diff --git a/ymt_v3/valid.md b/ymt_v3/valid.md new file mode 100644 index 0000000..7b5058f --- /dev/null +++ b/ymt_v3/valid.md @@ -0,0 +1,1149 @@ +// File: ymt_v3/go.mod +```go +module ymt_v3 + +go 1.21 + +require github.com/tjfoc/gmsm v1.4.1 +``` + +// File: ymt_v3/types.go +```go +package ymt_v3 + +// CommonResponse 公共响应结构 +type CommonResponse struct { + Code int32 `json:"code"` + Message string `json:"message"` + Reason string `json:"reason,omitempty"` + Data *CommonData `json:"data,omitempty"` +} + +// CommonData 公共响应数据(包含加密的ciphertext) +type CommonData struct { + Ciphertext string `json:"ciphertext"` +} + +// KeyOrderRequest 获取券码请求业务参数 +type KeyOrderRequest struct { + OutBizNo string `json:"out_biz_no"` + ActivityNo string `json:"activity_no"` + Account string `json:"account,omitempty"` + NotifyURL string `json:"notify_url,omitempty"` +} + +// KeyOrderResponse 获取券码/券码查询响应业务参数 +type KeyOrderResponse struct { + OutBizNo string `json:"out_biz_no"` + TradeNo string `json:"trade_no"` + Key string `json:"key,omitempty"` + URL string `json:"url,omitempty"` + ValidBeginTime string `json:"valid_begin_time,omitempty"` + ValidEndTime string `json:"valid_end_time,omitempty"` + UsableNum uint32 `json:"usable_num"` + UsageNum uint32 `json:"usage_num"` + Status uint32 `json:"status"` + SettlementPrice float64 `json:"settlement_price,omitempty"` + Account string `json:"account,omitempty"` +} + +// KeyQueryRequest 券码查询请求业务参数 +type KeyQueryRequest struct { + OutBizNo string `json:"out_biz_no,omitempty"` + TradeNo string `json:"trade_no,omitempty"` +} + +// KeyDiscardRequest 券码作废请求业务参数 +type KeyDiscardRequest struct { + OutBizNo string `json:"out_biz_no,omitempty"` + TradeNo string `json:"trade_no,omitempty"` +} + +// KeyDiscardResponse 券码作废响应业务参数 +type KeyDiscardResponse struct { + OutBizNo string `json:"out_biz_no"` + TradeNo string `json:"trade_no"` + Status uint32 `json:"status"` +} + +// BatchOrderRequest 批量发卡请求业务参数 +type BatchOrderRequest struct { + OutBizNo string `json:"out_biz_no"` + ActivityNo string `json:"activity_no"` + Number int32 `json:"number"` + NotifyURL string `json:"notify_url,omitempty"` +} + +// BatchOrderResponse 批量发卡响应业务参数 +type BatchOrderResponse struct { + OutBizNo string `json:"out_biz_no"` + TradeNo string `json:"trade_no"` + Status string `json:"status"` +} + +// BatchQueryRequest 批量查询请求业务参数 +type BatchQueryRequest struct { + OutBizNo string `json:"out_biz_no,omitempty"` + TradeNo string `json:"trade_no,omitempty"` +} + +// BatchQueryResponse 批量查询响应业务参数 +type BatchQueryResponse struct { + OutBizNo string `json:"out_biz_no"` + TradeNo string `json:"trade_no"` + Status string `json:"status"` + DownloadURL string `json:"download_url,omitempty"` + ZipPassword string `json:"zip_password,omitempty"` +} + +// NotifyPayload 回调通知的body结构 +type NotifyPayload struct { + Data *CommonData `json:"data"` +} + +// NotifyHeader 回调通知的header +type NotifyHeader struct { + Appid string `json:"Appid"` + Timestamp string `json:"Timestamp"` + Sign string `json:"Sign"` +} +``` + +// File: ymt_v3/errors.go +```go +package ymt_v3 + +import "fmt" + +// APIError 表示API返回的业务错误 +type APIError struct { + Code int32 `json:"code"` + Message string `json:"message"` + Reason string `json:"reason,omitempty"` +} + +func (e *APIError) Error() string { + return fmt.Sprintf("API error: code=%d, message=%s, reason=%s", e.Code, e.Message, e.Reason) +} + +// IsSuccess 判断是否成功 +func (e *APIError) IsSuccess() bool { + return e.Code == 200 +} + +// NewAPIError 创建API错误 +func NewAPIError(code int32, message, reason string) *APIError { + return &APIError{ + Code: code, + Message: message, + Reason: reason, + } +} + +// SDKError SDK内部错误 +type SDKError struct { + Message string + Err error +} + +func (e *SDKError) Error() string { + if e.Err != nil { + return fmt.Sprintf("SDK error: %s: %v", e.Message, e.Err) + } + return fmt.Sprintf("SDK error: %s", e.Message) +} + +func (e *SDKError) Unwrap() error { + return e.Err +} + +// NewSDKError 创建SDK内部错误 +func NewSDKError(msg string, err error) *SDKError { + return &SDKError{Message: msg, Err: err} +} +``` + +// File: ymt_v3/crypto.go +```go +package ymt_v3 + +import ( + "bytes" + "crypto" + "crypto/aes" + "crypto/cipher" + "crypto/rand" + "crypto/rsa" + "crypto/sha256" + "crypto/x509" + "encoding/base64" + "encoding/json" + "encoding/pem" + "fmt" + "io" + "reflect" + "sort" + "strings" + "time" + + "github.com/tjfoc/gmsm/sm4" +) + +// EncryptType 加密类型 +type EncryptType string + +const ( + // EncryptTypeAES AES-ECB加密 + EncryptTypeAES EncryptType = "aes" + // EncryptTypeSM4 SM4-CBC加密 + EncryptTypeSM4 EncryptType = "sm4" +) + +// ==================== RSA签名 ==================== + +// SignWithRSA 使用RSA私钥对数据进行签名 +func SignWithRSA(signStr string, privateKeyPEM string) (string, error) { + block, _ := pem.Decode([]byte(privateKeyPEM)) + if block == nil { + return "", fmt.Errorf("failed to decode PEM private key") + } + + privateKey, err := x509.ParsePKCS8PrivateKey(block.Bytes) + if err != nil { + privateKey, err = x509.ParsePKCS1PrivateKey(block.Bytes) + if err != nil { + return "", fmt.Errorf("failed to parse private key: %v", err) + } + } + + rsaPrivateKey, ok := privateKey.(*rsa.PrivateKey) + if !ok { + return "", fmt.Errorf("not a RSA private key") + } + + h := sha256.New() + h.Write([]byte(signStr)) + hashed := h.Sum(nil) + + signature, err := rsa.SignPKCS1v15(rand.Reader, rsaPrivateKey, crypto.SHA256, hashed) + if err != nil { + return "", err + } + + return base64.StdEncoding.EncodeToString(signature), nil +} + +// VerifyWithRSA 使用RSA公钥验证签名 +func VerifyWithRSA(signStr, signature string, publicKeyPEM string) error { + block, _ := pem.Decode([]byte(publicKeyPEM)) + if block == nil { + return fmt.Errorf("failed to decode PEM public key") + } + + publicKey, err := x509.ParsePKIXPublicKey(block.Bytes) + if err != nil { + return fmt.Errorf("failed to parse public key: %v", err) + } + + rsaPublicKey, ok := publicKey.(*rsa.PublicKey) + if !ok { + return fmt.Errorf("not a RSA public key") + } + + h := sha256.New() + h.Write([]byte(signStr)) + hashed := h.Sum(nil) + + sigBytes, err := base64.StdEncoding.DecodeString(signature) + if err != nil { + return fmt.Errorf("failed to decode signature: %v", err) + } + + return rsa.VerifyPKCS1v15(rsaPublicKey, crypto.SHA256, hashed, sigBytes) +} + +// ==================== AES ECB加密 ==================== + +// AESECBEncrypt AES-ECB模式加密 +func AESECBEncrypt(plaintext []byte, key []byte) (string, error) { + block, err := aes.NewCipher(key) + if err != nil { + return "", fmt.Errorf("创建AES cipher失败: %v", err) + } + + padded := pkcs7Padding(plaintext, aes.BlockSize) + + ciphertext := make([]byte, len(padded)) + for i := 0; i < len(padded); i += aes.BlockSize { + block.Encrypt(ciphertext[i:i+aes.BlockSize], padded[i:i+aes.BlockSize]) + } + + return base64.StdEncoding.EncodeToString(ciphertext), nil +} + +// AESECBDecrypt AES-ECB模式解密 +func AESECBDecrypt(encryptedData string, key []byte) ([]byte, error) { + ciphertext, err := base64.StdEncoding.DecodeString(encryptedData) + if err != nil { + return nil, fmt.Errorf("解码失败: %v", err) + } + + block, err := aes.NewCipher(key) + if err != nil { + return nil, fmt.Errorf("创建AES cipher失败: %v", err) + } + + if len(ciphertext)%aes.BlockSize != 0 { + return nil, fmt.Errorf("密文长度不是块大小的整数倍") + } + + plaintext := make([]byte, len(ciphertext)) + for i := 0; i < len(ciphertext); i += aes.BlockSize { + block.Decrypt(plaintext[i:i+aes.BlockSize], ciphertext[i:i+aes.BlockSize]) + } + + plaintext, err = pkcs7UnPadding(plaintext) + if err != nil { + return nil, fmt.Errorf("去除填充失败: %v", err) + } + + return plaintext, nil +} + +// ==================== SM4 CBC加密 ==================== + +// SM4CBCEncrypt SM4-CBC模式加密 +// IV会前置到密文中,解密时自动提取 +func SM4CBCEncrypt(plaintext []byte, key []byte) (string, error) { + if len(key) != 16 { + return "", fmt.Errorf("SM4密钥长度必须为16字节") + } + + block, err := sm4.NewCipher(key) + if err != nil { + return "", fmt.Errorf("创建SM4 cipher失败: %v", err) + } + + padded := pkcs7Padding(plaintext, block.BlockSize()) + + iv := make([]byte, block.BlockSize()) + if _, err := io.ReadFull(rand.Reader, iv); err != nil { + return "", fmt.Errorf("生成IV失败: %v", err) + } + + mode := cipher.NewCBCEncrypter(block, iv) + ciphertext := make([]byte, len(padded)) + mode.CryptBlocks(ciphertext, padded) + + // IV前置到密文 + result := append(iv, ciphertext...) + return base64.StdEncoding.EncodeToString(result), nil +} + +// SM4CBCDecrypt SM4-CBC模式解密 +// 从密文中提取前置的IV进行解密 +func SM4CBCDecrypt(encryptedData string, key []byte) ([]byte, error) { + if len(key) != 16 { + return nil, fmt.Errorf("SM4密钥长度必须为16字节") + } + + data, err := base64.StdEncoding.DecodeString(encryptedData) + if err != nil { + return nil, fmt.Errorf("解码失败: %v", err) + } + + block, err := sm4.NewCipher(key) + if err != nil { + return nil, fmt.Errorf("创建SM4 cipher失败: %v", err) + } + + blockSize := block.BlockSize() + if len(data) < blockSize*2 { + return nil, fmt.Errorf("数据长度不足") + } + iv := data[:blockSize] + ciphertext := data[blockSize:] + + mode := cipher.NewCBCDecrypter(block, iv) + plaintext := make([]byte, len(ciphertext)) + mode.CryptBlocks(plaintext, ciphertext) + + plaintext, err = pkcs7UnPadding(plaintext) + if err != nil { + return nil, fmt.Errorf("去除填充失败: %v", err) + } + + return plaintext, nil +} + +// ==================== PKCS7填充 ==================== + +// pkcs7Padding PKCS7填充 +func pkcs7Padding(data []byte, blockSize int) []byte { + padding := blockSize - len(data)%blockSize + padText := bytes.Repeat([]byte{byte(padding)}, padding) + return append(data, padText...) +} + +// pkcs7UnPadding 去除PKCS7填充 +func pkcs7UnPadding(data []byte) ([]byte, error) { + length := len(data) + if length == 0 { + return nil, fmt.Errorf("数据为空") + } + padding := int(data[length-1]) + if padding > length || padding == 0 { + return nil, fmt.Errorf("无效的填充") + } + for i := length - padding; i < length; i++ { + if data[i] != byte(padding) { + return nil, fmt.Errorf("无效的填充") + } + } + return data[:length-padding], nil +} + +// ==================== 业务参数加密/解密 ==================== + +// EncryptBizParams 加密业务参数 +// 1. 将业务参数去掉"零"值的参数,再由小到大按照字母排序,转成json字符串得到plaintext +// 2. 