256 lines
7.4 KiB
PHP
256 lines
7.4 KiB
PHP
<?php
|
||
|
||
namespace app\common\util;
|
||
|
||
|
||
|
||
/**
|
||
* 支付工具类
|
||
* 用于处理第三方支付相关功能
|
||
* 仅限内部调用
|
||
*/
|
||
class PaymentUtil
|
||
{
|
||
/**
|
||
* 签名算法类型
|
||
*/
|
||
const SIGN_TYPE_MD5 = 'MD5';
|
||
const SIGN_TYPE_RSA_1_256 = 'RSA_1_256';
|
||
const SIGN_TYPE_RSA_1_1 = 'RSA_1_1';
|
||
|
||
/**
|
||
* 生成支付签名
|
||
*
|
||
* @param array $params 待签名参数
|
||
* @param string $secretKey 签名密钥
|
||
* @param string $signType 签名类型 MD5/RSA_1_256/RSA_1_1
|
||
* @return string 签名结果
|
||
*/
|
||
public static function generateSign(array $params, string $secretKey, string $signType = self::SIGN_TYPE_MD5): string
|
||
{
|
||
// 1. 移除sign字段
|
||
unset($params['sign']);
|
||
|
||
// 2. 过滤空值
|
||
$params = array_filter($params, function($value) {
|
||
return $value !== '' && $value !== null;
|
||
});
|
||
|
||
// 3. 按字段名ASCII码从小到大排序
|
||
ksort($params);
|
||
|
||
// 4. 拼接成QueryString格式
|
||
$queryString = self::buildQueryString($params);
|
||
|
||
// 5. 根据签名类型生成签名
|
||
switch (strtoupper($signType)) {
|
||
case self::SIGN_TYPE_MD5:
|
||
return self::generateMd5Sign($queryString, $secretKey);
|
||
case self::SIGN_TYPE_RSA_1_256:
|
||
return self::generateRsa256Sign($queryString, $secretKey);
|
||
case self::SIGN_TYPE_RSA_1_1:
|
||
return self::generateRsa1Sign($queryString, $secretKey);
|
||
default:
|
||
throw new \InvalidArgumentException('不支持的签名类型: ' . $signType);
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 验证支付签名
|
||
*
|
||
* @param array $params 待验证参数（包含sign字段）
|
||
* @param string $secretKey 签名密钥
|
||
* @param string $signType 签名类型
|
||
* @return bool 验证结果
|
||
*/
|
||
public static function verifySign(array $params, string $secretKey, string $signType = self::SIGN_TYPE_MD5): bool
|
||
{
|
||
if (!isset($params['sign'])) {
|
||
return false;
|
||
}
|
||
|
||
$receivedSign = $params['sign'];
|
||
$generatedSign = self::generateSign($params, $secretKey, $signType);
|
||
|
||
return $receivedSign === $generatedSign;
|
||
}
|
||
|
||
/**
|
||
* 构建QueryString
|
||
*
|
||
* @param array $params 参数数组
|
||
* @return string QueryString
|
||
*/
|
||
private static function buildQueryString(array $params): string
|
||
{
|
||
$pairs = [];
|
||
foreach ($params as $key => $value) {
|
||
$pairs[] = $key . '=' . $value;
|
||
}
|
||
return implode('&', $pairs);
|
||
}
|
||
|
||
/**
|
||
* 生成MD5签名
|
||
*
|
||
* @param string $queryString 待签名字符串
|
||
* @param string $secretKey 密钥
|
||
* @return string MD5签名
|
||
*/
|
||
private static function generateMd5Sign(string $queryString, string $secretKey): string
|
||
{
|
||
$signString = $queryString . '&key=' . $secretKey;
|
||
return strtoupper(md5($signString));
|
||
}
|
||
|
||
/**
|
||
* 生成RSA256签名
|
||
*
|
||
* @param string $queryString 待签名字符串
|
||
* @param string $privateKey 私钥
|
||
* @return string RSA256签名
|
||
*/
|
||
private static function generateRsa256Sign(string $queryString, string $privateKey): string
|
||
{
|
||
$privateKey = self::formatPrivateKey($privateKey);
|
||
$key = openssl_pkey_get_private($privateKey);
|
||
if (!$key) {
|
||
throw new \Exception('RSA私钥格式错误');
|
||
}
|
||
|
||
$signature = '';
|
||
$result = openssl_sign($queryString, $signature, $key, OPENSSL_ALGO_SHA256);
|
||
openssl_pkey_free($key);
|
||
|
||
if (!$result) {
|
||
throw new \Exception('RSA256签名失败');
|
||
}
|
||
|
||
return base64_encode($signature);
|
||
