18 KiB
18 KiB
// File: xy_sh/go.mod
module xy_sh
go 1.23
require (
github.com/gofiber/fiber/v2 v2.52.6
github.com/tjfoc/gmsm v1.4.1
)
// File: xy_sh/cmd/server/main.go
package main
import (
"log"
"xy_sh/internal/config"
"xy_sh/internal/router"
)
func main() {
cfg := config.LoadConfig()
app := router.SetupRouter(cfg)
log.Printf("服务启动，监听端口: %s", cfg.ServerPort)
if err := app.Listen(":" + cfg.ServerPort); err != nil {
log.Fatalf("服务启动失败: %v", err)
}
}
// File: xy_sh/internal/config/config.go
package config
import "os"
type Config struct {
ServerPort string
SM3Salt string
SM4Key []byte
}
func LoadConfig() *Config {
port := os.Getenv("SERVER_PORT")
if port == "" {
port = "8080"
}
sm3Salt := os.Getenv("SM3_SALT")
if sm3Salt == "" {
sm3Salt = "default_sm3_salt"
}
sm4KeyStr := os.Getenv("SM4_KEY")
var sm4Key []byte
if sm4KeyStr != "" {
sm4Key = []byte(sm4KeyStr)
} else {
sm4Key = []byte("1234567890123456")
}
return &Config{
ServerPort: port,
SM3Salt: sm3Salt,
SM4Key: sm4Key,
}
}
// File: xy_sh/internal/entities/request.go
package entities
// OrderRequest 卡券/直充权益下单接口请求业务参数
type OrderRequest struct {
ActCode string `json:"actCode"` // 活动code
GoodsCode string `json:"goodsCode"` // 供应商商品编号
ActOrderNum string `json:"actOrderNum"` // 活动方订单号
Account string `json:"account,omitempty"` // 充值账号
CallbackUrl string `json:"callbackUrl,omitempty"` // 回调地址
}
// QueryRequest 订单查询接口请求业务参数
type QueryRequest struct {
ActCode string `json:"actCode"` // 活动code
OrderNo string `json:"orderNo"` // 供应商订单号
}
// WechatRechargeRequest 微信立减金订单充值接口请求业务参数
type WechatRechargeRequest struct {
ActCode string `json:"actCode"` // 活动code
OrderNo string `json:"orderNo"` // 供应商订单号
GoodsCode string `json:"goodsCode"` // 供应商商品编号
ActOrderNum string `json:"actOrderNum"` // 活动方订单号
AppId string `json:"appId"` // 公众账号ID
OpenId string `json:"openId"` // 微信用户标识
CallbackUrl string `json:"callbackUrl,omitempty"` // 回调地址
}
// CallbackRequest 充值结果通知接口回调业务参数
type CallbackRequest struct {
OrderNo string `json:"orderNo"` // 供应商订单号
ActOrderNum string `json:"actOrderNum"` // 活动方订单号
Status int `json:"status"` // 订单状态
Account string `json:"account,omitempty"` // 直充账号
CardInfo *CardInfo `json:"cardInfo,omitempty"` // 卡券信息
CouponId string `json:"couponId,omitempty"` // 微信优惠id
}
// CardInfo 卡券信息
type CardInfo struct {
CouponNo string `json:"couponNo"` // 卡号/短链
CouponCode string `json:"couponCode"` // 卡密
ExpireTime string `json:"expireTime"` // 过期时间
}
// EncryptedRequest 加密请求体
type EncryptedRequest struct {
EncryptedData string `json:"encryptedData"` // SM4加密后的业务数据
}
// File: xy_sh/internal/entities/response.go
package entities
// ApiResponse 通用API响应
type ApiResponse struct {
Code int `json:"code"` // 返回状态编码，0成功 -1失败
Msg string `json:"msg"` // 返回错误信息
Data interface{} `json:"data"` // JSON格式业务数据进行SM4加密后的字符串
}
// OrderResponse 下单接口响应业务参数
type OrderResponse struct {
OrderNo string `json:"orderNo"` // 权益订单号
CouponNo string `json:"couponNo,omitempty"` // 卡号
CouponCode string `json:"couponCode,omitempty"` // 卡密
Status int `json:"status"` // 状态
ExpireTime string `json:"expireTime,omitempty"` // 有效期
}
// QueryResponse 查询接口响应业务参数
type QueryResponse struct {
OrderNo string `json:"orderNo"` // 权益订单号
