/**
* Build input.
*
* @param Cryptor $cryptor
*
* @return array
*/
protected function build($cryptor)
{
$xml = file_get_contents('php://input');
$input = XML::parse($xml);
if (empty($_REQUEST['echostr']) && !empty($_REQUEST['encrypt_type']) && $_REQUEST['encrypt_type'] === 'aes') {
$this->encrypted = true;
$input = $cryptor->decryptMsg($_REQUEST['msg_signature'], $_REQUEST['nonce'], $_REQUEST['timestamp'], $xml);
}
/* @var array $input */
return array_merge($_REQUEST, (array) $input);
}
/**
* Build API instance.
*
* @return API
*/
public function getAPI()
{
$http = Mockery::mock(Http::class);
$http->shouldReceive('request')->andReturnUsing(function ($api, $method, $options) {
$options['body'] = XML::parse($options['body']);
return XML::build(compact('api', 'options'));
});
$merchant = new Merchant(['merchant_id' => 'testMerchantId', 'app_id' => 'wxTestAppId', 'key' => 'testKey', 'cert_path' => 'testCertPath', 'key_path' => 'testKeyPath']);
$api = Mockery::mock('EasyWeChat\\Payment\\LuckyMoney\\API[getHttp]', [$merchant]);
$api->shouldReceive('getHttp')->andReturn($http);
return $api;
}
/**
* Build API instance.
*
* @return API
*/
public function getAPI()
{
$http = Mockery::mock(Http::class);
$http->shouldReceive('post')->andReturnUsing(function ($api, $params) {
$params = XML::parse($params);
return XML::build(compact('api', 'params'));
});
$merchant = new Merchant(['fee_type' => 'CNY', 'merchant_id' => 'testMerchantId', 'app_id' => 'wxTestAppId', 'device_info' => 'testDeviceInfo', 'key' => 'testKey']);
$api = Mockery::mock('EasyWeChat\\Payment\\API[getHttp]', [$merchant]);
$api->shouldReceive('getHttp')->andReturn($http);
return $api;
}
/**
* Return the notify body from request.
*
* @return \EasyWeChat\Support\Collection
*/
public function getNotify()
{
if (!empty($this->notify)) {
return $this->notify;
}
try {
$xml = XML::parse(strval($this->request->getContent()));
} catch (\Throwable $t) {
throw new FaultException('Invalid request XML: ' . $t->getMessage(), 400);
} catch (\Exception $e) {
throw new FaultException('Invalid request XML: ' . $e->getMessage(), 400);
}
if (!is_array($xml) || empty($xml)) {
throw new FaultException('Invalid request XML.', 400);
}
return $this->notify = new Collection($xml);
}
/**
* Decrypt message.
*
* @param string $msgSignature
* @param string $nonce
* @param string $timestamp
* @param string $postXML
*
* @return array
*
* @throws Exception
*/
public function decryptMsg($msgSignature, $nonce, $timestamp, $postXML)
{
try {
$array = XML::parse($postXML);
} catch (BaseException $e) {
throw new Exception('Invalid xml.', Exception::ERROR_PARSE_XML);
}
$encrypted = $array['Encrypt'];
$signature = $this->getSHA1($this->token, $timestamp, $nonce, $encrypted);
if ($signature !== $msgSignature) {
throw new Exception('Invalid Signature.', Exception::ERROR_INVALID_SIGNATURE);
}
return XML::parse($this->decrypt($encrypted, $this->appId));
}
/**
* Parse message array from raw php input.
*
* @param string|resource $content
*
* @throws \EasyWeChat\Core\Exceptions\RuntimeException
* @throws \EasyWeChat\Encryption\EncryptionException
*
* @return array
*/
protected function parseMessageFromRequest($content)
{
$content = strval($content);
if ($this->isSafeMode()) {
if (!$this->encryptor) {
throw new RuntimeException('Safe mode Encryptor is necessary, please use Guard::setEncryptor(Encryptor $encryptor) set the encryptor instance.');
}
$message = $this->encryptor->decryptMsg($this->request->get('msg_signature'), $this->request->get('nonce'), $this->request->get('timestamp'), $content);
} else {
$message = XML::parse($content);
}
return $message;
}
/**
* Parse Response XML to array.
*
* @param string $response
*
* @return Collection
*/
protected function parseResponse($response)
{
return new Collection((array) XML::parse($response));
}
/**
* Parse message array from raw php input.
*
* @param string $content
*
* @throws \EasyWeChat\Core\Exceptions\RuntimeException
* @throws \EasyWeChat\Encryption\EncryptionException
*
* @return array
*/
protected function parseMessageFromRequest($content)
{
if ($this->isSafeMode()) {
if (!$this->encryptor) {
throw new RuntimeException('Safe mode Encryptor is necessary.');
}
$message = $this->encryptor->decryptMsg($this->request->get('msg_signature'), $this->request->get('nonce'), $this->request->get('timestamp'), $content);
} else {
$message = XML::parse($content);
}
return $message;
}
/**
* Parse Response XML to array.
*
* @param ResponseInterface $response
*
* @return \EasyWeChat\Support\Collection
*/
protected function parseResponse($response)
{
if ($response instanceof ResponseInterface) {
$response = $response->getBody();
}
return new Collection((array) XML::parse($response));
}
/**
* 初始化POST请求数据
*
* @return Collection
*/
protected function prepareInput()
{
if ($this->input instanceof Collection) {
return;
}
if (!empty($GLOBALS['HTTP_RAW_POST_DATA'])) {
$xmlInput = $GLOBALS['HTTP_RAW_POST_DATA'];
} else {
$xmlInput = file_get_contents('php://input');
}
$input = XML::parse($xmlInput);
if (!empty($_REQUEST['encrypt_type']) && $_REQUEST['encrypt_type'] === 'aes') {
$this->security = true;
$input = $this->getCrypt()->decryptMsg($_REQUEST['msg_signature'], $_REQUEST['nonce'], $_REQUEST['timestamp'], $xmlInput);
}
$this->input = new Collection(array_merge($_REQUEST, (array) $input));
}
/**
* Parse Response XML to array.
*
* @param string $response
*
* @return array
*/
protected function parseResponse($response)
{
return XML::parse($response);
}
/**
* 检验消息的真实性，并且获取解密后的明文.
* <ol>
* <li>利用收到的密文生成安全签名，进行签名验证</li>
* <li>若验证通过，则提取xml中的加密消息</li>
* <li>对消息进行解密</li>
* </ol>
*
* @param string $msgSignature 签名串，对应URL参数的msg_signature
* @param string $nonce 随机串，对应URL参数的nonce
* @param string $timestamp 时间戳 对应URL参数的timestamp
* @param string $postXML 密文，对应POST请求的数据
*
* @return array
*/
public function decryptMsg($msgSignature, $nonce, $timestamp, $postXML)
{
//提取密文
$array = XML::parse($postXML);
if (empty($array)) {
throw new Exception('Invalid xml.', self::ERROR_PARSE_XML);
}
$encrypted = $array['Encrypt'];
//验证安全签名
$signature = $this->getSHA1($this->token, $timestamp, $nonce, $encrypted);
if ($signature !== $msgSignature) {
throw new Exception('Invalid Signature.', self::ERROR_INVALID_SIGNATURE);
}
return XML::parse($this->decrypt($encrypted, $this->appId));
}