getqr

igirl-channel/app/base/api/impl/action/tmOrder.js

@@ -49,9 +49,9 @@ class TmOrderAPI extends APIBase {
         return result;
     }
     async opActionProcess(action_process, action_type, action_body, pobj, req) {
-        action_body.app = req.app;
+        // action_body.app = req.app;
         action_body.user = req.user;
-        // action_body.app = { id:2,uappKey:"201911131657",uAppId:9,appSecret:"eeb18393aade40149287b024d8ba0850"};
+        action_body.app = { id:2,uappKey:"201911131657",uAppId:9,appSecret:"eeb18393aade40149287b024d8ba0850"};
         // action_body.user = { id: 6, app_id: 2, nickname: "测试用户",channelUserId:"testUserId01" };
         var opResult = null;
         if (["subTmOrder", "getTmOrderList", "getTmOrderInfo", "getTmApplyInfo", "getTmNclList", "getNeedInfo",

igirl-channel/app/base/service/impl/dborder/orderSve.js

@@ -758,13 +758,13 @@ class OrderService extends ServiceBase {
   //获取center-channel token
   async getCenterChannelToken(app){
     var pobj={
-      "actionType":"getAppTokenByHosts",
+      "actionType":"getAppTokenByAppKey",
       "actionBody":{
           "appkey": app.uappKey,
           "secret": app.appSecret
       }
     };
-    var url = settings.centerChannelUrl() + "web/auth/accessAuth/getAppTokenByHosts";
+    var url = settings.centerChannelUrl() + "web/auth/accessAuth/getAppTokenByAppKey";
     var rtn = await this.restClient.execPost(pobj, url);
     if (!rtn || !rtn.stdout) {
       return system.getResult(null, "execPost is empty");
@@ -815,6 +815,42 @@ class OrderService extends ServiceBase {
     var result = JSON.parse(rtn.stdout);
     return result;
   }
+  async resultSign(resultData, pay_key) {//返回值进行验签
+    var rtnResult = { status: 0, msg: "SUCCESS" };
+    if (!resultData || !resultData.appid) {
+      rtnResult.status = -310;
+      rtnResult.msg = "返回值信息data为空";
+      return rtnResult;
+    }
+    resultData.key = pay_key;
+    var resultSignArr = [];
+    var keys = Object.keys(resultData).sort();
+    if (keys.length == 0) {
+      rtnResult.status = -330;
+      rtnResult.msg = "返回值参数信息为空";
+      return rtnResult;
+    }
+    for (let k = 0; k < keys.length; k++) {
+      const tKey = keys[k];
+      if (tKey != "sign" && resultData[tKey]) {
+        resultSignArr.push(tKey + "=" + resultData[tKey]);
+      }
+    }
+    if (resultSignArr.length == 0) {
+      rtnResult.status = -350;
+      rtnResult.msg = "返回值组装签名参数信息为空";
+      return rtnResult;
+    }
+    var resultSignStr = resultSignArr.join("&");
+    var resultTmpSign = md5(resultSignStr).toUpperCase();
+    delete resultData["key"];
+    if (resultData.sign != resultTmpSign) {
+      rtnResult.status = -380;
+      rtnResult.msg = "返回值签名验证失败";
+      return rtnResult;
+    }
+    return rtnResult;
+  }
   async receiveTlCallBackNotify(obj) {//接收通联支付回调通知
       if (obj  && obj.trxstatus == "0000") {
         obj.client_ip = "";