49 lines
1.8 KiB
Go
49 lines
1.8 KiB
Go
|
package transferv3
|
|||
|
|
|
|||
|
|
import (
|
|||
|
|
"crypto"
|
|||
|
|
"crypto/rsa"
|
|||
|
|
"crypto/sha256"
|
|||
|
|
"encoding/base64"
|
|||
|
|
"fmt"
|
|||
|
|
"strings"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
// BuildSignMessage 构建请求签名串（文档：请求方法\n请求URL路径\n时间戳\n随机串\n请求报文主体\n）
|
|||
|
|
func BuildSignMessage(method, urlPath, timestamp, nonce, body string) string {
|
|||
|
|
return method + "\n" + urlPath + "\n" + timestamp + "\n" + nonce + "\n" + body + "\n"
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// Sign 使用商户私钥 SHA256withRSA 签名，返回 Base64
|
|||
|
|
func Sign(signMessage string, privateKey *rsa.PrivateKey) (string, error) {
|
|||
|
|
h := sha256.Sum256([]byte(signMessage))
|
|||
|
|
sig, err := rsa.SignPKCS1v15(nil, privateKey, crypto.SHA256, h[:])
|
|||
|
|
if err != nil {
|
|||
|
|
return "", fmt.Errorf("rsa sign: %w", err)
|
|||
|
|
}
|
|||
|
|
return base64.StdEncoding.EncodeToString(sig), nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// BuildAuthorization 构建 Authorization 头（文档格式）
|
|||
|
|
func BuildAuthorization(mchID, nonce, signature, timestamp, serialNo string) string {
|
|||
|
|
return fmt.Sprintf(`WECHATPAY2-SHA256-RSA2048 mchid="%s",nonce_str="%s",signature="%s",timestamp="%s",serial_no="%s"`,
|
|||
|
|
mchID, nonce, signature, timestamp, serialNo)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// BuildVerifyMessage 构建回调验签串（文档：时间戳\n随机串\n请求报文主体\n）
|
|||
|
|
func BuildVerifyMessage(timestamp, nonce, body string) string {
|
|||
|
|
return timestamp + "\n" + nonce + "\n" + body + "\n"
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// VerifySignature 使用平台公钥验证回调签名（Wechatpay-Signature 为 Base64）
|
|||
|
|
func VerifySignature(timestamp, nonce, body, signatureBase64 string, publicKey *rsa.PublicKey) bool {
|
|||
|
|
msg := BuildVerifyMessage(timestamp, nonce, body)
|
|||
|
|
sig, err := base64.StdEncoding.DecodeString(strings.TrimSpace(signatureBase64))
|
|||
|
|
if err != nil {
|
|||
|
|
return false
|
|||
|
|
}
|
|||
|
|
h := sha256.Sum256([]byte(msg))
|
|||
|
|
err = rsa.VerifyPKCS1v15(publicKey, crypto.SHA256, h[:], sig)
|
|||
|
|
return err == nil
|
|||
|
|
}
|