621 lines
21 KiB
PHP
Executable File
621 lines
21 KiB
PHP
Executable File
<?php
|
||
|
||
namespace Library;
|
||
|
||
/**
|
||
* 支付宝支付驱动
|
||
* @author Devil
|
||
* @version V_1.0.0
|
||
*/
|
||
class Alipay
|
||
{
|
||
/**
|
||
* [__construct 构造方法]
|
||
*/
|
||
public function __construct(){}
|
||
|
||
/**
|
||
* [SoonPay 立即支付]
|
||
* @param [array] $data [支付信息]
|
||
*/
|
||
public function SoonPay($data, $config)
|
||
{
|
||
if(empty($data) || empty($config)) return false;
|
||
|
||
if(APPLICATION == 'app')
|
||
{
|
||
return $this->SoonPayApp($data, $config);
|
||
} else {
|
||
if(IsMobile())
|
||
{
|
||
$this->SoonPayMobile($data, $config);
|
||
} else {
|
||
$this->SoonPayWeb($data, $config);
|
||
}
|
||
}
|
||
}
|
||
|
||
/**
|
||
* [SoonPayApp app支付]
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @datetime 2017-10-25T16:07:06+0800
|
||
* @param [array] $data [参数列表]
|
||
* @param [array] $config [配置信息]
|
||
*/
|
||
private function SoonPayApp($data, $config)
|
||
{
|
||
$parameter = array(
|
||
'app_id' => C('alipay_mini_appid'),
|
||
'method' => 'alipay.trade.app.pay',
|
||
'format' => 'JSON',
|
||
'charset' => 'utf-8',
|
||
'sign_type' => 'RSA2',
|
||
'timestamp' => date('Y-m-d H:i:s'),
|
||
'version' => '1.0',
|
||
'notify_url' => $data['notify_url'],
|
||
);
|
||
$biz_content = array(
|
||
'subject' => $data['name'],
|
||
'out_trade_no' => $data['order_sn'],
|
||
'total_amount' => $data['total_price'],
|
||
'product_code' => 'QUICK_MSECURITY_PAY',
|
||
);
|
||
|
||
// 收款账户集
|
||
if(!empty($data['seller_id']))
|
||
{
|
||
$biz_content['seller_id'] = $data['seller_id'];
|
||
}
|
||
$parameter['biz_content'] = json_encode($biz_content, JSON_UNESCAPED_UNICODE);
|
||
|
||
|
||
// 生成签名参数+签名
|
||
$params = $this->GetParamSign($parameter);
|
||
$params['param'] .= '&sign='.urlencode($this->MyRsaSign($params['value']));
|
||
|
||
// 直接返回支付信息
|
||
return $params['param'];
|
||
}
|
||
|
||
/**
|
||
* [SoonPayMobile wap支付]
|
||
* @param [array] $data [参数列表]
|
||
* @param [array] $config [配置信息]
|
||
*/
|
||
private function SoonPayMobile($data, $config)
|
||
{
|
||
$request_token = $this->GetRequestToken($data, $config);
|
||
|
||
$req_data = '<auth_and_execute_req><request_token>'.$request_token.'</request_token></auth_and_execute_req>';
|
||
$parameter = array(
|
||
'service' => 'alipay.wap.auth.authAndExecute',
|
||
'format' => 'xml',
|
||
'v' => '2.0',
|
||
'partner' => $config['id'],
|
||
'sec_id' => 'MD5',
|
||
'req_data' => $req_data,
|
||
'request_token' => $request_token
|
||
);
|
||
|
||
$param = $this->GetParamSign($parameter, $config);
|
||
header('location:http://wappaygw.alipay.com/service/rest.htm?'.$param['param']. '&sign='.md5($param['sign']));
|
||
|
||
}
|
||
|
||
/**
|
||
* [GetRequestToken 获取临时token]
|
||
* @param [array] $data [参数列表]
|
||
* @param [array] $config [配置信息]
|
||
* @return [string] [返回临时token]
|
||
*/
|
||
