mojiahui/webman-buildadmin
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

0.使用模拟数据进行充值和提现

Browse Source 
1.优化提现接口/api/finance/withdrawCreate
2.优化充值接口/api/finance/depositCreate
This commit is contained in:
zhenhui
2026-05-20 15:57:19 +08:00
parent b9e4d806f7
commit 1b8d947f97
25 changed files with 2022 additions and 179 deletions
Download Patch File Download Diff File Expand all files Collapse all files

554
app/api/controller/Finance.php
View File

@@ -5,6 +5,7 @@ declare(strict_types=1);
namespace app\api\controller;
use app\common\library\finance\DepositSettlement;
use app\common\library\finance\MockPay;
use app\common\library\finance\DDPayGateway;
use app\common\library\finance\WithdrawFlow;
use app\common\library\game\DepositChannel as DepositChannelLib;
@@ -30,16 +31,22 @@ class Finance extends MobileBase
protected array $noNeedLogin = [
'ddpayDepositNotify',
'ddpayPayoutNotify',
'mockDepositPage',
'mockDepositConfirm',
'mockDepositStatus',
];
/**
* DDPay 回调与重定向允许浏览器直接访问（无 auth-token）。
* DDPay 回调、模拟收银台页允许浏览器直接访问（无 auth-token）。
*/
protected array $noNeedAuthToken = [
'ddpayDepositNotify',
'ddpayDepositRedirect',
'ddpayPayoutNotify',
'ddpayPayoutRedirect',
'mockDepositPage',
'mockDepositConfirm',
'mockDepositStatus',
];
/**
@@ -98,14 +105,14 @@ class Finance extends MobileBase
}
/**
* 创建充值订单（仅 DDPay）
* 创建充值订单（DDPay 或模拟支付 mock）
*
* `channel_code` 必须为 `ddpay`。服务端创建待支付订单后调用 DDPay「入金发起」，返回三方 `payment_url` 作为 `pay_url`；
* 入账由 `ddpayDepositNotify` Webhook 验签后调用 `DepositSettlement::settle`（或发起响应中 `transaction_status=completed` 时同步结算）。
* - `channel_code=mock`：返回 `pay_url`（模拟收银台，3 分钟有效）；用户确认后 status=3 待审核，后台通过后入账。
* - `channel_code=ddpay`：调用 DDPay「入金发起」；入账由回调或同步 completed 结算。
*
* 请求：application/json 或 x-www-form-urlencoded
* - tier_id / tier_key、channel_code=ddpay、idempotency_key：必填
* - payment_type、payer_name、payer_bank_name：DDPay 入金必填（见 DDPay 文档与移动端接口说明）
* - tier_id / tier_key、channel_code、idempotency_key：必填
* - DDPay 渠道另需 payment_type、payer_name、payer_bank_name
*
* 响应：`order_no` / `amount` / `pay_channel` / `paid` / `pay_url` / `status` / `create_time` / `pay_time`
*/
@@ -128,8 +135,23 @@ class Finance extends MobileBase
if (mb_strlen($idempotencyKey) > 64) {
return $this->mobileError(1002, 'Idempotency key is too long');
}
if ($channelCode !== 'ddpay') {
return $this->mobileError(2004, 'Deposit only supports DDPay');
if ($channelCode === MockPay::CHANNEL_CODE) {
if (!MockPay::isEnabled()) {
return $this->mobileError(2004, 'Mock pay channel is disabled');
}
} elseif ($channelCode === 'ddpay') {
if (!DDPayGateway::isConfigured()) {
if (!MockPay::isEnabled()) {
return $this->mobileError(2004, 'DDPay is not configured', [
'suggest_channel_code' => MockPay::CHANNEL_CODE,
'hint' => 'Set FINANCE_MOCK_PAY_ENABLED=1 or configure DDPAY_* in .env',
]);
}
// 未配置 DDPay 商户：联调环境自动改用 mock（无需改 Apifox 参数）
$channelCode = MockPay::CHANNEL_CODE;
}
} else {
return $this->mobileError(2004, 'Pay channel not supported');
}
$tiers = $this->loadEnabledTiers();
@@ -165,7 +187,7 @@ class Finance extends MobileBase
return $this->mobileError(2005, 'Too many pending deposit orders', [
