Compare commits

..

3 Commits

Author SHA1 Message Date
ayflying
fa659d87ae 调整oppo支付,不引用外部包 2025-07-29 11:19:43 +08:00
ayflying
ccc50a7dd0 荣耀支付增加验单 2025-07-29 10:51:42 +08:00
ayflying
d1a7ba8119 增加荣耀支付 2025-07-29 10:15:57 +08:00
11 changed files with 294 additions and 13 deletions

3
go.mod
View File

@@ -47,8 +47,6 @@ require (
github.com/gorilla/websocket v1.5.3 // indirect
github.com/grokify/html-strip-tags-go v0.1.0 // indirect
github.com/hashicorp/hcl v1.0.0 // indirect
github.com/haxqer/gofunc v0.0.0-20210609183449-586b0cce5fe4 // indirect
github.com/haxqer/xthird v0.0.0-20210703071732-ff4f4dbb6e5d // indirect
github.com/klauspost/compress v1.18.0 // indirect
github.com/klauspost/cpuid/v2 v2.2.10 // indirect
github.com/magiconair/properties v1.8.9 // indirect
@@ -62,7 +60,6 @@ require (
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
github.com/olekukonko/tablewriter v0.0.5 // indirect
github.com/pelletier/go-toml v1.9.3 // indirect
github.com/pquerna/ffjson v0.0.0-20190930134022-aa0246cd15f7 // indirect
github.com/prometheus/client_model v0.6.1 // indirect
github.com/prometheus/common v0.62.0 // indirect
github.com/prometheus/procfs v0.15.1 // indirect

7
go.sum
View File

@@ -225,10 +225,6 @@ github.com/hashicorp/logutils v1.0.0/go.mod h1:QIAnNjmIWmVIIkWDTG1z5v++HQmx9WQRO
github.com/hashicorp/mdns v1.0.0/go.mod h1:tL+uN++7HEJ6SQLQ2/p+z2pH24WQKWjBPkE0mNTz8vQ=
github.com/hashicorp/memberlist v0.1.3/go.mod h1:ajVTdAv/9Im8oMAAj5G31PhhMCZJV2pPBoIllUwCN7I=
github.com/hashicorp/serf v0.8.2/go.mod h1:6hOLApaqBFA1NXqRQAsxw9QxuDEvNxSQRwA/JwenrHc=
github.com/haxqer/gofunc v0.0.0-20210609183449-586b0cce5fe4 h1:QQOImHnvEkzqEbozZup+76WLv+W0QhO84GTLHppMY1M=
github.com/haxqer/gofunc v0.0.0-20210609183449-586b0cce5fe4/go.mod h1:XQaEUze5QCq3D9oenfHItzPQUD+NGg+0TDt1kJhJAAc=
github.com/haxqer/xthird v0.0.0-20210703071732-ff4f4dbb6e5d h1:e2qgvCNjMrp9fNtUQr3gQnK15B0C2CIUjPWMc7jZnbo=
github.com/haxqer/xthird v0.0.0-20210703071732-ff4f4dbb6e5d/go.mod h1:9avb74vS4djGUwtueA6V01grbpskLGisSy0jxFZIBY8=
github.com/ianlancetaylor/demangle v0.0.0-20181102032728-5e5cf60278f6/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc=
github.com/ianlancetaylor/demangle v0.0.0-20200824232613-28f6c0f3b639/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc=
github.com/json-iterator/go v1.1.11/go.mod h1:KdQUCv79m/52Kvf8AW2vK1V8akMuk1QjK/uOdHXbAo4=
@@ -300,8 +296,6 @@ github.com/pkg/sftp v1.10.1/go.mod h1:lYOWFsE0bwd1+KfKJaKeuokY15vzFx25BLbzYYoAxZ
github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
github.com/posener/complete v1.1.1/go.mod h1:em0nMJCgc9GFtwrmVmEMR/ZL6WyhyjMBndrE9hABlRI=
github.com/pquerna/ffjson v0.0.0-20190930134022-aa0246cd15f7 h1:xoIK0ctDddBMnc74udxJYBqlo9Ylnsp1waqjLsnef20=
github.com/pquerna/ffjson v0.0.0-20190930134022-aa0246cd15f7/go.mod h1:YARuvh7BUWHNhzDq2OM5tzR2RiCcN2D7sapiKyCel/M=
github.com/prometheus/client_golang v1.22.0 h1:rb93p9lokFEsctTys46VnV1kLCDpVZ0a/Y92Vm0Zc6Q=
github.com/prometheus/client_golang v1.22.0/go.mod h1:R7ljNsLXhuQXYZYtw6GAE9AZg8Y7vEW5scdCXrWRXC0=
github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
@@ -463,7 +457,6 @@ golang.org/x/net v0.0.0-20200324143707-d3edc9973b7e/go.mod h1:qpuaurCH72eLCgpAm/
golang.org/x/net v0.0.0-20200501053045-e0ff5e5a1de5/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
golang.org/x/net v0.0.0-20200506145744-7e3656a0809f/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
golang.org/x/net v0.0.0-20200513185701-a91f0712d120/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
golang.org/x/net v0.0.0-20200520004742-59133d7f0dd7/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
golang.org/x/net v0.0.0-20200520182314-0ba52f642ac2/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
golang.org/x/net v0.0.0-20200625001655-4c5254603344/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
golang.org/x/net v0.0.0-20200707034311-ab3426394381/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=