private function GetRequestToken($data, $config)
|
||
{
|
||
$parameter = array(
|
||
'service' => 'alipay.wap.trade.create.direct',
|
||
'format' => 'xml',
|
||
'v' => '2.0',
|
||
'partner' => $config['id'],
|
||
'req_id' => $data['order_sn'],
|
||
'sec_id' => 'MD5',
|
||
'req_data' => $this->GetReqData($data, $config),
|
||
'subject' => $data['name'],
|
||
'out_trade_no' => $data['order_sn'],
|
||
'total_fee' => $data['total_price'],
|
||
'seller_account_name' => $config['name'],
|
||
'call_back_url' => $data['call_back_url'],
|
||
'notify_url' => $data['notify_url'],
|
||
'out_user' => $data['out_user'],
|
||
'merchant_url' => $data['merchant_url'],
|
||
);
|
||
|
||
$param = $this->GetParamSign($parameter, $config);
|
||
$ret = urldecode(file_get_contents('http://wappaygw.alipay.com/service/rest.htm?'.$param['param'].'&sign='.md5($param['sign'])));
|
||
|
||
$para_split = explode('&',$ret);
|
||
//把切割后的字符串数组变成变量与数值组合的数组
|
||
foreach ($para_split as $item) {
|
||
//获得第一个=字符的位置
|
||
$nPos = strpos($item,'=');
|
||
//获得字符串长度
|
||
$nLen = strlen($item);
|
||
//获得变量名
|
||
$key = substr($item,0,$nPos);
|
||
//获得数值
|
||
$value = substr($item,$nPos+1,$nLen-$nPos-1);
|
||
//放入数组中
|
||
$para_text[$key] = $value;
|
||
}
|
||
|
||
$req = Xml_Array($para_text['res_data']);
|
||
if(empty($req['request_token']))
|
||
{
|
||
exit(header('location:'.__ROOT__.'index.php?g=Info&c=Prompt&f=PromptInfo&state=error&content=支付宝异常错误&url='.__ROOT__));
|
||
}
|
||
|
||
return $req['request_token'];
|
||
}
|
||
|
||
private function GetReqData($data, $config)
|
||
{
|
||
return '<direct_trade_create_req>
|
||
<subject>'.$data['name'].'</subject>
|
||
<out_trade_no>'.$data['order_sn'].'</out_trade_no>
|
||
<total_fee>'.$data['total_price'].'</total_fee>
|
||
<seller_account_name>'.$config['name'].'</seller_account_name>
|
||
<call_back_url>'.$data['call_back_url'].'</call_back_url>
|
||
<notify_url>'.$data['notify_url'].'</notify_url>
|
||
<out_user>'.$data['out_user'].'</out_user>
|
||
<merchant_url>'.$data['merchant_url'].'</merchant_url>
|
||
<pay_expire>3600</pay_expire>
|
||
<agent_id>0</agent_id>
|
||
</direct_trade_create_req>';
|
||
}
|
||
|
||
/**
|
||
* [SoonPayWeb web支付]
|
||
* @param [array] $data [订单信息]
|
||
* @param [array] $config [配置信息]
|
||
*/
|
||
private function SoonPayWeb($data, $config)
|
||
{
|
||
$parameter = array(
|
||
'service' => 'create_direct_pay_by_user',
|
||
'partner' => $config['id'],
|
||
'_input_charset' => ML_CHARSET,
|
||
'notify_url' => $data['notify_url'],
|
||
'return_url' => $data['call_back_url'],
|
||
|
||
/* 业务参数 */
|
||
'subject' => $data['name'],
|
||
'out_trade_no' => $data['order_sn'],
|
||
'price' => $data['total_price'],
|
||
|
||
'quantity' => 1,
|
||
'payment_type' => 1,
|
||
|
||
/* 物流参数 */
|
||
'logistics_type' => 'EXPRESS',
|
||
'logistics_fee' => 0,
|
||
'logistics_payment' => 'BUYER_PAY_AFTER_RECEIVE',
|
||
|
||
/* 买卖双方信息 */
|
||
