123 lines
3.2 KiB
Go
123 lines
3.2 KiB
Go
package lklsdk
|
|
|
|
import (
|
|
"context"
|
|
"crypto"
|
|
"crypto/rand"
|
|
"crypto/rsa"
|
|
"crypto/sha256"
|
|
"crypto/x509"
|
|
"encoding/base64"
|
|
"encoding/json"
|
|
"encoding/pem"
|
|
"fmt"
|
|
ran "math/rand"
|
|
"time"
|
|
|
|
"github.com/black1552/base-common/utils"
|
|
"github.com/gogf/gf/v2/os/gfile"
|
|
)
|
|
|
|
// Config 拉卡拉SDK配置
|
|
type Config struct {
|
|
AppID string `json:"app_id"`
|
|
TermNo string `json:"term_no"`
|
|
MerchantNo string `json:"merchant_no"`
|
|
SettleMerNo string `json:"settle_merchant_no"`
|
|
SettleTermNo string `json:"settle_term_no"`
|
|
AccountType string `json:"account_type"`
|
|
TransType string `json:"trans_type"`
|
|
Version string `json:"version"`
|
|
NotifyURL string `json:"notify_url"`
|
|
PublicKey string `json:"public_key"`
|
|
PrivateKey string `json:"private_key"`
|
|
SerialNo string `json:"serial_no"`
|
|
}
|
|
|
|
// Client 拉卡拉SDK客户端
|
|
type Client[T any] struct {
|
|
config *Config
|
|
response T
|
|
ctx context.Context
|
|
}
|
|
|
|
// NewClient 创建拉卡拉SDK客户端
|
|
func NewClient[T any](ctx context.Context, config *Config) *Client[T] {
|
|
return &Client[T]{
|
|
config: config,
|
|
ctx: ctx,
|
|
}
|
|
}
|
|
func (c *Client[T]) generateNonceStr() string {
|
|
const letterBytes = "abcdefghijklmnopqrstuvwxyz0123456789"
|
|
nonce := make([]byte, 12)
|
|
for i := range nonce {
|
|
nonce[i] = letterBytes[ran.Intn(len(letterBytes))]
|
|
}
|
|
return string(nonce)
|
|
}
|
|
|
|
// generateSign 生成签名
|
|
func (c *Client[T]) generateSign(request []byte) (string, error) {
|
|
// 生成随机字符串
|
|
nonceStr := c.generateNonceStr()
|
|
// 获取当前时间戳（秒）
|
|
timestamp := fmt.Sprintf("%d", time.Now().Unix())
|
|
|
|
// 构建待签名报文
|
|
signData := fmt.Sprintf("%s\n%s\n%s\n%s\n%s\n", c.config.AppID, c.config.SerialNo, timestamp, nonceStr, string(request))
|
|
|
|
// 计算签名
|
|
hashed := sha256.Sum256([]byte(signData))
|
|
|
|
privateKey, err := c.loadPrivateKey()
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
signature, err := rsa.SignPKCS1v15(rand.Reader, privateKey, crypto.SHA256, hashed[:])
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
signatureBase64 := base64.StdEncoding.EncodeToString(signature)
|
|
|
|
// 构建Authorization头
|
|
authorization := fmt.Sprintf("LKLAPI-SHA256withRSA appid=\"%s\",serial_no=\"%s\",timestamp=\"%s\",nonce_str=\"%s\",signature=\"%s\"",
|
|
c.config.AppID, c.config.SerialNo, timestamp, nonceStr, signatureBase64)
|
|
return authorization, nil
|
|
}
|
|
|
|
func (c *Client[T]) loadPrivateKey() (*rsa.PrivateKey, error) {
|
|
block, _ := pem.Decode(gfile.GetBytes(c.config.PrivateKey))
|
|
if block == nil {
|
|
return nil, fmt.Errorf("无法解码私钥PEM数据")
|
|
}
|
|
// 解析PKCS#8格式私钥
|
|
privateKey, err := x509.ParsePKCS8PrivateKey(block.Bytes)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return privateKey.(*rsa.PrivateKey), nil
|
|
}
|
|
|
|
// doRequest 发送HTTP请求
|
|
func (c *Client[T]) doRequest(url string, reqData interface{}) (*T, error) {
|
|
// 序列化为JSON
|
|
jsonData, err := json.Marshal(reqData)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("序列化请求数据失败: %v", err)
|
|
}
|
|
|
|
auth, err := c.generateSign(jsonData)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("生成签名失败: %v", err)
|
|
}
|
|
header := map[string]string{
|
|
"Authorization": auth,
|
|
"Content-Type": "application/json",
|
|
"Accept": "application/json",
|
|
}
|
|
// 设置其他必要的请求头
|
|
|
|
return utils.NewClient[T](jsonData, url, header).Post(c.ctx)
|
|
}
|