paydebug

extend/payment/PayEase.php

@@ -107,6 +107,21 @@ class PayEase
                 'rows'          => 6,
                 'message'       => '请填写首信易公钥',
             ],
+            [
+                'element'       => 'select',
+                'placeholder'   => '收银台类型',
+                'is_multiple'   => 0,
+                'element_data'  => [
+                    ['value'=>'STANDARD', 'name'=>'标准版'],
+                    ['value'=>'DECLARE', 'name'=>'申报版'],
+                    ['value'=>'CUSTOMS', 'name'=>'海淘版按照收银台类型值判断'],
+                    ['value'=>'DECLARE', 'name'=>'需要同时提交身份信息和贸易 背景。STANDARD 不需要提交身份信息和 贸易背景。CUSTOMS 同申报版相似，区 别在于可不传银行卡号'],
+                ],
+                'name'          => 'cashierVersion',
+                'title'         => '收银台类型',
+                'is_required'   => 0,
+                'message'       => '请选择收银台类型',
+            ],
             [
                 'element'       => 'select',
                 'placeholder'   => '贸易背景',
@@ -153,6 +168,44 @@ class PayEase
             return DataReturn('支付缺少配置', -1);
         }
 
+        $data = [
+            'merchantId'        => $this->config['merchantId'],
+            'orderAmount'       => $params['total_price']/100,
+            'orderCurrency'     => ' CNY',
+            'requestId'         => $params['order_no'],
+            'notifyUrl'         => $params['notify_url'],
+            'callbackUrl'       => $params['call_back_url'],
+            'payer'             => (object) [],
+            'cashierVersion'    => $this->config['cashierVersion'],
+            'forUse'            => $this->config['forUse'],
+        ];
+        $detail = [
+            [
+                'name'      => '新款苹果手机iphone6s',
+                'quantity'  => 1,
+                'quantity'  => 1,
+            ]
+        ];
+        $data['productDetails'] = json_encode($detail, JSON_UNESCAPED_UNICODE);
+
+        // 签名
+        $data['hmac'] = 'sign';
+
+        $private_key = ROOT.'rsakeys/client.pfx';
+        $public_key = ROOT.'rsakeys/server.cer';
+        $str = $this->buildJson($private_key, $this->config['password']);
+        //print_r($str);die;
+        $date = $this->creatdate($str, $public_key, $data);
+
+        $url = 'https://apis.5upay.com/onlinePay/order';
+        return $this->execute(
+            $private_key,
+            $this->config['password'],
+            $public_key,
+            $url,
+            json_encode($date)
+        );
+
         
         return 100;
     }
@@ -195,5 +248,427 @@ class PayEase
         }
         return DataReturn('处理异常错误', -100);
     }
+
+
+
+    public function creatdate($strdata,$public_key, $data){
+
+
+        /*
+          * 生成16位随机数（AES秘钥）
+          */
+        $str1='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz1234567890';
+        $randStr = str_shuffle($str1);//打乱字符串
+        $rands= substr($randStr,0,16);//生成16位aes密钥
+
+        $encrypted=$this->rsaPublicEncode($public_key,$rands);
+
+        $date=$this->aesEncrypt($strdata,$rands);
+        $json = array("data" =>$date,"encryptKey"=>$encrypted,"merchantId"=>$data['merchantId'],"requestId"=>$data['requestId']);
+
+
+        return $json;
+    }
+
+    /**
+     * 填充算法
+     * @param string $source
+     * @return string
+
+     */
+    private function addPKCS7Padding($string, $blocksize = 16) {
+        $len = strlen($string);
+        $pad = $blocksize - ($len % $blocksize);
+        $string .= str_repeat(chr($pad), $pad);
+        return $string;
+
+    }
+
+
+
+    /**
+     * hmac 验证
+     * @return mixed
+     */
+    public function checkHmac($private_key,$public_key,$data,$password)
+    {
+
+        $aeskey=$this->rsaPrivateDecode($data,$private_key,$password);
+        $encrypt_str=$this->aesDesc($data,$aeskey);
+        /*
+       * 去除空值的元素
+       */
+
+        function clearBlank($arr)
+        {
+            return $arr;
+            function odd($var)
+            {
+                return($var<>'');//return true or false
+            }
+            return (array_filter($arr, "odd"));
+        }
+
+        function array_remove_empty(& $arr, $trim = true){
+            foreach ($arr as $key => $value) {
+                if (is_array($value)) {
