huang
045aa4fa3a
All checks were successful
构建并部署到测试环境（无 SSH） / build-and-deploy (push) Successful in 7m5s
- WechatPayCallback 移除对永远为 nil 的单例 wechatPayment 的依赖， 改为动态按 payment_config_id 加载创建订单时所用的精确配置 - PaymentV2Service 新增 VerifyCallback()（v2 XML 验签）和 PeekOrderNo()（不验签预解析） - FuiouPayCallback 由 GetActiveConfig 改为 GetConfigForCallback， 通过 ParseNotify 预解析订单号后精确加载配置，防止切换配置后旧订单验签失败 - wechat_config.Service 注入 assetRechargeStore/agentRechargeStore， 新增 GetConfigForCallback()：按订单号前缀查 payment_config_id， GetByIDUnscoped 加载配置（含已停用/软删除记录），找不到则回退激活配置 - 修复微信 v2 回调响应格式：从 JSON 改为 XML，避免微信持续重试
297 lines
9.0 KiB
Go
297 lines
9.0 KiB
Go
package wechat
|
||
|
||
import (
|
||
"context"
|
||
"crypto/md5"
|
||
"encoding/xml"
|
||
"fmt"
|
||
"io"
|
||
"net/http"
|
||
"sort"
|
||
"strings"
|
||
"time"
|
||
|
||
"github.com/break/junhong_cmp_fiber/pkg/errors"
|
||
"go.uber.org/zap"
|
||
)
|
||
|
||
const wechatPayV2UnifiedOrderURL = "https://api.mch.weixin.qq.com/pay/unifiedorder"
|
||
|
||
// PaymentV2Service 微信支付 v2 服务
|
||
// 适用于仅配置 APIv2Key 的商户（无需 v3 证书序列号）
|
||
type PaymentV2Service struct {
|
||
appID string
|
||
mchID string
|
||
apiKey string
|
||
notifyURL string
|
||
logger *zap.Logger
|
||
}
|
||
|
||
// NewPaymentV2Service 创建微信支付 v2 服务
|
||
func NewPaymentV2Service(appID, mchID, apiKey, notifyURL string, logger *zap.Logger) *PaymentV2Service {
|
||
return &PaymentV2Service{
|
||
appID: appID,
|
||
mchID: mchID,
|
||
apiKey: apiKey,
|
||
notifyURL: notifyURL,
|
||
logger: logger,
|
||
}
|
||
}
|
||
|
||
// v2UnifiedOrderRequest 统一下单请求（v2 XML 格式）
|
||
type v2UnifiedOrderRequest struct {
|
||
XMLName xml.Name `xml:"xml"`
|
||
AppID string `xml:"appid"`
|
||
MchID string `xml:"mch_id"`
|
||
NonceStr string `xml:"nonce_str"`
|
||
Sign string `xml:"sign"`
|
||
Body string `xml:"body"`
|
||
OutTradeNo string `xml:"out_trade_no"`
|
||
TotalFee int `xml:"total_fee"`
|
||
SpbillIP string `xml:"spbill_create_ip"`
|
||
NotifyURL string `xml:"notify_url"`
|
||
TradeType string `xml:"trade_type"`
|
||
OpenID string `xml:"openid"`
|
||
}
|
||
|
||
// v2UnifiedOrderResponse 统一下单响应（v2 XML 格式）
|
||
type v2UnifiedOrderResponse struct {
|
||
XMLName xml.Name `xml:"xml"`
|
||
ReturnCode string `xml:"return_code"`
|
||
ReturnMsg string `xml:"return_msg"`
|
||
ResultCode string `xml:"result_code"`
|
||
ErrCode string `xml:"err_code"`
|
||
ErrCodeDes string `xml:"err_code_des"`
|
||
PrepayID string `xml:"prepay_id"`
|
||
}
|
||
|
||
// CreateJSAPIOrder 创建 v2 JSAPI 支付订单
|
||
func (s *PaymentV2Service) CreateJSAPIOrder(ctx context.Context, orderNo, description, openID string, amount int) (*JSAPIPayResult, error) {
|
||
if orderNo == "" || openID == "" || amount <= 0 {
|
||
return nil, errors.New(errors.CodeInvalidParam, "订单号、OpenID 和金额不能为空")
|
||
}
|
||
|
||
nonceStr := v2GenerateNonceStr()
|
||
|
||
params := map[string]string{
|
||
"appid": s.appID,
|
||
"mch_id": s.mchID,
|
||
"nonce_str": nonceStr,
|
||
"body": description,
|
||
"out_trade_no": orderNo,
|
||
"total_fee": fmt.Sprintf("%d", amount),
|
||
"spbill_create_ip": "127.0.0.1",
|
||
"notify_url": s.notifyURL,
|
||
"trade_type": "JSAPI",
|
||
"openid": openID,
|
||
}
|
||
params["sign"] = v2SignMD5(params, s.apiKey)
|
||
|
||
reqBody := &v2UnifiedOrderRequest{
|
||
AppID: params["appid"],
|
||