'max_pending' => DepositOrderExpireService::MAX_PENDING_DEPOSIT,
'pending_count' => $pendingCount,
'expire_seconds' => DepositOrderExpireService::EXPIRE_SECONDS,
'expire_seconds' => DepositOrderExpireService::pendingExpireSeconds(),
]);
}
@@ -189,6 +211,9 @@ class Finance extends MobileBase
'desc_en' => is_string($tier['desc_en'] ?? null) ? $tier['desc_en'] : '',
'channel_code' => $channelCode,
];
if ($channelCode === MockPay::CHANNEL_CODE && strtolower($this->stringParam($request->input('channel_code'))) === 'ddpay') {
$tierSnapshot['ddpay_fallback'] = true;
}
$now = time();
$channelId = null;
@@ -208,7 +233,9 @@ class Finance extends MobileBase
'pay_channel' => $channelCode,
'deposit_tier_id' => $tier['id'],
'pay_account_snapshot' => json_encode($tierSnapshot, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES),
'remark' => '',
'remark' => $channelCode === MockPay::CHANNEL_CODE && ($tierSnapshot['ddpay_fallback'] ?? false)
? '[mock] auto fallback: DDPay not configured'
: '',
'create_time' => $now,
'update_time' => $now,
]);
@@ -226,6 +253,10 @@ class Finance extends MobileBase
$orderId = is_numeric($order->id ?? null) ? intval(strval($order->id)) : 0;
$publicOrigin = $this->publicOriginFromRequest($request);
if ($channelCode === MockPay::CHANNEL_CODE) {
return $this->finishMockDepositCreate($order, $orderId, $orderNo, $publicOrigin);
}
// DDPay 入金：创建订单后，调用三方「入金发起」拿到 payment_url，并在回调里验签结算。
$toString = static function (mixed $v): string {
if (is_string($v)) {
@@ -257,6 +288,9 @@ class Finance extends MobileBase
if ($paymentType === '' || $payerName === '' || $payerBankName === '') {
return $this->mobileError(1001, 'Missing DDPay parameters');
}
if (!$this->isValidDdpayPaymentType($paymentType)) {
return $this->mobileError(1001, 'Invalid DDPay payment_type');
}
$callbackUrl = rtrim($publicOrigin, '/') . '/api/finance/ddpayDepositNotify';
$redirectUrl = rtrim($publicOrigin, '/') . '/api/finance/ddpayDepositRedirect?order_no=' . rawurlencode($orderNo);
@@ -295,7 +329,13 @@ class Finance extends MobileBase
]);
}
return $this->mobileError(2000, 'DDPay deposit initiation failed');
$reason = trim($e->getMessage());
if ($reason === '') {
$reason = 'DDPay deposit initiation failed';
}
return $this->mobileError(2000, 'DDPay deposit initiation failed', [
'gateway_reason' => $reason,
]);
}
$ts = '';
@@ -357,6 +397,326 @@ class Finance extends MobileBase
return $this->mobileSuccess($this->buildDepositResponse($order, $publicOrigin));
}
/**
* 兼容旧链接：校验订单后 302 跳转到前端静态收银台（带签名）
*/
public function mockDepositPage(Request $request): Response
{
if (!MockPay::isEnabled()) {
return response($this->renderMockDepositMessageHtml('模拟支付未开启', ''), 404, [
'Content-Type' => 'text/html; charset=utf-8',
]);
}
$orderNo = $this->stringParam($request->input('order_no'));
if ($orderNo === '') {
return response($this->renderMockDepositMessageHtml('缺少订单号', ''), 400, [
'Content-Type' => 'text/html; charset=utf-8',
]);
}
$redirectUrl = $this->buildMockDepositFrontendUrl($orderNo, $this->publicOriginFromRequest($request));
if ($redirectUrl === '') {
return response($this->renderMockDepositMessageHtml('订单不存在', ''), 404, [
