447 lines
16 KiB
PHP
447 lines
16 KiB
PHP
|
<?php
|
|||
|
|
|
|||
|
|
namespace app\common\service;
|
|||
|
|
|
|||
|
|
use app\common\model\User;
|
|||
|
|
use EasyWeChat\Kernel\Encryptor;
|
|||
|
|
use think\Cache;
|
|||
|
|
use think\Log;
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 小程序虚拟支付（代币充值）
|
|||
|
|
* 文档：https://developers.weixin.qq.com/miniprogram/dev/platform-capabilities/business-capabilities/virtual-payment.html
|
|||
|
|
* 客户端：wx.requestVirtualPayment，mode=short_series_coin
|
|||
|
|
* 服务器：/xpay/query_order 确认现金单，/xpay/currency_pay 扣减代币
|
|||
|
|
*/
|
|||
|
|
class VirtualPayService
|
|||
|
|
{
|
|||
|
|
const SESSION_PREFIX = 'wx_session_key:';
|
|||
|
|
const TRADE_PREFIX = 'vp_trade:';
|
|||
|
|
const LATEST_PREFIX = 'vp_order_latest:';
|
|||
|
|
const CACHE_TTL = 1296000; // 15天
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 登录成功后缓存 session_key，用户态签名要用
|
|||
|
|
* @param int $userId
|
|||
|
|
* @param string $sessionKey
|
|||
|
|
*/
|
|||
|
|
public static function saveSessionKey($userId, $sessionKey)
|
|||
|
|
{
|
|||
|
|
if (!$userId || $sessionKey === '') {
|
|||
|
|
return;
|
|||
|
|
}
|
|||
|
|
Cache::set(self::SESSION_PREFIX . $userId, $sessionKey, self::CACHE_TTL);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 生成 wx.requestVirtualPayment 参数。signData 必须原样传给客户端，不能再 JSON.stringify
|
|||
|
|
* @param string $orderNo
|
|||
|
|
* @param float|string $amountYuan
|
|||
|
|
* @param string $openid
|
|||
|
|
* @return array
|
|||
|
|
* @throws \Exception
|
|||
|
|
*/
|
|||
|
|
public static function createClientPay($orderNo, $amountYuan, $openid)
|
|||
|
|
{
|
|||
|
|
$offerId = (string)config('common.virtual_pay.offer_id');
|
|||
|
|
if ($offerId === '') {
|
|||
|
|
throw new \Exception('未配置虚拟支付 OfferID');
|
|||
|
|
}
|
|||
|
|
$buyQuantity = self::coinQuantity($amountYuan);
|
|||
|
|
$outTradeNo = 'V' . date('ymdHis') . substr(md5(uniqid('', true)), 0, 10);
|
|||
|
|
$signData = json_encode([
|
|||
|
|
'offerId' => $offerId,
|
|||
|
|
'buyQuantity' => $buyQuantity,
|
|||
|
|
'env' => self::env(),
|
|||
|
|
'currencyType' => 'CNY',
|
|||
|
|
'outTradeNo' => $outTradeNo,
|
|||
|
|
'attach' => (string)$orderNo,
|
|||
|
|
], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
|
|||
|
|
if ($signData === false) {
|
|||
|
|
throw new \Exception('虚拟支付参数编码失败');
|
|||
|
|
}
|
|||
|
|
$sessionKey = self::sessionKeyByOpenid($openid);
|
|||
|
|
Cache::set(self::TRADE_PREFIX . $outTradeNo, (string)$orderNo, self::CACHE_TTL);
|
|||
|
|
Cache::set(self::LATEST_PREFIX . $orderNo, $outTradeNo, self::CACHE_TTL);
|
|||
|
|
Log::info('虚拟支付下单 ' . json_encode([
|
|||
|
|
'order_no' => $orderNo,
|
|||
|
|
'out_trade_no' => $outTradeNo,
|
|||
|
|
'buy_quantity' => $buyQuantity,
|
|||
|
|
'env' => self::env(),
|
|||
|
|
], JSON_UNESCAPED_UNICODE));
|
|||
|
|
|
|||
|
|
return [
|
|||
|
|
'mode' => 'short_series_coin',
|
|||
|
|
'signData' => $signData,
|
|||
|
|
'paySig' => hash_hmac('sha256', 'requestVirtualPayment&' . $signData, self::appKey()),
|
|||
|
|
'signature' => hash_hmac('sha256', $signData, $sessionKey),
|
|||
|
|
];
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 现金单已支付时扣减代币并入账。没有可确认的支付单时返回 false，调用方再拉起新的支付
|
|||
|
|
* @param string $orderNo
|
|||
|