使用应用key将plaintext字符串加密,得到ciphertext +func EncryptBizParams(params interface{}, key []byte, encType EncryptType) (string, error) { + plaintext, err := marshalWithoutZero(params) + if err != nil { + return "", fmt.Errorf("序列化业务参数失败: %v", err) + } + + switch encType { + case EncryptTypeAES: + return AESECBEncrypt([]byte(plaintext), key) + case EncryptTypeSM4: + return SM4CBCEncrypt([]byte(plaintext), key) + default: + return "", fmt.Errorf("不支持的加密类型: %s", encType) + } +} + +// DecryptBizParams 解密业务参数 +func DecryptBizParams(ciphertext string, key []byte, encType EncryptType) ([]byte, error) { + switch encType { + case EncryptTypeAES: + return AESECBDecrypt(ciphertext, key) + case EncryptTypeSM4: + return SM4CBCDecrypt(ciphertext, key) + default: + return nil, fmt.Errorf("不支持的加密类型: %s", encType) + } +} + +// EncryptBizParamsRaw 直接加密字节数据(用于回调验签) +func EncryptBizParamsRaw(plaintext []byte, key []byte, encType EncryptType) (string, error) { + switch encType { + case EncryptTypeAES: + return AESECBEncrypt(plaintext, key) + case EncryptTypeSM4: + return SM4CBCEncrypt(plaintext, key) + default: + return "", fmt.Errorf("不支持的加密类型: %s", encType) + } +} + +// marshalWithoutZero 将结构体序列化为JSON,去掉零值字段并按字母排序 +func marshalWithoutZero(v interface{}) (string, error) { + val := reflect.ValueOf(v) + if val.Kind() == reflect.Ptr { + val = val.Elem() + } + + if val.Kind() != reflect.Struct { + if val.Kind() == reflect.Map { + // 类型断言为 map[string]interface{} + m, ok := v.(map[string]interface{}) + if !ok { + // 尝试从 reflect 转换 + m = make(map[string]interface{}) + for _, key := range val.MapKeys() { + m[fmt.Sprintf("%v", key.Interface())] = val.MapIndex(key).Interface() + } + } + return marshalMapSorted(m) + } + data, err := json.Marshal(v) + return string(data), err + } + + result := make(map[string]interface{}) + typ := val.Type() + + for i := 0; i < val.NumField(); i++ { + field := val.Field(i) + fieldType := typ.Field(i) + + jsonTag := fieldType.Tag.Get("json") + if jsonTag == "" || jsonTag == "-" { + continue + } + name := strings.Split(jsonTag, ",")[0] + + if isZeroValue(field) { + continue + } + + result[name] = field.Interface() + } + + return marshalMapSorted(result) +} + +// marshalMapSorted 将map按键排序后序列化为JSON +func marshalMapSorted(m map[string]interface{}) (string, error) { + keys := make([]string, 0, len(m)) + for k := range m { + keys = append(keys, k) + } + sort.Strings(keys) + + var buf bytes.Buffer + buf.WriteByte('{') + for i, k := range keys { + if i > 0 { + buf.WriteByte(',') + } + keyBytes, _ := json.Marshal(k) + buf.Write(keyBytes) + buf.WriteByte(':') + valBytes, err := json.Marshal(m[k]) + if err != nil { + return "", err + } + buf.Write(valBytes) + } + buf.WriteByte('}') + + return buf.String(), nil +} + +// isZeroValue 判断reflect.Value是否为零值 +func isZeroValue(v reflect.Value) bool { + switch v.Kind() { + case reflect.String: + return v.String() == "" + case reflect.Int, reflect.Int8, reflect.Int16, reflect.Int32, reflect.Int64: + return v.Int() == 0 + case reflect.Uint, reflect.Uint8, reflect.Uint16, reflect.Uint32, reflect.Uint64: + return v.Uint() == 0 + case reflect.Float32, reflect.Float64: + return v.Float() == 0 + case reflect.Bool: + return !v.Bool() + case reflect.Slice, reflect.Map, reflect.Ptr: + return v.IsNil() + default: + return false + } +} + +// ==================== 签名相关 ==================== + +// BuildSignStr 构建签名字符串 +// 规则:app_id + timestamp + ciphertext +func BuildSignStr(appID, timestamp, ciphertext string) string { + return appID + timestamp + ciphertext +} + +// GenerateTimestamp 生成时间戳,格式 yyyy-MM-dd HH:mm:ss +func GenerateTimestamp() string { + return time.Now().Format("2006-01-02 15:04:05") +} + +// ==================== 回调验签 ==================== + +// VerifyNotifySign 