private static string LianlianpayDecrypt(string base64_ciphertext, string base64_encrypted_aes_key, string base64_nonce, ICipherParameters trader_pri_key)
{
var key = RSA_ECB_OAEPWithSHA1AndMGF1Padding.Decrypt(base64_encrypted_aes_key, trader_pri_key);
var nonce = Convert.FromBase64String(base64_nonce);
var iv = CreateCtrIv(nonce);
return(AES_CTR_NoPadding.Decrypt(base64_ciphertext, key, iv));
}
private static string LianlianpayEncrypt(string req, ICipherParameters public_key, string hmack_key, string version, string aes_key, string nonce)
{
var base64_hmack_key = RSA_ECB_OAEPWithSHA1AndMGF1Padding.Encrypt(hmack_key, public_key);
var base64_aes_key = RSA_ECB_OAEPWithSHA1AndMGF1Padding.Encrypt(aes_key, public_key);
var base64_nonce = Convert.ToBase64String(Encoding.UTF8.GetBytes(nonce));
var iv = CreateCtrIv(Encoding.UTF8.GetBytes(nonce));
var encry = AES_CTR_NoPadding.Encrypt(req, aes_key, iv);
var data = base64_nonce + "$" + encry;
var sign = HMACSHA256.Compute(Encoding.UTF8.GetBytes(data), Encoding.UTF8.GetBytes(hmack_key));
var base64_sign = Convert.ToBase64String(sign);
return(version + "$" + base64_hmack_key + "$" + base64_aes_key + "$" + base64_nonce + "$" + encry + "$" + base64_sign);
}
private static string LianlianpayEncrypt(string req, AsymmetricKeyParameter public_key, string hmack_key, string version, string aes_key, string nonce)
{
var b64Hmack_key = RSA_ECB_OAEPWithSHA1AndMGF1Padding.Encrypt(hmack_key, public_key);
var b64Aes_key = RSA_ECB_OAEPWithSHA1AndMGF1Padding.Encrypt(aes_key, public_key);
var b64Nonce = Convert.ToBase64String(Encoding.UTF8.GetBytes(nonce));
var iv = CreateCtrIv(Encoding.UTF8.GetBytes(nonce));
var encry = AES_CTR_NoPadding.Encrypt(req, aes_key, iv);
var message = b64Nonce + "$" + encry;
var sign = HMACSHA256.Compute(Encoding.UTF8.GetBytes(message), Encoding.UTF8.GetBytes(hmack_key));
var b64Sign = Convert.ToBase64String(sign);
return(version + "$" + b64Hmack_key + "$" + b64Aes_key + "$" + b64Nonce + "$" + encry + "$" + b64Sign);
}
public void PrimaryHandler(WeChatPayOptions options, WeChatPaySignType signType, WeChatPayDictionary sortedTxtParams)
{
if (string.IsNullOrEmpty(options.RsaPublicKey))
{
throw new WeChatPayException("WeChatPayPayBankRequest: RsaPublicKey is null!");
}
sortedTxtParams.Add(WeChatPayConsts.nonce_str, WeChatPayUtility.GenerateNonceStr());
sortedTxtParams.Add(WeChatPayConsts.mch_id, options.MchId);
var key = RSAUtilities.GetAsymmetricKeyParameterFormRsaPublicKey(options.RsaPublicKey);
var no = RSA_ECB_OAEPWithSHA1AndMGF1Padding.Encrypt(sortedTxtParams.GetValue(WeChatPayConsts.enc_bank_no), key);
sortedTxtParams.SetValue(WeChatPayConsts.enc_bank_no, no);
var name = RSA_ECB_OAEPWithSHA1AndMGF1Padding.Encrypt(sortedTxtParams.GetValue(WeChatPayConsts.enc_true_name), key);
sortedTxtParams.SetValue(WeChatPayConsts.enc_true_name, name);
sortedTxtParams.Add(WeChatPayConsts.sign, WeChatPaySignature.SignWithKey(sortedTxtParams, options.Key, signType));
}
public async Task <T> ExecuteAsync <T>(IWeChatPayCertificateRequest <T> request, string optionsName, string certificateName) where T : WeChatPayResponse
{
var signType = true; // ture:MD5，false:HMAC-SHA256
var options = _optionsSnapshotAccessor.Get(optionsName);
var sortedTxtParams = new WeChatPayDictionary(request.GetParameters())
