php sdk aopclient,alipay-sdk-php/AopClient.php at master · fishlab/alipay-sdk-php · GitHub

namespace Alipay\OpenApi;

class AopClient {

//应用ID

public $appId;

//私钥文件路径

public $rsaPrivateKeyFilePath;

//网关

public $gatewayUrl = "https://openapi.alipay.com/gateway.do";

//返回数据格式

public $format = "json";

//api版本

public $apiVersion = "1.0";

// 表单提交字符集编码

public $postCharset = "UTF-8";

public $alipayPublicKey = null;

public $debugInfo=false;

protected $fileCharset = "UTF-8";

protected $RESPONSE_SUFFIX = "_response";

protected $ERROR_RESPONSE = "error_response";

protected $SIGN_NODE_NAME = "sign";

//签名类型

protected $signType = "RSA";

protected $alipaySdkVersion = "alipay-sdk-php-20130320";

public function generateSign($params) {

return $this->sign($this->getSignContent($params));

}

public function rsaSign($params) {

return $this->sign($this->getSignContent($params));

}

protected function getSignContent($params) {

ksort($params);

$stringToBeSigned = "";

$i = 0;

foreach ($params as $k => $v) {

if (false === $this->checkEmpty($v) && "@" != substr($v, 0, 1)) {

// 转换成目标字符集

$v = $this->characet($v, $this->postCharset);

if ($i == 0) {

$stringToBeSigned .= "$k" . "=" . "$v";

} else {

$stringToBeSigned .= "&" . "$k" . "=" . "$v";

}

$i++;

}

}

unset ($k, $v);

return $stringToBeSigned;

}

protected function sign($data) {

$priKey = file_get_contents($this->rsaPrivateKeyFilePath);

$res = openssl_get_privatekey($priKey);

openssl_sign($data, $sign, $res);

openssl_free_key($res);

$sign = base64_encode($sign);

return $sign;

}

protected function curl($url, $postFields = null) {

$ch = curl_init();

curl_setopt($ch, CURLOPT_URL, $url);

curl_setopt($ch, CURLOPT_FAILONERROR, false);

curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);

$postBodyString = "";

$encodeArray = Array();

$postMultipart = false;

if (is_array($postFields) && 0 < count($postFields)) {

foreach ($postFields as $k => $v) {

if ("@" != substr($v, 0, 1)) //判断是不是文件上传

{

$postBodyString .= "$k=" . urlencode($this->characet($v, $this->postCharset)) . "&";

$encodeArray[$k] = $this->characet($v, $this->postCharset);

} else //文件上传用multipart/form-data，否则用www-form-urlencoded

{

$postMultipart = true;

$encodeArray[$k] = new \CURLFile(substr($v,1));

}

}

unset ($k, $v);

curl_setopt($ch, CURLOPT_POST, true);

if ($postMultipart) {

curl_setopt($ch, CURLOPT_POSTFIELDS, $encodeArray);

}else{

curl_setopt($ch, CURLOPT_POSTFIELDS, substr($postBodyString, 0, -1));

}

}

if($postMultipart){

$headers = array('content-type: multipart/form-data;charset=' . $this->postCharset.';boundary='.$this->getMillisecond());

}else{

$headers = array('content-type: application/x-www-form-urlencoded;charset=' . $this->postCharset);

}

curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);

$reponse = curl_exec($ch);

if (curl_errno($ch)) {

throw new Exception(curl_error($ch), 0);

} else {

$httpStatusCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);

if (200 !== $httpStatusCode) {

throw new Exception($reponse, $httpStatusCode);

}

}

curl_close($ch);

return $reponse;

}

protected function getMillisecond() {

list($s1, $s2) = explode(' ', microtime());

return (float)sprintf('%.0f', (floatval($s1) + floatval($s2)) * 1000);

}

protected function logCommunicationError($apiName, $requestUrl, $errorCode, $responseTxt) {

$localIp = isset ($_SERVER["SERVER_ADDR"]) ? $_SERVER["SERVER_ADDR"] : "CLI";

$logger = new LtLogger;

