130 lines
3.5 KiB
Go
130 lines
3.5 KiB
Go
package payment
|
|
|
|
import (
|
|
"context"
|
|
"crypto/md5"
|
|
"crypto/rand"
|
|
"encoding/hex"
|
|
"encoding/json"
|
|
"errors"
|
|
"fmt"
|
|
"sort"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/gogf/gf/v2/frame/g"
|
|
)
|
|
|
|
// 虎皮棋聚合支付适配器：签名/HTTP 细节全部收敛在本包，业务层不感知。
|
|
// 注意：签名规则与字段名以官方最新文档为准（当前实现为经典 md5 约定）。
|
|
|
|
type Config struct {
|
|
AppId string
|
|
AppSecret string
|
|
NotifyUrl string
|
|
Channel string // 逗号分隔，如 "alipay,wechat"
|
|
ApiBase string
|
|
Enabled bool
|
|
}
|
|
|
|
func GetConfig(ctx context.Context) Config {
|
|
cfg := Config{
|
|
AppId: g.Cfg().MustGet(ctx, "payment.xunhu_appid", "").String(),
|
|
AppSecret: g.Cfg().MustGet(ctx, "payment.xunhu_appsecret", "").String(),
|
|
NotifyUrl: g.Cfg().MustGet(ctx, "payment.notify_url", "").String(),
|
|
Channel: g.Cfg().MustGet(ctx, "payment.channel", "alipay").String(),
|
|
ApiBase: g.Cfg().MustGet(ctx, "payment.api_base", "https://api.xunhupay.com").String(),
|
|
}
|
|
cfg.Enabled = cfg.AppId != "" && cfg.AppSecret != ""
|
|
return cfg
|
|
}
|
|
|
|
// CreateOrder 创建支付单，返回收银台/支付 URL（金额单位：分）
|
|
func CreateOrder(ctx context.Context, orderNo string, amountFen int) (payURL string, err error) {
|
|
cfg := GetConfig(ctx)
|
|
if !cfg.Enabled {
|
|
return "", errors.New("支付未开通，请在 config.yml 配置 payment")
|
|
}
|
|
channel := "alipay"
|
|
if first := strings.Split(cfg.Channel, ",")[0]; first != "" {
|
|
channel = first
|
|
}
|
|
params := map[string]string{
|
|
"appid": cfg.AppId,
|
|
"trade_order_id": orderNo,
|
|
"total_fee": fmt.Sprintf("%.2f", float64(amountFen)/100),
|
|
"title": "形象会员",
|
|
"notify_url": cfg.NotifyUrl,
|
|
"type": channel,
|
|
"version": "1.1",
|
|
"nonce_str": nonce(),
|
|
}
|
|
params["hash"] = Sign(params, cfg.AppSecret)
|
|
|
|
var resp struct {
|
|
Errcode int `json:"errcode"`
|
|
Errmsg string `json:"errmsg"`
|
|
Url string `json:"url"`
|
|
}
|
|
// 注意：Post 的最后一个参数不会自动解析响应体，需手动读取后反序列化
|
|
respRaw, err := g.Client().SetTimeout(10*time.Second).Post(context.Background(), cfg.ApiBase+"/payment/do.html", params)
|
|
if err != nil {
|
|
return "", fmt.Errorf("虎皮棋下单失败: %w", err)
|
|
}
|
|
defer respRaw.Close()
|
|
if err := json.Unmarshal(respRaw.ReadAll(), &resp); err != nil {
|
|
return "", fmt.Errorf("虎皮棋下单失败: %w", err)
|
|
}
|
|
if resp.Errcode != 0 {
|
|
return "", fmt.Errorf("虎皮棋下单失败: %s", resp.Errmsg)
|
|
}
|
|
if resp.Url == "" {
|
|
return "", errors.New("虎皮棋下单失败: 返回为空")
|
|
}
|
|
return resp.Url, nil
|
|
}
|
|
|
|
// Sign 参数名升序拼接 key=value，追加 secret 后 md5 hex
|
|
func Sign(params map[string]string, secret string) string {
|
|
keys := make([]string, 0, len(params))
|
|
for k := range params {
|
|
if params[k] == "" {
|
|
continue
|
|
}
|
|
keys = append(keys, k)
|
|
}
|
|
sort.Strings(keys)
|
|
var sb strings.Builder
|
|
for i, k := range keys {
|
|
if i > 0 {
|
|
sb.WriteString("&")
|
|
}
|
|
sb.WriteString(k)
|
|
sb.WriteString("=")
|
|
sb.WriteString(params[k])
|
|
}
|
|
sb.WriteString(secret)
|
|
sum := md5.Sum([]byte(sb.String()))
|
|
return hex.EncodeToString(sum[:])
|
|
}
|
|
|
|
// VerifyNotify 验签：复制参数去掉 hash 后重算签名比较
|
|
func VerifyNotify(params map[string]string, hash, secret string) bool {
|
|
if hash == "" || secret == "" {
|
|
return false
|
|
}
|
|
cp := make(map[string]string, len(params))
|
|
for k, v := range params {
|
|
if k != "hash" {
|
|
cp[k] = v
|
|
}
|
|
}
|
|
return Sign(cp, secret) == strings.ToLower(hash)
|
|
}
|
|
|
|
func nonce() string {
|
|
b := make([]byte, 8)
|
|
_, _ = rand.Read(b)
|
|
return hex.EncodeToString(b)
|
|
}
|