'Content-Type' => 'text/html; charset=utf-8',
]);
}
return redirect($redirectUrl);
}
/**
* 模拟收银台页拉取订单状态（前端静态页调用，须携带 sign + expire_at）
*/
public function mockDepositStatus(Request $request): Response
{
if (!MockPay::isEnabled()) {
return $this->mobileError(2004, 'Mock pay channel is disabled');
}
$orderNo = $this->stringParam($request->input('order_no'));
$expireAt = $this->intParam($request->input('expire_at'));
$sign = $this->stringParam($request->input('sign'));
if ($orderNo === '' || $expireAt <= 0 || $sign === '') {
return $this->mobileError(1001, 'Missing parameters');
}
if (!$this->verifyMockDepositLinkSign($orderNo, $expireAt, $sign)) {
return $this->mobileError(1002, 'Invalid payment link signature');
}
DepositOrderExpireService::expirePendingOrders(null, $orderNo);
$row = Db::name('deposit_order')->where('order_no', $orderNo)->find();
if (!is_array($row)) {
return $this->mobileError(2003, 'Order does not exist');
}
$payChannel = is_string($row['pay_channel'] ?? null) ? strtolower(trim($row['pay_channel'])) : '';
if ($payChannel !== MockPay::CHANNEL_CODE) {
return $this->mobileError(2000, 'Order is not a mock pay deposit');
}
$statusCode = is_numeric($row['status'] ?? null) ? intval($row['status']) : -1;
$amount = $this->amountString($row['amount'] ?? '0');
$bonus = $this->amountString($row['bonus_amount'] ?? '0');
$now = time();
$remaining = $expireAt > $now ? ($expireAt - $now) : 0;
$canPay = $statusCode === 0 && DepositOrderExpireService::isPendingPaymentValid($row) && $remaining > 0;
return $this->mobileSuccess([
'order_no' => $orderNo,
'amount' => $this->amountNumber($amount),
'bonus_amount' => $this->amountNumber($bonus),
'total_amount' => $this->amountNumber(bcadd($amount, $bonus, 2)),
'status' => $this->mapDepositStatus($statusCode),
'status_code' => $statusCode,
'expire_at' => $expireAt,
'remaining_seconds' => $remaining,
'can_pay' => $canPay,
'reject_reason' => is_string($row['reject_reason'] ?? null) && trim($row['reject_reason']) !== ''
? trim($row['reject_reason'])
: null,
]);
}
/**
* 模拟收银台确认支付（浏览器页内调用，无需 auth-token）
*/
public function mockDepositConfirm(Request $request): Response
{
if (!MockPay::isEnabled()) {
return $this->mobileError(2004, 'Mock pay channel is disabled');
}
$orderNo = $this->stringParam($request->input('order_no'));
$expireAt = $this->intParam($request->input('expire_at'));
$sign = $this->stringParam($request->input('sign'));
if ($orderNo === '') {
return $this->mobileError(1001, 'Missing parameters');
}
if ($expireAt <= 0 || $sign === '') {
return $this->mobileError(1001, 'Missing payment link signature');
}
if (!$this->verifyMockDepositLinkSign($orderNo, $expireAt, $sign)) {
return $this->mobileError(1002, 'Invalid payment link signature');
}
$result = $this->confirmMockDepositPendingPayment($orderNo, 'mock page confirm');
if ($result['error'] !== null) {
return $result['error'];
}
return $this->mobileSuccess($result['payload']);
}
/**
* 模拟支付：确认已支付（需登录，API 客户端调用）
*/
public function mockDepositPay(Request $request): Response
{
$response = $this->initializeMobile($request);
if ($response !== null) {
return $response;
}
if (!MockPay::isEnabled()) {
