239 lines
7.7 KiB
PHP
239 lines
7.7 KiB
PHP
<?php
|
|
|
|
/**
|
|
* @see https://www.yuque.com/bgu2ty/eqt
|
|
*/
|
|
class YseqtClient
|
|
{
|
|
|
|
//发起方商户号
|
|
private $srcMerchantNo;
|
|
|
|
//银盛公钥证书
|
|
private $businessgateCertPath;
|
|
|
|
//私钥证书文件
|
|
private $privateCertPath;
|
|
|
|
//私钥密码
|
|
private $privateKeyPwd;
|
|
|
|
private $charset = 'UTF-8';
|
|
private $signType = 'RSA';
|
|
private $version = 'v2.0.0';
|
|
|
|
public $gateway_url = 'https://eqt.ysepay.com/api/trade';
|
|
|
|
public function __construct($srcMerchantNo, $privateKeyPwd){
|
|
$this->srcMerchantNo = $srcMerchantNo;
|
|
$this->privateKeyPwd = $privateKeyPwd;
|
|
$this->businessgateCertPath = PLUGIN_ROOT.'yseqt/cert/businessgate.cer';
|
|
if(file_exists(PLUGIN_ROOT.'yseqt/cert/'.$srcMerchantNo.'.pfx')){
|
|
$this->privateCertPath = PLUGIN_ROOT.'yseqt/cert/'.$srcMerchantNo.'.pfx';
|
|
}else{
|
|
$this->privateCertPath = PLUGIN_ROOT.'yseqt/cert/client.pfx';
|
|
}
|
|
if(!file_exists($this->businessgateCertPath)){
|
|
throw new \Exception('银盛公钥证书文件businessgate.cer不存在');
|
|
}
|
|
if(!file_exists($this->privateCertPath)){
|
|
throw new \Exception('商户私钥证书文件client.pfx不存在');
|
|
}
|
|
}
|
|
|
|
//交易接口
|
|
public function execute($serviceNo, $bizContent){
|
|
$params = [
|
|
'requestId' => getSid(),
|
|
'srcMerchantNo' => $this->srcMerchantNo,
|
|
'version' => $this->version,
|
|
'charset' => $this->charset,
|
|
'serviceNo' => $serviceNo,
|
|
'signType' => $this->signType,
|
|
];
|
|
$params['bizReqJson'] = json_encode($bizContent, JSON_UNESCAPED_SLASHES|JSON_UNESCAPED_UNICODE);
|
|
$params['sign'] = $this->generateSign($params);
|
|
$response = $this->curl($this->gateway_url, $params);
|
|
$result = json_decode($response, true);
|
|
if(!empty($result['sign'])){
|
|
$this->verifyResponse($result);
|
|
}
|
|
if(isset($result['code']) && $result['code'] == 'SYS000'){
|
|
return $result['bizResponseJson'];
|
|
}else{
|
|
throw new \Exception($result['msg']?$result['msg']:'返回数据解析失败');
|
|
}
|
|
}
|
|
|
|
//文件上传接口
|
|
public function upload($serviceNo, $bizContent){
|
|
$url = 'https://eqt.ysepay.com/api/file';
|
|
$params = [
|
|
'requestId' => getSid(),
|
|
'srcMerchantNo' => $this->srcMerchantNo,
|
|
'version' => $this->version,
|
|
'charset' => $this->charset,
|
|
'serviceNo' => $serviceNo,
|
|
'signType' => $this->signType,
|
|
];
|
|
$params['sign'] = $this->generateSign($params);
|
|
$params['bizReqJson'] = json_encode($bizContent, JSON_UNESCAPED_SLASHES|JSON_UNESCAPED_UNICODE);
|
|
$response = $this->curl($url, $params);
|
|
$result = json_decode($response, true);
|
|
if(!empty($result['sign'])){
|
|
$this->verifyResponse($result);
|
|
}
|
|
if(isset($result['code']) && $result['code'] == 'SYS000'){
|
|
return $result['bizResponseJson'];
|
|
}else{
|
|
throw new \Exception($result['msg']?$result['msg']:'返回数据解析失败');
|
|
}
|
|
}
|
|
|
|
//异步通知回调验签
|
|
public function verify($params)
|
|
{
|
|
if (!$params || !isset($params['sign'])) {
|
|
return false;
|
|
}
|
|
$sign = $params['sign'];
|
|
$data = $this->getSignContent($params);
|
|
try {
|
|
return $this->rsaPubilcVerify($data, $sign);
|
|
} catch (\Exception $ex) {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
//验证返回内容签名
|
|
private function verifyResponse($params)
|
|
{
|
|
$sign = $params['sign'];
|
|
if(is_array($params['bizResponseJson'])) $params['bizResponseJson'] = json_encode($params['bizResponseJson'], JSON_UNESCAPED_SLASHES|JSON_UNESCAPED_UNICODE);
|
|