'seller_email' => $config['name']
|
||
);
|
||
|
||
$param = $this->GetParamSign($parameter, $config);
|
||
header('location:https://mapi.alipay.com/gateway.do?'.$param['param']. '&sign='.md5($param['sign']).'&sign_type=MD5');
|
||
}
|
||
|
||
/**
|
||
* [GetParamSign 生成参数和签名]
|
||
* @param [array] $data [待生成的参数]
|
||
* @param [array] $config [配置信息]
|
||
* @return [array] [生成好的参数和签名]
|
||
*/
|
||
private function GetParamSign($data, $config = [])
|
||
{
|
||
$param = '';
|
||
$sign = '';
|
||
ksort($data);
|
||
|
||
foreach($data AS $key => $val)
|
||
{
|
||
$param .= "$key=" .urlencode($val). "&";
|
||
$sign .= "$key=$val&";
|
||
}
|
||
|
||
$result = array(
|
||
'param' => substr($param, 0, -1),
|
||
'value' => substr($sign, 0, -1),
|
||
);
|
||
if(!empty($config['key']))
|
||
{
|
||
$result['sign'] = $result['value'].$config['key'];
|
||
}
|
||
return $result;
|
||
}
|
||
|
||
/**
|
||
* [Respond 异步处理]
|
||
* @param [array] $config [配置信息]
|
||
* @return [array|string] [成功返回数据列表，失败返回no]
|
||
*/
|
||
public function Respond($config)
|
||
{
|
||
if(empty($config)) return 'no';
|
||
|
||
$data = empty($_POST) ? $_GET : array_merge($_GET, $_POST);
|
||
ksort($data);
|
||
|
||
$sign = '';
|
||
if(isset($data['sec_id']) && $data['sec_id'] == 'MD5')
|
||
{
|
||
$data_xml = json_decode(json_encode((array) simplexml_load_string($data['notify_data'])), true);
|
||
$data = array_merge($data, $data_xml);
|
||
$sign = 'service='.$data['service'].'&v='.$data['v'].'&sec_id='.$data['sec_id'].'¬ify_data='.$data['notify_data'];
|
||
} else {
|
||
foreach($data AS $key=>$val)
|
||
{
|
||
if ($key != 'sign' && $key != 'sign_type' && $key != 'code')
|
||
{
|
||
$sign .= "$key=$val&";
|
||
}
|
||
}
|
||
$sign = substr($sign, 0, -1);
|
||
}
|
||
|
||
if(isset($data['sign_type']) && $data['sign_type'] == 'RSA2')
|
||
{
|
||
if(!$this->AlipayrsaVerify($sign, $data['sign']))
|
||
{
|
||
return 'no';
|
||
}
|
||
} else {
|
||
if(!isset($data['sign']) || md5($sign.$config['key']) != $data['sign'])
|
||
{
|
||
return 'no';
|
||
}
|
||
}
|
||
|
||
/* 支付状态 */
|
||
$status = isset($data['trade_status']) ? $data['trade_status'] : $data['result'];
|
||
switch($status)
|
||
{
|
||
case 'TRADE_SUCCESS':
|
||
case 'TRADE_FINISHED':
|
||
case 'success':
|
||
return $data;
|
||
break;
|
||
}
|
||
return 'no';
|
||
}
|
||
|
||
/**
|
||
* [GetAlipayUserInfo 支付宝小程序获取用户信息]
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @datetime 2017-09-23T22:30:43+0800
|
||
* @param [string] $authcode [用户授权码]
|
||
* @param [string] $app_id [应用appid]
|
||
* @return [array|boolean] [成功返回用户数据, 则false]
|
||
*/
|
||
public function GetAlipayUserInfo($authcode, $app_id)
|
||
{
|
||
// 从缓存获取用户信息
|
||
$key = 'alipay_userinfo_'.$authcode;
|
||
$result = GS($key);
|
||
if($result !== false)
|
||
{
|
||
return $result;
|
||
}
|
||
|
||
// 获取授权信息并且获取用户信息
|
||
$auth = $this->GetAuthAccessToken($authcode, $app_id);
|
