->mer_id,
|
||
'merOrderId' => $trade_no,
|
||
'submitTime' => date('YmdHis'),
|
||
'signType' => $this->sign_type,
|
||
'charset' => $this->charset,
|
||
];
|
||
|
||
$param['msgCiphertext'] = $this->encryptParams($params);
|
||
|
||
$sign_order = ['version', 'tranCode', 'merId', 'merOrderId', 'submitTime', 'msgCiphertext'];
|
||
$param['signValue'] = $this->generateSign($param, $sign_order);
|
||
|
||
$response = get_curl($apiurl, http_build_query($param));
|
||
$arr = json_decode($response, true);
|
||
|
||
if(isset($arr['resultCode']) && $arr['resultCode'] == '0000'){
|
||
return $arr;
|
||
}elseif(isset($arr['errorCode'])){
|
||
throw new Exception('['.$arr['errorCode'].']'.$arr['errorMsg']);
|
||
}else{
|
||
throw new Exception('返回数据解析失败');
|
||
}
|
||
}
|
||
|
||
//付款到银行
|
||
public function transfer($params, $trade_no){
|
||
$apiurl = 'https://gateway.hnapay.com/website/singlePay.do';
|
||
$param = [
|
||
'version' => "2.1",
|
||
'tranCode' => "SGP01",
|
||
'merId' => $this->mer_id,
|
||
'merOrderId' => $trade_no,
|
||
'submitTime' => date('YmdHis'),
|
||
'signType' => $this->sign_type,
|
||
'charset' => $this->charset,
|
||
];
|
||
|
||
$param['msgCiphertext'] = $this->encryptParams($params);
|
||
|
||
$sign_order = ['version', 'tranCode', 'merId', 'merOrderId', 'submitTime', 'msgCiphertext', 'signType'];
|
||
$param['signValue'] = $this->generateSign($param, $sign_order);
|
||
|
||
$response = get_curl($apiurl, http_build_query($param));
|
||
$arr = json_decode($response, true);
|
||
|
||
if(isset($arr['resultCode']) && $arr['resultCode'] == '0000'){
|
||
return $arr;
|
||
}elseif(isset($arr['errorCode'])){
|
||
throw new Exception('['.$arr['errorCode'].']'.$arr['errorMsg']);
|
||
}else{
|
||
throw new Exception('返回数据解析失败');
|
||
}
|
||
}
|
||
|
||
//商户账户余额查询
|
||
public function transferQuery($orderid){
|
||
$apiurl = 'https://gateway.hnapay.com/website/singlePayQuery.do';
|
||
$param = [
|
||
'version' => "2.0",
|
||
'tranCode' => "SGP02",
|
||
'merOrderId' => $orderid,
|
||
'submitTime' => substr($orderid, 0, 14),
|
||
'signType' => $this->sign_type,
|
||
'charset' => $this->charset,
|
||
];
|
||
|
||
$sign_order = ['version', 'tranCode', 'merId', 'merOrderId', 'submitTime'];
|
||
$param['signValue'] = $this->generateSign($param, $sign_order);
|
||
|
||
$response = get_curl($apiurl, http_build_query($param));
|
||
$arr = json_decode($response, true);
|
||
|
||
if(isset($arr['resultCode']) && $arr['resultCode'] == '0000'){
|
||
return $arr;
|
||
}elseif(isset($arr['errorCode'])){
|
||
throw new Exception('['.$arr['errorCode'].']'.$arr['errorMsg']);
|
||
}else{
|
||
throw new Exception('返回数据解析失败');
|
||
}
|
||
}
|
||
|
||
//付款凭证下载
|
||
public function transferProof($hnapayOrderId){
|
||
$trade_no = date('YmdHis').rand(1000, 9999);
|
||
$apiurl = 'https://gateway.hnapay.com/website/payCertificate.do';
|
||
$param = [
|
||
'version' => "2.0",
|
||
'tranCode' => "SGP03",
|
||
'merId' => $this->mer_id,
|
||
'merOrderId' => $trade_no,
|
||
'submitTime' => date('YmdHis'),
|
||
'signType' => $this->sign_type,
|
||
'charset' => $this->charset,
|
||
];
|
||
|
||
$params = [
|
||
'hnapayOrderId' => $hnapayOrderId
|
||
];
|
||
|
||
$param['msgCiphertext'] = $this->encryptParams($params);
|
||
|
||
$sign_order = ['version', 'tranCode', 'merId', 'merOrderId', 'submitTime', 'msgCiphertext'];
|
||
$param['signValue'] = $this->generateSign($param, $sign_order);
|
||
|
||
$response = get_curl($apiurl, http_build_query($param));
|
||
$arr = json_decode($response, true);
|
||
|
||
if(isset($arr['resultCode']) && $arr['resultCode'] == '0000'){
|
||
return $arr;
|
||
}elseif(isset($arr['errorCode'])){
|
||
throw new Exception('['.$arr['errorCode'].']'.$arr['errorMsg']);
|
||
}else{
|
||
throw new Exception('返回数据解析失败');
|
||
}
|
||
}
|
||
|
||
//商户账户余额查询
|
||
public function queryBalance(){
|
||
$apiurl = 'https://gateway.hnapay.com/merchant/acct/queryBalance.do';
|
||
$param = [
|
||
'version' => "2.0",
|
||
'tranCode' => "QB01",
|
||
'merId' => $this->mer_id,
|
||
'acctType' => '11',
|
||
'signType' => $this->sign_type,
|
||
'charset' => $this->charset,
|
||
];
|
||
|
||
$sign_order = ['version', 'tranCode', 'merId', 'acctType', 'charset', 'signType'];
|
||