return $this->mobileError(2004, 'Mock pay channel is disabled');
}
$orderNo = $this->stringParam($request->input('order_no'));
if ($orderNo === '') {
return $this->mobileError(1001, 'Missing parameters');
}
$order = DepositOrder::where('order_no', $orderNo)->where('user_id', $this->auth->id)->find();
if (!$order) {
return $this->mobileError(2003, 'Order does not exist');
}
$result = $this->confirmMockDepositPendingPayment($orderNo, 'mock api confirm');
if ($result['error'] !== null) {
return $result['error'];
}
return $this->mobileSuccess($result['payload']);
}
/**
* @return array{error: ?Response, payload: array<string, mixed>}
*/
private function confirmMockDepositPendingPayment(string $orderNo, string $sourceLabel): array
{
DepositOrderExpireService::expirePendingOrders(null, $orderNo);
$row = Db::name('deposit_order')->where('order_no', $orderNo)->find();
if (!is_array($row)) {
return [
'error' => $this->mobileError(2003, 'Order does not exist'),
'payload' => [],
];
}
$payChannel = is_string($row['pay_channel'] ?? null) ? strtolower(trim($row['pay_channel'])) : '';
if ($payChannel !== MockPay::CHANNEL_CODE) {
return [
'error' => $this->mobileError(2000, 'Order is not a mock pay deposit'),
'payload' => [],
];
}
$status = is_numeric($row['status'] ?? null) ? intval($row['status']) : -1;
if ($status === 1) {
$order = DepositOrder::where('order_no', $orderNo)->find();
$payload = $this->buildDepositResponse($order, null);
$payload['review_required'] = false;
return ['error' => null, 'payload' => $payload];
}
if ($status === MockPay::DEPOSIT_STATUS_PENDING_REVIEW) {
$order = DepositOrder::where('order_no', $orderNo)->find();
$payload = $this->buildDepositResponse($order, null);
$payload['review_required'] = true;
return ['error' => null, 'payload' => $payload];
}
if ($status !== 0 || !DepositOrderExpireService::isPendingPaymentValid($row)) {
return [
'error' => $this->mobileError(2000, 'Order cannot be paid'),
'payload' => [],
];
}
$orderId = is_numeric($row['id'] ?? null) ? intval($row['id']) : 0;
if ($orderId <= 0) {
return [
'error' => $this->mobileError(2000, 'Order id invalid'),
'payload' => [],
];
}
$now = time();
$snap = [];
$snapRaw = $row['pay_account_snapshot'] ?? '';
if (is_string($snapRaw) && trim($snapRaw) !== '') {
$decoded = json_decode($snapRaw, true);
if (is_array($decoded)) {
$snap = $decoded;
}
}
$snap['mock_paid_at'] = $now;
$snap['mock_paid_source'] = $sourceLabel;
Db::name('deposit_order')->where('id', $orderId)->where('status', 0)->update([
'status' => MockPay::DEPOSIT_STATUS_PENDING_REVIEW,
'remark' => '[mock] 玩家已支付，待管理员审核',
'pay_account_snapshot' => json_encode($snap, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES),
'update_time' => $now,
]);
$order = DepositOrder::where('id', $orderId)->find();
$payload = $this->buildDepositResponse($order, null);
$payload['review_required'] = true;
$payload['mock_pay_success'] = true;
$payload['mock_pay_message'] = 'Payment submitted. Pending admin review.';
return ['error' => null, 'payload' => $payload];
}
/**
* @param \app\common\model\DepositOrder|object $order
*/