+                    array_remove_empty($arr[$key]);
+                } else {
+                    $value = trim($value);
+                    if ($value == '') {
+                        unset($arr[$key]);
+                    } elseif ($trim) {
+                        $arr[$key] = $value;
+                    }
+                }
+            }
+        }
+        $encrypt_str = clearBlank($encrypt_str);
+        return $this->hmacSign($encrypt_str,$public_key);
+    }
+
+
+    public function execute($private_key,$password,$public_key,$url, $param)
+    {
+        $data = $this->httpRequestPost($url, $param,$public_key,$password,$private_key);
+        $this->handle($data);
+        return $data;
+    }
+
+    public function handle($data = array())
+    {
+        if (isset($data['status']) && $data['status'] == 'REDIRECT'){
+            header("Location: {$data['redirectUrl']}");
+            exit;
+        } else if(isset($data['status']) && $data['status'] == 'SUCCESS'){
+            
+            $aa=$data["scanCode"];
+            $img = base64_decode($aa);
+            header('Content-type: image/jpg');
+            print_r($img);
+                
+        } else if(isset($data['status']) && $data['status'] == 'CANCEL'){
+            return $data;
+        }else if(isset($data['status']) && $data['status'] == 'INIT'){
+            return $data;
+        }else{
+            return array(
+                'error_description'=>'Response Error',
+                'responseData'=>$data
+            );
+        }
+    }
+
+    /**
+     * post请求
+     * @return mixed
+     */
+    public function httpRequestPost($url, $param,$public_key,$password,$private_key)
+    {
+        $theArray = json_decode($param,true);
+        $abb =$theArray['data'];
+        $curl = curl_init($this->absoluteUrl($url));
+        curl_setopt($curl,CURLOPT_HEADER, 1 ); // 过滤HTTP头
+        curl_setopt($curl,CURLOPT_HTTPHEADER,array(
+            'Content-Type: application/vnd.5upay-v3.0+json',
+            'encryptKey: '.$theArray['encryptKey'],
+            'merchantId: '.$theArray['merchantId'],
+            'requestId: '.$theArray['requestId']
+        ));
+        curl_setopt($curl,CURLOPT_RETURNTRANSFER, 1);// 显示输出结果
+        curl_setopt($curl,CURLOPT_POST,true); // post传输数据
+        curl_setopt($curl,CURLOPT_POSTFIELDS,$abb);// post传输数据
+        curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);//SSL证书认证
+        curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 2);//严格认证
+
+        $responseText = curl_exec($curl);
+        if (curl_errno($curl) || $responseText === false) {
+            curl_close($curl);
+            throw new InvalidRequestException(array(
+                'error_description'=> 'Request Error'
+            ));
+        }
+        curl_close($curl);
+        preg_match_all('/(encryptKey|merchantId|data"):(\s+|")([^"\s]+)/s',$responseText,$m);
+        list($encryptKey, $merchantId, $data) = $m[3];
+        $responsedata = array("data" =>$data,"encryptKey"=>$encryptKey,"merchantId"=>$merchantId);
+        if ($responsedata['merchantId'] == null){
+            throw new InvalidRequestException(array(
+                'error_description'=>'Request error',
+                'responseData'=>$responseText
+            ));
+        }
+        $date = $this->checkHmac($private_key,$public_key,$responsedata,$password);
+        return $date;
+    }
+
+
+    /**
+     *
+     * @return string
+     */
+    private function buildJson($private_key,$password,$para=null)
+    {
+        $vars = $para?'':get_object_vars($this);
+        unset($vars['response_hmac_fields']);
+        $data = array();
+        foreach($vars as $k=>$var){
+            if(is_scalar($var) && $var !== '' && $var !== null){
+                $data[$k] = $var;
+            }else if(is_object($var) && $var instanceof AbstractModel){
+                $data[$k] =array_filter((array) $var);
+            }else if(is_array($var)){
+                $data[$k] =array_filter($var);
+
+            }
+            if(empty($data[$k])){
+                unset($data[$k]);
+            }
+        }
+        ksort($data);
+        $hmacSource = '';