验证回调通知签名 +func VerifyNotifySign(header *NotifyHeader, data interface{}, key []byte, publicKeyPEM string, encType EncryptType) error { + plaintext, err := marshalWithoutZero(data) + if err != nil { + return fmt.Errorf("序列化回调数据失败: %v", err) + } + + ciphertext, err := EncryptBizParamsRaw([]byte(plaintext), key, encType) + if err != nil { + return fmt.Errorf("加密回调数据失败: %v", err) + } + + signStr := BuildSignStr(header.Appid, header.Timestamp, ciphertext) + + return VerifyWithRSA(signStr, header.Sign, publicKeyPEM) +} +``` + +// File: ymt_v3/client.go +```go +package ymt_v3 + +import ( + "bytes" + "encoding/json" + "fmt" + "io" + "net/http" +) + +// Env 环境 +type Env string + +const ( + EnvTest Env = "test" + EnvProduct Env = "product" +) + +// 环境地址 +const ( + testBaseURL = "https://gateway.dev.cdlsxd.cn" + productBaseURL = "https://market.api.86698.cn" +) + +// ClientConfig 客户端配置 +type ClientConfig struct { + AppID string // 应用ID + PrivateKey string // 应用私钥(PEM格式) + PublicKey string // 平台公钥(PEM格式) + Key string // 业务参数加密key + EncryptType EncryptType // 加密类型:aes 或 sm4 + Env Env // 环境:test 或 product + HTTPClient *http.Client // HTTP客户端,可选 +} + +// Client SDK客户端 +type Client struct { + config *ClientConfig + httpClient *http.Client + baseURL string +} + +// NewClient 创建新的SDK客户端 +func NewClient(config *ClientConfig) (*Client, error) { + if config.AppID == "" { + return nil, fmt.Errorf("AppID不能为空") + } + if config.PrivateKey == "" { + return nil, fmt.Errorf("PrivateKey不能为空") + } + if config.PublicKey == "" { + return nil, fmt.Errorf("PublicKey不能为空") + } + if config.Key == "" { + return nil, fmt.Errorf("Key不能为空") + } + if config.EncryptType == "" { + config.EncryptType = EncryptTypeAES + } + if config.Env == "" { + config.Env = EnvTest + } + + var baseURL string + switch config.Env { + case EnvTest: + baseURL = testBaseURL + case EnvProduct: + baseURL = productBaseURL + default: + return nil, fmt.Errorf("不支持的环境: %s", config.Env) + } + + httpClient := config.HTTPClient + if httpClient == nil { + httpClient = &http.Client{} + } + + return &Client{ + config: config, + httpClient: httpClient, + baseURL: baseURL, + }, nil +} + +// doRequest 发送请求并处理响应 +func (c *Client) doRequest(path string, bizParams interface{}, result interface{}) error { + // 1. 加密业务参数 + ciphertext, err := EncryptBizParams(bizParams, []byte(c.config.Key), c.config.EncryptType) + if err != nil { + return NewSDKError("加密业务参数失败", err) + } + + // 2. 生成时间戳 + timestamp := GenerateTimestamp() + + // 3. 构建签名字符串并签名 + signStr := BuildSignStr(c.config.AppID, timestamp, ciphertext) + sign, err := SignWithRSA(signStr, c.config.PrivateKey) + if err != nil { + return NewSDKError("签名失败", err) + } + + // 4. 构建请求体 + reqBody := map[string]string{ + "ciphertext": ciphertext, + } + reqBodyBytes, err := json.Marshal(reqBody) + if err != nil { + return NewSDKError("序列化请求体失败", err) + } + + // 5. 创建HTTP请求 + url := c.baseURL + path + req, err := http.NewRequest("POST", url, bytes.NewReader(reqBodyBytes)) + if err != nil { + return NewSDKError("创建HTTP请求失败", err) + } + + // 6. 设置Header + req.Header.Set("Content-Type", "application/json") + req.Header.Set("Appid", c.config.AppID) + req.Header.Set("Timestamp", timestamp) + req.Header.Set("Sign", sign) + + // 7. 发送请求 + resp, err := c.httpClient.Do(req) + if err != nil { + return NewSDKError("发送HTTP请求失败", err) + } + defer resp.Body.Close() + + // 8. 读取响应 + respBody, err := io.ReadAll(resp.Body) + if err != nil { + return NewSDKError("读取响应失败", err) + } + + // 9. 