Status int `json:"status"` // 订单状态
Account string `json:"account,omitempty"` // 充值账号
CardInfo *CardInfo `json:"cardInfo,omitempty"` // 卡券信息
CouponId string `json:"couponId,omitempty"` // 优惠id
}
// WechatRechargeResponse 微信立减金充值响应业务参数
type WechatRechargeResponse struct {
OrderNo string `json:"orderNo"` // 权益订单号
Status int `json:"status"` // 订单状态
CouponId string `json:"couponId,omitempty"` // 微信优惠id
}
// File: xy_sh/internal/middleware/middleware.go
package middleware
import (
"encoding/json"
"strings"
"github.com/gofiber/fiber/v2"
"xy_sh/internal/config"
"xy_sh/pkg/crypto"
)
// VerifySign 验证签名中间件
func VerifySign(cfg *config.Config) fiber.Handler {
return func(c *fiber.Ctx) error {
timestamp := c.Get("timestamp")
sign := c.Get("sign")
if timestamp == "" || sign == "" {
return c.Status(fiber.StatusBadRequest).JSON(fiber.Map{
"code": -1,
"msg": "缺少timestamp或sign请求头",
})
}
body := c.Body()
if len(body) == 0 {
return c.Status(fiber.StatusBadRequest).JSON(fiber.Map{
"code": -1,
"msg": "请求体不能为空",
})
}
var req struct {
EncryptedData string `json:"encryptedData"`
}
if err := json.Unmarshal(body, &req); err != nil {
return c.Status(fiber.StatusBadRequest).JSON(fiber.Map{
"code": -1,
"msg": "请求体格式错误",
})
}
// 验证签名：SM3(salt + timestamp + encryptedData)
expectedSign := crypto.SM3WithSalt(timestamp+req.EncryptedData, cfg.SM3Salt)
if !strings.EqualFold(expectedSign, sign) {
return c.Status(fiber.StatusUnauthorized).JSON(fiber.Map{
"code": -1,
"msg": "签名验证失败",
})
}
decrypted, err := crypto.SM4ECBDecrypt(req.EncryptedData, cfg.SM4Key)
if err != nil {
return c.Status(fiber.StatusBadRequest).JSON(fiber.Map{
"code": -1,
"msg": "解密失败: " + err.Error(),
})
}
c.Locals("decryptedBody", decrypted)
return c.Next()
}
}
// File: xy_sh/internal/biz/biz.go
package biz
import (
"encoding/json"
"xy_sh/internal/config"
"xy_sh/internal/entities"
"xy_sh/pkg/crypto"
)
// Biz 业务逻辑层
type Biz struct {
cfg *config.Config
}
// NewBiz 创建业务逻辑实例
func NewBiz(cfg *config.Config) *Biz {
return &Biz{cfg: cfg}
}
// EncryptResponse 加密响应数据
func (b *Biz) EncryptResponse(data interface{}) (string, error) {
jsonBytes, err := json.Marshal(data)
if err != nil {
return "", err
}
return crypto.SM4ECBEncrypt(jsonBytes, b.cfg.SM4Key)
}
// DecryptRequest 解密请求数据
func (b *Biz) DecryptRequest(encryptedData string) ([]byte, error) {
return crypto.SM4ECBDecrypt(encryptedData, b.cfg.SM4Key)
}
// ProcessOrder 处理下单请求
func (b *Biz) ProcessOrder(req *entities.OrderRequest) (*entities.OrderResponse, error) {
return &entities.OrderResponse{
OrderNo: "HM" + generateOrderNo(),
Status: 0,
ExpireTime: "2025-12-31 23:59:59",
}, nil
}
// ProcessQuery 处理订单查询请求
func (b *Biz) ProcessQuery(req *entities.QueryRequest) (*entities.QueryResponse, error) {
return &entities.QueryResponse{
OrderNo: req.OrderNo,
Status: 0,
}, nil
}
// ProcessWechatRecharge 处理微信立减金充值请求
func (b *Biz) ProcessWechatRecharge(req *entities.WechatRechargeRequest) (*entities.WechatRechargeResponse, error) {
return &entities.WechatRechargeResponse{
OrderNo: req.OrderNo,
Status: 0,
}, nil
}
// ProcessCallback 处理回调通知
func (b *Biz) ProcessCallback(req *entities.CallbackRequest) error {
return nil
}
// generateOrderNo 生成订单号（示例）
func generateOrderNo() string {