View File

@@ -0,0 +1,30 @@
package common
import "strings"
func FormatPublicKey(publicKey string) (pKey string) {
var buffer strings.Builder
buffer.WriteString("-----BEGIN PUBLIC KEY-----\n")
rawLen := 64
keyLen := len(publicKey)
raws := keyLen / rawLen
temp := keyLen % rawLen
if temp > 0 {
raws++
}
start := 0
end := start + rawLen
for i := 0; i < raws; i++ {
if i == raws-1 {
buffer.WriteString(publicKey[start:])
} else {
buffer.WriteString(publicKey[start:end])
}
buffer.WriteByte('\n')
start += rawLen
end = start + rawLen
}
buffer.WriteString("-----END PUBLIC KEY-----\n")
pKey = buffer.String()
return
}

View File

@@ -0,0 +1,5 @@
package honor
const (
Host = "https://iap-api.cloud.honor.com"
)

View File

@@ -0,0 +1,65 @@
package honor
import (
"crypto"
"crypto/rsa"
"crypto/sha256"
"crypto/x509"
"encoding/base64"
"encoding/pem"
"errors"
"github.com/ayflying/utility_go/package/pay/common"
)
type Pay struct {
PubKey string `json:"pubKey"`
AppId string `json:"appId"`
}
func New(pay *Pay) *Pay {
return &Pay{
AppId: pay.AppId,
PubKey: pay.PubKey,
}
}
// VerifyRSASignature 验证RSA数字签名
// data: 原始数据字节
// sign: 签名的Base64编码字符串
// pubKey: PEM格式的公钥字符串
// 返回验证结果和可能的错误
func (p *Pay) VerifyRSASignature(data []byte, sign string) (bool, error) {
// 解码Base64格式的签名
signBytes, err := base64.StdEncoding.DecodeString(sign)
if err != nil {
return false, errors.New("签名解码失败: " + err.Error())
}
pubkey := common.FormatPublicKey(p.PubKey)
// 解析PEM格式的公钥
block, _ := pem.Decode([]byte(pubkey))
if block == nil {
return false, errors.New("无效的PEM格式公钥")
}
// 解析公钥
publicKey, err := x509.ParsePKIXPublicKey(block.Bytes)
if err != nil {
return false, errors.New("公钥解析失败: " + err.Error())
}
// 类型断言为公钥
rsaPubKey, ok := publicKey.(*rsa.PublicKey)
if !ok {
return false, errors.New("不是有效的RSA公钥")
}
// 计算数据的SHA-256哈希
hasher := sha256.New()
hasher.Write(data)
hash := hasher.Sum(nil)
// 验证签名
err = rsa.VerifyPKCS1v15(rsaPubKey, crypto.SHA256, hash, signBytes)
return err == nil, err
}