{
{ nonce_str, Guid.NewGuid().ToString("N") }
};
if (request is WeChatPayTransfersRequest)
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(mch_appid)))
{
sortedTxtParams.Add(mch_appid, options.AppId);
}
sortedTxtParams.Add(mchid, options.MchId);
}
else if (request is WeChatPayGetPublicKeyRequest)
{
sortedTxtParams.Add(mch_id, options.MchId);
sortedTxtParams.Add(sign_type, SIGN_TYPE_MD5);
}
else if (request is WeChatPayPayBankRequest)
{
if (options.PublicKey == null)
{
throw new WeChatPayException("WeChatPayPayBankRequest: PublicKey is null!");
}
var no = RSA_ECB_OAEPWithSHA1AndMGF1Padding.Encrypt(sortedTxtParams.GetValue(enc_bank_no), options.PublicKey);
sortedTxtParams.SetValue(enc_bank_no, no);
var name = RSA_ECB_OAEPWithSHA1AndMGF1Padding.Encrypt(sortedTxtParams.GetValue(enc_true_name), options.PublicKey);
sortedTxtParams.SetValue(enc_true_name, name);
sortedTxtParams.Add(mch_id, options.MchId);
}
else if (request is WeChatPayQueryBankRequest)
{
sortedTxtParams.Add(mch_id, options.MchId);
}
else if (request is WeChatPayGetTransferInfoRequest)
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(appid)))
{
sortedTxtParams.Add(appid, options.AppId);
}
sortedTxtParams.Add(mch_id, options.MchId);
}
else if (request is WeChatPayDownloadFundFlowRequest)
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(appid)))
{
sortedTxtParams.Add(appid, options.AppId);
}
sortedTxtParams.Add(mch_id, options.MchId);
sortedTxtParams.Add(sign_type, SIGN_TYPE_HMAC_SHA256);
signType = false; // HMAC-SHA256
}
else if (request is WeChatPayRefundRequest)
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(appid)))
{
sortedTxtParams.Add(appid, options.AppId);
}
sortedTxtParams.Add(mch_id, options.MchId);
}
else if (request is WeChatPaySendRedPackRequest || request is WeChatPaySendGroupRedPackRequest)
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(wxappid)))
{
sortedTxtParams.Add(wxappid, options.AppId);
}
sortedTxtParams.Add(mch_id, options.MchId);
}
else if (request is WeChatPaySendWorkWxRedPackRequest)
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(wxappid)))
{
sortedTxtParams.Add(wxappid, options.AppId);
}
sortedTxtParams.Add(mch_id, options.MchId);
var sign_list = new List <string>
{
"act_name",
"mch_billno",
"mch_id",
"nonce_str",
"re_openid",
"total_amount",
"wxappid",
};
sortedTxtParams.Add(workwx_sign, WeChatPaySignature.SignWithSecret(sortedTxtParams, options.Secret, sign_list));
}
else if (request is WeChatPayPayWwSpTrans2PockeRequest)
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(appid)))
{
sortedTxtParams.Add(appid, options.AppId);
}
sortedTxtParams.Add(mch_id, options.MchId);
var sign_list = new List <string>
{
"amount",
"appid",
"desc",
"mch_id",
"nonce_str",
"openid",
"partner_trade_no",
"ww_msg_type",
};
sortedTxtParams.Add(workwx_sign, WeChatPaySignature.SignWithSecret(sortedTxtParams, options.Secret, sign_list));
}
else if (request is WeChatPayDepositReverseRequest || request is WeChatPayDepositConsumeRequest || request is WeChatPayDepositRefundRequest)
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(appid)))
{
sortedTxtParams.Add(appid, options.AppId);
}
sortedTxtParams.Add(mch_id, options.MchId);
sortedTxtParams.Add(sign_type, SIGN_TYPE_HMAC_SHA256);