private function finishMockDepositCreate($order, int $orderId, string $orderNo, string $publicOrigin): Response
{
$amountStr = $this->amountString($order->amount ?? '0');
$bonusStr = $this->amountString($order->bonus_amount ?? '0');
$createTime = is_numeric($order->create_time ?? null) ? intval(strval($order->create_time)) : time();
$linkAuth = MockPay::buildDepositLinkAuth($orderNo, $createTime);
$expireAt = $linkAuth['expire_at'];
$sign = $linkAuth['sign'];
$payUrl = MockPay::depositPageUrl($orderNo, $publicOrigin, $expireAt, $sign, $amountStr, $bonusStr);
if ($orderId > 0) {
$snap = [];
$snapRaw = $order->pay_account_snapshot ?? '';
if (is_string($snapRaw) && trim($snapRaw) !== '') {
$decoded = json_decode($snapRaw, true);
if (is_array($decoded)) {
$snap = $decoded;
}
}
$snap['payment_url'] = $payUrl;
$snap['mock'] = true;
$snap['expire_at'] = $expireAt;
$snap['mock_pay_sign'] = $sign;
Db::name('deposit_order')->where('id', $orderId)->update([
'pay_account_snapshot' => json_encode($snap, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES),
'update_time' => time(),
]);
$refreshed = DepositOrder::where('id', $orderId)->find();
if ($refreshed) {
$order = $refreshed;
}
}
$payload = $this->buildDepositResponse($order, $publicOrigin);
$payload['expire_at'] = $expireAt;
$payload['expire_seconds'] = DepositOrderExpireService::pendingExpireSeconds();
return $this->mobileSuccess($payload);
}
private function renderMockDepositCheckoutHtml(
string $orderNo,
string $amount,
string $bonus,
int $expireAt,
string $confirmUrl
): string {
$total = bcadd($amount, $bonus, 2);
$expireText = date('Y-m-d H:i:s', $expireAt);
$orderNoEsc = htmlspecialchars($orderNo, ENT_QUOTES, 'UTF-8');
$amountEsc = htmlspecialchars($amount, ENT_QUOTES, 'UTF-8');
$bonusEsc = htmlspecialchars($bonus, ENT_QUOTES, 'UTF-8');
$totalEsc = htmlspecialchars($total, ENT_QUOTES, 'UTF-8');
$expireEsc = htmlspecialchars($expireText, ENT_QUOTES, 'UTF-8');
$orderNoJs = json_encode($orderNo, JSON_UNESCAPED_UNICODE);
$confirmUrlJs = json_encode($confirmUrl, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
return '<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/>'
. '<title>模拟充值</title><style>'
. 'body{font-family:system-ui,sans-serif;background:#f5f7fa;margin:0;padding:24px;}'
. '.card{max-width:420px;margin:40px auto;background:#fff;border-radius:12px;padding:24px;box-shadow:0 4px 24px rgba(0,0,0,.08);}'
. 'h1{font-size:20px;margin:0 0 8px;}p{color:#666;line-height:1.6;margin:8px 0;}'
. '.amt{font-size:28px;color:#1677ff;font-weight:700;margin:16px 0;}'
. 'button{width:100%;padding:14px;font-size:16px;border:0;border-radius:8px;background:#1677ff;color:#fff;cursor:pointer;margin-top:12px;}'
. 'button:disabled{background:#ccc;}'
. '.hint{font-size:13px;color:#999;}'
. '.ok{display:none;margin-top:16px;padding:12px;background:#f6ffed;border:1px solid #b7eb8f;border-radius:8px;color:#389e0d;line-height:1.6;}'
. '</style></head><body>'
. '<div class="card"><h1>模拟充值收银台</h1>'
. '<p class="hint">订单号：' . $orderNoEsc . '</p>'
. '<p>充值金额 <strong>' . $amountEsc . '</strong>，赠送 <strong>' . $bonusEsc . '</strong></p>'
. '<div class="amt">预计到账 ' . $totalEsc . '</div>'