MchID: params["mch_id"],
|
||
NonceStr: params["nonce_str"],
|
||
Sign: params["sign"],
|
||
Body: params["body"],
|
||
OutTradeNo: params["out_trade_no"],
|
||
TotalFee: amount,
|
||
SpbillIP: params["spbill_create_ip"],
|
||
NotifyURL: params["notify_url"],
|
||
TradeType: params["trade_type"],
|
||
OpenID: params["openid"],
|
||
}
|
||
|
||
xmlBytes, err := xml.Marshal(reqBody)
|
||
if err != nil {
|
||
return nil, errors.Wrap(errors.CodeWechatPayFailed, err, "序列化统一下单请求失败")
|
||
}
|
||
|
||
httpReq, err := http.NewRequestWithContext(ctx, http.MethodPost, wechatPayV2UnifiedOrderURL, strings.NewReader(string(xmlBytes)))
|
||
if err != nil {
|
||
return nil, errors.Wrap(errors.CodeWechatPayFailed, err, "构建统一下单请求失败")
|
||
}
|
||
httpReq.Header.Set("Content-Type", "application/xml")
|
||
|
||
httpResp, err := http.DefaultClient.Do(httpReq)
|
||
if err != nil {
|
||
s.logger.Error("调用微信 v2 统一下单接口失败", zap.String("order_no", orderNo), zap.Error(err))
|
||
return nil, errors.Wrap(errors.CodeWechatPayFailed, err, "调用统一下单接口失败")
|
||
}
|
||
defer httpResp.Body.Close()
|
||
|
||
respBytes, err := io.ReadAll(httpResp.Body)
|
||
if err != nil {
|
||
return nil, errors.Wrap(errors.CodeWechatPayFailed, err, "读取统一下单响应失败")
|
||
}
|
||
|
||
var resp v2UnifiedOrderResponse
|
||
if err = xml.Unmarshal(respBytes, &resp); err != nil {
|
||
return nil, errors.Wrap(errors.CodeWechatPayFailed, err, "解析统一下单响应失败")
|
||
}
|
||
|
||
if resp.ReturnCode != "SUCCESS" {
|
||
s.logger.Error("微信 v2 统一下单通信失败",
|
||
zap.String("order_no", orderNo),
|
||
zap.String("return_msg", resp.ReturnMsg),
|
||
)
|
||
return nil, errors.New(errors.CodeWechatPayFailed, "统一下单通信失败: "+resp.ReturnMsg)
|
||
}
|
||
if resp.ResultCode != "SUCCESS" {
|
||
s.logger.Error("微信 v2 统一下单业务失败",
|
||
zap.String("order_no", orderNo),
|
||
zap.String("err_code", resp.ErrCode),
|
||
zap.String("err_code_des", resp.ErrCodeDes),
|
||
)
|
||
return nil, errors.New(errors.CodeWechatPayFailed, "统一下单业务失败: "+resp.ErrCodeDes)
|
||
}
|
||
|
||
payConfig := s.buildJSAPIPayConfig(resp.PrepayID, nonceStr)
|
||
|
||
s.logger.Info("创建 v2 JSAPI 支付订单成功",
|
||
zap.String("order_no", orderNo),
|
||
zap.String("prepay_id", resp.PrepayID),
|
||
)
|
||
|
||
return &JSAPIPayResult{
|
||
PrepayID: resp.PrepayID,
|
||
PayConfig: payConfig,
|
||
}, nil
|
||
}
|
||
|
||
// buildJSAPIPayConfig 构建 JSAPI 唤起支付所需的签名参数
|
||
func (s *PaymentV2Service) buildJSAPIPayConfig(prepayID, nonceStr string) map[string]string {
|
||
timestamp := fmt.Sprintf("%d", time.Now().Unix())
|
||
params := map[string]string{
|
||
"appId": s.appID,
|
||
"timeStamp": timestamp,
|
||
"nonceStr": nonceStr,
|
||
"package": "prepay_id=" + prepayID,
|
||
"signType": "MD5",
|
||
}
|
||
params["paySign"] = v2SignMD5(params, s.apiKey)
|
||
return params
|
||
}
|
||
|
||
// v2SignMD5 对参数按字典序排序后拼接 key，计算 MD5 大写签名
|
||
func v2SignMD5(params map[string]string, apiKey string) string {
|
||
keys := make([]string, 0, len(params))
|
||
for k := range params {
|
||
keys = append(keys, k)
|
||
}
|
||
sort.Strings(keys)
|
||
|
||
var sb strings.Builder
|
||
for _, k := range keys {
|
||
v := params[k]
|
||
if v == "" {
|
||
continue
|
||
}
|
||
sb.WriteString(k)
|
||
sb.WriteString("=")
|
||
sb.WriteString(v)
|
||
sb.WriteString("&")
|
||
}
|
||
sb.WriteString("key=")
|
||