$param['signValue'] = $this->generateSign($param, $sign_order);
|
||
|
||
$response = get_curl($apiurl, http_build_query($param));
|
||
$arr = json_decode($response, true);
|
||
|
||
if(isset($arr['resultCode']) && $arr['resultCode'] == '0000'){
|
||
return $arr;
|
||
}elseif(isset($arr['errorCode'])){
|
||
throw new Exception('['.$arr['errorCode'].']'.$arr['errorMsg']);
|
||
}else{
|
||
throw new Exception('返回数据解析失败');
|
||
}
|
||
}
|
||
|
||
//付款回调验签
|
||
public function transferVerify($param){
|
||
if(!$param['signValue']) return false;
|
||
$sign_order = ['version', 'tranCode', 'merOrderId', 'merId', 'charset', 'signType', 'resultCode', 'hnapayOrderId'];
|
||
return $this->verifySign($param, $sign_order, $param['signValue']);
|
||
}
|
||
|
||
|
||
//请求参数签名(新收款密钥)
|
||
protected function generateSign($param, $sign_order){
|
||
$signStr = $this->getSignContent($param, $sign_order);
|
||
return $this->rsaPrivateSign($signStr);
|
||
}
|
||
|
||
//请求参数签名(收款密钥)
|
||
protected function generateSignOld($param, $sign_order){
|
||
$signStr = $this->getSignContent($param, $sign_order);
|
||
return $this->rsaPrivateSign($signStr, true);
|
||
}
|
||
|
||
//参数验签(新收款密钥)
|
||
protected function verifySign($param, $sign_order, $sign){
|
||
$signStr = $this->getSignContent($param, $sign_order);
|
||
return $this->rsaPubilcVerify($signStr, $sign);
|
||
}
|
||
|
||
//参数验签(收款密钥)
|
||
protected function verifySignOld($param, $sign_order, $sign){
|
||
$signStr = $this->getSignContent($param, $sign_order);
|
||
return $this->rsaPubilcVerify($signStr, $sign, true);
|
||
}
|
||
|
||
//生成待签名字符串
|
||
private function getSignContent($param, $sign_order){
|
||
$signStr = '';
|
||
foreach($sign_order as $key){
|
||
if(!isset($param[$key])){
|
||
throw new Exception('缺少参数'.$key);
|
||
}
|
||
if(is_array($param[$key])) $param[$key] = json_encode($param[$key], JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
|
||
$signStr .= $key.'=['.$param[$key].']';
|
||
}
|
||
return $signStr;
|
||
}
|
||
|
||
//请求参数加密
|
||
protected function encryptParams($params){
|
||
$key = openssl_get_publickey($this->platform_public_key);
|
||
if(!$key){
|
||
throw new Exception('加密失败，平台公钥不正确');
|
||
}
|
||
$data = json_encode($params);
|
||
$dataArray = str_split($data, 117);
|
||
$crypted = '';
|
||
foreach($dataArray as $subData){
|
||
$subCrypted = null;
|
||
openssl_public_encrypt($subData, $subCrypted, $key);
|
||
$crypted .= $subCrypted;
|
||
}
|
||
$crypted = base64_encode($crypted);
|
||
return $crypted;
|
||
}
|
||
|
||
//商户私钥签名
|
||
private function rsaPrivateSign($data, $is_hex = false){
|
||
openssl_sign($data, $sign, $this->merchant_private_key, OPENSSL_ALGO_SHA1);
|
||
$sign = $is_hex ? bin2hex($sign) : base64_encode($sign);
|
||
return $sign;
|
||
}
|
||
|
||
//平台公钥验签
|
||
private function rsaPubilcVerify($data, $sign, $is_hex = false){
|
||
$sign = $is_hex ? hex2bin($sign) : base64_decode($sign);
|
||
$result = openssl_verify($data, $sign, $this->platform_public_key);
|
||
return $result === 1;
|
||
}
|
||
|
||
|
||
|
||
//加载平台公钥
|
||
private function loadPublicKey($public_key){
|
||
$res = "-----BEGIN PUBLIC KEY-----\n" .
|
||
wordwrap($public_key, 64, "\n", true) .
|
||
"\n-----END PUBLIC KEY-----";
|
||
$pubkeyid = openssl_get_publickey($res);
|
||
if(!$pubkeyid){
|
||
throw new Exception('平台公钥不正确');
|
||
}
|
||
return $pubkeyid;
|
||
}
|
||
|
||
//加载商户私钥
|
||
private function loadPrivateKey($private_key){
|
||
$res = "-----BEGIN RSA PRIVATE KEY-----\n" .
|
||
wordwrap($private_key, 64, "\n", true) .
|
||
"\n-----END RSA PRIVATE KEY-----";
|
||
$prikeyid = openssl_get_privatekey($res);
|
||
if(!$prikeyid){
|
||
throw new Exception('商户私钥不正确');
|
||
}
|
||
return $prikeyid;
|
||
}
|
||
|
||
//从文件加载平台公钥
|
||
private function loadPublicKeyFile($public_key_path){
|
||
$res = file_get_contents($public_key_path);
|
||
$pubkeyid = openssl_get_publickey($res);
|
||
if(!$pubkeyid){
|
||
throw new Exception('平台公钥不正确');
|
||
}
|
||
return $pubkeyid;
|
||
}
|
||
|
||
//从文件加载商户私钥
|
||
private function loadPrivateKeyFile($private_key_path){
|
||
$res = file_get_contents($private_key_path);
|
||
$prikeyid = openssl_get_privatekey($res);
|
||
if(!$prikeyid){
|
||
throw new Exception('商户私钥不正确');
|
||
}
|
||
return $prikeyid;
|
||
}
|
||
} |