/**
* Decode and verify a cookie.
*/
function decode_cookie($cookie, $key, $sep = '.')
{
$tokens = explode($sep, $cookie);
$signature = array_pop($tokens);
$timestamp = array_pop($tokens);
$value = implode($sep, $tokens);
$is_compressed = false;
if (verify_signature($key, $value . $sep . $timestamp, $signature)) {
if ($value[0] == '.') {
$value = substr($value, 1);
$is_compressed = true;
}
$value = urlsafe_b64decode($value);
if ($is_compressed) {
$value = zlib_decode($value);
}
return json_decode($value);
}
return null;
}
{
$pub_key_contents = file_get_contents($pub_key_path);
// php 5.4.8 以上，第四个参数可用常量 OPENSSL_ALGO_SHA256
return openssl_verify($raw_data, base64_decode($signature), $pub_key_contents, 'sha256');
}
$raw_data = file_get_contents('php://input');
// 示例
// $raw_data = '{"id":"evt_eYa58Wd44Glerl8AgfYfd1sL","created":1434368075,"livemode":true,"type":"charge.succeeded","data":{"object":{"id":"ch_bq9IHKnn6GnLzsS0swOujr4x","object":"charge","created":1434368069,"livemode":true,"paid":true,"refunded":false,"app":"app_vcPcqDeS88ixrPlu","channel":"wx","order_no":"2015d019f7cf6c0d","client_ip":"140.227.22.72","amount":100,"amount_settle":0,"currency":"cny","subject":"An Apple","body":"A Big Red Apple","extra":{},"time_paid":1434368074,"time_expire":1434455469,"time_settle":null,"transaction_no":"1014400031201506150354653857","refunds":{"object":"list","url":"/v1/charges/ch_bq9IHKnn6GnLzsS0swOujr4x/refunds","has_more":false,"data":[]},"amount_refunded":0,"failure_code":null,"failure_msg":null,"metadata":{},"credential":{},"description":null}},"object":"event","pending_webhooks":0,"request":"iar_Xc2SGjrbdmT0eeKWeCsvLhbL"}';
$headers = \Pingpp\Util\Util::getRequestHeaders();
// 签名在头部信息的 x-pingplusplus-signature 字段
$signature = isset($headers['X-Pingplusplus-Signature']) ? $headers['X-Pingplusplus-Signature'] : NULL;
// 示例
// $signature = 'BX5sToHUzPSJvAfXqhtJicsuPjt3yvq804PguzLnMruCSvZ4C7xYS4trdg1blJPh26eeK/P2QfCCHpWKedsRS3bPKkjAvugnMKs+3Zs1k+PshAiZsET4sWPGNnf1E89Kh7/2XMa1mgbXtHt7zPNC4kamTqUL/QmEVI8LJNq7C9P3LR03kK2szJDhPzkWPgRyY2YpD2eq1aCJm0bkX9mBWTZdSYFhKt3vuM1Qjp5PWXk0tN5h9dNFqpisihK7XboB81poER2SmnZ8PIslzWu2iULM7VWxmEDA70JKBJFweqLCFBHRszA8Nt3AXF0z5qe61oH1oSUmtPwNhdQQ2G5X3g==';
// 请从 https://dashboard.pingxx.com 获取「Ping++ 公钥」
$pub_key_path = __DIR__ . "/rsa_public_key.pem";
$result = verify_signature($raw_data, $signature, $pub_key_path);
if ($result === 1) {
// 验证通过
} elseif ($result === 0) {
http_response_code(400);
echo 'verification failed';
exit;
} else {
http_response_code(400);
echo 'verification error';
exit;
}
$event = json_decode($raw_data, true);
if ($event['type'] == 'charge.succeeded') {
$charge = $event['data']['object'];
// ...