$logger->conf["log_file"] = rtrim(AOP_SDK_WORK_DIR, '\\/') . '/' . "logs/aop_comm_err_" . $this->appId . "_" . date("Y-m-d") . ".log";

$logger->conf["separator"] = "^_^";

$logData = array(

date("Y-m-d H:i:s"),

$apiName,

$this->appId,

$localIp,

PHP_OS,

$this->alipaySdkVersion,

$requestUrl,

$errorCode,

str_replace("\n", "", $responseTxt)

);

$logger->log($logData);

}

public function execute($request, $authToken = null, $appInfoAuthtoken=null) {

if ($this->checkEmpty($this->postCharset)) {

$this->postCharset = "UTF-8";

}

$this->fileCharset = mb_detect_encoding($this->appId, "UTF-8,GBK");

如果两者编码不一致，会出现签名验签或者乱码

if (strcasecmp($this->fileCharset, $this->postCharset)) {

// writeLog("本地文件字符集编码与表单提交编码不一致，请务必设置成一样，属性名分别为postCharset!");

throw new Exception("文件编码：[" . $this->fileCharset . "] 与表单提交编码：[" . $this->postCharset . "]两者不一致!");

}

$iv=null;

if(!$this->checkEmpty($request->getApiVersion())){

$iv=$request->getApiVersion();

}else{

$iv=$this->apiVersion;

}

//组装系统参数

$sysParams["app_id"] = $this->appId;

$sysParams["version"] = $iv;

$sysParams["format"] = $this->format;

$sysParams["sign_type"] = $this->signType;

$sysParams["method"] = $request->getApiMethodName();

$sysParams["timestamp"] = date("Y-m-d H:i:s");

$sysParams["auth_token"] = $authToken;

$sysParams["alipay_sdk"] = $this->alipaySdkVersion;

$sysParams["terminal_type"] = $request->getTerminalType();

$sysParams["terminal_info"] = $request->getTerminalInfo();

$sysParams["prod_code"] = $request->getProdCode();

$sysParams["notify_url"] =$request->getNotifyUrl();

$sysParams["charset"] = $this->postCharset;

$sysParams["app_auth_token"]=$appInfoAuthtoken;

//获取业务参数

$apiParams = $request->getApiParas();

//签名

$sysParams["sign"] = $this->generateSign(array_merge($apiParams, $sysParams));

//系统参数放入GET请求串

$requestUrl = $this->gatewayUrl . "?";

foreach ($sysParams as $sysParamKey => $sysParamValue) {

$requestUrl .= "$sysParamKey=" . urlencode($this->characet($sysParamValue, $this->postCharset)) . "&";

}

$requestUrl = substr($requestUrl, 0, -1);

//发起HTTP请求

try {

$resp = $this->curl($requestUrl, $apiParams);

} catch (Exception $e) {

$this->logCommunicationError($sysParams["method"], $requestUrl, "HTTP_ERROR_" . $e->getCode(), $e->getMessage());

return false;

}

//解析AOP返回结果

$respWellFormed = false;

// 将返回结果转换本地文件编码

$r = iconv($this->postCharset, $this->fileCharset . "//IGNORE", $resp);

$signData = null;

if ("json" == $this->format) {

$respObject = json_decode($r);

if (null !== $respObject) {

$respWellFormed = true;

$signData = $this->parserJSONSignData($request, $resp, $respObject);

}

} else if ("xml" == $this->format) {

$respObject = @ simplexml_load_string($resp);

if (false !== $respObject) {

$respWellFormed = true;

$signData = $this->parserXMLSignData($request, $resp);

}

}

//返回的HTTP文本不是标准JSON或者XML，记下错误日志

if (false === $respWellFormed) {

$this->logCommunicationError($sysParams["method"], $requestUrl, "HTTP_RESPONSE_NOT_WELL_FORMED", $resp);

return false;

}

// 验签

if (!$this->checkEmpty($this->alipayPublicKey)) {

if ($signData == null || $this->checkEmpty($signData->sign) || $this->checkEmpty($signData->signSourceData)) {

throw new Exception(" check sign Fail! The reason : signData is Empty");