. '<p class="hint">链接有效期至 ' . $expireEsc . '（约 3 分钟，过期后订单将自动失效）</p>'
. '<button type="button" id="btnPay">确认支付</button>'
. '<div class="ok" id="okBox"><strong>支付成功（模拟）</strong><br/>订单已提交，需管理员在后台审核通过后才会入账。</div>'
. '<script>(function(){var confirmUrl=' . $confirmUrlJs . ',orderNo=' . $orderNoJs . ';'
. 'document.getElementById("btnPay").onclick=function(){var btn=this;btn.disabled=true;btn.textContent="处理中...";'
. 'fetch(confirmUrl,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},'
. 'body:"order_no="+encodeURIComponent(orderNo)}).then(function(r){return r.json();}).then(function(res){'
. 'if(res&&res.code===1){document.getElementById("okBox").style.display="block";btn.style.display="none";}'
. 'else{alert((res&&res.message)||"支付失败");btn.disabled=false;btn.textContent="确认支付";}})'
. '.catch(function(){alert("网络错误，请重试");btn.disabled=false;btn.textContent="确认支付";});};})();</script>'
. '</div></body></html>';
}
private function renderMockDepositMessageHtml(string $title, string $hint): string
{
$titleEsc = htmlspecialchars($title, ENT_QUOTES, 'UTF-8');
$hintHtml = $hint !== '' ? '<p>' . htmlspecialchars($hint, ENT_QUOTES, 'UTF-8') . '</p>' : '';
return '<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/>'
. '<title>' . $titleEsc . '</title>'
. '<style>body{font-family:system-ui,sans-serif;background:#f5f7fa;padding:40px;text-align:center;}'
. '.card{max-width:400px;margin:0 auto;background:#fff;padding:32px;border-radius:12px;}</style></head><body>'
. '<div class="card"><h1>' . $titleEsc . '</h1>' . $hintHtml . '</div></body></html>';
}
/**
* 将订单模型转换为统一的创建/详情响应数据
*
@@ -364,42 +724,72 @@ class Finance extends MobileBase
*/
private function buildDepositResponse($order, ?string $publicOrigin = null): array
{
$status = $this->mapDepositStatus($order->status);
$statusCode = $this->intValue($order->status);
$status = $this->mapDepositStatus($statusCode);
$paid = $status === 'paid';
$amount = $this->amountString($order->amount);
$bonus = $this->amountString($order->bonus_amount);
$total = bcadd($amount, $bonus, 2);
$on = is_string($order->order_no) ? $order->order_no : strval($order->order_no);
$payUrl = '';
$expireAt = 0;
$payChannel = is_string($order->pay_channel) ? $order->pay_channel : strval($order->pay_channel);
if ($this->intValue($order->status) === 0 && $on !== '') {
if ($payChannel === 'ddpay') {
$snapRaw = $order->pay_account_snapshot ?? null;
$snap = null;
if (is_array($snapRaw)) {
$snap = $snapRaw;
} elseif (is_string($snapRaw) && trim($snapRaw) !== '') {
$decoded = json_decode($snapRaw, true);
if (is_array($decoded)) {
$snap = $decoded;
}
}
if (is_array($snap) && isset($snap['payment_url']) && is_string($snap['payment_url'])) {
$payUrl = trim($snap['payment_url']);
}
$snapRaw = $order->pay_account_snapshot ?? null;
$snap = null;
if (is_array($snapRaw)) {
$snap = $snapRaw;
} elseif (is_string($snapRaw) && trim($snapRaw) !== '') {
$decoded = json_decode($snapRaw, true);
if (is_array($decoded)) {
$snap = $decoded;
}
}
if (is_array($snap) && isset($snap['payment_url']) && is_string($snap['payment_url'])) {
$payUrl = trim($snap['payment_url']);
}