return "0000000000000000"
}
// File: xy_sh/internal/service/service.go
package service
import (
"encoding/json"
"github.com/gofiber/fiber/v2"
"xy_sh/internal/biz"
"xy_sh/internal/config"
"xy_sh/internal/entities"
)
// Service 服务层
type Service struct {
biz *biz.Biz
cfg *config.Config
}
// NewService 创建服务实例
func NewService(cfg *config.Config) *Service {
return &Service{
biz: biz.NewBiz(cfg),
cfg: cfg,
}
}
// Order 卡券/直充权益下单接口
func (s *Service) Order(c *fiber.Ctx) error {
decrypted := c.Locals("decryptedBody").([]byte)
var req entities.OrderRequest
if err := json.Unmarshal(decrypted, &req); err != nil {
return c.JSON(entities.ApiResponse{
Code: -1,
Msg: "业务参数解析失败: " + err.Error(),
})
}
resp, err := s.biz.ProcessOrder(&req)
if err != nil {
return c.JSON(entities.ApiResponse{
Code: -1,
Msg: err.Error(),
})
}
encryptedData, err := s.biz.EncryptResponse(resp)
if err != nil {
return c.JSON(entities.ApiResponse{
Code: -1,
Msg: "响应加密失败: " + err.Error(),
})
}
return c.JSON(entities.ApiResponse{
Code: 0,
Msg: "请求成功",
Data: encryptedData,
})
}
// Query 卡券/直充/微信立减金订单查询接口
func (s *Service) Query(c *fiber.Ctx) error {
decrypted := c.Locals("decryptedBody").([]byte)
var req entities.QueryRequest
if err := json.Unmarshal(decrypted, &req); err != nil {
return c.JSON(entities.ApiResponse{
Code: -1,
Msg: "业务参数解析失败: " + err.Error(),
})
}
resp, err := s.biz.ProcessQuery(&req)
if err != nil {
return c.JSON(entities.ApiResponse{
Code: -1,
Msg: err.Error(),
})
}
encryptedData, err := s.biz.EncryptResponse(resp)
if err != nil {
return c.JSON(entities.ApiResponse{
Code: -1,
Msg: "响应加密失败: " + err.Error(),
})
}
return c.JSON(entities.ApiResponse{
Code: 0,
Msg: "请求成功",
Data: encryptedData,
})
}
// WechatRecharge 微信立减金订单充值接口
func (s *Service) WechatRecharge(c *fiber.Ctx) error {
decrypted := c.Locals("decryptedBody").([]byte)
var req entities.WechatRechargeRequest
if err := json.Unmarshal(decrypted, &req); err != nil {
return c.JSON(entities.ApiResponse{
Code: -1,
Msg: "业务参数解析失败: " + err.Error(),
})
}
resp, err := s.biz.ProcessWechatRecharge(&req)
if err != nil {
return c.JSON(entities.ApiResponse{
Code: -1,
Msg: err.Error(),
})
}
encryptedData, err := s.biz.EncryptResponse(resp)
if err != nil {
return c.JSON(entities.ApiResponse{
Code: -1,
Msg: "响应加密失败: " + err.Error(),
})
}
return c.JSON(entities.ApiResponse{
Code: 0,
Msg: "请求成功",
Data: encryptedData,
})
}
// Callback 卡券/直充/微信立减金充值结果通知接口
func (s *Service) Callback(c *fiber.Ctx) error {
decrypted := c.Locals("decryptedBody").([]byte)
var req entities.CallbackRequest
if err := json.Unmarshal(decrypted, &req); err != nil {
return c.Status(fiber.StatusBadRequest).SendString("参数解析失败")
}
if err := s.biz.ProcessCallback(&req); err != nil {
return c.Status(fiber.StatusInternalServerError).SendString(err.Error())
}
return c.SendString("ok")
}
// File: xy_sh/internal/router/router.go
package router
import (
"github.com/gofiber/fiber/v2"
"xy_sh/internal/config"
"xy_sh/internal/middleware"
"xy_sh/internal/service"
)
// SetupRouter 设置路由
func SetupRouter(cfg *config.Config) *fiber.App {
app := fiber.New()
svc := service.NewService(cfg)
api := app.Group("/api", middleware.VerifySign(cfg))
{
api.Post("/order", svc.Order)