sb.WriteString(apiKey)
|
||
|
||
hash := md5.Sum([]byte(sb.String()))
|
||
return strings.ToUpper(fmt.Sprintf("%x", hash))
|
||
}
|
||
|
||
func v2GenerateNonceStr() string {
|
||
return fmt.Sprintf("%x", md5.Sum([]byte(fmt.Sprintf("%d", time.Now().UnixNano()))))
|
||
}
|
||
|
||
// v2CallbackNotify v2 支付回调通知 XML 结构
|
||
// 所有字段均为 string，避免 CDATA 整数字段的类型转换问题
|
||
type v2CallbackNotify struct {
|
||
XMLName xml.Name `xml:"xml"`
|
||
AppID string `xml:"appid"`
|
||
BankType string `xml:"bank_type"`
|
||
CashFee string `xml:"cash_fee"`
|
||
FeeType string `xml:"fee_type"`
|
||
IsSubscribe string `xml:"is_subscribe"`
|
||
MchID string `xml:"mch_id"`
|
||
NonceStr string `xml:"nonce_str"`
|
||
OpenID string `xml:"openid"`
|
||
OutTradeNo string `xml:"out_trade_no"`
|
||
ResultCode string `xml:"result_code"`
|
||
ReturnCode string `xml:"return_code"`
|
||
Sign string `xml:"sign"`
|
||
TimeEnd string `xml:"time_end"`
|
||
TotalFee string `xml:"total_fee"`
|
||
TradeType string `xml:"trade_type"`
|
||
TransactionID string `xml:"transaction_id"`
|
||
}
|
||
|
||
// PeekOrderNo 从 v2 回调 XML 中解析订单号（不验签）
|
||
// 用于在验签前确定使用哪套支付配置
|
||
func PeekOrderNo(body []byte) (string, error) {
|
||
var notify v2CallbackNotify
|
||
if err := xml.Unmarshal(body, ¬ify); err != nil {
|
||
return "", fmt.Errorf("解析回调 XML 失败: %w", err)
|
||
}
|
||
return notify.OutTradeNo, nil
|
||
}
|
||
|
||
// V2CallbackResult v2 回调解析结果
|
||
type V2CallbackResult struct {
|
||
OutTradeNo string
|
||
TransactionID string
|
||
// TradeState 为 "SUCCESS" 表示支付成功（return_code 和 result_code 均为 SUCCESS）
|
||
TradeState string
|
||
TotalFee string
|
||
OpenID string
|
||
}
|
||
|
||
// VerifyCallback 解析并验证 v2 回调 XML，返回解析结果
|
||
func (s *PaymentV2Service) VerifyCallback(body []byte) (*V2CallbackResult, error) {
|
||
var notify v2CallbackNotify
|
||
if err := xml.Unmarshal(body, ¬ify); err != nil {
|
||
return nil, fmt.Errorf("解析回调 XML 失败: %w", err)
|
||
}
|
||
|
||
// 构建待签名参数（排除 sign 字段，v2SignMD5 内部自动跳过空值）
|
||
params := map[string]string{
|
||
"appid": notify.AppID,
|
||
"bank_type": notify.BankType,
|
||
"cash_fee": notify.CashFee,
|
||
"fee_type": notify.FeeType,
|
||
"is_subscribe": notify.IsSubscribe,
|
||
"mch_id": notify.MchID,
|
||
"nonce_str": notify.NonceStr,
|
||
"openid": notify.OpenID,
|
||
"out_trade_no": notify.OutTradeNo,
|
||
"result_code": notify.ResultCode,
|
||
"return_code": notify.ReturnCode,
|
||
"time_end": notify.TimeEnd,
|
||
"total_fee": notify.TotalFee,
|
||
"trade_type": notify.TradeType,
|
||
"transaction_id": notify.TransactionID,
|
||
}
|
||
|
||
expected := v2SignMD5(params, s.apiKey)
|
||
if !strings.EqualFold(notify.Sign, expected) {
|
||
s.logger.Error("v2 回调签名验证失败",
|
||
zap.String("received", notify.Sign),
|
||
zap.String("expected", expected),
|
||
zap.String("mch_id", notify.MchID),
|
||
)
|
||
return nil, fmt.Errorf("签名验证失败")
|
||
}
|
||
|
||
// return_code 和 result_code 均为 SUCCESS 才算支付成功
|
||
tradeState := ""
|
||
if notify.ReturnCode == "SUCCESS" && notify.ResultCode == "SUCCESS" {
|
||
tradeState = "SUCCESS"
|
||
}
|
||
|
||
return &V2CallbackResult{
|
||
OutTradeNo: notify.OutTradeNo,
|
||
TransactionID: notify.TransactionID,
|
||
TradeState: tradeState,
|
||
TotalFee: notify.TotalFee,
|
||
OpenID: notify.OpenID,
|
||
}, nil
|
||
}
|