View File

@@ -0,0 +1,45 @@
package honor
type PayCallbackHeader struct {
Charset string `json:"charset" dc:"字符集当前只支持utf-8。"`
SignType string `json:"signType" dc:"签名算法类型, 当前只支持RSA"`
Sign string `json:"sign" dc:"notificationMessage的签名已废弃请用signature。"`
Signature string `json:"signature" dc:"对data的签名。"`
AppId string `json:"appId" dc:"应用ID"`
}
type PayCallback struct {
Env string `json:"env" dc:"发送通知的环境sandbox为沙盒测试环境非sandbox为正式环境"`
EventType string `json:"eventType" dc:"事件类型,如付款成功、退款失败等"`
EventCode int `json:"eventCode" dc:"事件类型对应的code值"`
Version string `json:"version" dc:"iap版本"`
EventTime string `json:"eventTime" dc:"通知时间"`
Data PayCallbackData `json:"data" dc:"通知内容notificationMessage的json字符串"`
}
type PayCallbackData struct {
AppId string `json:"appId" dc:"应用ID"`
OrderId string `json:"orderId" dc:"订单ID"`
BizOrderNo string `json:"bizOrderNo,omitempty" dc:"max-length:64#业务订单号"`
ProductType int `json:"productType" dc:"商品类型0消耗型1非消耗型2订阅型"`
ProductId string `json:"productId" dc:"商品ID"`
ProductName string `json:"productName" dc:"商品名称"`
PurchaseTime int64 `json:"purchaseTime" dc:"购买时间UTC时间戳(毫秒)"`
PurchaseState int `json:"purchaseState" dc:"订单状态 0:已购买 1:已退款 2:付款失败 3:退款失败 4:未支付 5:退款中"`
ConsumptionState int `json:"consumptionState" dc:"消耗状态 0:未消耗 1:已消耗"`
PurchaseToken string `json:"purchaseToken" dc:"购买令牌"`
Currency string `json:"currency" dc:"币种"`
Price string `json:"price" dc:"商品价格"`
PayMoney string `json:"payMoney" dc:"实际支付金额"`
DeveloperPayload string `json:"developerPayload,omitempty" dc:"max-length:1024#商户信息"`
OriOrder string `json:"oriOrder" dc:"原订单信息"`
SandboxFlag int `json:"sandboxFlag" dc:"沙盒标识"`
AgreementNo string `json:"agreementNo,omitempty" dc:"订阅合约号"`
ExecuteTime string `json:"executeTime,omitempty" dc:"下次扣费时间(订阅)"`
SecondChargeTime int64 `json:"secondChargeTime,omitempty" dc:"第二次扣费时间(订阅升级)"`
OldProductId string `json:"oldProductId,omitempty" dc:"老商品ID(订阅升级)"`
SubStartTime string `json:"subStartTime,omitempty" dc:"订阅开始时间"`
SubEndTime string `json:"subEndTime,omitempty" dc:"订阅结束时间"`
OriginalPrice string `json:"originalPrice" dc:"原始价格"`
CancelTime string `json:"cancelTime,omitempty" dc:"订阅取消时间"`
}

View File

@@ -0,0 +1,26 @@
package honor
import (
"github.com/gogf/gf/v2/frame/g"
"github.com/gogf/gf/v2/os/gctx"
"net/http"
)
func (p *Pay) Notification(r *http.Request) {
}
// ConsumeProduct 商品消耗
func (p *Pay) ConsumeProduct(purchaseToken string) (err error) {
url := Host + "/iap/server/consumeProduct"
_, err = g.Client().ContentJson().Post(gctx.New(), url, g.Map{
"purchaseToken": purchaseToken,
"developerChallenge": "",
})
if err != nil {
return
}
return
}

View File

@@ -0,0 +1,9 @@
package oppo
const (
LoginUrl = "https://iopen.game.oppomobile.com/sdkopen/user/fileIdInfo?fileId=%s&token=%s"
LocationShanghai = "Asia/Shanghai"
RSA = "RSA"
RSA2 = "RSA2"
)

View File

@@ -0,0 +1,32 @@
package oppo
import (
"net/http"
"net/url"
)
func (p *OppoType) ParseNotifyToBodyMap(req *http.Request) (bm map[string]interface{}, err error) {
if err = req.ParseForm(); err != nil {
return nil, err
}
var form map[string][]string = req.Form
bm = make(map[string]interface{}, len(form)+1)
for k, v := range form {
if len(v) == 1 {
bm[k] = v[0]
//bm.Set(k, v[0])
}
}
return
}
func (p *OppoType) ParseNotifyByURLValues(value url.Values) (bm map[string]interface{}, err error) {
bm = make(map[string]interface{}, len(value)+1)
for k, v := range value {
if len(v) == 1 {
bm[k] = v[0]
//bm.Set(k, v[0])
}
}
return
}