}

// 获取结果sub_code

$responseSubCode=$this->parserResponseSubCode($request,$resp,$respObject,$this->format);

if (!$this->checkEmpty($responseSubCode) || ( $this->checkEmpty($responseSubCode) && !$this->checkEmpty($signData->sign))) {

$checkResult = $this->verify($signData->signSourceData, $signData->sign, $this->alipayPublicKey);

if (!$checkResult) {

if (strpos($signData->signSourceData, "\\/") > 0) {

$signData->signSourceData = str_replace("\\/", "/", $signData->signSourceData);

$checkResult = $this->verify($signData->signSourceData, $signData->sign, $this->alipayPublicKey);

if (!$checkResult) {

throw new Exception("check sign Fail! [sign=" . $signData->sign . ", signSourceData=" . $signData->signSourceData . "]");

}

} else {

throw new Exception("check sign Fail! [sign=" . $signData->sign . ", signSourceData=" . $signData->signSourceData . "]");

}

}

}

}

return $respObject;

}

/**

* 转换字符集编码

* @param $data

* @param $targetCharset

* @return string

*/

function characet($data, $targetCharset) {

if (!empty($data)) {

$fileType = $this->fileCharset;

if (strcasecmp($fileType, $targetCharset) != 0) {

$data = mb_convert_encoding($data, $targetCharset);

//$data = iconv($fileType, $targetCharset.'//IGNORE', $data);

}

}

return $data;

}

public function exec($paramsArray) {

if (!isset ($paramsArray["method"])) {

trigger_error("No api name passed");

}

$inflector = new LtInflector;

$inflector->conf["separator"] = ".";

$requestClassName = ucfirst($inflector->camelize(substr($paramsArray["method"], 7))) . "Request";

if (!class_exists($requestClassName)) {

trigger_error("No such api: " . $paramsArray["method"]);

}

$session = isset ($paramsArray["session"]) ? $paramsArray["session"] : null;

$req = new $requestClassName;

foreach ($paramsArray as $paraKey => $paraValue) {

$inflector->conf["separator"] = "_";

$setterMethodName = $inflector->camelize($paraKey);

$inflector->conf["separator"] = ".";

$setterMethodName = "set" . $inflector->camelize($setterMethodName);

if (method_exists($req, $setterMethodName)) {

$req->$setterMethodName ($paraValue);

}

}

return $this->execute($req, $session);

}

/**

* 校验$value是否非空

* if not set ,return true;

* if is null , return true;

**/

protected function checkEmpty($value) {

if (!isset($value))

return true;

if ($value === null)

return true;

if (trim($value) === "")

return true;

return false;

}

public function rsaCheckV1($params, $rsaPublicKeyFilePath) {

$sign = $params['sign'];

$params['sign_type'] = null;

$params['sign'] = null;

return $this->verify($this->getSignContent($params), $sign, $rsaPublicKeyFilePath);

}

public function rsaCheckV2($params, $rsaPublicKeyFilePath) {

$sign = $params['sign'];

$params['sign'] = null;

return $this->verify($this->getSignContent($params), $sign, $rsaPublicKeyFilePath);

}

function verify($data, $sign, $rsaPublicKeyFilePath) {

//读取公钥文件

$pubKey = file_get_contents($rsaPublicKeyFilePath);

//转换为openssl格式密钥

$res = openssl_get_publickey($pubKey);

//调用openssl内置方法验签，返回bool值

$result = (bool)openssl_verify($data, base64_decode($sign), $res);

//释放资源

openssl_free_key($res);

return $result;

}

public function checkSignAndDecrypt($params, $rsaPublicKeyPem, $rsaPrivateKeyPem, $isCheckSign, $isDecrypt) {

$charset = $params['charset'];

$bizContent = $params['biz_content'];

if ($isCheckSign) {

if (!$this->rsaCheckV2($params, $rsaPublicKeyPem)) {

echo "
checkSign failure
";

exit;

}

}

if ($isDecrypt) {

return $this->rsaDecrypt($bizContent, $rsaPrivateKeyPem, $charset);

}

return $bizContent;

