Micro-channel payment distinguish

First: JSAPI pay https://pay.weixin.qq.com/wiki/doc/api/jsapi.php?chapter=7_1

Usage scenarios: JSAPI merchant payment means through micro-channel interface call JSAPI payment provider, the payment scenario invoking micro-channel module to complete the payment collection

Example A: Example B next line: No public scene C: PC websites scene

A: B: C:

JSAPI payment instructions

<?php
namespace App\Http\Controllers\Api;

use App\Api\Helpers\MoveNumber;
use App\Http\Controllers\Controller;
use App\Http\Middleware\ApiLog;
use App\Models\MShopOrders;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\DB;
use Illuminate\Support\Facades\Validator;
use EasyWeChat\Factory;

/**
 * Orders
 *
 */
class NotifyController extends Controller {
    MoveNumber use;
    /**
     * Callback pay
     *
     */
    public function notify_wx()
    {
        writeLogs ([], 'has entered into the micro channel callback', 'notify'); // write log records
        $notify_data = file_get_contents("php://input");
        $notify_data = $this->from_xml($notify_data);
        writeLogs ($ notify_data, 'call back return data', 'notify'); // write log records
        if (!$notify_data) {
            writeLogs ($ notify_data, 'message is not received', 'notify'); // write log records
            $notify_data = $GLOBALS['HTTP_RAW_POST_DATA'] ?: '';
        }
        // Check test
        $return_data = $this->query_weixin_sign($notify_data);
        if (!$return_data) {
            writeLogs ($ notify_data, 'check failed test', 'notify'); // write log records
            echo 'fail';
            the;
        }
        writeLogs ($ notify_data, '- stamped by', 'notify'); // write log records

        if ($notify_data['return_code'] == 'SUCCESS' && $notify_data['result_code'] == 'SUCCESS') {
            $order_id = $notify_data['out_trade_no'];
            $check_data = MShopOrders::where(['order_sn' => $order_id])->first();
            if ($check_data['status'] == 0) {
                // transaction open
                DB::beginTransaction();
                try {
                    // Change Order Status
                    $result = MShopOrders::where(['order_sn' => $order_id])->update(['status'=> 1]);
                    if ( !$result ) {
                        DB::rollBack();
                    }
                    // Create Order No. camped
                    $move_order_id = $this->make_phone_order($order_id);
                    if ( $move_order_id == -1 ) {
                        DB::rollBack();
                        throw new \ LogicException ( 'account numbers to create a pre-order failed', 201);
                    }
                    // camped No. successfully updated order data
                    $res = MShopOrders::where(['order_sn' => $order_id])->update(['order_operator'=> $move_order_id]);
                    if ( !$res ) {
                        DB::rollBack();
                        throw new \ LogicException ( 'camped update number order failed', 202);
                    }
                    DB::commit();
                    echo 'success';
                    the;
                } catch (\Exception $e) {
                    writeLogs ($ notify_data, "pay callback update fails, the failure code:" $ e-> getCode () ", failed msg:"... $ e-> getMessage (), 'notify'); // write log records
                    DB::rollBack();
                    echo 'fail';
                    the;
                }
            }
            echo "success";
            the;
        }
    }

    /**
     * Generate signature - override this method
     * @Param array $ data configuration object
     *
     * @return float
     */
    public function query_weixin_sign($data)
    {
        $wxconfig = config("wechat.payment.default");
        // Signature Step 1: Pressing lexicographical sort parameter
        ksort($data);
        $checkSign = $data['sign'];
        unset($data['sign']);
        $string = $this->to_url_params($data);
        // Signature Step two: Add after the string KEY
        $string = $string . "&key=".$wxconfig['key'];
        // Signature Step three: MD5 or HMAC-SHA256 encryption
        if(strlen($checkSign) <= 32){
            // If the signature is less than or equal to 32, is used to verify md5
            $string = md5($string);
        } else {
            // check with sha256
            $string = hash_hmac("sha256",$string ,$wxconfig['key']);
        }
        // Signature Step four: all characters to uppercase
        $result = strtoupper($string);
        writeLogs ([ 'sign' => $ result, 'checksign' => $ checkSign], 'callback data signature verification', 'notify'); // write log records
        if($result == $checkSign) {
            return true;
        } else {
            return false;
        }
    }

    public function from_xml($xml)
    {
        if (!$xml) {
            echo "xml data exception!";
        }
        // will be converted to XML xml array prohibit references to external entities
        libxml_disable_entity_loader(true);
        $data = json_decode(json_encode(simplexml_load_string($xml, 'SimpleXMLElement', LIBXML_NOCDATA)), true);
        return $data;
    }