View File

@@ -3,7 +3,6 @@ package oppo
import (
"context"
"github.com/gogf/gf/v2/frame/g"
"github.com/haxqer/xthird/oppo"
)
// 跟充值平台通信的加密key
@@ -30,12 +29,12 @@ func (p *OppoType) Verify(ctx context.Context) (err error) {
oppoPublicKey := "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCmreYIkPwVovKR8rLHWlFVw7YDfm9uQOJKL89Smt6ypXGVdrAKKl0wNYc3/jecAoPi2ylChfa2iRu5gunJyNmpWZzlCNRIau55fxGW0XEu553IiprOZcaw5OuYGlf60ga8QT6qToP0/dpiL/ZbmNUO9kUhosIjEu22uFgR+5cYyQIDAQAB"
//oppoPublicKey := p.PublicKey
// 解析请求参数
bodyMap, err := oppo.ParseNotifyToBodyMap(g.RequestFromCtx(ctx).Request)
bodyMap, err := p.ParseNotifyToBodyMap(g.RequestFromCtx(ctx).Request)
if err != nil {
// 解析失败, 处理错误逻辑
return
}
err = oppo.VerifySign(oppoPublicKey, bodyMap)
err = p.VerifySign(oppoPublicKey, bodyMap)
return
}

80
package/pay/oppo/sign.go Normal file
View File

@@ -0,0 +1,80 @@
package oppo
import (
"crypto"
"crypto/hmac"
"crypto/rsa"
"crypto/sha1"
"crypto/x509"
"encoding/base64"
"encoding/pem"
"errors"
"fmt"
"github.com/ayflying/utility_go/package/pay/common"
"github.com/gogf/gf/v2/util/gconv"
"hash"
"math/rand"
"net/url"
"time"
)
func (p *OppoType) GenLoginBaseStr(bm map[string]interface{}, appKey, appSecret string) (string, string) {
baseStr := fmt.Sprintf("oauthConsumerKey=%s&oauthToken=%s&oauthSignatureMethod=HMAC-SHA1&oauthTimestamp=%d&oauthNonce=%d&oauthVersion=1.0&",
appKey, url.QueryEscape(gconv.String(bm["token"])), time.Now().Unix(), rand.Int31n(100000000))
var h hash.Hash
h = hmac.New(sha1.New, []byte(appSecret+"&"))
h.Write([]byte(baseStr))
sign := url.QueryEscape(base64.StdEncoding.EncodeToString(h.Sum(nil)))
return baseStr, sign
}
func (p *OppoType) VerifySign(oppoPayPublicKey string, bm map[string]interface{}) (err error) {
if oppoPayPublicKey == "" || bm == nil {
return errors.New("oppoPayPublicKey or bm is nil")
}
bodySign := bm["sign"].(string)
bodySignType := RSA
signData := fmt.Sprintf("notifyId=%s&partnerOrder=%s&productName=%s&productDesc=%s&price=%s&count=%s&attach=%s",
bm["notifyId"], bm["partnerOrder"], bm["productName"],
bm["productDesc"], bm["price"], bm["count"], bm["attach"])
pKey := common.FormatPublicKey(oppoPayPublicKey)
if err = p.verifySign(signData, bodySign, bodySignType, pKey); err != nil {
return err
}
return nil
}
func (p *OppoType) verifySign(signData, sign, signType, oppoPayPublicKey string) (err error) {
var (
h hash.Hash
hashs crypto.Hash
block *pem.Block
pubKey interface{}
publicKey *rsa.PublicKey
ok bool
)
signBytes, _ := base64.StdEncoding.DecodeString(sign)
if block, _ = pem.Decode([]byte(oppoPayPublicKey)); block == nil {
return errors.New("OPPO公钥Decode错误")
}
if pubKey, err = x509.ParsePKIXPublicKey(block.Bytes); err != nil {
return fmt.Errorf("x509.ParsePKIXPublicKey%w", err)
}
if publicKey, ok = pubKey.(*rsa.PublicKey); !ok {
return errors.New("OPPO公钥转换错误")
}
switch signType {
case RSA:
hashs = crypto.SHA1
case RSA2:
hashs = crypto.SHA256
default:
hashs = crypto.SHA256
}
h = hashs.New()
h.Write([]byte(signData))
return rsa.VerifyPKCS1v15(publicKey, hashs, h.Sum(nil), signBytes)
}