esign_serve/app/Servers/ESign/ESignServer.php

<?php


namespace App\Servers\ESign;



use App\Models\Member;
use App\Models\MemberSeal;
use App\Servers\ESign\comm\EsignHttpHelper;
use App\Servers\ESign\comm\EsignLogHelper;
use App\Servers\ESign\emun\HttpEmun;
use App\Servers\System\JobServer;
use App\Servers\System\RedisDataServer;
use App\Servers\System\SmsServer;
use Illuminate\Support\Facades\Log;

class ESignServer
{
    static private $server = null;

    public  $config = [
        'eSignAppId'=>'', //app id
        'eSignAppSecret'=>'', // app key
        'eSignHost'=>'https://smlopenapi.esign.cn', //模拟环境
//             'eSignHost'=>'https://openapi.esign.cn' //正式环境
    ];

    function __construct()
    {
            $this->config['eSignAppId']=env('E_SIGN_APP_ID');
            $this->config['eSignAppSecret']=env('E_SIGN_APP_SECRET');
            $this->config['eSignPublicKey']=env('E_SIGN_PUBLIC_KEY');
            $this->config['eSignHost']=env('E_SIGN_HOST');
    }

    /**
     * 创建对象
     * @return ESignServer
     */
    static function creatServer()
    {
        if (empty(self::$server)) self::$server = new ESignServer();
        return self::$server;
    }



    /**
     * @param $expireTime
     * @return float
     */
    function expireTime($expireTime){
        list($t1, $t2) = explode(' ', microtime());
        $nowTime=(float)sprintf('%.0f',(floatval($t1)+floatval($t2))*1000);
        $num=$expireTime-$nowTime;
        return $num;
    }

    /**
     * 获取个人认证&授权页面链接
     * @return bool
     */
    function psnauthurl($m_id,$phone,$psnName,$id_number,$psnId='')
    {
        $authShortUrl=RedisDataServer::creatServer()->getData($m_id.'_memberUrl');
        if($authShortUrl){
            return true;
        }
        $config=$this->config;
        $apiaddr="/v3/psn-auth-url";
        $requestType = HttpEmun::POST;
        $data=[
            "psnAuthConfig"=>[
                "psnAccount"=>$phone ??  '',
                "psnId"=>$psnId,
                "psnInfo" => [
                    "psnName" => $psnName,
                    "psnIDCardNum" => $id_number,
                    "psnIDCardType" => "CRED_PSN_CH_IDCARD",
                ],
            ],
//            "authorizeConfig" =>[
//                "authorizedScopes" => [
//                    "get_psn_identity_info","psn_initiate_sign","manage_psn_resource","psn_sign_file_storage"
//                ],
//            ],
            "redirectConfig"=>[
                "redirectUrl"=>'',
            ],
            "notifyUrl"=>route('adminApi.notify.esignNotify'),
            "clientType"=>"ALL",
            "appScheme"=>""
        ];
        $paramStr = json_encode($data);
        //生成签名验签+json体的header
        $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr);
        //发起接口请求
        $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr);
//        dd($response->getBody());
        $ret=json_decode($response->getBody(),true);

        Log::channel('daily')->info('个人实名认证授权页面链接：',$ret);
        if(isset($ret['code']) && $ret['code']==0){
            $authShortUrl=RedisDataServer::creatServer()->getData($m_id.'_memberUrl');
            if($authShortUrl){
                return true;
            }
            $signMember=Member::where('id',$m_id)->where('authType','PSN')->where([['updated_at','<=',date('Y-m-d H:i:s',time()-600),'or'],['authShortUrl','=','','or']])->first();
            if($signMember){
                $authUrl = $ret['data']['authUrl'];
                $authShortUrl = $ret['data']['authShortUrl'];

                $parts = parse_url($authShortUrl);
                $path = trim($parts['path'],'/');
                $zh_url = route('member.user').'?'.$path;
                RedisDataServer::creatServer()->setData($m_id.'_memberUrl',$authShortUrl,'str',600);
                $authFlowId = $ret['data']['authFlowId'];
//                $content='尊敬的'.$signMember['name'].'，您有待认证信息，点击认证 '.$authShortUrl.'。拒收请回复R';
                $zh_url=str_replace('esign.jhcs888.com','app.jhcs888.com',$zh_url);
                $zh_url=str_replace('http://','https://',$zh_url);
                $content='尊敬的'.$signMember['name'].'，您有待认证信息，点击认证 '.$zh_url.'。拒收请回复R';
                 SmsServer::creatServer()->sendContent($signMember['phone'],$content);
                //存入数据库
                $signMember->update([
                    'authUrl'=>$authUrl,
                    'authShortUrl'=>$authShortUrl,
                    'zh_url'=>$zh_url,
                    'authFlowId'=>$authFlowId,
                ]);
            }
            return true;
        }else{//认证授权错误
            return false;
        }
    }