+        foreach($data as $key => $value){
+            if (is_array($value)){
+                ksort($value);
+                foreach ($value as $key2 => $value2) {
+                    if(is_object($value2)) {
+                        $value2 = array_filter((array)$value2);
+                        ksort($value2);
+                        foreach ($value2 as $oKey => $oValue) {
+                            $oValue.='#';
+                            $hmacSource .= trim($oValue);
+                        }
+                    }else{
+                        $value2.='#';
+                        $hmacSource .= trim($value2);
+                    }
+                }
+            } else {
+                $value.='#';
+                $hmacSource .= trim($value);
+            }
+        }
+        $sha1=sha1($hmacSource, true);
+        $hmac=$this->rsaPrivateSign($sha1,$private_key,$password);
+        $data['hmac'] = $hmac;
+        return $data;
+    }
+
+
+    private function absoluteUrl($url, $param=null)
+    {
+        if ($param !== null) {
+            $parse = parse_url($url);
+
+            $port = '';
+            if ( ($parse['scheme'] == 'http') && ( empty($parse['port']) || $parse['port'] == 80) ){
+                $port = '';
+            }else{
+                $port = $parse['port'];
+            }
+            $url = $parse['scheme'].'//'.$parse['host'].$port. $parse['path'];
+
+            if(!empty($parse['query'])){
+                parse_str($parse['query'], $output);
+                $param = array_merge($output, $param);
+            }
+            $url .= '?'. http_build_query($param);
+        }
+
+        return $url;
+    }
+    /**
+     * AES加密方法
+     * @param string $str
+     * @return string
+     */
+
+    function aesEncrypt($data,$decrypted){
+        $str =json_encode($data);
+        $str = trim($str);
+        $str = $this->addPKCS7Padding($str);
+        $encrypt_str= openssl_encrypt($str, 'AES-128-ECB', $decrypted, OPENSSL_RAW_DATA|OPENSSL_ZERO_PADDING);
+        return base64_encode($encrypt_str);
+    }
+    /**
+     * AES解密方法
+     * @param string $str
+     * @return string
+     */
+
+    function aesDesc($data,$decrypted){
+        $date = json_encode($data['data']);
+        $screct_key = $decrypted;
+        // $iv = mcrypt_create_iv(mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128,MCRYPT_MODE_ECB),MCRYPT_RAND);
+        // $encrypt_str =  mcrypt_decrypt(MCRYPT_RIJNDAEL_128, $screct_key, $date, MCRYPT_MODE_ECB, $iv);
+        $encrypt_str=  openssl_decrypt($date,"AES-128-ECB",$screct_key);
+        $encrypt_str = preg_replace('/[\x00-\x1F]/','', $encrypt_str);
+        $encrypt_str = json_decode($encrypt_str,true);
+        return $encrypt_str;
+    }
+    /**
+     * 移去填充算法
+     * @param string $source
+     * @return string
+     */
+    function stripPKSC7Padding($source){
+        $source = trim($source);
+        $char = substr($source, -1);
+        $num = ord($char);
+        if($num==62)return $source;
+        $source = substr($source,0,-$num);
+        return $source;
+    }
+
+    /*
+        * 去除空值的元素
+        */
+
+    function clearBlank($arr)
+    {
+        function odd($var)
+        {
+            return($var<>'');//return true or false
+        }
+        return (array_filter($arr, "odd"));
+    }
+    /*
+       * RSA公钥加密
+       */
+    function rsaPublicEncode($public_key,$rands){
+
+        $encryptKey=file_get_contents($public_key);
+        $pem = chunk_split(base64_encode($encryptKey),64,"\n");//转换为pem格式的公钥
+        $public_key = "-----BEGIN CERTIFICATE-----\n".$pem."-----END CERTIFICATE-----\n";
+        $pu_key =  openssl_pkey_get_public($public_key);
+        openssl_public_encrypt($rands,$encrypted,$pu_key);
+        $encryptKey=base64_encode($encrypted);
+
+     //   $pem = chunk_split($public_key,64,"\n");//转换为pem格式的公钥
+     //   $pem = "-----BEGIN PUBLIC KEY-----\n".$pem."-----END PUBLIC KEY-----\n";
+     //   $publicKey = openssl_pkey_get_public($pem);//获取公钥内容
+     //   openssl_public_encrypt($rands,$encryptKey,$publicKey,OPENSSL_PKCS1_PADDING);
+     //   $encryptKey = base64_encode($encryptKey);//
+        return $encryptKey;
+    }
+    /*
+     * RSA公钥解密
+     *
+     */