}
|
||
|
||
/**
|
||
* 生成RSA1签名
|
||
*
|
||
* @param string $queryString 待签名字符串
|
||
* @param string $privateKey 私钥
|
||
* @return string RSA1签名
|
||
*/
|
||
private static function generateRsa1Sign(string $queryString, string $privateKey): string
|
||
{
|
||
$privateKey = self::formatPrivateKey($privateKey);
|
||
$key = openssl_pkey_get_private($privateKey);
|
||
if (!$key) {
|
||
throw new \Exception('RSA私钥格式错误');
|
||
}
|
||
|
||
$signature = '';
|
||
$result = openssl_sign($queryString, $signature, $key, OPENSSL_ALGO_SHA1);
|
||
openssl_pkey_free($key);
|
||
|
||
if (!$result) {
|
||
throw new \Exception('RSA1签名失败');
|
||
}
|
||
|
||
return base64_encode($signature);
|
||
}
|
||
|
||
/**
|
||
* 格式化私钥
|
||
*
|
||
* @param string $privateKey 原始私钥
|
||
* @return string 格式化后的私钥
|
||
*/
|
||
private static function formatPrivateKey(string $privateKey): string
|
||
{
|
||
$privateKey = str_replace(['-----BEGIN PRIVATE KEY-----', '-----END PRIVATE KEY-----', "\n", "\r"], '', $privateKey);
|
||
$privateKey = chunk_split($privateKey, 64, "\n");
|
||
return "-----BEGIN PRIVATE KEY-----\n" . $privateKey . "-----END PRIVATE KEY-----";
|
||
}
|
||
|
||
/**
|
||
* 格式化公钥
|
||
*
|
||
* @param string $publicKey 原始公钥
|
||
* @return string 格式化后的公钥
|
||
*/
|
||
private static function formatPublicKey(string $publicKey): string
|
||
{
|
||
$publicKey = str_replace(['-----BEGIN PUBLIC KEY-----', '-----END PUBLIC KEY-----', "\n", "\r"], '', $publicKey);
|
||
$publicKey = chunk_split($publicKey, 64, "\n");
|
||
return "-----BEGIN PUBLIC KEY-----\n" . $publicKey . "-----END PUBLIC KEY-----";
|
||
}
|
||
|
||
/**
|
||
* 验证RSA签名
|
||
*
|
||
* @param string $queryString 原始字符串
|
||
* @param string $signature 签名
|
||
* @param string $publicKey 公钥
|
||
* @param string $signType 签名类型
|
||
* @return bool 验证结果
|
||
*/
|
||
public static function verifyRsaSign(string $queryString, string $signature, string $publicKey, string $signType = self::SIGN_TYPE_RSA_1_256): bool
|
||
{
|
||
$publicKey = self::formatPublicKey($publicKey);
|
||
$key = openssl_pkey_get_public($publicKey);
|
||
if (!$key) {
|
||
return false;
|
||
}
|
||
|
||
$algorithm = $signType === self::SIGN_TYPE_RSA_1_1 ? OPENSSL_ALGO_SHA1 : OPENSSL_ALGO_SHA256;
|
||
$result = openssl_verify($queryString, base64_decode($signature), $key, $algorithm);
|
||
openssl_pkey_free($key);
|
||
|
||
return $result === 1;
|
||
}
|
||
|
||
/**
|
||
* 生成随机字符串
|
||
*
|
||
* @param int $length 长度
|
||
* @return string 随机字符串
|
||
*/
|
||
public static function generateNonceStr(int $length = 32): string
|
||
{
|
||
$chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
|
||
$str = '';
|
||
for ($i = 0; $i < $length; $i++) {
|
||
$str .= $chars[mt_rand(0, strlen($chars) - 1)];
|
||
}
|
||
return $str;
|
||
}
|
||
|
||
/**
|
||
* 生成时间戳
|
||
*
|
||
* @return int 时间戳
|
||
*/
|
||
public static function generateTimestamp(): int
|
||
{
|
||
return time();
|
||
}
|
||
|
||
/**
|
||
* 格式化金额（分转元）
|
||
*
|
||
* @param int $amount 金额（分）
|
||
* @return string 格式化后的金额（元）
|
||
*/
|
||
public static function formatAmount(int $amount): string
|
||
{
|
||
return number_format($amount / 100, 2, '.', '');
|
||
}
|
||
|
||
/**
|
||
* 解析金额（元转分）
|
||
*
|
||
* @param string $amount 金额（元）
|
||
* @return int 金额（分）
|
||
*/
|
||
public static function parseAmount(string $amount): int
|
||
{
|
||
return (int) round(floatval($amount) * 100);
|
||
}
|
||
}
|