From 02d9243b4050f3ec85495647c182d61550b0a192 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=82=B9=E6=99=AF=E7=AB=8B?= <zoujingli@qq.com>
Date: Sat, 28 Sep 2024 21:40:25 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E5=BE=AE=E4=BF=A1V3=E6=94=AF=E4=BB=98?=
 =?UTF-8?q?=E5=A2=9E=E5=8A=A0=E6=96=87=E4=BB=B6=E4=B8=8A=E4=BC=A0=E6=8E=A5?=
 =?UTF-8?q?=E5=8F=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 WePayV3/Contracts/BasicWePay.php | 77 ++++++++++++++++++++++++++++++++
 1 file changed, 77 insertions(+)

diff --git a/WePayV3/Contracts/BasicWePay.php b/WePayV3/Contracts/BasicWePay.php
index c271c4c..c98f068 100644
--- a/WePayV3/Contracts/BasicWePay.php
+++ b/WePayV3/Contracts/BasicWePay.php
@@ -206,6 +206,83 @@ abstract class BasicWePay
         return $isjson ? json_decode($content, true) : $content;
     }
 
+    /**
+     * 模拟发起上传请求
+     * @param string $pathinfo 请求路由
+     * @param string $filename 文件本地路径
+     * @param boolean $verify 是否验证
+     * @param boolean $isjson 返回JSON
+     * @return array|string
+     * @throws \WeChat\Exceptions\InvalidResponseException
+     */
+    public function doUpload($pathinfo, $filename, $verify = false, $isjson = true)
+    {
+        $filedata = file_get_contents($filename);
+        $fileinfo = [
+            'sha256'   => hash("sha256", $filedata),
+            'filename' => basename($filename)
+        ];
+        $jsondata = json_encode($fileinfo);
+        list($time, $nonce) = [time(), uniqid() . rand(1000, 9999)];
+        $signstr = join("\n", ['POST', $pathinfo, $time, $nonce, $jsondata, '']);
+        // 生成签名
+        $sign = $this->signBuild($signstr);
+        // 生成数据签名TOKEN
+        $token = sprintf('mchid="%s",nonce_str="%s",timestamp="%d",serial_no="%s",signature="%s"',
+            $this->config['mch_id'], $nonce, $time, $this->config['cert_serial'], $sign
+        );
+        $location = (preg_match('|^https?://|', $pathinfo) ? '' : $this->base) . $pathinfo;
+        $boundary = mt_rand(100000000000000000, 999999999999999999);
+        $header = [
+            'Accept: application/json',
+            "Content-Type: multipart/form-data; boundary={$boundary}",
+            'User-Agent: https://thinkadmin.top',
+            "Authorization: WECHATPAY2-SHA256-RSA2048 {$token}",
+            "serial_no: {$this->config['mp_cert_serial']}",
+            "nonce_str: {$nonce}",
+            "signature: {$sign}"
+        ];
+        $lines = [];
+        $line[] = "--{$boundary}";
+        $line[] = "Content-Disposition: form-data; name=\"meta\"";
+        $line[] = "Content-Type: application/json";
+        $line[] = "";
+        $line[] = $jsondata;
+        $line[] = "--{$boundary}";
+        $line[] = "Content-Disposition: form-data; name=\"file\"; filename=\"{$fileinfo['filename']}\";";
+        $line[] = "Content-Type: image/jpg";
+        $line[] = "";
+        $line[] = $filedata;
+        $line[] = "--{$boundary}--";
+        $postdata = join("\r\n", $line);
+        list($header, $content) = $this->_doRequestCurl('POST', $location, [
+            'data' => $postdata, 'header' => $header,
+        ]);
+        if ($verify) {
+            $headers = [];
+            foreach (explode("\n", $header) as $line) {
+                if (stripos($line, 'Wechatpay') !== false) {
+                    list($name, $value) = explode(':', $line);
+                    list(, $keys) = explode('wechatpay-', strtolower($name));
+                    $headers[$keys] = trim($value);
+                }
+            }
+            try {
+                if (empty($headers)) {
+                    return $isjson ? json_decode($content, true) : $content;
+                }
+                $string = join("\n", [$headers['timestamp'], $headers['nonce'], $content, '']);
+                if (!$this->signVerify($string, $headers['signature'], $headers['serial'])) {
+                    throw new InvalidResponseException('验证响应签名失败');
+                }
+            } catch (\Exception $exception) {
+                throw new InvalidResponseException($exception->getMessage(), $exception->getCode());
+            }
+        }
+        return $isjson ? json_decode($content, true) : $content;
+    }
+
+
     /**
      * 通过CURL模拟网络请求
      * @param string $method 请求方法