From bf43947130c6a2cc6be049497b673ba0ef0a8d51 Mon Sep 17 00:00:00 2001
From: renzhiyuan <465386466@qq.com>
Date: Thu, 23 Jul 2026 18:42:15 +0800
Subject: [PATCH] =?UTF-8?q?=E6=B7=BB=E5=8A=A0=E6=96=87=E4=BB=B6:=20xy=5Fsh?=
 =?UTF-8?q?/internal/service/service.go?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 xy_sh/internal/service/service.go | 177 ++++++++++++++++++++++++++++++
 1 file changed, 177 insertions(+)
 create mode 100644 xy_sh/internal/service/service.go

diff --git a/xy_sh/internal/service/service.go b/xy_sh/internal/service/service.go
new file mode 100644
index 0000000..a3d0e56
--- /dev/null
+++ b/xy_sh/internal/service/service.go
@@ -0,0 +1,177 @@
+package service
+
+import (
+	"encoding/json"
+	"log"
+
+	"xy_sh/internal/biz"
+	"xy_sh/internal/config"
+	"xy_sh/internal/entities"
+	"xy_sh/pkg/crypto"
+
+	"github.com/gofiber/fiber/v2"
+)
+
+// RegisterRoutes 注册所有路由
+func RegisterRoutes(app *fiber.App, cfg *config.Config) {
+	b := biz.NewBiz()
+
+	// 接口1：卡券/直充权益下单
+	app.Post("/api/order/create", handleWithDecrypt(cfg, b, func(reqBytes []byte) (interface{}, error) {
+		var bizReq entities.OrderCreateBizReq
+		if err := json.Unmarshal(reqBytes, &bizReq); err != nil {
+			return nil, err
+		}
+		return b.CreateOrder(&bizReq)
+	}))
+
+	// 接口2：卡券/直充/微信立减金订单查询
+	app.Post("/api/order/query", handleWithDecrypt(cfg, b, func(reqBytes []byte) (interface{}, error) {
+		var bizReq entities.OrderQueryBizReq
+		if err := json.Unmarshal(reqBytes, &bizReq); err != nil {
+			return nil, err
+		}
+		return b.QueryOrder(&bizReq)
+	}))
+
+	// 接口3：微信立减金订单充值
+	app.Post("/api/order/recharge", handleWithDecrypt(cfg, b, func(reqBytes []byte) (interface{}, error) {
+		var bizReq entities.WechatRechargeBizReq
+		if err := json.Unmarshal(reqBytes, &bizReq); err != nil {
+			return nil, err
+		}
+		return b.WechatRecharge(&bizReq)
+	}))
+
+	// 接口4：卡券/直充/微信立减金充值结果通知接口（接收供应商回调）
+	app.Post("/api/callback/notify", handleCallback(cfg, b))
+}
+
+// handleWithDecrypt 通用处理：验证签名 -> 解密 -> 执行业务 -> 加密响应
+func handleWithDecrypt(cfg *config.Config, b biz.Biz, handler func([]byte) (interface{}, error)) fiber.Handler {
+	return func(c *fiber.Ctx) error {
+		// 1. 验证签名
+		timestamp := c.Get("timestamp")
+		sign := c.Get("sign")
+		if timestamp == "" || sign == "" {
+			return c.JSON(entities.ApiResponse{
+				Code: -1,
+				Msg:  "缺少timestamp或sign",
+			})
+		}
+
+		// 2. 获取加密数据
+		var reqBody struct {
+			EncryptedData string `json:"encryptedData"`
+		}
+		if err := c.BodyParser(&reqBody); err != nil {
+			return c.JSON(entities.ApiResponse{
+				Code: -1,
+				Msg:  "请求体解析失败",
+			})
+		}
+
+		// 3. 验证SM3签名：sign = SM3(salt + timestamp + encryptedData)
+		expectedSign := crypto.SM3WithSalt(cfg.SM3Salt, timestamp+reqBody.EncryptedData)
+		if expectedSign != sign {
+			log.Printf("签名验证失败: expected=%s, got=%s", expectedSign, sign)
+			return c.JSON(entities.ApiResponse{
+				Code: -1,
+				Msg:  "签名验证失败",
+			})
+		}
+
+		// 4. SM4解密业务数据
+		bizData, err := crypto.SM4ECBDecrypt(reqBody.EncryptedData, cfg.SM4Key)
+		if err != nil {
+			log.Printf("SM4解密失败: %v", err)
+			return c.JSON(entities.ApiResponse{
+				Code: -1,
+				Msg:  "数据解密失败",
+			})
+		}
+
+		// 5. 执行业务逻辑
+		result, err := handler(bizData)
+		if err != nil {
+			log.Printf("业务处理失败: %v", err)
+			return c.JSON(entities.ApiResponse{
+				Code: -1,
+				Msg:  err.Error(),
+			})
+		}
+
+		// 6. 加密响应数据
+		respBytes, err := json.Marshal(result)
+		if err != nil {
+			return c.JSON(entities.ApiResponse{
+				Code: -1,
+				Msg:  "响应序列化失败",
+			})
+		}
+
+		encryptedResp, err := crypto.SM4ECBEncrypt(respBytes, cfg.SM4Key)
+		if err != nil {
+			return c.JSON(entities.ApiResponse{
+				Code: -1,
+				Msg:  "响应加密失败",
+			})
+		}
+
+		return c.JSON(entities.ApiResponse{
+			Code: 0,
+			Msg:  "请求成功",
+			Data: encryptedResp,
+		})
+	}
+}
+
+// handleCallback 处理供应商回调通知
+func handleCallback(cfg *config.Config, b biz.Biz) fiber.Handler {
+	return func(c *fiber.Ctx) error {
+		// 1. 验证签名
+		timestamp := c.Get("timestamp")
+		sign := c.Get("sign")
+		if timestamp == "" || sign == "" {
+			return c.Status(400).SendString("missing auth headers")
+		}
+
+		// 2. 获取加密数据
+		var reqBody struct {
+			EncryptedData string `json:"encryptedData"`
+		}
+		if err := c.BodyParser(&reqBody); err != nil {
+			return c.Status(400).SendString("invalid body")
+		}
+
+		// 3. 验证SM3签名
+		expectedSign := crypto.SM3WithSalt(cfg.SM3Salt, timestamp+reqBody.EncryptedData)
+		if expectedSign != sign {
+			log.Printf("回调签名验证失败: expected=%s, got=%s", expectedSign, sign)
+			return c.Status(400).SendString("sign verification failed")
+		}
+
+		// 4. SM4解密业务数据
+		bizData, err := crypto.SM4ECBDecrypt(reqBody.EncryptedData, cfg.SM4Key)
+		if err != nil {
+			log.Printf("回调数据SM4解密失败: %v", err)
+			return c.Status(400).SendString("decrypt failed")
+		}
+
+		// 5. 解析回调业务参数
+		var callbackReq entities.CallbackNotifyBizReq
+		if err := json.Unmarshal(bizData, &callbackReq); err != nil {
+			log.Printf("回调数据解析失败: %v", err)
+			return c.Status(400).SendString("parse failed")
+		}
+
+		// 6. 处理回调业务
+		if err := b.ProcessCallback(&callbackReq); err != nil {
+			log.Printf("回调处理失败: %v", err)
+			return c.Status(500).SendString("process failed")
+		}
+
+		// 7. 返回成功（必须返回200且内容为ok）
+		return c.Status(200).SendString("ok")
+	}
+}
\ No newline at end of file