signType = false; // HMAC-SHA256
}
else // 其他接口
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(appid)))
{
sortedTxtParams.Add(appid, options.AppId);
}
sortedTxtParams.Add(mch_id, options.MchId);
}
sortedTxtParams.Add(sign, WeChatPaySignature.SignWithKey(sortedTxtParams, options.Key, signType));
var content = WeChatPayUtility.BuildContent(sortedTxtParams);
_logger.Log(options.LogLevel, "Request:{content}", content);
using (var client = _clientFactory.CreateClient(certificateName))
{
var body = await client.DoPostAsync(request.GetRequestUrl(), content);
_logger.Log(options.LogLevel, "Response:{body}", body);
var parser = new WeChatPayXmlParser <T>();
var response = parser.Parse(body);
if (request.IsCheckResponseSign())
{
CheckResponseSign(response, options, signType);
}
return(response);
}
}
public async Task <T> ExecuteAsync <T>(IWeChatPayCertificateRequest <T> request) where T : WeChatPayResponse
{
try
{
var signType = true; // ture:MD5，false:HMAC-SHA256
var excludeSignType = true;
if (CertificateClient == null)
{
throw new ArgumentNullException(nameof(Options.Certificate));
}
// 字典排序
var sortedTxtParams = new WeChatPayDictionary(request.GetParameters());
if (request is WeChatPayTransfersRequest)
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(mch_appid)))
{
sortedTxtParams.Add(mch_appid, Options.AppId);
}
sortedTxtParams.Add(mchid, Options.MchId);
}
else if (request is WeChatPayGetPublicKeyRequest)
{
sortedTxtParams.Add(mch_id, Options.MchId);
sortedTxtParams.Add(sign_type, "MD5");
excludeSignType = false;
}
else if (request is WeChatPayPayBankRequest)
{
if (PublicKey == null)
{
throw new ArgumentNullException(nameof(Options.RsaPublicKey));
}
var no = RSA_ECB_OAEPWithSHA1AndMGF1Padding.Encrypt(sortedTxtParams.GetValue(enc_bank_no), PublicKey);
sortedTxtParams.SetValue(enc_bank_no, no);
var name = RSA_ECB_OAEPWithSHA1AndMGF1Padding.Encrypt(sortedTxtParams.GetValue(enc_true_name), PublicKey);
sortedTxtParams.SetValue(enc_true_name, name);
sortedTxtParams.Add(mch_id, Options.MchId);
sortedTxtParams.Add(sign_type, "MD5");
}
else if (request is WeChatPayQueryBankRequest)
{
sortedTxtParams.Add(mch_id, Options.MchId);
sortedTxtParams.Add(sign_type, "MD5");
}
else if (request is WeChatPayGetTransferInfoRequest)
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(appid)))
{
sortedTxtParams.Add(appid, Options.AppId);
}
sortedTxtParams.Add(mch_id, Options.MchId);
sortedTxtParams.Add(sign_type, "MD5");
}
else if (request is WeChatPayDownloadFundFlowRequest)
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(appid)))
{
sortedTxtParams.Add(appid, Options.AppId);
}
sortedTxtParams.Add(mch_id, Options.MchId);
signType = false; // HMAC-SHA256
}
else if (request is WeChatPayRefundRequest)
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(appid)))
{
sortedTxtParams.Add(appid, Options.AppId);
}
sortedTxtParams.Add(notify_url, Options.RefundNotifyUrl);
sortedTxtParams.Add(mch_id, Options.MchId);
}
else if (request is WeChatPaySendRedPackRequest || request is WeChatPaySendGroupRedPackRequest)
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(wxappid)))
{
sortedTxtParams.Add(wxappid, Options.AppId);
}
sortedTxtParams.Add(mch_id, Options.MchId);
}
else // 其他接口
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(appid)))