    /**
     * Url parameter formatted into formatting parameters
     * @Param array $ datas parameters
     *
     * @return string
     */
    private function to_url_params($datas)
    {
        $buff = "";
        foreach ($datas as $k => $v) {
            if ($k != "sign" && $v != "" && !is_array($v)) {
                $buff .= $k . "=" . $v . "&";
            }
        }
        $buff = trim($buff, "&");
        return $buff;
    }
}

First, the use of scenarios and descriptions

Usage scenarios: merchant has H5 mall site, the user via a message or two-dimensional code scanning when you open the page in the micro letter, you can call micro-channel flow to complete a single purchase payment under.

Description: a graphic user opens the message or scanning two-dimensional code, the payment open pages in the micro channel built-in browser.

JSAPI 2. By using the micro-business web front end provided by letter, call micro-channel payment module. In this way, the need for purchase orders for the purchase process in the business page.

Second, prepare for work

No public needs to pay in advance in micro-channel public platform service configuration, including setting up payment authorization directory , testing paid directories and white list , set the JS port security domain and set the authorization callback page domain .

1. Before the public micro-channel payment, we need to apply for a public number, and feature requests micro-channel pay.

2. The payment authorization directory:

Location: micro-channel pay -> Development Configuration -> number of public pay

1) All numbers using public payment initiate a payment request link address, have to be paid under the authority of the directory;

2) the official payment authorization set up to three directory, set up to test an authorized directory, and the domain name must be filed by ICP; == "Up to now (2017.11.15) the payment authorization directory settings have been moved to

Merchant platform -> Products -> Development configuration (? Portal: https: //pay.weixin.qq.com/wiki/doc/api/jsapi.php chapter = 7_3), and can set up to five simultaneously table of Contents

Directory Example:

|||||||| If no authorization directory or not, when the phone calls micro-channel jsapi error :

3) header to include http or https, and must be refined to a secondary or tertiary directory, "/" slash the left end.

Business page address in initiating the payment must be under the authority of the directory, otherwise it will prompt "the current page URL is not registered" when calling the single interface.

Here again long-winded to add two points:

1) without the use of the framework, such as the official sdk download, into the root directory on the demo, demo / example / jaspi.php, authorize catalog refer to http: // www ××× .com / demo. / example /

2) the case of using the framework, such ThinkPHP, named Test item, directory structure, test / Application / Home / controller / WxpayController.class.php, authorized directory may refer to http: // www ××× .com /. index.php / Home / Wxpay /

3. JS interface security domain:

Location: micro-channel pay -> Public No. Settings -> Feature Settings -> JS interface security domain

Description: After setting JS port security domain, the public can call the numbers developer of JS WeChat open interfaces in this domain.

Precautions:

1) domain can fill three, or more than one requirement is a domain name (for example: qq.com, or www.qq.com), need to use letters, numbers, and "-" combination, do not support IP address and port number;

2) Fill in the domain name must be verified by ICP record;

3) modify and save up to three times within a calendar month.

4. Authorizes callback page :( domain name must be used to pay jsapi)

Location: micro-channel pay -> Interface Permissions -> Web users authorized to obtain basic information

用户在网页授权页同意授权给公众号后，微信会将授权数据传给一个回调页面，回调页面需在此域名下，以确保安全可靠。

注意事项：

1）回调页面域名需使用字母、数字及“-”的组合，不支持IP地址及端口号。填写的域名需与实际回调URL中的域名相同；

2）填写的域名须通过ICP备案的验证。

获取用户授权时redirect_uri对应的URL必须在此域名下，否则回调的地址会无法打开。

三、开发步骤

说明：整个微信公众号支付的流程如下：

【1】用户点击公众号内微信商城打开H5的支付页面

【2】H5页面通过JS调用微信支付接口

【3】微信服务器通过判断输入的JSON数据，返回给客户端相应的成功或失败信息

官方demo结构如下：

1.JSAPI支付——H5网页端调起支付接口

1）用户同意授权，获取code

请求链接：https://open.weixin.qq.com/connect/oauth2/authorize?appid=APPID&redirect_uri=REDIRECT_URI&response_type=code&scope=SCOPE&state=STATE#we-chat_redirect