api.Post("/query", svc.Query)
api.Post("/wechat/recharge", svc.WechatRecharge)
api.Post("/callback", svc.Callback)
}
return app
}
// File: xy_sh/internal/test/example.go
package test
import (
"bytes"
"encoding/json"
"fmt"
"io"
"net/http"
"time"
"xy_sh/pkg/crypto"
)
const (
sm3Salt = "your_sm3_salt"
sm4Key = "1234567890123456"
)
// APIClient API客户端示例
type APIClient struct {
BaseURL string
SM3Salt string
SM4Key []byte
}
// NewAPIClient 创建API客户端
func NewAPIClient(baseURL string) *APIClient {
return &APIClient{
BaseURL: baseURL,
SM3Salt: sm3Salt,
SM4Key: []byte(sm4Key),
}
}
// EncryptAndSign 加密业务数据并生成签名
func (c *APIClient) EncryptAndSign(bizData interface{}) (timestamp string, encryptedData string, sign string, err error) {
jsonBytes, err := json.Marshal(bizData)
if err != nil {
return "", "", "", fmt.Errorf("序列化失败: %v", err)
}
encryptedData, err = crypto.SM4ECBEncrypt(jsonBytes, c.SM4Key)
if err != nil {
return "", "", "", fmt.Errorf("加密失败: %v", err)
}
timestamp = fmt.Sprintf("%d", time.Now().UnixMilli())
sign = crypto.SM3WithSalt(timestamp+encryptedData, c.SM3Salt)
return timestamp, encryptedData, sign, nil
}
// SendRequest 发送请求
func (c *APIClient) SendRequest(path string, bizData interface{}) (map[string]interface{}, error) {
timestamp, encryptedData, sign, err := c.EncryptAndSign(bizData)
if err != nil {
return nil, err
}
reqBody := map[string]string{
"encryptedData": encryptedData,
}
reqBytes, _ := json.Marshal(reqBody)
req, err := http.NewRequest("POST", c.BaseURL+path, bytes.NewReader(reqBytes))
if err != nil {
return nil, fmt.Errorf("创建请求失败: %v", err)
}
req.Header.Set("Content-Type", "application/json")
req.Header.Set("timestamp", timestamp)
req.Header.Set("sign", sign)
client := &http.Client{Timeout: 30 * time.Second}
resp, err := client.Do(req)
if err != nil {
return nil, fmt.Errorf("请求失败: %v", err)
}
defer resp.Body.Close()
respBytes, err := io.ReadAll(resp.Body)
if err != nil {
return nil, fmt.Errorf("读取响应失败: %v", err)
}
var result map[string]interface{}
if err := json.Unmarshal(respBytes, &result); err != nil {
return nil, fmt.Errorf("解析响应失败: %v", err)
}
return result, nil
}
// ExampleOrder 下单接口示例
func ExampleOrder() {
client := NewAPIClient("http://localhost:8080")
bizData := map[string]interface{}{
"actCode": "ACT001",
"goodsCode": "123456",
"actOrderNum": "00001",
"account": "19912345678",
"callbackUrl": "https://xxx/notice",
}
result, err := client.SendRequest("/api/order", bizData)
if err != nil {
fmt.Printf("下单失败: %v\n", err)
return
}
fmt.Printf("下单响应: %+v\n", result)
if data, ok := result["data"].(string); ok && data != "" {
decrypted, err := crypto.SM4ECBDecrypt(data, client.SM4Key)
if err == nil {
fmt.Printf("解密后数据: %s\n", string(decrypted))
}
}
}
// ExampleQuery 查询接口示例
func ExampleQuery() {
client := NewAPIClient("http://localhost:8080")
bizData := map[string]interface{}{
"actCode": "FBG6vdYqGE4mGX7EH/woEg==",
"orderNo": "HM1757046717684000102707339840b23222",
}
result, err := client.SendRequest("/api/query", bizData)
if err != nil {
fmt.Printf("查询失败: %v\n", err)
return
}
fmt.Printf("查询响应: %+v\n", result)
}
// ExampleWechatRecharge 微信立减金充值示例
func ExampleWechatRecharge() {
client := NewAPIClient("http://localhost:8080")