||
if($auth != false)
|
||
{
|
||
// 请求参数
|
||
$param = [
|
||
'app_id' => $app_id,
|
||
'method' => 'alipay.user.info.share',
|
||
'charset' => 'utf-8',
|
||
'format' => 'JSON',
|
||
'sign_type' => 'RSA2',
|
||
'timestamp' => date('Y-m-d H:i:s'),
|
||
'version' => '1.0',
|
||
'auth_token' => $auth['access_token'],
|
||
];
|
||
|
||
// 生成签名参数+签名
|
||
$p = $this->GetParamSign($param);
|
||
$param['sign'] = $this->MyRsaSign($p['value']);
|
||
|
||
// 执行请求
|
||
$result = $this->HttpRequest('https://openapi.alipay.com/gateway.do', $param);
|
||
|
||
if(!empty($result['alipay_user_info_share_response']['code']) && $result['alipay_user_info_share_response']['code'] == 10000)
|
||
{
|
||
// 验证签名正确则存储缓存返回数据
|
||
if(!$this->SyncRsaVerify($result, 'alipay_user_info_share_response'))
|
||
{
|
||
return false;
|
||
}
|
||
|
||
// 存储缓存
|
||
SS($key, $result['alipay_user_info_share_response']);
|
||
|
||
// 返回用户数据
|
||
return $result['alipay_user_info_share_response'];
|
||
}
|
||
}
|
||
return false;
|
||
}
|
||
|
||
/**
|
||
* [GetAuthAccessToken 根据用户授权换取授权访问令牌]
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @datetime 2017-09-23T22:36:26+0800
|
||
* @param [string] $authcode [用户授权码]
|
||
* @param [string] $app_id [应用appid]
|
||
* @return [array|boolean] [失败false, 用户授权信息]
|
||
*/
|
||
public function GetAuthAccessToken($authcode, $app_id)
|
||
{
|
||
// 获取用户授权信息
|
||
$key = 'alipay_authcode_'.$authcode;
|
||
$result = GS($key, 0, true);
|
||
|
||
// 过期判断
|
||
if($result == false || $result['filemtime']+$result['re_expires_in'] < time())
|
||
{
|
||
$result = $this->GetAuthCode($app_id, $key, $authcode);
|
||
} else {
|
||
if($result['filemtime']+$result['expires_in'] < time())
|
||
{
|
||
$result = $this->GetAuthCode($app_id, $key, '', $result['refresh_token']);
|
||
}
|
||
}
|
||
return $result;
|
||
}
|
||
|
||
/**
|
||
* [GetAuthCode 获取用户授权信息]
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @datetime 2017-09-24T21:55:45+0800
|
||
* @param [string] $app_id [应用appid]
|
||
* @param [string] $key [缓存key]
|
||
* @param [string] $authcode [用户授权码]
|
||
* @param [string] $refresh_token [刷新授权token]
|
||
* @return [array|boolean] [失败false, 用户授权信息]
|
||
*/
|
||
private function GetAuthCode($app_id, $key, $authcode = '', $refresh_token = '')
|
||
{
|
||
if(empty($app_id) || empty($key) || (empty($authcode) && empty($refresh_token)))
|
||
{
|
||
return false;
|
||
}
|
||
|
||
// 请求参数
|
||
$param = [
|
||
'app_id' => $app_id,
|
||
'method' => 'alipay.system.oauth.token',
|
||
'charset' => 'utf-8',
|
||
'format' => 'JSON',
|
||
'sign_type' => 'RSA2',
|
||
'timestamp' => date('Y-m-d H:i:s'),
|
||
'version' => '1.0',
|
||
'biz_content' => 'mini-authcode',
|
||
];
|
||
if(!empty($authcode))
|
||
{
|
||
$param['code'] = $authcode;
|
||
$param['grant_type'] = 'authorization_code';
|
||
}
|
||
if(!empty($refresh_token))
|
||
{
|
||
$param['refresh_token'] = $refresh_token;