|
* @param string $openid
|
|||
|
|
* @return bool
|
|||
|
|
* @throws \Exception
|
|||
|
|
*/
|
|||
|
|
public static function settleIfPaid($orderNo, $openid)
|
|||
|
|
{
|
|||
|
|
$order = OrderService::getOne(['order_no' => $orderNo]);
|
|||
|
|
if (!$order) {
|
|||
|
|
throw new \Exception('订单不存在');
|
|||
|
|
}
|
|||
|
|
if ((int)$order->order_status !== OrderService::ORDER_STATUS_WAIT_PAY) {
|
|||
|
|
return in_array((int)$order->order_status, [
|
|||
|
|
OrderService::ORDER_STATUS_WAIT_SHIP,
|
|||
|
|
OrderService::ORDER_STATUS_SHIPPED,
|
|||
|
|
OrderService::ORDER_STATUS_FINISHED,
|
|||
|
|
], true);
|
|||
|
|
}
|
|||
|
|
$outTradeNo = Cache::get(self::LATEST_PREFIX . $orderNo);
|
|||
|
|
if (!$outTradeNo) {
|
|||
|
|
return false;
|
|||
|
|
}
|
|||
|
|
$res = self::queryOrder($openid, $outTradeNo);
|
|||
|
|
if ((int)($res['errcode'] ?? -1) !== 0) {
|
|||
|
|
Log::info('虚拟支付查单未支付 ' . json_encode([
|
|||
|
|
'order_no' => $orderNo,
|
|||
|
|
'out_trade_no' => $outTradeNo,
|
|||
|
|
'res' => $res,
|
|||
|
|
], JSON_UNESCAPED_UNICODE));
|
|||
|
|
return false;
|
|||
|
|
}
|
|||
|
|
$wxOrder = $res['order'] ?? [];
|
|||
|
|
$status = (int)($wxOrder['status'] ?? 0);
|
|||
|
|
// 2已支付待发货 3发货中 4已发货。代币由平台入账，这三种都表示现金已支付
|
|||
|
|
if (!in_array($status, [2, 3, 4], true)) {
|
|||
|
|
return false;
|
|||
|
|
}
|
|||
|
|
self::deductCoins($order, $openid, $wxOrder);
|
|||
|
|
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 处理虚拟支付消息推送
|
|||
|
|
* @param array $msg
|
|||
|
|
* @return array
|
|||
|
|
* @throws \Exception
|
|||
|
|
*/
|
|||
|
|
public static function handleMessage(array $msg)
|
|||
|
|
{
|
|||
|
|
$event = (string)($msg['Event'] ?? '');
|
|||
|
|
if ($event === 'xpay_coin_pay_notify') {
|
|||
|
|
self::finishFromCoinNotify($msg);
|
|||
|
|
return ['ErrCode' => 0, 'ErrMsg' => 'success'];
|
|||
|
|
}
|
|||
|
|
if ($event === 'xpay_refund_notify') {
|
|||
|
|
self::handleRefundNotify($msg);
|
|||
|
|
return ['ErrCode' => 0, 'ErrMsg' => 'success'];
|
|||
|
|
}
|
|||
|
|
if ($event === 'xpay_subscribe_ios_refund_query_notify') {
|
|||
|
|
return self::iosRefundQuery($msg);
|
|||
|
|
}
|
|||
|
|
Log::info('虚拟支付推送 ' . $event . ' ' . json_encode($msg, JSON_UNESCAPED_UNICODE));
|
|||
|
|
|
|||
|
|
return ['ErrCode' => 0, 'ErrMsg' => 'success'];
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 解密安全模式下的消息，返回明文字符串
|
|||
|
|
* @param string $encrypt
|
|||
|
|
* @param string $msgSignature
|
|||
|
|
* @param string $nonce
|
|||
|
|
* @param string $timestamp
|
|||
|
|
* @return string
|
|||
|
|
* @throws \Exception
|
|||
|
|
*/
|
|||
|
|
public static function decryptMessage($encrypt, $msgSignature, $nonce, $timestamp)
|
|||
|
|
{
|
|||
|
|
$token = (string)config('common.virtual_pay.msg_token');
|
|||
|
|
$aesKey = (string)config('common.virtual_pay.aes_key');
|
|||
|
|
$appId = (string)config('common.wechat.app_id');
|
|||
|
|
if ($token === '' || $aesKey === '' || $appId === '') {
|
|||
|
|
throw new \Exception('未配置虚拟支付消息加解密参数');
|
|||
|
|
}
|
|||
|
|
$encryptor = new Encryptor($appId, $token, $aesKey);
|
|||
|
|
|
|||
|
|
return $encryptor->decrypt($encrypt, $msgSignature, $nonce, $timestamp);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* @param string $openid
|
|||
