WechatTransfer.php 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225
  1. <?php namespace App\Http\Controllers\Api;
  2. use App\Http\Controllers\Api\Api;
  3. use App\Models\Custom;
  4. use App\Facades\Servers\Logs\Log;
  5. use App\Models\CustomAmount;
  6. use App\Models\CustomAmountRecord;
  7. use Illuminate\Http\Request;
  8. use App\Servers\WechatPay\Transfer;
  9. use Kra8\Snowflake\Snowflake;
  10. use App\Facades\Servers\WechatMini\Mini;
  11. use Illuminate\Support\Facades\DB;
  12. use WeChatPay\Formatter;
  13. use WeChatPay\Crypto\AesGcm;
  14. use WeChatPay\Crypto\Rsa;
  15. /**
  16. * 微信支付接口
  17. *
  18. * @author JUN
  19. *
  20. * */
  21. class WechatTransfer extends Api{
  22. /**
  23. * 小程序微信提现 商户转账 /api/wechat_pay/transfer
  24. *
  25. * */
  26. public function transfer(Custom $Custom,CustomAmount $CustomAmount,CustomAmountRecord $CustomAmountRecord)
  27. {
  28. // 检查登录
  29. $uid = $this->checkLogin();
  30. $code = request('code','');
  31. $amount = request('amount','');
  32. if ($amount < 0.1) return json_send(['code'=>'error','msg'=>'提现失败','data'=>['error'=>'提现失败,超出最高提现额度']]);
  33. if ($amount > 200) return json_send(['code'=>'error','msg'=>'提现失败','data'=>['error'=>'提现失败,超出最高提现额度']]);
  34. // 获取余额信息
  35. $amountInfo = $CustomAmount::query()->where(['custom_uid'=>$uid])->first();
  36. if(!$amountInfo){
  37. $result = $CustomAmountRecord::query()->insert(['custom_uid'=>$uid,'insert_time'=>time(),'update_time'=>time()]);
  38. if (!$result){
  39. return json_send(['code'=>'error','msg'=>'提现失败','data'=>['error'=>'提现失败']]);
  40. }
  41. $balance = 0;
  42. }else{
  43. $balance = $amountInfo['amount'];
  44. }
  45. // 如果剩余余额不足
  46. if( $balance < $amount ) return json_send(['code'=>'error','msg'=>'余额不足','data'=>['error'=>'余额不足']]);
  47. //获取openid
  48. $resultOpenid = Mini::jscode2session($code);
  49. if (!$resultOpenid['openid']) return json_send(['code'=>'error','msg'=>'获取openid失败','data'=>$resultOpenid['error']]);
  50. $Snowflake = new Snowflake();
  51. $SnowflakeId = $Snowflake->next();
  52. $params['amount'] = $amount;
  53. $params['out_bill_no'] = $SnowflakeId;
  54. $params['openid'] = $resultOpenid['openid'];
  55. DB::beginTransaction();
  56. try {
  57. //扣除用户余额
  58. $amountUpdate = [
  59. 'amount'=>DB::raw('amount-'.$amount),
  60. 'use_amount'=>DB::raw('use_amount+'.$amount),
  61. 'update_time'=>time()
  62. ];
  63. $result = $CustomAmount::query()->where(['custom_uid'=>$uid])->update($amountUpdate);
  64. if (!$result) {
  65. return json_send(['code'=>'error','msg'=>'提现申请失败','data'=>['error'=>'扣除用户余额失败']]);
  66. }
  67. $Transfer = new Transfer();
  68. $transferResult = $Transfer->pay($params);
  69. Log::error('wechat/transfer','微信商户转账'.'返回'.json_encode($transferResult));
  70. if (!$transferResult || $transferResult['state'] !== 'WAIT_USER_CONFIRM') return json_send(['code'=>'error','msg'=>'提现申请失败','data'=>'提现申请失败']);
  71. //重新获取用户余额
  72. $balance = $CustomAmount::query()->where(['custom_uid'=>$uid])->value('amount');
  73. $data = [
  74. 'custom_uid' => $uid,
  75. 'out_bill_no' => $transferResult['out_bill_no'],