if (is_array($snap) && isset($snap['expire_at']) && is_numeric($snap['expire_at'])) {
$expireAt = intval($snap['expire_at']);
}
if ($statusCode === 0 && $on !== '' && $payChannel === MockPay::CHANNEL_CODE) {
$origin = $publicOrigin !== null && $publicOrigin !== '' ? $publicOrigin : '';
$createTime = is_numeric(strval($order->create_time ?? 0)) ? intval(strval($order->create_time)) : time();
if ($expireAt <= 0) {
$expireAt = $createTime + DepositOrderExpireService::pendingExpireSeconds();
}
$sign = '';
if (is_array($snap) && isset($snap['mock_pay_sign']) && is_string($snap['mock_pay_sign'])) {
$sign = trim($snap['mock_pay_sign']);
}
if ($sign === '' || !MockPay::verifyDepositLink($on, $expireAt, $sign)) {
$linkAuth = MockPay::buildDepositLinkAuth($on, $createTime);
$expireAt = $linkAuth['expire_at'];
$sign = $linkAuth['sign'];
}
if ($payUrl === '') {
$payUrl = MockPay::depositPageUrl($on, $origin, $expireAt, $sign, $amount, $bonus);
}
}
if ($expireAt <= 0 && $statusCode === 0 && $payChannel === MockPay::CHANNEL_CODE) {
$createTime = is_numeric(strval($order->create_time ?? 0)) ? intval(strval($order->create_time)) : time();
$expireAt = $createTime + DepositOrderExpireService::pendingExpireSeconds();
}
$rejectReason = is_string($order->reject_reason ?? null) ? trim($order->reject_reason) : '';
return [
'order_no' => $on,
'amount' => $this->amountNumber($amount),
'bonus_amount' => $this->amountNumber($bonus),
'total_amount' => $this->amountNumber($total),
'status' => $status,
'paid' => $paid,
'pay_channel' => $payChannel,
'pay_url' => $payUrl,
'create_time' => is_numeric(strval($order->create_time)) ? intval(strval($order->create_time)) : 0,
'pay_time' => is_numeric(strval($order->pay_time)) ? intval(strval($order->pay_time)) : 0,
'order_no' => $on,
'amount' => $this->amountNumber($amount),
'bonus_amount' => $this->amountNumber($bonus),
'total_amount' => $this->amountNumber($total),
'status' => $status,
'paid' => $paid,
'review_required' => $status === 'pending_review',
'reject_reason' => $rejectReason !== '' ? $rejectReason : null,
'pay_channel' => $payChannel,
'pay_url' => $payUrl,
'expire_at' => $expireAt > 0 ? $expireAt : null,
'expire_seconds' => $statusCode === 0 ? DepositOrderExpireService::pendingExpireSeconds() : null,
'create_time' => is_numeric(strval($order->create_time)) ? intval(strval($order->create_time)) : 0,
'pay_time' => is_numeric(strval($order->pay_time)) ? intval(strval($order->pay_time)) : 0,
];
}
@@ -846,7 +1236,18 @@ class Finance extends MobileBase
return $this->mobileError(1001, 'Missing parameters');
}
if (!in_array($channelCode, DepositChannelLib::withdrawPayoutChannelCodes(), true)) {
return $this->mobileError(2004, 'Withdraw only supports DDPay');
return $this->mobileError(2004, 'Pay channel not supported');
}
if ($channelCode === MockPay::CHANNEL_CODE && !MockPay::isEnabled()) {
return $this->mobileError(2004, 'Mock pay channel is disabled');
}
if ($channelCode === 'ddpay' && !DDPayGateway::isConfigured()) {
if (!MockPay::isEnabled()) {
return $this->mobileError(2004, 'DDPay is not configured', [
'suggest_channel_code' => MockPay::CHANNEL_CODE,
]);
}
$channelCode = MockPay::CHANNEL_CODE;
