diff --git a/extend/payment/PayEase.php b/extend/payment/PayEase.php index 7804a639a..6dd5f8878 100644 --- a/extend/payment/PayEase.php +++ b/extend/payment/PayEase.php @@ -107,6 +107,21 @@ class PayEase 'rows' => 6, 'message' => '请填写首信易公钥', ], + [ + 'element' => 'select', + 'placeholder' => '收银台类型', + 'is_multiple' => 0, + 'element_data' => [ + ['value'=>'STANDARD', 'name'=>'标准版'], + ['value'=>'DECLARE', 'name'=>'申报版'], + ['value'=>'CUSTOMS', 'name'=>'海淘版按照收银台类型值判断'], + ['value'=>'DECLARE', 'name'=>'需要同时提交身份信息和贸易 背景。STANDARD 不需要提交身份信息和 贸易背景。CUSTOMS 同申报版相似，区 别在于可不传银行卡号'], + ], + 'name' => 'cashierVersion', + 'title' => '收银台类型', + 'is_required' => 0, + 'message' => '请选择收银台类型', + ], [ 'element' => 'select', 'placeholder' => '贸易背景', @@ -153,6 +168,44 @@ class PayEase return DataReturn('支付缺少配置', -1); } + $data = [ + 'merchantId' => $this->config['merchantId'], + 'orderAmount' => $params['total_price']/100, + 'orderCurrency' => ' CNY', + 'requestId' => $params['order_no'], + 'notifyUrl' => $params['notify_url'], + 'callbackUrl' => $params['call_back_url'], + 'payer' => (object) [], + 'cashierVersion' => $this->config['cashierVersion'], + 'forUse' => $this->config['forUse'], + ]; + $detail = [ + [ + 'name' => '新款苹果手机iphone6s', + 'quantity' => 1, + 'quantity' => 1, + ] + ]; + $data['productDetails'] = json_encode($detail, JSON_UNESCAPED_UNICODE); + + // 签名 + $data['hmac'] = 'sign'; + + $private_key = ROOT.'rsakeys/client.pfx'; + $public_key = ROOT.'rsakeys/server.cer'; + $str = $this->buildJson($private_key, $this->config['password']); + //print_r($str);die; + $date = $this->creatdate($str, $public_key, $data); + + $url = 'https://apis.5upay.com/onlinePay/order'; + return $this->execute( + $private_key, + $this->config['password'], + $public_key, + $url, + json_encode($date) + ); + return 100; } @@ -195,5 +248,427 @@ class PayEase } return DataReturn('处理异常错误', -100); } + + + + public function creatdate($strdata,$public_key, $data){ + + + /* + * 生成16位随机数（AES秘钥） + */ + $str1='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz1234567890'; + $randStr = str_shuffle($str1);//打乱字符串 + $rands= substr($randStr,0,16);//生成16位aes密钥 + + $encrypted=$this->rsaPublicEncode($public_key,$rands); + + $date=$this->aesEncrypt($strdata,$rands); + $json = array("data" =>$date,"encryptKey"=>$encrypted,"merchantId"=>$data['merchantId'],"requestId"=>$data['requestId']); + + + return $json; + } + + /** + * 填充算法 + * @param string $source + * @return string + + */ + private function addPKCS7Padding($string, $blocksize = 16) { + $len = strlen($string); + $pad = $blocksize - ($len % $blocksize); + $string .= str_repeat(chr($pad), $pad); + return $string; + + } + + + + /** + * hmac 验证 + * @return mixed + */ + public function checkHmac($private_key,$public_key,$data,$password) + { + + $aeskey=$this->rsaPrivateDecode($data,$private_key,$password); + $encrypt_str=$this->aesDesc($data,$aeskey); + /* + * 去除空值的元素 + */ + + function clearBlank($arr) + { + return $arr; + function odd($var) + { + return($var<>'');//return true or false + } + return (array_filter($arr, "odd")); + } + + function array_remove_empty(& $arr, $trim = true){ + foreach ($arr as $key => $value) { + if (is_array($value)) { + array_remove_empty($arr[$key]); + } else { + $value = trim($value); + if ($value == '') { + unset($arr[$key]); + } elseif ($trim) { + $arr[$key] = $value; + } + } + } + } + $encrypt_str = clearBlank($encrypt_str); + return $this->hmacSign($encrypt_str,$public_key); + } + + + public function execute($private_key,$password,$public_key,$url, $param) + { + $data = $this->httpRequestPost($url, $param,$public_key,$password,$private_key); + $this->handle($data); + return $data; + } + + public function handle($data = array()) + { + if (isset($data['status']) && $data['status'] == 'REDIRECT'){ + header("Location: {$data['redirectUrl']}"); + exit; + } else if(isset($data['status']) && $data['status'] == 'SUCCESS'){ + + $aa=$data["scanCode"]; + $img = base64_decode($aa); + header('Content-type: image/jpg'); + print_r($img); + + } else if(isset($data['status']) && $data['status'] == 'CANCEL'){ + return $data; + }else if(isset($data['status']) && $data['status'] == 'INIT'){ + return $data; + }else{ + return array( + 'error_description'=>'Response Error', + 'responseData'=>$data + ); + } + } + + /** + * post请求 + * @return mixed + */ + public function httpRequestPost($url, $param,$public_key,$password,$private_key) + { + $theArray = json_decode($param,true); + $abb =$theArray['data']; + $curl = curl_init($this->absoluteUrl($url)); + curl_setopt($curl,CURLOPT_HEADER, 1 ); // 过滤HTTP头 + curl_setopt($curl,CURLOPT_HTTPHEADER,array( + 'Content-Type: application/vnd.5upay-v3.0+json', + 'encryptKey: '.$theArray['encryptKey'], + 'merchantId: '.$theArray['merchantId'], + 'requestId: '.$theArray['requestId'] + )); + curl_setopt($curl,CURLOPT_RETURNTRANSFER, 1);// 显示输出结果 + curl_setopt($curl,CURLOPT_POST,true); // post传输数据 + curl_setopt($curl,CURLOPT_POSTFIELDS,$abb);// post传输数据 + curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);//SSL证书认证 + curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 2);//严格认证 + + $responseText = curl_exec($curl); + if (curl_errno($curl) || $responseText === false) { + curl_close($curl); + throw new InvalidRequestException(array( + 'error_description'=> 'Request Error' + )); + } + curl_close($curl); + preg_match_all('/(encryptKey|merchantId|data"):(\s+|")([^"\s]+)/s',$responseText,$m); + list($encryptKey, $merchantId, $data) = $m[3]; + $responsedata = array("data" =>$data,"encryptKey"=>$encryptKey,"merchantId"=>$merchantId); + if ($responsedata['merchantId'] == null){ + throw new InvalidRequestException(array( + 'error_description'=>'Request error', + 'responseData'=>$responseText + )); + } + $date = $this->checkHmac($private_key,$public_key,$responsedata,$password); + return $date; + } + + + /** + * + * @return string + */ + private function buildJson($private_key,$password,$para=null) + { + $vars = $para?'':get_object_vars($this); + unset($vars['response_hmac_fields']); + $data = array(); + foreach($vars as $k=>$var){ + if(is_scalar($var) && $var !== '' && $var !== null){ + $data[$k] = $var; + }else if(is_object($var) && $var instanceof AbstractModel){ + $data[$k] =array_filter((array) $var); + }else if(is_array($var)){ + $data[$k] =array_filter($var); + + } + if(empty($data[$k])){ + unset($data[$k]); + } + } + ksort($data); + $hmacSource = ''; + foreach($data as $key => $value){ + if (is_array($value)){ + ksort($value); + foreach ($value as $key2 => $value2) { + if(is_object($value2)) { + $value2 = array_filter((array)$value2); + ksort($value2); + foreach ($value2 as $oKey => $oValue) { + $oValue.