|
...
|
...
|
@@ -35,7 +35,7 @@ class PayStripeApi |
|
|
|
];
|
|
|
|
|
|
|
|
// 构造函数设置密钥
|
|
|
|
public function __construct($secretKey)
|
|
|
|
public function __construct()
|
|
|
|
{
|
|
|
|
$this->secretKey = 'sk_test_51MyseXIWCYVeLww1tbPZzRe1Qk4lS5d2VLiDjpju7G0ToiX1RJcFinQXNlftq9eCjZE0n2gjaz1mfy1g0mxTusdf00m636Gv62';
|
|
|
|
}
|
|
...
|
...
|
@@ -79,13 +79,13 @@ class PayStripeApi |
|
|
|
* @method :post
|
|
|
|
* @time :2024/12/24 10:38
|
|
|
|
*/
|
|
|
|
public function createPaymentIntent($amount, $currency = 'usd')
|
|
|
|
public function createPaymentIntent($amount, $currency = 'usd', $paymentMethodTypes = 'card')
|
|
|
|
{
|
|
|
|
$url = "https://api.stripe.com/v1/payment_intents";
|
|
|
|
$data = [
|
|
|
|
'amount' => $amount,
|
|
|
|
'currency' => $currency,
|
|
|
|
'payment_method_types[]' => $this->currency_types[$currency],
|
|
|
|
'payment_method_types[]' => $paymentMethodTypes,
|
|
|
|
];
|
|
|
|
return $this->sendRequest($url, 'POST', $data);
|
|
|
|
}
|
|
...
|
...
|
@@ -104,87 +104,6 @@ class PayStripeApi |
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @remark :创建客户
|
|
|
|
* @name :createCustomer
|
|
|
|
* @author :lyh
|
|
|
|
* @method :post
|
|
|
|
* @time :2024/12/24 10:41
|
|
|
|
*/
|
|
|
|
public function createCustomer($name, $email, $description = '')
|
|
|
|
{
|
|
|
|
$url = "https://api.stripe.com/v1/customers";
|
|
|
|
$data = [
|
|
|
|
'name' => $name,
|
|
|
|
'email' => $email,
|
|
|
|
'description' => $description
|
|
|
|
];
|
|
|
|
return $this->sendRequest($url, 'POST', $data);
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @remark :查询客户
|
|
|
|
* @name :retrieveCustomer
|
|
|
|
* @author :lyh
|
|
|
|
* @method :post
|
|
|
|
* @time :2024/12/24 10:41
|
|
|
|
*/
|
|
|
|
public function retrieveCustomer($customerId)
|
|
|
|
{
|
|
|
|
$url = "https://api.stripe.com/v1/customers/{$customerId}";
|
|
|
|
return $this->sendRequest($url, 'GET');
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @remark :删除客户
|
|
|
|
* @name :deleteCustomer
|
|
|
|
* @author :lyh
|
|
|
|
* @method :post
|
|
|
|
* @time :2024/12/24 10:42
|
|
|
|
*/
|
|
|
|
public function deleteCustomer($customerId)
|
|
|
|
{
|
|
|
|
$url = "https://api.stripe.com/v1/customers/{$customerId}";
|
|
|
|
return $this->sendRequest($url, 'DELETE');
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @remark :创建支付方法
|
|
|
|
* @name :createPaymentMethod
|
|
|
|
* @author :lyh
|
|
|
|
* @method :post
|
|
|
|
* @time :2024/12/24 10:42
|
|
|
|
*/
|
|
|
|
public function createPaymentMethod($cardNumber, $expMonth, $expYear, $cvc)
|
|
|
|
{
|
|
|
|
$url = "https://api.stripe.com/v1/payment_methods";
|
|
|
|
$data = [
|
|
|
|
'type' => 'card',
|
|
|
|
'card[number]' => $cardNumber,
|
|
|
|
'card[exp_month]' => $expMonth,
|
|
|
|
'card[exp_year]' => $expYear,
|
|
|
|
'card[cvc]' => $cvc,
|
|
|
|
];
|
|
|
|
|
|
|
|
return $this->sendRequest($url, 'POST', $data);
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @remark :绑定支付方法到客户
|
|
|
|
* @name :attachPaymentMethodToCustomer
|
|
|
|
* @author :lyh
|
|
|
|
* @method :post
|
|
|
|
* @time :2024/12/24 10:42
|
|
|
|
*/
|
|
|
|
public function attachPaymentMethodToCustomer($paymentMethodId, $customerId)
|
|
|
|
{
|
|
|
|
$url = "https://api.stripe.com/v1/payment_methods/{$paymentMethodId}/attach";
|
|
|
|
$data = [
|
|
|
|
'customer' => $customerId,
|
|
|
|
];
|
|
|
|
return $this->sendRequest($url, 'POST', $data);
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @remark :创建退款
|
|
|
|
* @name :createRefund
|
|
|
|
* @author :lyh
|
|
...
|
...
|
@@ -198,7 +117,6 @@ class PayStripeApi |
|
|
|
if ($amount) {
|
|
|
|
$data['amount'] = $amount;
|
|
|
|
}
|
|
|
|
|
|
|
|
return $this->sendRequest($url, 'POST', $data);
|
|
|
|
}
|
|
|
|
|
|
...
|
...