}
$effectiveChannels = $this->loadDepositChannelEffective();
if (!DepositChannelLib::assertChannelEnabled($channelCode, $effectiveChannels)) {
@@ -1288,6 +1689,9 @@ class Finance extends MobileBase
if ($code === '' || !isset($regCh[$code]) || !is_array($regCh[$code])) {
continue;
}
if ($code === MockPay::CHANNEL_CODE && !MockPay::isEnabled()) {
continue;
}
$meta = $regCh[$code];
$nameZh = isset($meta['name']) && is_string($meta['name']) ? $meta['name'] : '';
$nameEn = isset($meta['name_en']) && is_string($meta['name_en']) ? $meta['name_en'] : '';
@@ -1397,6 +1801,14 @@ class Finance extends MobileBase
return trim($raw);
}
/**
* DDPay 入金 payment_type：官方枚举 01=FPX / 02=duitnow / 03=ewallet
*/
private function isValidDdpayPaymentType(string $paymentType): bool
{
return in_array($paymentType, ['01', '02', '03'], true);
}
/**
* 收款人手机号：5–32 位，仅允许数字与常见分隔符（+ - 空格）
*/
@@ -1431,10 +1843,14 @@ class Finance extends MobileBase
private function mapDepositStatus($status): string
{
if ($this->intValue($status) === 1) {
$code = $this->intValue($status);
if ($code === 1) {
return 'paid';
}
if ($this->intValue($status) === 2 || $this->intValue($status) === 3) {
if ($code === MockPay::DEPOSIT_STATUS_PENDING_REVIEW) {
return 'pending_review';
}
if ($code === 2) {
return 'failed';
}
return 'pending';
@@ -1463,4 +1879,62 @@ class Finance extends MobileBase
}
return $result;
}
private function intParam($raw): int
{
if ($raw === null || $raw === '') {
return 0;
}
if (is_numeric(strval($raw))) {
return intval(strval($raw));
}
return 0;
}
private function verifyMockDepositLinkSign(string $orderNo, int $expireAt, string $sign): bool
{
return MockPay::verifyDepositLink($orderNo, $expireAt, $sign);
}
/**
* 生成带签名的前端静态收银台 URL；订单不存在或非 mock 时返回空串
*/
private function buildMockDepositFrontendUrl(string $orderNo, string $publicOrigin): string
{
DepositOrderExpireService::expirePendingOrders(null, $orderNo);
$row = Db::name('deposit_order')->where('order_no', $orderNo)->find();
if (!is_array($row)) {
return '';
}
$payChannel = is_string($row['pay_channel'] ?? null) ? strtolower(trim($row['pay_channel'])) : '';
if ($payChannel !== MockPay::CHANNEL_CODE) {
return '';
}
$createTime = is_numeric($row['create_time'] ?? null) ? intval($row['create_time']) : time();
$amount = $this->amountString($row['amount'] ?? '0');
$bonus = $this->amountString($row['bonus_amount'] ?? '0');
$expireAt = 0;
$sign = '';
$snapRaw = $row['pay_account_snapshot'] ?? '';
if (is_string($snapRaw) && trim($snapRaw) !== '') {
$decoded = json_decode($snapRaw, true);
if (is_array($decoded)) {
if (isset($decoded['expire_at']) && is_numeric($decoded['expire_at'])) {
$expireAt = intval($decoded['expire_at']);
}
if (isset($decoded['mock_pay_sign']) && is_string($decoded['mock_pay_sign'])) {
$sign = trim($decoded['mock_pay_sign']);
}
}
}
if ($expireAt <= 0 || $sign === '' || !MockPay::verifyDepositLink($orderNo, $expireAt, $sign)) {
$linkAuth = MockPay::buildDepositLinkAuth($orderNo, $createTime);
$expireAt = $linkAuth['expire_at'];
$sign = $linkAuth['sign'];
}
return MockPay::depositPageUrl($orderNo, $publicOrigin, $expireAt, $sign, $amount, $bonus);
}
}