$data = $this->getSignContent($params);
|
|
$checkResult = $this->rsaPubilcVerify($data, $sign);
|
|
if (!$checkResult) {
|
|
throw new \Exception('对返回数据使用银盛公钥验签失败');
|
|
}
|
|
}
|
|
|
|
private function generateSign($params){
|
|
return $this->rsaPrivateSign($this->getSignContent($params));
|
|
}
|
|
|
|
private function getSignContent($params){
|
|
ksort($params);
|
|
unset($params['sign']);
|
|
|
|
$signStr = "";
|
|
foreach ($params as $key => $val) {
|
|
if(substr($val, 0, 1) == '@' || $val === null) continue;
|
|
$signStr .= $key . '=' . $val . '&';
|
|
}
|
|
return rtrim($signStr, '&');
|
|
}
|
|
|
|
//银盛公钥
|
|
private function getPublicKey()
|
|
{
|
|
$file = file_get_contents($this->businessgateCertPath);
|
|
$cert = chunk_split(base64_encode($file), 64, "\n");
|
|
$cert = "-----BEGIN CERTIFICATE-----\n" . $cert . "-----END CERTIFICATE-----\n";
|
|
$res = openssl_pkey_get_public($cert);
|
|
if (!$res) {
|
|
throw new \Exception('从银盛公钥证书获取公钥失败');
|
|
}
|
|
return $res;
|
|
}
|
|
|
|
//商户私钥
|
|
private function getPrivateKey()
|
|
{
|
|
$file = file_get_contents($this->privateCertPath);
|
|
if (!openssl_pkcs12_read($file, $cert, $this->privateKeyPwd)) {
|
|
throw new \Exception('商户私钥证书解析失败');
|
|
}
|
|
return openssl_pkey_get_private($cert['pkey']);
|
|
}
|
|
|
|
//私钥加签
|
|
private function rsaPrivateSign($data)
|
|
{
|
|
$prikey = $this->getPrivateKey();
|
|
$result = openssl_sign($data, $sign, $prikey);
|
|
if (!$result) throw new \Exception('sign error');
|
|
return base64_encode($sign);
|
|
}
|
|
|
|
//公钥验签
|
|
public function rsaPubilcVerify($data, $sign)
|
|
{
|
|
$pubkey = $this->getPublicKey();
|
|
$result = openssl_verify($data, base64_decode($sign), $pubkey);
|
|
return $result === 1;
|
|
}
|
|
|
|
//DES加密方法
|
|
public function ECBEncrypt($data, $key): string
|
|
{
|
|
$encrypted = openssl_encrypt($data, 'DES-ECB', $key, OPENSSL_RAW_DATA);
|
|
return base64_encode($encrypted);
|
|
}
|
|
|
|
//DES解密方法
|
|
public function ECBDecrypt($data, $key): string
|
|
{
|
|
$encrypted = base64_decode($data);
|
|
$decrypted = openssl_decrypt($encrypted, 'DES-ECB', $key, OPENSSL_RAW_DATA);
|
|
return $decrypted;
|
|
}
|
|
|
|
private function curl($url, $postFields = null)
|
|
{
|
|
$ch = curl_init();
|
|
|
|
curl_setopt($ch, CURLOPT_URL, $url);
|
|
curl_setopt($ch, CURLOPT_FAILONERROR, false);
|
|
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
|
|
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
|
|
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
|
|
|
|
if (is_array($postFields) && 0 < count($postFields)) {
|
|
$postMultipart = false;
|
|
foreach ($postFields as &$value) {
|
|
if(substr($value, 0, 1) == '@' && class_exists('CURLFile')){
|
|
$postMultipart = true;
|
|
$file = substr($value, 1);
|
|
if(file_exists($file)){
|
|
$value = new \CURLFile($file);
|
|
}
|
|
}
|
|
}
|
|
curl_setopt($ch, CURLOPT_POST, true);
|
|
if($postMultipart){
|
|
curl_setopt($ch, CURLOPT_POSTFIELDS, $postFields);
|
|
}else{
|
|
curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($postFields));
|
|
}
|
|
}
|
|
|
|
$response = curl_exec($ch);
|
|
|
|
if (curl_errno($ch) > 0) {
|
|
$errmsg = curl_error($ch);
|
|
curl_close($ch);
|
|
throw new \Exception($errmsg, 0);
|
|
}
|
|
|
|
$httpStatusCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
|
|
if ($httpStatusCode != 200) {
|
|
curl_close($ch);
|
|
throw new \Exception($response, $httpStatusCode);
|
|
}
|
|
|
|
curl_close($ch);
|
|
|
|
return $response;
|
|
}
|
|
|
|
} |