='#'; + $hmacSource .= trim($oValue); + } + }else{ + $value2.='#'; + $hmacSource .= trim($value2); + } + } + } else { + $value.='#'; + $hmacSource .= trim($value); + } + } + $sha1=sha1($hmacSource, true); + $hmac=$this->rsaPrivateSign($sha1,$private_key,$password); + $data['hmac'] = $hmac; + return $data; + } + + + private function absoluteUrl($url, $param=null) + { + if ($param !== null) { + $parse = parse_url($url); + + $port = ''; + if ( ($parse['scheme'] == 'http') && ( empty($parse['port']) || $parse['port'] == 80) ){ + $port = ''; + }else{ + $port = $parse['port']; + } + $url = $parse['scheme'].'//'.$parse['host'].$port. $parse['path']; + + if(!empty($parse['query'])){ + parse_str($parse['query'], $output); + $param = array_merge($output, $param); + } + $url .= '?'. http_build_query($param); + } + + return $url; + } + /** + * AES加密方法 + * @param string $str + * @return string + */ + + function aesEncrypt($data,$decrypted){ + $str =json_encode($data); + $str = trim($str); + $str = $this->addPKCS7Padding($str); + $encrypt_str= openssl_encrypt($str, 'AES-128-ECB', $decrypted, OPENSSL_RAW_DATA|OPENSSL_ZERO_PADDING); + return base64_encode($encrypt_str); + } + /** + * AES解密方法 + * @param string $str + * @return string + */ + + function aesDesc($data,$decrypted){ + $date = json_encode($data['data']); + $screct_key = $decrypted; + // $iv = mcrypt_create_iv(mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128,MCRYPT_MODE_ECB),MCRYPT_RAND); + // $encrypt_str = mcrypt_decrypt(MCRYPT_RIJNDAEL_128, $screct_key, $date, MCRYPT_MODE_ECB, $iv); + $encrypt_str= openssl_decrypt($date,"AES-128-ECB",$screct_key); + $encrypt_str = preg_replace('/[\x00-\x1F]/','', $encrypt_str); + $encrypt_str = json_decode($encrypt_str,true); + return $encrypt_str; + } + /** + * 移去填充算法 + * @param string $source + * @return string + */ + function stripPKSC7Padding($source){ + $source = trim($source); + $char = substr($source, -1); + $num = ord($char); + if($num==62)return $source; + $source = substr($source,0,-$num); + return $source; + } + + /* + * 去除空值的元素 + */ + + function clearBlank($arr) + { + function odd($var) + { + return($var<>'');//return true or false + } + return (array_filter($arr, "odd")); + } + /* + * RSA公钥加密 + */ + function rsaPublicEncode($public_key,$rands){ + + $encryptKey=file_get_contents($public_key); + $pem = chunk_split(base64_encode($encryptKey),64,"\n");//转换为pem格式的公钥 + $public_key = "-----BEGIN CERTIFICATE-----\n".$pem."-----END CERTIFICATE-----\n"; + $pu_key = openssl_pkey_get_public($public_key); + openssl_public_encrypt($rands,$encrypted,$pu_key); + $encryptKey=base64_encode($encrypted); + + // $pem = chunk_split($public_key,64,"\n");//转换为pem格式的公钥 + // $pem = "-----BEGIN PUBLIC KEY-----\n".$pem."-----END PUBLIC KEY-----\n"; + // $publicKey = openssl_pkey_get_public($pem);//获取公钥内容 + // openssl_public_encrypt($rands,$encryptKey,$publicKey,OPENSSL_PKCS1_PADDING); + // $encryptKey = base64_encode($encryptKey);// + return $encryptKey; + } + /* + * RSA公钥解密 + * + */ + function rsaPublicDecode($public_key,$data){ + $pubkey=file_get_contents($public_key); + $encryptKey =$data['encryptKey']; + $pem1 = chunk_split(base64_encode($pubkey),64,"\n"); + $pem1 = "-----BEGIN CERTIFICATE-----\n".