+    function rsaPublicDecode($public_key,$data){
+        $pubkey=file_get_contents($public_key);
+        $encryptKey =$data['encryptKey'];
+        $pem1 = chunk_split(base64_encode($pubkey),64,"\n");
+        $pem1 = "-----BEGIN CERTIFICATE-----\n".$pem1."-----END CERTIFICATE-----\n";
+        $pi_key =  openssl_pkey_get_public($pem1);
+        openssl_public_decrypt($encryptKey,$decrypted,$pem1);
+        return base64_encode($decrypted);
+    }
+    /*
+    * RSA私钥解密
+    *
+    */
+    function rsaPrivateDecode($data,$private_key,$password){
+        $prikey=file_get_contents($private_key);
+        $encryptKey =$data['encryptKey'];
+        $results=array();
+        openssl_pkcs12_read($prikey,$results,$password);
+        $private_key=$results['pkey'];
+        $pi_key =  openssl_pkey_get_public($private_key);
+        openssl_private_decrypt(base64_decode($encryptKey),$decrypted,$private_key);
+        return $decrypted;
+    }
+
+    /*
+     * RSA私钥签名
+     */
+    function rsaPrivateSign($data,$path,$password){
+        $pubKey = file_get_contents($path);
+        $results=array();
+        openssl_pkcs12_read($pubKey,$results,$password);
+        $private_key=$results['pkey'];
+        $pi_key =  openssl_pkey_get_private($private_key);//这个函数可用来判断私钥是否是可用的，可用返回资源id Resource id
+        openssl_sign($data, $signature,$private_key,"md5");
+        $signature=base64_encode($signature);
+        return $signature;
+    }
+
+    /*
+     * RSA公钥验签
+     *
+     */
+     function rsaPubilcSign($data,$path,$hmac){
+         $public_key=file_get_contents($path);
+         $pem1 = chunk_split(base64_encode($public_key),64,"\n");
+         $pem1 = "-----BEGIN CERTIFICATE-----\n".$pem1."-----END CERTIFICATE-----\n";
+         $pi_key =  openssl_pkey_get_public($pem1);
+         $result=openssl_verify($data,base64_decode($hmac),$pem1,OPENSSL_ALGO_MD5);
+         return $result;
+
+     }
+
+    /*
+      * hamc签名验证
+      *
+      *
+      */
+    function hmacSign($encrypt_str,$path){
+
+print_r($encrypt_str);die;
+        if (empty($encrypt_str['hmac'])){
+            die('hmac validation error');
+        }
+        $hmac = $encrypt_str['hmac'];
+        unset($encrypt_str['hmac']);
+
+        ksort($encrypt_str);
+        $hmacSource = '';
+        foreach($encrypt_str as $key => $value){
+            if (is_array($value)) {
+                ksort($value);
+                foreach ($value as $key2 => $value2) {
+
+                    if (is_object($value2)) {
+                        $value2 = array_filter((array)$value2);
+                        ksort($value2);
+                        foreach ($value2 as $oKey => $oValue) {
+                            $oValue .= '#';
+                            $hmacSource .= trim($oValue);
+
+                        }
+                    } else if(is_array($value2)){
+                        ksort($value2);
+                        foreach ($value2 as $key3 => $value3) {
+                            if (is_object($value3)) {
+                                $value3 = array_filter((array)$value3);
+                                ksort($value3);
+                                foreach ($value3 as $oKey => $oValue) {
+                                    $oValue .= '#';
+                                    $hmacSource .= trim($oValue);
+                                }
+                            } else{
+                                $value3 .= '#';
+                                $hmacSource .= trim($value3);
+                            }
+                        }
+                    } else{
+                        $value2 .= '#';
+                        $hmacSource .= trim($value2);
+                    }
+                }
+            } else {
+                $value .= '#';
+                $hmacSource .= trim($value);
+            }
+        }
+         $sourceHmac=sha1($hmacSource, true);
+        $hh=$this->rsaPubilcSign($sourceHmac,$path,$hmac);
+        if ($hh==0||$hh==-1){
+            throw new HmacVerifyException(array(
+                'error_description'=>'hmac validation error'
+            ));
+        }
+        return $encrypt_str;
+    }
 }
 ?>
\ No newline at end of file