  76. 'transfer_bill_no' => $transferResult['transfer_bill_no'],
  77. 'prefix' => 2,
  78. 'amount' => $amount,
  79. 'buy_type' => 2,
  80. 'pay_type' => 1,
  81. 'balance' => $balance,
  82. 'description' => '余额提现',
  83. 'status' => 1,
  84. ];
  85. //写入余额记录
  86. $recordResult = $CustomAmountRecord->add($data);
  87. if (!$recordResult) {
  88. DB::rollBack();
  89. return json_send(['code'=>'error','msg'=>'提现申请失败','data'=>'写入余额记录失败']);
  90. }
  91. // 提交数据
  92. DB::commit();
  93. }catch (\Exception $e){
  94. DB::rollBack();
  95. return json_send(['code'=>'error','msg'=>'提现申请失败','data'=>'提现申请失败']);
  96. }
  97. $list = [
  98. 'package_info' => $transferResult['package_info'],
  99. 'out_bill_no' => $transferResult['out_bill_no'],
  100. ];
  101. return json_send(['code'=>'success','msg'=>'成功','data'=>$list]);
  102. }
  103. /**
  104. * 小程序微信商户转账回调 /api/wechat_pay/notify
  105. *
  106. * */
  107. public function notify()
  108. {
  109. Log::error('wechat/transfer_notify', '提现转账回调开始');
  110. $content = file_get_contents("php://input");
  111. if (!empty($content)) {
  112. //直接json字符串
  113. $params = $content;
  114. } elseif (!empty($_POST)) {
  115. //直接POST数据
  116. $params = $_POST;
  117. } else {
  118. $params = [];
  119. }
  120. $post_data = $params;
  121. Log::error('wechat/transfer_notify', 'post_data:' . $post_data);
  122. //获取headers参数
  123. $headers = request()->header();
  124. Log::error('wechat/transfer_notify', '微信支付回调返回headers参数:' . json_encode($headers));
  125. $inWechatpaySignature = $headers['wechatpay-signature'][0];
  126. $inWechatpayTimestamp = $headers['wechatpay-timestamp'][0];
  127. $inWechatpaySerial = $headers['wechatpay-serial'][0];
  128. $inWechatpayNonce = $headers['wechatpay-nonce'][0];
  129. $inBody = $post_data;
  130. Log::error('wechat/transfer_notify', 'wechatpay-timestamp:' . $inWechatpayTimestamp);
  131. $apiv3Key = Config('wechatpay.APIV3');// 在商户平台上设置的APIv3密钥
  132. // 根据通知的平台证书序列号,查询本地平台证书文件,
  133. $platformCertificateFilePath = Config('wechatpay.platformCertificate');
  134. $platformPublicKeyInstance = Rsa::from($platformCertificateFilePath, Rsa::KEY_TYPE_PUBLIC);
  135. try {
  136. // 检查通知时间偏移量,允许5分钟之内的偏移
  137. $timeOffsetStatus = 300 >= abs(Formatter::timestamp() - (int)$inWechatpayTimestamp);
  138. Log::error('notify_wechat_transfer', '时间偏移量:' . $timeOffsetStatus);
  139. $verifiedStatus = Rsa::verify(
  140. // 构造验签名串
  141. Formatter::joinedByLineFeed($inWechatpayTimestamp, $inWechatpayNonce, $inBody),
  142. $inWechatpaySignature,
  143. $platformPublicKeyInstance
  144. );
  145. Log::error('wechat/transfer_notify', '验签:' . $verifiedStatus.'验签inWechatpayTimestamp:' . $inWechatpayTimestamp.'验签verifiedStatus:' . $inWechatpayNonce);
  146. if ($timeOffsetStatus && $verifiedStatus) {
  147. // 转换通知的JSON文本消息为PHP Array数组
  148. $inBodyArray = (array)json_decode($inBody, true);
  149. // 使用PHP7的数据解构语法,从Array中解构并赋值变量
  150. ['resource' => [
  151. 'ciphertext' => $ciphertext,
  152. 'nonce' => $nonce,
  153. 'associated_data' => $aad
  154. ]] = $inBodyArray;
  155. // 加密文本消息解密
  156. $inBodyResource = AesGcm::decrypt($ciphertext, $apiv3Key, $nonce, $aad);