|
|
* @param string $outTradeNo
|
|||
|
|
* @return array
|
|||
|
|
* @throws \Exception
|
|||
|
|
*/
|
|||
|
|
private static function queryOrder($openid, $outTradeNo)
|
|||
|
|
{
|
|||
|
|
return self::postXpay('/xpay/query_order', [
|
|||
|
|
'openid' => $openid,
|
|||
|
|
'env' => self::env(),
|
|||
|
|
'order_id' => (string)$outTradeNo,
|
|||
|
|
]);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 校验现金金额后扣减代币，再把业务订单标成已支付
|
|||
|
|
* @param \think\Model $order
|
|||
|
|
* @param string $openid
|
|||
|
|
* @param array $wxOrder
|
|||
|
|
* @throws \Exception
|
|||
|
|
*/
|
|||
|
|
private static function deductCoins($order, $openid, array $wxOrder)
|
|||
|
|
{
|
|||
|
|
$paidFee = (int)($wxOrder['paid_fee'] ?? 0);
|
|||
|
|
if ($paidFee <= 0) {
|
|||
|
|
$paidFee = (int)($wxOrder['order_fee'] ?? 0);
|
|||
|
|
}
|
|||
|
|
$expect = self::amountFen($order->payment_amount);
|
|||
|
|
if ($paidFee !== $expect) {
|
|||
|
|
Log::error('虚拟支付金额不一致 ' . json_encode([
|
|||
|
|
'order_no' => $order->order_no,
|
|||
|
|
'paid_fee' => $paidFee,
|
|||
|
|
'expect' => $expect,
|
|||
|
|
], JSON_UNESCAPED_UNICODE));
|
|||
|
|
throw new \Exception('支付金额与订单不一致');
|
|||
|
|
}
|
|||
|
|
$buyQuantity = self::coinQuantity($order->payment_amount);
|
|||
|
|
$res = self::postXpay('/xpay/currency_pay', [
|
|||
|
|
'openid' => $openid,
|
|||
|
|
'env' => self::env(),
|
|||
|
|
'user_ip' => self::userIp(),
|
|||
|
|
'amount' => $buyQuantity,
|
|||
|
|
'order_id' => (string)$order->order_no,
|
|||
|
|
'payitem' => json_encode([[
|
|||
|
|
'productid' => 'order',
|
|||
|
|
'unit_price' => $buyQuantity,
|
|||
|
|
'quantity' => 1,
|
|||
|
|
]], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES),
|
|||
|
|
'remark' => '订单' . $order->order_no,
|
|||
|
|
], self::sessionKeyByOpenid($openid));
|
|||
|
|
$errcode = (int)($res['errcode'] ?? -1);
|
|||
|
|
// 268490004：重复扣减，上一笔已经成功
|
|||
|
|
if ($errcode !== 0 && $errcode !== 268490004) {
|
|||
|
|
if ($errcode === 268490006) {
|
|||
|
|
throw new \Exception('支付确认中，请稍后在订单里再次点击支付，不会重复扣款');
|
|||
|
|
}
|
|||
|
|
throw new \Exception('代币扣减失败：' . ($res['errmsg'] ?? '未知错误'));
|
|||
|
|
}
|
|||
|
|
$transactionId = (string)($wxOrder['wxpay_order_id'] ?? ($wxOrder['channel_order_id'] ?? ''));
|
|||
|
|
$paidTime = (int)($wxOrder['paid_time'] ?? 0);
|
|||
|
|
OrderService::finishPaid(
|
|||
|
|
$order->order_no,
|
|||
|
|
$expect,
|
|||
|
|
$transactionId,
|
|||
|
|
'XPAY',
|
|||
|
|
$paidTime > 0 ? $paidTime : time(),
|
|||
|
|
'settle'
|
|||
|
|
);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* @param array $msg
|
|||
|
|
* @throws \Exception
|
|||
|
|
*/
|
|||
|
|
private static function finishFromCoinNotify(array $msg)
|
|||
|
|
{
|
|||
|
|
$outTradeNo = (string)($msg['OutTradeNo'] ?? '');
|
|||
|
|
$orderNo = Cache::get(self::TRADE_PREFIX . $outTradeNo) ?: $outTradeNo;
|
|||
|
|
$coinInfo = isset($msg['CoinInfo']) && is_array($msg['CoinInfo']) ? $msg['CoinInfo'] : [];
|
|||
|
|
$order = OrderService::getOne(['order_no' => $orderNo]);
|
|||
|
|
if (!$order) {
|
|||
|
|
Log::error('虚拟支付代币通知未找到订单 ' . $outTradeNo);
|
|||
|
|
return;
|
|||
|
|
}
|
|||
|
|
$fen = isset($coinInfo['ActualPrice']) ? (int)$coinInfo['ActualPrice'] : self::amountFen($order->payment_amount);