|
@@ -216,50 +134,89 @@ class PayStripeApi |
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @remark :创建订阅
|
|
|
|
* @name :createSubscription
|
|
|
|
* @author :lyh
|
|
|
|
* @method :post
|
|
|
|
* @time :2024/12/24 10:42
|
|
|
|
*/
|
|
|
|
public function createSubscription($customerId, $priceId)
|
|
|
|
{
|
|
|
|
$url = "https://api.stripe.com/v1/subscriptions";
|
|
|
|
$data = [
|
|
|
|
'customer' => $customerId,
|
|
|
|
'items[0][price]' => $priceId,
|
|
|
|
];
|
|
|
|
return $this->sendRequest($url, 'POST', $data);
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @remark :取消订阅
|
|
|
|
* @name :cancelSubscription
|
|
|
|
* @remark :处理 Webhook
|
|
|
|
* @name :handleWebhook
|
|
|
|
* @author :lyh
|
|
|
|
* @method :post
|
|
|
|
* @time :2024/12/24 10:43
|
|
|
|
*/
|
|
|
|
public function cancelSubscription($subscriptionId)
|
|
|
|
public static function handleWebhook()
|
|
|
|
{
|
|
|
|
$url = "https://api.stripe.com/v1/subscriptions/{$subscriptionId}";
|
|
|
|
return $this->sendRequest($url, 'DELETE');
|
|
|
|
try {
|
|
|
|
// Webhook 签名密钥（从 Stripe 仪表盘获取）
|
|
|
|
$endpointSecret = 'whsec_garhW2TrCIrduyM3rve9mFS2sn69B9Yt';
|
|
|
|
// 获取原始请求内容
|
|
|
|
$payload = request()->getContent();
|
|
|
|
// 获取 Stripe 签名头
|
|
|
|
$sigHeader = request()->header('Stripe-Signature');
|
|
|
|
// 验证签名
|
|
|
|
if (!self::verifySignature($payload, $sigHeader, $endpointSecret)) {
|
|
|
|
return [
|
|
|
|
'code' => '201',
|
|
|
|
'message' => 'Invalid signature',
|
|
|
|
'details' => [
|
|
|
|
'payload' => $payload,
|
|
|
|
'sigHeader' => $sigHeader,
|
|
|
|
'endpointSecret' => $endpointSecret,
|
|
|
|
],
|
|
|
|
]; // 返回 400 Bad Request 状态码;
|
|
|
|
}
|
|
|
|
$event = json_decode($payload, true);
|
|
|
|
// 获取事件类型
|
|
|
|
$eventType = $event['type'];
|
|
|
|
$eventData = $event['data']['object'];
|
|
|
|
// 根据事件类型处理
|
|
|
|
switch ($eventType) {
|
|
|
|
case 'payment_intent.succeeded':
|
|
|
|
// 处理支付成功逻辑
|
|
|
|
@file_put_contents(storage_path('logs/lyh_error.log'), var_export('success', true) . PHP_EOL, FILE_APPEND);
|
|
|
|
@file_put_contents(storage_path('logs/lyh_error.log'), var_export($eventType, true) . PHP_EOL, FILE_APPEND);
|
|
|
|
@file_put_contents(storage_path('logs/lyh_error.log'), var_export($eventData, true) . PHP_EOL, FILE_APPEND);
|
|
|
|
$paymentIntentId = $eventData['id'];
|
|
|
|
break;
|
|
|
|
case 'payment_intent.payment_failed':
|
|
|
|
// 处理支付失败逻辑
|
|
|
|
$error = $eventData['last_payment_error'];
|
|
|
|
break;
|
|
|
|
case 'charge.refunded':
|
|
|
|
// 处理退款逻辑
|
|
|
|
$chargeId = $eventData['id'];
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
throw new \Exception('Unhandled event type: ' . $eventType);
|
|
|
|
}
|
|
|
|
return $event;
|
|
|
|
} catch (Exception $e) {
|
|
|
|
throw new \Exception('Webhook Error: ' . $e->getMessage());
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @remark :处理 Webhook
|
|
|
|
* @name :handleWebhook
|
|
|
|
* @remark :验证签名
|
|
|
|
* @name :verifySignature
|
|
|
|
* @author :lyh
|
|
|
|
* @method :post
|
|
|
|
* @time :2024/12/24 10:43
|
|
|
|
* @time :2024/12/24 15:55
|
|
|
|
*/
|
|
|
|
public static function handleWebhook($payload, $sigHeader, $endpointSecret)
|
|
|
|
public static function verifySignature($payload, $sigHeader, $endpointSecret)
|
|
|
|
{
|
|
|
|
try {
|
|
|
|
$event = json_decode($payload, true);
|
|
|
|
// 检查事件类型
|
|
|
|
return $event; // 返回解析后的事件
|
|
|
|
} catch (Exception $e) {
|
|
|
|
throw new Exception('Webhook Error: ' . $e->getMessage());
|
|
|
|
// 解析 Signature Header，获取 timestamp 和签名
|
|
|
|
if (!preg_match('/t=(\d+),v1=([a-f0-9]+)/', $sigHeader, $matches)) {
|
|
|
|
return false; // 签名格式错误
|
|
|
|
}
|
|
|
|
$timestamp = $matches[1]; // 提取时间戳
|
|
|
|
$receivedSignature = $matches[2]; // 提取签名
|
|
|
|
// 防止重放攻击：检查时间戳是否在 5 分钟以内
|
|
|
|
$currentTimestamp = time();
|
|
|
|
if (abs($currentTimestamp - $timestamp) > 300) {
|
|
|
|
return false; // 签名过期
|
|
|
|
}
|
|
|
|
// 计算预期签名
|
|
|
|
$signedPayload = "{$timestamp}.{$payload}";
|
|
|
|
$expectedSignature = hash_hmac('sha256', $signedPayload, $endpointSecret);
|
|
|
|
// 比较签名是否匹配
|
|
|
|
return hash_equals($expectedSignature, $receivedSignature);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
} |
...
|
...
|
|
