更新

2026-03-11 14:33:49 +08:00
parent 38ad60f4bb
commit 08dd9cd307
57 changed files with 9547 additions and 379 deletions
@@ -0,0 +1,99 @@
+<?php
+
+declare(strict_types=1);
+
+namespace app\adminapi\controller\order;
+
+use app\common\model\Order;
+use think\response\Json;
+
+/**
+ * 支付宝支付回调控制器
+ * Class AlipayNotifyController
+ * @package app\adminapi\controller\order
+ */
+class AlipayNotifyController
+{
+    /**
+     * @notes 支付宝异步通知
+     * @return string
+     */
+    public function notify()
+    {
+        try {
+            // 获取支付宝配置
+            $alipayConfig = config('pay.alipay');
+            
+            // 获取POST数据
+            $data = request()->post();
+            
+            // 验证签名
+            if (!$this->verifyAlipaySign($data, $alipayConfig['alipay_public_key'])) {
+                return 'fail';
+            }
+            
+            // 验证金额
+            $order = Order::where('order_no', $data['out_trade_no'])->find();
+            if (!$order) {
+                return 'fail';
+            }
+            
+            if ((float)$data['total_amount'] != (float)$order->amount) {
+                return 'fail';
+            }
+            
+            // 验证交易状态
+            if ($data['trade_status'] == 'TRADE_SUCCESS' || $data['trade_status'] == 'TRADE_FINISHED') {
+                // 更新订单状态
+                if ($order->status == 1) { // 只有待支付的订单才能更新
+                    $order->status = 2; // 已支付
+                    $order->payment_method = 'alipay';
+                    $order->payment_time = date('Y-m-d H:i:s');
+                    $order->trade_no = $data['trade_no'];
+                    $order->save();
+                }
+            }
+            
+            return 'success';
+        } catch (\Exception $e) {
+            return 'fail';
+        }
+    }
+
+    /**
+     * @notes 验证支付宝签名
+     * @param array $data
+     * @param string $publicKey
+     * @return bool
+     */
+    private function verifyAlipaySign(array $data, string $publicKey): bool
+    {
+        try {
+            // 获取签名
+            $sign = $data['sign'] ?? '';
+            unset($data['sign']);
+            unset($data['sign_type']);
+            
+            // 按键排序
+            ksort($data);
+            
+            // 构建签名字符串
+            $signStr = '';
+            foreach ($data as $key => $value) {
+                if ($value !== '' && $value !== null) {
+                    $signStr .= $key . '=' . $value . '&';
+                }
+            }
+            $signStr = rtrim($signStr, '&');
+            
+            // 验证签名
+            $publicKeyResource = openssl_pkey_get_public($publicKey);
+            $result = openssl_verify($signStr, base64_decode($sign), $publicKeyResource, OPENSSL_ALGO_SHA256);
+            openssl_free_key($publicKeyResource);
+            
+            return $result === 1;
+        } catch (\Exception $e) {
+            return false;
+        }
+    }
+}