|
|||
|
|
$payInfo = isset($msg['WeChatPayInfo']) && is_array($msg['WeChatPayInfo']) ? $msg['WeChatPayInfo'] : [];
|
|||
|
|
$paidTime = (int)($payInfo['PaidTime'] ?? 0);
|
|||
|
|
OrderService::finishPaid(
|
|||
|
|
$orderNo,
|
|||
|
|
$fen,
|
|||
|
|
(string)($payInfo['TransactionId'] ?? ''),
|
|||
|
|
'XPAY',
|
|||
|
|
$paidTime > 0 ? $paidTime : time(),
|
|||
|
|
'coin_notify'
|
|||
|
|
);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 未发货的订单退款成功后改为已退款。已发货或需求单只记日志，避免把已结算合同改回去
|
|||
|
|
* @param array $msg
|
|||
|
|
*/
|
|||
|
|
private static function handleRefundNotify(array $msg)
|
|||
|
|
{
|
|||
|
|
Log::info('虚拟支付退款通知 ' . json_encode($msg, JSON_UNESCAPED_UNICODE));
|
|||
|
|
if ((int)($msg['RetCode'] ?? 1) !== 0) {
|
|||
|
|
return;
|
|||
|
|
}
|
|||
|
|
$mchOrderId = (string)($msg['MchOrderId'] ?? '');
|
|||
|
|
$orderNo = Cache::get(self::TRADE_PREFIX . $mchOrderId) ?: $mchOrderId;
|
|||
|
|
$order = OrderService::getOne(['order_no' => $orderNo]);
|
|||
|
|
if (!$order) {
|
|||
|
|
Log::error('虚拟支付退款未找到订单 ' . $mchOrderId);
|
|||
|
|
return;
|
|||
|
|
}
|
|||
|
|
if ((int)$order->order_status === OrderService::ORDER_STATUS_WAIT_SHIP
|
|||
|
|
&& (int)$order->order_type === OrderService::ORDER_TYPE_SOFTWARE) {
|
|||
|
|
OrderService::where('order_no', $order->order_no)->update([
|
|||
|
|
'order_status' => OrderService::ORDER_STATUS_REFUNDED,
|
|||
|
|
]);
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* iOS 退款问询：已交付建议拒绝，未交付建议退款。最终由苹果决定
|
|||
|
|
* @param array $msg
|
|||
|
|
* @return array
|
|||
|
|
*/
|
|||
|
|
private static function iosRefundQuery(array $msg)
|
|||
|
|
{
|
|||
|
|
$payOrderId = (string)($msg['pay_order_id'] ?? ($msg['PayOrderId'] ?? ''));
|
|||
|
|
$orderNo = $payOrderId ? (Cache::get(self::TRADE_PREFIX . $payOrderId) ?: $payOrderId) : '';
|
|||
|
|
$order = $orderNo ? OrderService::getOne(['order_no' => $orderNo]) : null;
|
|||
|
|
$delivered = $order && in_array((int)$order->order_status, [
|
|||
|
|
OrderService::ORDER_STATUS_SHIPPED,
|
|||
|
|
OrderService::ORDER_STATUS_FINISHED,
|
|||
|
|
], true);
|
|||
|
|
if ($delivered) {
|
|||
|
|
return [
|
|||
|
|
'result_code' => 1,
|
|||
|
|
'result_info' => '已交付',
|
|||
|
|
'evidence' => '虚拟商品已交付，建议拒绝退款',
|
|||
|
|
];
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
return [
|
|||
|
|
'result_code' => 0,
|
|||
|
|
'result_info' => '未交付',
|
|||
|
|
'evidence' => '订单未交付，建议退款',
|
|||
|
|
];
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* @param string $uri
|
|||
|
|
* @param array $payload
|
|||
|
|
* @param string $sessionKey 需要用户态签名的接口才传
|
|||
|
|
* @return array
|
|||
|
|
* @throws \Exception
|
|||
|
|
*/
|
|||
|
|
private static function postXpay($uri, array $payload, $sessionKey = '')
|
|||
|
|
{
|
|||
|
|
$body = json_encode($payload, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
|
|||
|
|
if ($body === false) {
|
|||
|
|
throw new \Exception('虚拟支付参数编码失败');
|
|||
|
|
}
|
|||
|
|
// access_token 由小程序 HTTP 客户端自动附在 query 上，不参与 pay_sig
|
|||
|
|
$query = [
|
|||
|
|
'pay_sig' => hash_hmac('sha256', $uri . '&' . $body, self::appKey()),
|
|||
|
|
];
|
|||
|
|
if ($sessionKey !== '') {
|
|||
|
|
$query['signature'] = hash_hmac('sha256', $body, $sessionKey);
|
|||
|
|
}