|
||
$param['grant_type'] = 'refresh_token';
|
||
}
|
||
|
||
// 生成签名参数+签名
|
||
$p = $this->GetParamSign($param);
|
||
$param['sign'] = $this->MyRsaSign($p['value']);
|
||
|
||
// 执行请求
|
||
$result = $this->HttpRequest('https://openapi.alipay.com/gateway.do', $param);
|
||
// 结果正确则验证签名 并且 存储缓存返回access_token
|
||
if(!empty($result['alipay_system_oauth_token_response']['user_id']))
|
||
{
|
||
// 验证签名正确则存储缓存返回数据
|
||
if(!$this->SyncRsaVerify($result, 'alipay_system_oauth_token_response'))
|
||
{
|
||
return false;
|
||
}
|
||
|
||
// 存储缓存
|
||
SS($key, $result['alipay_system_oauth_token_response']);
|
||
return $result['alipay_system_oauth_token_response'];
|
||
}
|
||
return false;
|
||
}
|
||
|
||
/**
|
||
* [SyncRsaVerify 同步返回签名验证]
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @datetime 2017-09-25T13:13:39+0800
|
||
* @param [array] $data [返回数据]
|
||
* @param [boolean] $key [数据key]
|
||
*/
|
||
private function SyncRsaVerify($data, $key)
|
||
{
|
||
$string = json_encode($data[$key], JSON_UNESCAPED_UNICODE);
|
||
return $this->AlipayRsaVerify($string, $data['sign']);
|
||
}
|
||
|
||
/**
|
||
* [MyRsaSign 签名字符串]
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @datetime 2017-09-24T08:38:28+0800
|
||
* @param [string] $prestr [需要签名的字符串]
|
||
* @return [string] [签名结果]
|
||
*/
|
||
private function MyRsaSign($prestr)
|
||
{
|
||
$public_key = file_get_contents(ROOT_PATH.'Rsakeys/rsa_mini_private_key_pkcs8.pem');
|
||
$pkeyid = openssl_pkey_get_private($public_key);
|
||
return openssl_sign($prestr, $sign, $pkeyid, OPENSSL_ALGO_SHA256) ? base64_encode($sign) : null;
|
||
}
|
||
|
||
/**
|
||
* [AlipayRsaVerify 支付宝验证签名]
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @datetime 2017-09-24T08:39:50+0800
|
||
* @param [string] $prestr [需要签名的字符串]
|
||
* @param [string] $sign [签名结果]
|
||
* @return [boolean] [正确true, 错误false]
|
||
*/
|
||
private function AlipayRsaVerify($prestr, $sign)
|
||
{
|
||
$sign = base64_decode($sign);
|
||
$public_key = file_get_contents(ROOT_PATH.'Rsakeys/rsa_alipay_mini_public_key.pem');
|
||
$pkeyid = openssl_pkey_get_public($public_key);
|
||
if($pkeyid)
|
||
{
|
||
$verify = openssl_verify($prestr, $sign, $pkeyid, OPENSSL_ALGO_SHA256);
|
||
openssl_free_key($pkeyid);
|
||
}
|
||
return (isset($verify) && $verify == 1) ? true : false;
|
||
}
|
||
|
||
/**
|
||
* [MyRsaDecrypt RSA解密]
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @datetime 2017-09-24T09:12:06+0800
|
||
* @param [string] $content [需要解密的内容，密文]
|
||
* @return [string] [解密后内容，明文]
|
||
*/
|
||
private function MyRsaDecrypt($content)
|
||
{
|
||
$priKey = file_get_contents(ROOT_PATH.'Rsakeys/mini_private_key.pem');
|
||
$res = openssl_get_privatekey($priKey);
|
||
$content = base64_decode($content);
|
||
$result = '';
|
||
for($i=0; $i<strlen($content)/128; $i++)
|
||
{
|
||
$data = substr($content, $i * 128, 128);
|
||