{
sortedTxtParams.Add(appid, Options.AppId);
}
sortedTxtParams.Add(mch_id, Options.MchId);
}
sortedTxtParams.Add(nonce_str, Guid.NewGuid().ToString("N"));
sortedTxtParams.Add(sign, WeChatPaySignature.SignWithKey(sortedTxtParams, Options.Key, signType, excludeSignType));
var content = HttpClientEx.BuildContent(sortedTxtParams);
logger.LogInformation($"{DateTime.Now} content:{content}");
logger.LogInformation($"{DateTime.Now} GetRequestUrl:{request.GetRequestUrl()}");
var body = await CertificateClient.DoPostAsync(request.GetRequestUrl(), content);
logger.LogInformation($"{DateTime.Now} body:{body}");
var parser = new WeChatPayXmlParser <T>();
var rsp = parser.Parse(body);
CheckResponseSign(rsp, signType, excludeSignType);
return(rsp);
}
catch (Exception ex)
{
logger.LogInformation($"{DateTime.Now} ExecuteAsync6666:{ex.Message}", ex.Message);
return(null);
}
}
public async Task <T> ExecuteAsync <T>(IWeChatPayCertificateRequest <T> request, string certificateName = "Default") where T : WeChatPayResponse
{
var signType = true; // ture:MD5，false:HMAC-SHA256
var excludeSignType = true;
// 字典排序
var sortedTxtParams = new WeChatPayDictionary(request.GetParameters());
if (request is WeChatPayTransfersRequest)
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(mch_appid)))
{
sortedTxtParams.Add(mch_appid, Options.AppId);
}
sortedTxtParams.Add(mchid, Options.MchId);
}
else if (request is WeChatPayGetPublicKeyRequest)
{
sortedTxtParams.Add(mch_id, Options.MchId);
sortedTxtParams.Add(sign_type, "MD5");
excludeSignType = false;
}
else if (request is WeChatPayPayBankRequest)
{
if (Options.PublicKey == null)
{
throw new ArgumentNullException(nameof(Options.RsaPublicKey));
}
var no = RSA_ECB_OAEPWithSHA1AndMGF1Padding.Encrypt(sortedTxtParams.GetValue(enc_bank_no), Options.PublicKey);
sortedTxtParams.SetValue(enc_bank_no, no);
var name = RSA_ECB_OAEPWithSHA1AndMGF1Padding.Encrypt(sortedTxtParams.GetValue(enc_true_name), Options.PublicKey);
sortedTxtParams.SetValue(enc_true_name, name);
sortedTxtParams.Add(mch_id, Options.MchId);
sortedTxtParams.Add(sign_type, "MD5");
}
else if (request is WeChatPayQueryBankRequest)
{
sortedTxtParams.Add(mch_id, Options.MchId);
sortedTxtParams.Add(sign_type, "MD5");
}
else if (request is WeChatPayGetTransferInfoRequest)
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(appid)))
{
sortedTxtParams.Add(appid, Options.AppId);
}
sortedTxtParams.Add(mch_id, Options.MchId);
sortedTxtParams.Add(sign_type, "MD5");
}
else if (request is WeChatPayDownloadFundFlowRequest)
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(appid)))
{
sortedTxtParams.Add(appid, Options.AppId);
}
sortedTxtParams.Add(mch_id, Options.MchId);
signType = false; // HMAC-SHA256
}
else if (request is WeChatPayRefundRequest)
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(appid)))
{
sortedTxtParams.Add(appid, Options.AppId);
}
sortedTxtParams.Add(mch_id, Options.MchId);
}
else if (request is WeChatPaySendRedPackRequest || request is WeChatPaySendGroupRedPackRequest)
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(wxappid)))
{
sortedTxtParams.Add(wxappid, Options.AppId);
}
sortedTxtParams.Add(mch_id, Options.MchId);
}
else // 其他接口
{
if (string.IsNullOrEmpty(sortedTxtParams.GetValue(appid)))
{
sortedTxtParams.Add(appid, Options.AppId);
