商户 API 对接文档

const crypto = require('crypto');

function generateSign(params, secretKey) {
    // 1. 过滤 sign 字段和空值
    const filtered = {};
    for (const [key, value] of Object.entries(params)) {
        if (key !== 'sign' && value !== '' && value !== null && value !== undefined) {
            filtered[key] = value;
        }
    }
    
    // 2. 按键名 ASCII 排序
    const sortedKeys = Object.keys(filtered).sort();
    
    // 3. 拼接字符串
    const stringA = sortedKeys.map(key => `${key}=${filtered[key]}`).join('&');
    const stringSignTemp = `${stringA}&key=${secretKey}`;
    
    // 4. MD5加密并转小写
    const sign = crypto.createHash('md5')
        .update(stringSignTemp)
        .digest('hex')
        .toLowerCase();
    
    return sign;
}

// 使用示例
const params = {
    mch_id: '1001',
    amount: '100.00',
    out_trade_no: 'ORDER123',
    pay_type: 'ALIPAY',
    notify_url: 'https://your-domain.com/notify'
};

const secretKey = 'YOUR_SECRET_KEY';
const sign = generateSign(params, secretKey);
console.log('Sign:', sign);

curl -X POST "https://api.1117.xin/api/v1/gateway/create-order" \
  -H "Content-Type: application/json" \
  -d '{
    "mch_id": "1001",
    "out_trade_no": "ORDER_20240325143045",
    "amount": "100.00",
    "pay_type": "ALIPAY",
    "notify_url": "https://your-domain.com/pay/notify",
    "sign": "c3e5..."
  }'

{
  "code": 200,
  "message": "success",
  "data": {
    "sys_trade_no": "S202403251430451234",
    "pay_url": "https://p.1117.fun/cashier/S202403251430451234"
  }
}

success

const express = require('express');
const crypto = require('crypto');
const app = express();

app.use(express.json());

// 回调接收端点
app.post('/pay/notify', (req, res) => {
    const payload = req.body;
    const receivedSign = payload.sign;
    
    // 1. 验证签名（重要！防止伪造回调）
    const calculatedSign = generateSign(payload, 'YOUR_SECRET_KEY');
    if (receivedSign !== calculatedSign) {
        console.error('签名验证失败');
        return res.status(400).send('Invalid signature');
    }
    
    // 2. 验证订单状态
    if (payload.status === 'PAID') {
        // 3. 处理业务逻辑（给用户加余额等）
        // 注意：使用 payload.amount 而不是 payload.actual_amount
        const orderAmount = payload.amount;
        const outTradeNo = payload.out_trade_no;
        
        // TODO: 在这里更新您的数据库，给用户加余额
        console.log(`订单 ${outTradeNo} 支付成功，金额：${orderAmount}`);
        
        // 4. 必须返回 success 字符串
        return res.send('success');
    }
    
    res.status(400).send('Invalid status');
});

function generateSign(params, secretKey) {
    const filtered = {};
    for (const [key, value] of Object.entries(params)) {
        if (key !== 'sign' && value !== '' && value !== null) {
            filtered[key] = value;
        }
    }
    const sortedKeys = Object.keys(filtered).sort();
    const stringA = sortedKeys.map(key => `${key}=${filtered[key]}`).join('&');
    const stringSignTemp = `${stringA}&key=${secretKey}`;
    return crypto.createHash('md5').update(stringSignTemp).digest('hex').toLowerCase();
}

app.listen(8080, () => console.log('Webhook server is listening on port 8080')); // 配置您的服务端口

<script setup lang="ts">
import { ref, computed } from 'vue';
import api from '@/utils/request';

// 用户身份与选择状态
const payerName = ref('张三');
const paymentType = ref('ALIPAY'); // 用户选择支付宝作为当前通道
const payerAccount = ref('');

// 建议：从服务端拉取用户在商户端提前绑定的钱包白名单
const userWallets = ref([
    { type: 'ALIPAY', account: 'my_alipay_acc', accountName: '张三' },
    { type: 'WECHAT', account: 'wx_123456', accountName: '张三' }
]);

// 动态筛选出选中类型的对应预绑账户
const filteredUserWallets = computed(() => {
    return userWallets.value.filter(m => m.type === paymentType.value);
});

async function handleSubmitOrder() {
    if (!payerAccount.value) return alert('请选择实名绑定的付款账户');

    // 发起创建订单请求，并将选定的账号参数透传给服务端，再由服务端调用API
    await api.post('/api/recharge/create', {
        amount: 100,
        payerName: payerName.value,
        payerAccount: payerAccount.value
    });
}
</script>

<?php

/**
 * 创建带有实名验证的支付订单
 */
function createRealNameOrder($mchId, $key, $orderNo, $amount, $payerName, $payerAccount) {
    // 基础下单参数
    $params = [
        'mch_id' => $mchId,
        'out_trade_no' => $orderNo,
        'amount' => strval(number_format($amount, 2, '.', '')),
        'pay_type' => 'ALIPAY',
        'notify_url' => 'https://your-domain.com/pay/notify',
        
        //附加实名验证参数
        'payer_name' => $payerName,       // 必须与用户在支付平台实名的姓名一致
        'payer_account' => $payerAccount  // 必须与用户在支付平台的收付款账号一致
    ];

    // 生成签名 (去除空值/排完序拼装字符串 + key 的 md5)
    $params['sign'] = generateSign($params, $key);
    
    // 发起 HTTP 请求
    $ch = curl_init('https://api.1117.xin/api/v1/gateway/create-order');
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($params));
    curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json']);
    
    $response = curl_exec($ch);
    curl_close($ch);
    
    return json_decode($response, true);
}

// 商户后端接收到前端传来的实名认证信息后进行调用
$result = createRealNameOrder(
    '10001', 
    'your_secret_key_here', 
    'ORDER_' . time(), 
    100.00, 
    $_POST['payerName'], 
    $_POST['payerAccount']
);

if ($result['statusCode'] === 200) {
    echo "下单成功，请重定向至收银台: " . $result['data']['payment_url'];
} else {
    echo "下单失败: " . $result['message'];
}

?>