}

public function encryptAndSign($bizContent, $rsaPublicKeyPem, $rsaPrivateKeyPem, $charset, $isEncrypt, $isSign) {

// 加密，并签名

if ($isEncrypt && $isSign) {

$encrypted = $this->rsaEncrypt($bizContent, $rsaPublicKeyPem, $charset);

$sign = $this->sign($bizContent);

$response = "<?xml version=\"1.0\" encoding=\"$charset\"?>$encryptedRSA$signRSA";

return $response;

}

// 加密，不签名

if ($isEncrypt && (!$isSign)) {

$encrypted = $this->rsaEncrypt($bizContent, $rsaPublicKeyPem, $charset);

$response = "<?xml version=\"1.0\" encoding=\"$charset\"?>$encryptedRSA";

return $response;

}

// 不加密，但签名

if ((!$isEncrypt) && $isSign) {

$sign = $this->sign($bizContent);

$response = "<?xml version=\"1.0\" encoding=\"$charset\"?>$bizContent$signRSA";

return $response;

}

// 不加密，不签名

$response = "<?xml version=\"1.0\" encoding=\"$charset\"?>$bizContent";

return $response;

}

public function rsaEncrypt($data, $rsaPublicKeyPem, $charset) {

//读取公钥文件

$pubKey = file_get_contents($rsaPublicKeyPem);

//转换为openssl格式密钥

$res = openssl_get_publickey($pubKey);

$blocks = $this->splitCN($data, 0, 30, $charset);

$chrtext  = null;

$encodes  = array();

foreach ($blocks as $n => $block) {

if (!openssl_public_encrypt($block, $chrtext , $res)) {

echo "
" . openssl_error_string() . "
";

}

$encodes[] = $chrtext ;

}

$chrtext = implode(",", $encodes);

return $chrtext;

}

public function rsaDecrypt($data, $rsaPrivateKeyPem, $charset) {

//读取私钥文件

$priKey = file_get_contents($rsaPrivateKeyPem);

//转换为openssl格式密钥

$res = openssl_get_privatekey($priKey);

$decodes = explode(',', $data);

$strnull = "";

$dcyCont = "";

foreach ($decodes as $n => $decode) {

if (!openssl_private_decrypt($decode, $dcyCont, $res)) {

echo "
" . openssl_error_string() . "
";

}

$strnull .= $dcyCont;

}

return $strnull;

}

function splitCN($cont, $n = 0, $subnum, $charset) {

//$len = strlen($cont) / 3;

$arrr = array();

for ($i = $n; $i < strlen($cont); $i += $subnum) {

$res = $this->subCNchar($cont, $i, $subnum, $charset);

if (!empty ($res)) {

$arrr[] = $res;

}

}

return $arrr;

}

function subCNchar($str, $start = 0, $length, $charset = "gbk") {

if (strlen($str) <= $length) {

return $str;

}

$re['utf-8'] = "/[\x01-\x7f]|[\xc2-\xdf][\x80-\xbf]|[\xe0-\xef][\x80-\xbf]{2}|[\xf0-\xff][\x80-\xbf]{3}/";

$re['gb2312'] = "/[\x01-\x7f]|[\xb0-\xf7][\xa0-\xfe]/";

$re['gbk'] = "/[\x01-\x7f]|[\x81-\xfe][\x40-\xfe]/";

$re['big5'] = "/[\x01-\x7f]|[\x81-\xfe]([\x40-\x7e]|\xa1-\xfe])/";

preg_match_all($re[$charset], $str, $match);

$slice = join("", array_slice($match[0], $start, $length));

return $slice;

}

function parserResponseSubCode($request,$responseContent,$respObject,$format){

if ("json" == $format) {

$apiName = $request->getApiMethodName();

$rootNodeName = str_replace(".", "_", $apiName) . $this->RESPONSE_SUFFIX;

$errorNodeName=$this->ERROR_RESPONSE;

$rootIndex = strpos($responseContent, $rootNodeName);

$errorIndex = strpos($responseContent, $errorNodeName);

if($rootIndex>0){

// 内部节点对象

$rInnerObject=$respObject->$rootNodeName;

}elseif($errorIndex>0){

$rInnerObject=$respObject->$errorNodeName;