  157. // 把解密后的文本转换为PHP Array数组
  158. $inBodyResourceArray = (array)json_decode($inBodyResource, true);
  159. Log::error('wechat/transfer_notify', '打印解密后的结果:' . json_encode($inBodyResourceArray));
  160. Log::error('wechat/transfer_notify', '参数:' . $inBodyResourceArray['state'] . '订单号' . $inBodyResourceArray['out_bill_no'] . '微信支付号' . $inBodyResourceArray['transfer_bill_no']);
  161. $amountInfo = CustomAmountRecord::query()->where('out_bill_no','=',$inBodyResourceArray['out_bill_no'])->first();
  162. if (!$amountInfo) {
  163. Log::error('wechat/transfer_notify', '获取余额记录信息失败' . json_encode($amountInfo));
  164. return json_send(['code'=>'FAIL']);
  165. }
  166. if ($inBodyResourceArray['state'] == "SUCCESS") {
  167. $transfer_amount = $inBodyResourceArray['transfer_amount']/100;
  168. //更新余额记录状态
  169. $data = [
  170. 'pay_time' => time(),
  171. 'status'=>2,
  172. ];
  173. $res = CustomAmountRecord::query()->where('out_bill_no','=',$inBodyResourceArray['out_bill_no'])->update($data);
  174. Log::error('wechat/transfer_notify', '更新余额记录,snowflake_id:'.$inBodyResourceArray['out_bill_no'].';'. json_encode($res));
  175. if (!$res) {
  176. Log::error('wechat/transfer_notify', '更新余额记录失败' . json_encode($res));
  177. return json_send(['code'=>'FAIL']);
  178. }
  179. //更新用户提现成功数额
  180. $res = CustomAmount::query()->where('custom_uid','=',$amountInfo['custom_uid'])->update(['transfer_amount'=>DB::raw('transfer_amount+'.$transfer_amount)]);
  181. Log::error('wechat/transfer_notify', '更新用户提现成功数额,custom_uid:'.$amountInfo['custom_uid'].';'. json_encode($res));
  182. if (!$res) {
  183. Log::error('wechat/transfer_notify', '更新余额记录失败' . json_encode($res));
  184. return json_send(['code'=>'FAIL']);
  185. }
  186. Log::error('wechat/transfer_notify', '支付回调完成 通知返回' . json_encode($data));
  187. }elseif ($inBodyResourceArray['state'] == "FAIL"){
  188. //更新余额订单状态
  189. $data = [
  190. 'status'=>3
  191. ];
  192. $res = CustomAmountRecord::query()->where('out_bill_no','=',$inBodyResourceArray['out_bill_no'])->update($data);
  193. Log::error('wechat/transfer_notify', '更新余额记录,out_bill_no:'.$inBodyResourceArray['out_bill_no'].';'. json_encode($res));
  194. if (!$res) {
  195. Log::error('wechat/transfer_notify', '更新余额记录失败' . json_encode($res));
  196. return json_send(['code'=>'FAIL']);
  197. }
  198. //退回余额
  199. $amountUpdate = [
  200. 'amount'=>DB::raw('amount+'.$amountInfo['amount']),
  201. 'use_amount'=>DB::raw('use_amount-'.$amountInfo['amount']),
  202. 'update_time'=>time()
  203. ];
  204. $result = CustomAmount::query()->where(['custom_uid'=>$amountInfo['custom_uid']])->update($amountUpdate);
  205. if (!$result) {
  206. return json_send(['code'=>'error','msg'=>'提现失败退回余额失败','data'=>['error'=>'退回用户余额失败']]);
  207. }
  208. Log::error('wechat/transfer_notify', '回调完成 通知返回' . json_encode($amountInfo));
  209. }
  210. return json_send(['code'=>'SUCCESS']);
  211. }else{
  212. return json_send(['code'=>'FAIL']);
  213. }
  214. }catch (\Exception $e){
  215. Log::error('wechat/transfer_notify', '回调失败getMessage:' . $e->getMessage());
  216. }
  217. return json_send(['code'=>'SUCCESS']);
  218. }
  219. }