|
|||
|
|
try {
|
|||
|
|
$service = new EasyWeChatService();
|
|||
|
|
$response = $service->app->getClient()->post($uri, [
|
|||
|
|
'query' => $query,
|
|||
|
|
'headers' => ['Content-Type' => 'application/json'],
|
|||
|
|
'body' => $body,
|
|||
|
|
]);
|
|||
|
|
$result = $response->toArray(false);
|
|||
|
|
} catch (\Exception $e) {
|
|||
|
|
Log::error('虚拟支付请求异常 ' . $uri . ' ' . $e->getMessage());
|
|||
|
|
throw new \Exception('虚拟支付请求失败');
|
|||
|
|
}
|
|||
|
|
Log::info('虚拟支付请求 ' . $uri . ' ' . json_encode([
|
|||
|
|
'payload' => $payload,
|
|||
|
|
'res' => $result,
|
|||
|
|
], JSON_UNESCAPED_UNICODE));
|
|||
|
|
|
|||
|
|
return is_array($result) ? $result : [];
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* @param string $openid
|
|||
|
|
* @return string
|
|||
|
|
* @throws \Exception
|
|||
|
|
*/
|
|||
|
|
private static function sessionKeyByOpenid($openid)
|
|||
|
|
{
|
|||
|
|
$userId = User::where('openid', $openid)->value('id');
|
|||
|
|
$sessionKey = $userId ? Cache::get(self::SESSION_PREFIX . $userId) : '';
|
|||
|
|
if (!$sessionKey) {
|
|||
|
|
throw new \Exception('登录态已过期，请退出小程序后重新进入再支付');
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
return (string)$sessionKey;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* @param float|string $amountYuan
|
|||
|
|
* @return int
|
|||
|
|
* @throws \Exception
|
|||
|
|
*/
|
|||
|
|
private static function coinQuantity($amountYuan)
|
|||
|
|
{
|
|||
|
|
$fen = self::amountFen($amountYuan);
|
|||
|
|
if ($fen < 1) {
|
|||
|
|
throw new \Exception('支付金额不能小于0.01元');
|
|||
|
|
}
|
|||
|
|
$coinPerYuan = (int)config('common.virtual_pay.coin_per_yuan');
|
|||
|
|
if ($coinPerYuan < 1) {
|
|||
|
|
$coinPerYuan = 1;
|
|||
|
|
}
|
|||
|
|
if (($fen * $coinPerYuan) % 100 !== 0) {
|
|||
|
|
throw new \Exception('订单金额须为整数元才能按1元=1代币支付');
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
return intdiv($fen * $coinPerYuan, 100);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* @param float|string $amountYuan
|
|||
|
|
* @return int
|
|||
|
|
*/
|
|||
|
|
private static function amountFen($amountYuan)
|
|||
|
|
{
|
|||
|
|
return (int)bcmul(sprintf('%.2f', $amountYuan), '100', 0);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* @return int
|
|||
|
|
*/
|
|||
|
|
private static function env()
|
|||
|
|
{
|
|||
|
|
return (int)config('common.virtual_pay.env') === 1 ? 1 : 0;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* @return string
|
|||
|
|
* @throws \Exception
|
|||
|
|
*/
|
|||
|
|
private static function appKey()
|
|||
|
|
{
|
|||
|
|
$config = config('common.virtual_pay');
|
|||
|
|
$key = self::env() === 1 ? (string)($config['sandbox_app_key'] ?? '') : (string)($config['app_key'] ?? '');
|
|||
|
|
if ($key === '') {
|
|||
|
|
throw new \Exception('未配置虚拟支付 AppKey');
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
return $key;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* @return string
|
|||
|
|
*/
|
|||
|
|
private static function userIp()
|
|||
|
|
{
|
|||
|
|
$ip = request()->ip();
|
|||
|
|
if (!filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) {
|
|||
|
|
return '127.0.0.1';
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
return $ip;
|
|||
|
|
}
|
|||
|
|
}
|