}else{

return null;

}

// 存在属性则返回对应值

if(isset($rInnerObject->sub_code)){

return $rInnerObject->sub_code;

}else{

return null;

}

}elseif("xml" == $format){

// xml格式sub_code在同一层级

return $respObject->sub_code;

}

}

function parserJSONSignData($request, $responseContent, $responseJSON) {

$signData = new SignData();

$signData->sign = $this->parserJSONSign($responseJSON);

$signData->signSourceData = $this->parserJSONSignSource($request, $responseContent);

return $signData;

}

function parserJSONSignSource($request, $responseContent) {

$apiName = $request->getApiMethodName();

$rootNodeName = str_replace(".", "_", $apiName) . $this->RESPONSE_SUFFIX;

$rootIndex = strpos($responseContent, $rootNodeName);

$errorIndex = strpos($responseContent, $this->ERROR_RESPONSE);

if ($rootIndex > 0) {

return $this->parserJSONSource($responseContent, $rootNodeName, $rootIndex);

} else if ($errorIndex > 0) {

return $this->parserJSONSource($responseContent, $this->ERROR_RESPONSE, $errorIndex);

} else {

return null;

}

}

function parserJSONSource($responseContent, $nodeName, $nodeIndex) {

$signDataStartIndex = $nodeIndex + strlen($nodeName) + 2;

$signIndex = strpos($responseContent, "\"" . $this->SIGN_NODE_NAME . "\"");

// 签名前-逗号

$signDataEndIndex = $signIndex - 1;

$indexLen = $signDataEndIndex - $signDataStartIndex;

if ($indexLen < 0) {

return null;

}

return substr($responseContent, $signDataStartIndex, $indexLen);

}

function parserJSONSign($responseJSon) {

return $responseJSon->sign;

}

function parserXMLSignData($request, $responseContent) {

$signData = new SignData();

$signData->sign = $this->parserXMLSign($responseContent);

$signData->signSourceData = $this->parserXMLSignSource($request, $responseContent);

return $signData;

}

function parserXMLSignSource($request, $responseContent) {

$apiName = $request->getApiMethodName();

$rootNodeName = str_replace(".", "_", $apiName) . $this->RESPONSE_SUFFIX;

$rootIndex = strpos($responseContent, $rootNodeName);

$errorIndex = strpos($responseContent, $this->ERROR_RESPONSE);

//$this->echoDebug("
rootNodeName:" . $rootNodeName);

//$this->echoDebug("
responseContent:

" . $responseContent . "");

if ($rootIndex > 0) {

return $this->parserXMLSource($responseContent, $rootNodeName, $rootIndex);

} else if ($errorIndex > 0) {

return $this->parserXMLSource($responseContent, $this->ERROR_RESPONSE, $errorIndex);

} else {

return null;

}

}

function parserXMLSource($responseContent, $nodeName, $nodeIndex) {

$signDataStartIndex = $nodeIndex + strlen($nodeName) + 1;

$signIndex = strpos($responseContent, "SIGN_NODE_NAME . ">");

// 签名前-逗号

$signDataEndIndex = $signIndex - 1;

$indexLen = $signDataEndIndex - $signDataStartIndex + 1;

if ($indexLen < 0) {

return null;

}

return substr($responseContent, $signDataStartIndex, $indexLen);

}

function parserXMLSign($responseContent) {

$signNodeName = "SIGN_NODE_NAME . ">";

$signEndNodeName = "" . $this->SIGN_NODE_NAME . ">";

$indexOfSignNode = strpos($responseContent, $signNodeName);

$indexOfSignEndNode = strpos($responseContent, $signEndNodeName);

if ($indexOfSignNode < 0 || $indexOfSignEndNode < 0) {

return null;

}

$nodeIndex = ($indexOfSignNode + strlen($signNodeName));

$indexLen = $indexOfSignEndNode - $nodeIndex;

if ($indexLen < 0) {

return null;

}

// 签名

return substr($responseContent, $nodeIndex, $indexLen);

}

function echoDebug($content){

if($this->debugInfo){

echo "
".$content;

}

}

}