openssl_private_decrypt($data, $decrypt, $res, OPENSSL_ALGO_SHA256);
|
||
$result .= $decrypt;
|
||
}
|
||
openssl_free_key($res);
|
||
return $result;
|
||
}
|
||
|
||
/**
|
||
* [HttpRequest 网络请求]
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @datetime 2017-09-25T09:10:46+0800
|
||
* @param [string] $url [请求url]
|
||
* @param [array] $data [发送数据]
|
||
* @return [mixed] [请求返回数据]
|
||
*/
|
||
private function HttpRequest($url, $data)
|
||
{
|
||
$ch = curl_init();
|
||
curl_setopt($ch, CURLOPT_URL, $url);
|
||
curl_setopt($ch, CURLOPT_FAILONERROR, false);
|
||
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
|
||
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
|
||
|
||
$body_string = '';
|
||
if(is_array($data) && 0 < count($data))
|
||
{
|
||
foreach($data as $k => $v)
|
||
{
|
||
$body_string .= $k.'='.urlencode($v).'&';
|
||
}
|
||
curl_setopt($ch, CURLOPT_POST, true);
|
||
curl_setopt($ch, CURLOPT_POSTFIELDS, $body_string);
|
||
}
|
||
$headers = array('content-type: application/x-www-form-urlencoded;charset=UTF-8');
|
||
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
|
||
$reponse = curl_exec($ch);
|
||
if(curl_errno($ch))
|
||
{
|
||
return false;
|
||
} else {
|
||
$httpStatusCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
|
||
if(200 !== $httpStatusCode)
|
||
{
|
||
return false;
|
||
}
|
||
}
|
||
curl_close($ch);
|
||
return json_decode($reponse, true);
|
||
}
|
||
|
||
/**
|
||
* [AlipayQrcodeCreate 小程序二维码创建]
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @datetime 2017-10-28T21:31:41+0800
|
||
* @param [string] $query [生成小程序启动参数（如：type=page&page=shop&value=5）]
|
||
* @param [string] $describe [二维码描述（默认：美啦网）]
|
||
*/
|
||
public function AlipayQrcodeCreate($query, $describe = '美啦网')
|
||
{
|
||
// 请求参数
|
||
$params = [
|
||
'app_id' => C('alipay_mini_appid'),
|
||
'method' => 'alipay.open.app.qrcode.create',
|
||
'charset' => 'utf-8',
|
||
'format' => 'JSON',
|
||
'sign_type' => 'RSA2',
|
||
'timestamp' => date('Y-m-d H:i:s'),
|
||
'version' => '1.0',
|
||
];
|
||
$biz_content = [
|
||
'url_param' => C('alipay_mini_default_page'),
|
||
'query_param' => $query,
|
||
'describe' => $describe,
|
||
];
|
||
$params['biz_content'] = json_encode($biz_content, JSON_UNESCAPED_UNICODE);
|
||
|
||
// 生成签名参数+签名
|
||
$p = $this->GetParamSign($params);
|
||
$params['sign'] = $this->MyRsaSign($p['value']);
|
||
|
||
// 执行请求
|
||
$result = $this->HttpRequest('https://openapi.alipay.com/gateway.do', $params);
|
||
|
||
// 结果正确则验证签名 并且 存储缓存返回access_token
|
||
if(!empty($result['alipay_open_app_qrcode_create_response']['code']) && $result['alipay_open_app_qrcode_create_response']['code'] == 10000)
|
||
{
|
||
// 验证签名正确则存储缓存返回数据
|
||
if(!$this->SyncRsaVerify($result, 'alipay_open_app_qrcode_create_response'))
|
||
{
|
||
return false;
|
||
}
|
||
return $result['alipay_open_app_qrcode_create_response'];
|
||
}
|
||
return false;
|
||
}
|
||
|
||
}
|
||
?>
|