$pem1."-----END CERTIFICATE-----\n"; + $pi_key = openssl_pkey_get_public($pem1); + openssl_public_decrypt($encryptKey,$decrypted,$pem1); + return base64_encode($decrypted); + } + /* + * RSA私钥解密 + * + */ + function rsaPrivateDecode($data,$private_key,$password){ + $prikey=file_get_contents($private_key); + $encryptKey =$data['encryptKey']; + $results=array(); + openssl_pkcs12_read($prikey,$results,$password); + $private_key=$results['pkey']; + $pi_key = openssl_pkey_get_public($private_key); + openssl_private_decrypt(base64_decode($encryptKey),$decrypted,$private_key); + return $decrypted; + } + + /* + * RSA私钥签名 + */ + function rsaPrivateSign($data,$path,$password){ + $pubKey = file_get_contents($path); + $results=array(); + openssl_pkcs12_read($pubKey,$results,$password); + $private_key=$results['pkey']; + $pi_key = openssl_pkey_get_private($private_key);//这个函数可用来判断私钥是否是可用的，可用返回资源id Resource id + openssl_sign($data, $signature,$private_key,"md5"); + $signature=base64_encode($signature); + return $signature; + } + + /* + * RSA公钥验签 + * + */ + function rsaPubilcSign($data,$path,$hmac){ + $public_key=file_get_contents($path); + $pem1 = chunk_split(base64_encode($public_key),64,"\n"); + $pem1 = "-----BEGIN CERTIFICATE-----\n".$pem1."-----END CERTIFICATE-----\n"; + $pi_key = openssl_pkey_get_public($pem1); + $result=openssl_verify($data,base64_decode($hmac),$pem1,OPENSSL_ALGO_MD5); + return $result; + + } + + /* + * hamc签名验证 + * + * + */ + function hmacSign($encrypt_str,$path){ + +print_r($encrypt_str);die; + if (empty($encrypt_str['hmac'])){ + die('hmac validation error'); + } + $hmac = $encrypt_str['hmac']; + unset($encrypt_str['hmac']); + + ksort($encrypt_str); + $hmacSource = ''; + foreach($encrypt_str as $key => $value){ + if (is_array($value)) { + ksort($value); + foreach ($value as $key2 => $value2) { + + if (is_object($value2)) { + $value2 = array_filter((array)$value2); + ksort($value2); + foreach ($value2 as $oKey => $oValue) { + $oValue .= '#'; + $hmacSource .= trim($oValue); + + } + } else if(is_array($value2)){ + ksort($value2); + foreach ($value2 as $key3 => $value3) { + if (is_object($value3)) { + $value3 = array_filter((array)$value3); + ksort($value3); + foreach ($value3 as $oKey => $oValue) { + $oValue .= '#'; + $hmacSource .= trim($oValue); + } + } else{ + $value3 .= '#'; + $hmacSource .= trim($value3); + } + } + } else{ + $value2 .= '#'; + $hmacSource .= trim($value2); + } + } + } else { + $value .= '#'; + $hmacSource .= trim($value); + } + } + $sourceHmac=sha1($hmacSource, true); + $hh=$this->rsaPubilcSign($sourceHmac,$path,$hmac); + if ($hh==0||$hh==-1){ + throw new HmacVerifyException(array( + 'error_description'=>'hmac validation error' + )); + } + return $encrypt_str; + } } ?> \ No newline at end of file diff --git a/rsakeys/client.pfx b/rsakeys/client.pfx new file mode 100755 index 000000000..4c3db8d3e Binary files /dev/null and b/rsakeys/client.pfx differ diff --git a/rsakeys/server.cer b/rsakeys/server.cer new file mode 100755 index 000000000..a2065b284 Binary files /dev/null and b/rsakeys/server.cer differ diff --git a/rsakeys/test.cer b/rsakeys/test.cer new file mode 100755 index 000000000..a2065b284 Binary files /dev/null and b/rsakeys/test.cer differ