bizData := map[string]interface{}{
"actCode": "FBG6vdYqGE4mGX7EH/woEg==",
"goodsCode": "0001",
"actOrderNum": "0001",
"openId": "0001",
"appId": "00001",
}
result, err := client.SendRequest("/api/wechat/recharge", bizData)
if err != nil {
fmt.Printf("充值失败: %v\n", err)
return
}
fmt.Printf("充值响应: %+v\n", result)
}
// ExampleCallback 回调通知示例
func ExampleCallback() {
client := NewAPIClient("http://localhost:8080")
bizData := map[string]interface{}{
"orderNo": "HM202509291010001",
"actOrderNum": "XY2025092910100001",
"status": 3,
"account": "19912345678",
}
result, err := client.SendRequest("/api/callback", bizData)
if err != nil {
fmt.Printf("回调失败: %v\n", err)
return
}
fmt.Printf("回调响应: %+v\n", result)
}
// File: xy_sh/pkg/crypto/crypto.go
package crypto
import (
"bytes"
"encoding/base64"
"encoding/hex"
"fmt"
"github.com/tjfoc/gmsm/sm3"
"github.com/tjfoc/gmsm/sm4"
)
// SM4ECBEncrypt SM4-ECB模式加密
func SM4ECBEncrypt(plaintext []byte, key []byte) (string, error) {
if len(key) != 16 {
return "", fmt.Errorf("SM4密钥长度必须为16字节")
}
block, err := sm4.NewCipher(key)
if err != nil {
return "", fmt.Errorf("创建SM4 cipher失败: %v", err)
}
padded := pkcs7Padding(plaintext, block.BlockSize())
ciphertext := make([]byte, len(padded))
for i := 0; i < len(padded); i += block.BlockSize() {
block.Encrypt(ciphertext[i:i+block.BlockSize()], padded[i:i+block.BlockSize()])
}
return base64.StdEncoding.EncodeToString(ciphertext), nil
}
// SM4ECBDecrypt SM4-ECB模式解密
func SM4ECBDecrypt(encryptedData string, key []byte) ([]byte, error) {
if len(key) != 16 {
return nil, fmt.Errorf("SM4密钥长度必须为16字节")
}
ciphertext, err := base64.StdEncoding.DecodeString(encryptedData)
if err != nil {
return nil, fmt.Errorf("base64解码失败: %v", err)
}
block, err := sm4.NewCipher(key)
if err != nil {
return nil, fmt.Errorf("创建SM4 cipher失败: %v", err)
}
blockSize := block.BlockSize()
if len(ciphertext)%blockSize != 0 {
return nil, fmt.Errorf("密文长度不是块大小的整数倍")
}
plaintext := make([]byte, len(ciphertext))
for i := 0; i < len(ciphertext); i += blockSize {
block.Decrypt(plaintext[i:i+blockSize], ciphertext[i:i+blockSize])
}
plaintext, err = pkcs7UnPadding(plaintext)
if err != nil {
return nil, fmt.Errorf("去除填充失败: %v", err)
}
return plaintext, nil
}
// SM3WithSalt 带盐的SM3哈希计算
// 对应Java的 SmUtil.sm3WithSalt(saltBytes).digestHex(data)
// 实现方式：SM3(salt + data)，输出十六进制字符串
func SM3WithSalt(data string, salt string) string {
h := sm3.New()
h.Write([]byte(salt))
h.Write([]byte(data))
return hex.EncodeToString(h.Sum(nil))
}
// SM3Hash 计算SM3哈希值
func SM3Hash(data []byte) string {
return hex.EncodeToString(sm3.Sm3Sum(data))
}
// pkcs7Padding PKCS7填充
func pkcs7Padding(data []byte, blockSize int) []byte {
padding := blockSize - len(data)%blockSize
padText := bytes.Repeat([]byte{byte(padding)}, padding)
return append(data, padText...)
}
// pkcs7UnPadding 去除PKCS7填充
func pkcs7UnPadding(data []byte) ([]byte, error) {
length := len(data)
if length == 0 {
return nil, fmt.Errorf("数据为空")
}
padding := int(data[length-1])
if padding > length || padding == 0 {
return nil, fmt.Errorf("无效的填充")
}
for i := length - padding; i < length; i++ {
if data[i] != byte(padding) {
return nil, fmt.Errorf("无效的填充")
}
}
return data[:length-padding], nil
}