解析公共响应 + var commonResp CommonResponse + if err := json.Unmarshal(respBody, &commonResp); err != nil { + return NewSDKError("解析响应JSON失败", err) + } + + // 10. 检查业务错误 + if commonResp.Code != 200 { + return NewAPIError(commonResp.Code, commonResp.Message, commonResp.Reason) + } + + // 11. 检查是否有加密数据 + if commonResp.Data == nil || commonResp.Data.Ciphertext == "" { + return NewSDKError("响应中没有加密数据", nil) + } + + // 12. 解密响应数据 + decrypted, err := DecryptBizParams(commonResp.Data.Ciphertext, []byte(c.config.Key), c.config.EncryptType) + if err != nil { + return NewSDKError("解密响应数据失败", err) + } + + // 13. 解析解密后的数据到结果 + if err := json.Unmarshal(decrypted, result); err != nil { + return NewSDKError("解析解密后的响应数据失败", err) + } + + return nil +} + +// ==================== API方法 ==================== + +// KeyOrder 获取券码 +// POST /openapi/v1/key/order +func (c *Client) KeyOrder(req *KeyOrderRequest) (*KeyOrderResponse, error) { + result := &KeyOrderResponse{} + if err := c.doRequest("/openapi/v1/key/order", req, result); err != nil { + return nil, err + } + return result, nil +} + +// KeyQuery 券码查询 +// POST /openapi/v1/key/query +func (c *Client) KeyQuery(req *KeyQueryRequest) (*KeyOrderResponse, error) { + result := &KeyOrderResponse{} + if err := c.doRequest("/openapi/v1/key/query", req, result); err != nil { + return nil, err + } + return result, nil +} + +// KeyDiscard 券码作废 +// POST /openapi/v1/key/discard +func (c *Client) KeyDiscard(req *KeyDiscardRequest) (*KeyDiscardResponse, error) { + result := &KeyDiscardResponse{} + if err := c.doRequest("/openapi/v1/key/discard", req, result); err != nil { + return nil, err + } + return result, nil +} + +// BatchOrder 批量发卡 +// POST /openapi/v1/key/batch_order +func (c *Client) BatchOrder(req *BatchOrderRequest) (*BatchOrderResponse, error) { + result := &BatchOrderResponse{} + if err := c.doRequest("/openapi/v1/key/batch_order", req, result); err != nil { + return nil, err + } + return result, nil +} + +// BatchQuery 批量查询 +// POST /openapi/v1/key/batch_query +func (c *Client) BatchQuery(req *BatchQueryRequest) (*BatchQueryResponse, error) { + result := &BatchQueryResponse{} + if err := c.doRequest("/openapi/v1/key/batch_query", req, result); err != nil { + return nil, err + } + return result, nil +} + +// VerifyNotify 验证回调通知 +func (c *Client) VerifyNotify(header *NotifyHeader, data interface{}) error { + return VerifyNotifySign(header, data, []byte(c.config.Key), c.config.PublicKey, c.config.EncryptType) +} + +// GetBaseURL 获取当前环境的基础URL +func (c *Client) GetBaseURL() string { + return c.baseURL +} + +// GetAppID 获取应用ID +func (c *Client) GetAppID() string { + return c.config.AppID +} + +// String 返回客户端配置的字符串表示(隐藏敏感信息) +func (c *Client) String() string { + return fmt.Sprintf("Client{AppID: %s, Env: %s, BaseURL: %s, EncryptType: %s}", + c.config.AppID, c.config.Env, c.baseURL, c.config.EncryptType) +} +``` + +// File: ymt_v3/example_test.go +```go +package ymt_v3 + +import ( + "encoding/json" + "fmt" + "testing" +) + +// 测试参数(请替换为实际值) +const ( + testAppID = "your_app_id" + testPrivateKey = `-----BEGIN PRIVATE KEY----- +your_private_key_here +-----END PRIVATE KEY-----` + testPublicKey = `-----BEGIN PUBLIC KEY----- +your_public_key_here +-----END PUBLIC KEY-----` + testKey = "your_encryption_key_16" + testActivityNo = "your_activity_no" +) + +func ExampleClient_KeyOrder() { + // 创建客户端 + client, err := NewClient(&ClientConfig{ + AppID: testAppID, + PrivateKey: testPrivateKey, + PublicKey: testPublicKey, + Key: testKey, + EncryptType: EncryptTypeAES, + Env: EnvTest, + }) + if err != nil { + fmt.Printf("创建客户端失败: %v\n", err) + return + } + + // 获取券码 + resp, err := client.KeyOrder(&KeyOrderRequest{ + OutBizNo: "order_001", + ActivityNo: testActivityNo, + Account: "18666666666", + NotifyURL: "https://notify.example.com/openapi", + }) + if err != nil { + fmt.Printf("获取券码失败: %v\n", err) + return + } + + fmt.Printf("交易号: %s\n", resp.TradeNo) + fmt.Printf("卡密: %s\n", resp.Key) + fmt.Printf("状态: %d\n", resp.Status) + + // Output: + // 交易号: 7251449503000383488 + // 卡密: aZKdU9BymzR6qGRzJM + // 状态: 1 +} + +func ExampleClient_KeyQuery() { + client, _ := NewClient(&ClientConfig{ + AppID: testAppID, + PrivateKey: testPrivateKey, + PublicKey: testPublicKey, + Key: testKey, + EncryptType: EncryptTypeAES, + Env: EnvTest, + }) + + // 按外部业务号查询 + resp, err := client.KeyQuery(&KeyQueryRequest{ + OutBizNo: "order_001", + }) + if err != nil { + fmt.Printf("查询失败: %v\n", err) + return + } + + fmt.Printf("交易号: %s\n", resp.TradeNo) + fmt.Printf("状态: %d\n", resp.Status) +} + +func ExampleClient_KeyDiscard() { + client, _ := NewClient(&ClientConfig{ + AppID: testAppID, + PrivateKey: testPrivateKey, + PublicKey: testPublicKey, + Key: testKey, + EncryptType: EncryptTypeAES, + Env: EnvTest, + }) + + // 按交易号作废 + resp, err := client.KeyDiscard(&KeyDiscardRequest{ + TradeNo: "7251449503000383488", + }) + if err != nil { + fmt.Printf("作废失败: %v\n", err) + return + } + + fmt.Printf("交易号: %s\n", resp.TradeNo) + fmt.Printf("状态: %d\n", resp.Status) +} + +func ExampleClient_BatchOrder() { + client, _ := NewClient(&ClientConfig{ + AppID: testAppID, + PrivateKey: testPrivateKey, + PublicKey: testPublicKey, + Key: testKey, + EncryptType: EncryptTypeAES, + Env: EnvTest, + }) + + // 批量发卡 + resp, err := client.BatchOrder(&BatchOrderRequest{ + OutBizNo: "batch_001", + ActivityNo: testActivityNo, + Number: 100, + NotifyURL: "https://notify.example.com/openapi", + }) + if err != nil { + fmt.Printf("批量发卡失败: %v\n", err) + return + } + + fmt.Printf("交易号: %s\n", resp.TradeNo) + fmt.Printf("状态: %s\n", resp.Status) +} + +func ExampleClient_BatchQuery() { + client, _ := NewClient(&ClientConfig{ + AppID: testAppID, + PrivateKey: testPrivateKey, + PublicKey: testPublicKey, + Key: testKey, + EncryptType: EncryptTypeAES, + Env: EnvTest, + }) + + // 查询批量任务 + resp, err := client.BatchQuery(&BatchQueryRequest{ + TradeNo: "7251449503000383499", + }) + if err != nil { + fmt.Printf("查询失败: %v\n", err) + return + } + + fmt.Printf("状态: %s\n", resp.Status) + if resp.DownloadURL != "" { + fmt.Printf("下载地址: %s\n", resp.DownloadURL) + } +} + +func TestMarshalWithoutZero(t *testing.T) { + req := KeyOrderRequest{ + OutBizNo: "order_001", + ActivityNo: "ACT20260622001", + // Account和NotifyURL为空,应该被去掉 + } + + result, err := marshalWithoutZero(req) + if err != nil { + t.Fatalf("marshalWithoutZero失败: %v", err) + } + + expected := `{"activity_no":"ACT20260622001","out_biz_no":"order_001"}` + if result != expected { + t.Errorf("期望 %s, 得到 %s", expected, result) + } +} + +func TestBuildSignStr(t *testing.T) { + appID := "123456" + timestamp := "2026-06-22 15:30:00" + ciphertext := "encrypted_data" + + signStr := BuildSignStr(appID, timestamp, ciphertext) + expected := "1234562026-06-22 15:30:00encrypted_data" + if signStr != expected { + t.Errorf("期望 %s, 得到 %s", expected, signStr) + } +} + +func TestGenerateTimestamp(t *testing.T) { + ts := GenerateTimestamp() + // 