}
sortedTxtParams.Add(mch_id, Options.MchId);
}
sortedTxtParams.Add(nonce_str, Guid.NewGuid().ToString("N"));
sortedTxtParams.Add(sign, WeChatPaySignature.SignWithKey(sortedTxtParams, Options.Key, signType, excludeSignType));
var content = WeChatPayUtility.BuildContent(sortedTxtParams);
Logger?.LogTrace(0, "Request:{content}", content);
using (var client = ClientFactory.CreateClient(WeChatPayOptions.CertificateClientName + "." + certificateName))
{
var body = await HttpClientUtility.DoPostAsync(client, request.GetRequestUrl(), content);
Logger?.LogTrace(1, "Response:{body}", body);
var parser = new WeChatPayXmlParser <T>();
var rsp = parser.Parse(body);
CheckResponseSign(rsp, signType, excludeSignType);
return(rsp);
}
}
public async Task <T> ExecuteAsync <T>(IWeChatPayCertificateRequest <T> request) where T : WeChatPayResponse
{
var useMD5 = true;
var excludeSignType = true;
if (CertificateClient == null)
{
throw new ArgumentNullException(nameof(Options.Certificate));
}
// 字典排序
var sortedTxtParams = new WeChatPayDictionary(request.GetParameters());
if (request is WeChatPayTransfersRequest)
{
sortedTxtParams.Add(MCH_APPID, Options.AppId);
sortedTxtParams.Add(MCHID, Options.MchId);
}
else if (request is WeChatPayGetPublicKeyRequest)
{
sortedTxtParams.Add(MCH_ID, Options.MchId);
sortedTxtParams.Add(SIGN_TYPE, "MD5");
excludeSignType = false;
}
else if (request is WeChatPayPayBankRequest)
{
if (PublicKey == null)
{
throw new ArgumentNullException(nameof(Options.RsaPublicKey));
}
var no = RSA_ECB_OAEPWithSHA1AndMGF1Padding.Encrypt(sortedTxtParams.GetValue(ENC_BANK_NO), PublicKey);
sortedTxtParams.SetValue(ENC_BANK_NO, no);
var name = RSA_ECB_OAEPWithSHA1AndMGF1Padding.Encrypt(sortedTxtParams.GetValue(ENC_TRUE_NAME), PublicKey);
sortedTxtParams.SetValue(ENC_TRUE_NAME, name);
sortedTxtParams.Add(MCH_ID, Options.MchId);
sortedTxtParams.Add(SIGN_TYPE, "MD5");
}
else if (request is WeChatPayQueryBankRequest)
{
sortedTxtParams.Add(MCH_ID, Options.MchId);
sortedTxtParams.Add(SIGN_TYPE, "MD5");
}
else if (request is WeChatPayGetTransferInfoRequest)
{
sortedTxtParams.Add(APPID, Options.AppId);
sortedTxtParams.Add(MCH_ID, Options.MchId);
sortedTxtParams.Add(SIGN_TYPE, "MD5");
}
else if (request is WeChatPayDownloadFundFlowRequest)
{
sortedTxtParams.Add(APPID, Options.AppId);
sortedTxtParams.Add(MCH_ID, Options.MchId);
sortedTxtParams.Add(SIGN_TYPE, "HMAC-SHA256");
useMD5 = false;
excludeSignType = false;
}
else if (request is WeChatPayRefundRequest)
{
sortedTxtParams.Add(APPID, Options.AppId);
sortedTxtParams.Add(MCH_ID, Options.MchId);
}
else // 其他接口
{
sortedTxtParams.Add(APPID, Options.AppId);
sortedTxtParams.Add(MCH_ID, Options.MchId);
}
sortedTxtParams.Add(NONCE_STR, Guid.NewGuid().ToString("N"));
sortedTxtParams.Add(SIGN, WeChatPaySignature.SignWithKey(sortedTxtParams, Options.Key, useMD5, excludeSignType));
var content = HttpClientEx.BuildContent(sortedTxtParams);
Logger.LogInformation(0, "Request:{content}", content);
var rspContent = await CertificateClient.DoPostAsync(request.GetRequestUrl(), content);
Logger.LogInformation(1, "Response:{content}", rspContent);
var parser = new WeChatPayXmlParser <T>();
var rsp = parser.Parse(rspContent);
CheckResponseSign(rsp, useMD5, excludeSignType);
return(rsp);
}