验证格式 yyyy-MM-dd HH:mm:ss + if len(ts) != 19 { + t.Errorf("时间戳格式错误: %s", ts) + } +} + +func TestEncryptDecryptAES(t *testing.T) { + key := []byte("1234567890123456") // 16字节 + plaintext := `{"out_biz_no":"order_001","activity_no":"ACT001"}` + + ciphertext, err := AESECBEncrypt([]byte(plaintext), key) + if err != nil { + t.Fatalf("加密失败: %v", err) + } + + decrypted, err := AESECBDecrypt(ciphertext, key) + if err != nil { + t.Fatalf("解密失败: %v", err) + } + + if string(decrypted) != plaintext { + t.Errorf("解密结果不匹配: 期望 %s, 得到 %s", plaintext, string(decrypted)) + } +} + +func TestEncryptDecryptSM4(t *testing.T) { + key := []byte("1234567890123456") // 16字节 + plaintext := `{"out_biz_no":"order_001","activity_no":"ACT001"}` + + ciphertext, err := SM4CBCEncrypt([]byte(plaintext), key) + if err != nil { + t.Fatalf("SM4加密失败: %v", err) + } + + decrypted, err := SM4CBCDecrypt(ciphertext, key) + if err != nil { + t.Fatalf("SM4解密失败: %v", err) + } + + if string(decrypted) != plaintext { + t.Errorf("SM4解密结果不匹配: 期望 %s, 得到 %s", plaintext, string(decrypted)) + } +} + +func TestEncryptBizParams(t *testing.T) { + key := []byte("1234567890123456") + req := KeyOrderRequest{ + OutBizNo: "order_001", + ActivityNo: "ACT20260622001", + } + + ciphertext, err := EncryptBizParams(req, key, EncryptTypeAES) + if err != nil { + t.Fatalf("加密业务参数失败: %v", err) + } + + if ciphertext == "" { + t.Fatal("加密结果为空") + } + + // 验证可以解密 + decrypted, err := DecryptBizParams(ciphertext, key, EncryptTypeAES) + if err != nil { + t.Fatalf("解密失败: %v", err) + } + + var result KeyOrderRequest + if err := json.Unmarshal(decrypted, &result); err != nil { + t.Fatalf("解析失败: %v", err) + } + + if result.OutBizNo != "order_001" { + t.Errorf("OutBizNo不匹配: 期望 order_001, 得到 %s", result.OutBizNo) + } +} + +func TestNewClient(t *testing.T) { + _, err := NewClient(&ClientConfig{ + AppID: testAppID, + PrivateKey: testPrivateKey, + PublicKey: testPublicKey, + Key: testKey, + EncryptType: EncryptTypeAES, + Env: EnvTest, + }) + if err != nil { + t.Fatalf("创建客户端失败: %v", err) + } +} + +func TestNewClientMissingFields(t *testing.T) { + tests := []struct { + name string + config *ClientConfig + wantErr bool + }{ + {"空AppID", &ClientConfig{PrivateKey: "pk", PublicKey: "pub", Key: "key"}, true}, + {"空PrivateKey", &ClientConfig{AppID: "app", PublicKey: "pub", Key: "key"}, true}, + {"空PublicKey", &ClientConfig{AppID: "app", PrivateKey: "pk", Key: "key"}, true}, + {"空Key", &ClientConfig{AppID: "app", PrivateKey: "pk", PublicKey: "pub"}, true}, + } + + for _, tt := range tests { + t.Run(tt.name, func(t *testing.T) { + _, err := NewClient(tt.config) + if (err != nil) != tt.wantErr { + t.Errorf("NewClient() error = %v, wantErr = %v", err, tt.wantErr) + } + }) + } +} + +func TestAPIError(t *testing.T) { + err := NewAPIError(401, "Signature verification failed", "INVALID_SIGNATURE") + if err.Code != 401 { + t.Errorf("Code不匹配: 期望 401, 得到 %d", err.Code) + } + if err.Message != "Signature verification failed" { + t.Errorf("Message不匹配") + } + if err.Reason != "INVALID_SIGNATURE" { + t.Errorf("Reason不匹配") + } + if err.Error() != "API error: code=401, message=Signature verification failed, reason=INVALID_SIGNATURE" { + t.Errorf("Error()不匹配: %s", err.Error()) + } + if err.IsSuccess() { + t.Error("401应该不是成功") + } +} + +func TestSDKError(t *testing.T) { + err := NewSDKError("测试错误", nil) + if err.Error() != "SDK error: 测试错误" { + t.Errorf("Error()不匹配: %s", err.Error()) + } +} +``` \ No newline at end of file