    /**
     * 查询个人认证信息
     * @param $phone //手机号
     * @param $psnName //认证人姓名
     * @param $id_number //认证人身份证号
     * @return SignMember|\Illuminate\Database\Eloquent\Builder|\Illuminate\Database\Eloquent\Model|object|null
     */
    function personsidentityinfo($m_id,$phone,$psnName,$id_number)
    {
        $info =  Member::where('id_number',$id_number)->where('id',$m_id)->where('authType','PSN')->select(['realnameStatus','authorizeUserInfo','psnId'])->first();
        if($info->{'realnameStatus'}==1 && $info->{'psnId'}!=''){
            return $info->{'realnameStatus'};
        }

        $config=$this->config;
        $apiaddr="/v3/persons/identity-info?psnIDCardNum=".$id_number."&psnIDCardType=CRED_PSN_CH_IDCARD";
        $requestType = HttpEmun::GET;
        $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr);
        //发起接口请求
        $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, "");

        $ret=json_decode($response->getBody(),true);

        Log::channel('daily')->info('查询个人实名认证：',$ret);
        if(isset($ret['code']) && $ret['code']==0){
            //realnameStatus 0 - 未实名，1 - 已实名
            $realnameStatus = $ret['data']['realnameStatus'];
            //true - 已授权，false - 未授权
            $authorizeUserInfo = $ret['data']['authorizeUserInfo'] ? 1 : 0;
            //个人账号ID
            $psnId = $ret['data']['psnId'];
            //更新认证信息
            Member::where('id_number',$id_number)->update([
                'realnameStatus'=>$realnameStatus,
                'authorizeUserInfo'=>$authorizeUserInfo,
                'psnId'=>$psnId,
            ]);
//            if (empty($realnameStatus) || empty($authorizeUserInfo)){//走个人认证授权流程
//                $this->psnauthurl($m_id,$phone,$psnName,$id_number,$psnId);
//            }else{
//                //检测系统内部的印章信息
//                JobServer::creatServer()->createMemberSealJob($psnId);
//            }
            if (empty($realnameStatus)){//走个人认证授权流程
                $this->psnauthurl($m_id,$phone,$psnName,$id_number,$psnId);
            }
            //未授权也注销
            if(empty($authorizeUserInfo))$realnameStatus=0;
        }else{//证明从来没有在e签宝注册过
            //realnameStatus 0 - 未实名，1 - 已实名
            $realnameStatus = 0;
            //true - 已授权，false - 未授权
            $authorizeUserInfo = 0;
            //个人账号ID
            $psnId = '';
            //走认证授权流程
            $this->psnauthurl($m_id,$phone,$psnName,$id_number);
        }

        return $realnameStatus;
    }


    /**
     * 个人账号手机号变更处理
     * e签宝侧已实名账号的手机号必须由用户重新实名认证才能换绑，这里重置认证链接并重新下发认证短信
     * @param $m_id //本地用户id
     * @param $phone //新手机号
     * @param $psnName //认证人姓名
     * @param $id_number //认证人身份证号
     * @return bool
     */
    function psnphonechange($m_id,$phone,$psnName,$id_number)
    {
        $info = Member::where('id',$m_id)->select(['id','psnId','realnameStatus'])->first();
        //未认证/未实名的用户走正常认证流程即可，认证链接本身就带的是新手机号
        if (empty($info) || empty($info->{'psnId'}) || $info->{'realnameStatus'} != 1) {
            $this->personsidentityinfo($m_id,$phone,$psnName,$id_number);
            return true;
        }
        //清掉认证链接缓存及旧链接，使 psnauthurl 能重新生成并下发认证短信
        RedisDataServer::creatServer()->delData($m_id.'_memberUrl');
        Member::where('id',$m_id)->update(['authUrl'=>'','authShortUrl'=>'']);
        //携带原 psnId，e签宝会把认证绑定到原账号，用户完成后即换绑为新手机号
        return $this->psnauthurl($m_id,$phone,$psnName,$id_number,$info->{'psnId'});
    }


    /**
     * 获取用户签章列表
     * @param $mId
     * @param $psnId
     * @param $pageNum
     * @return array|string[]
     */
    function internalAuthInfo($mId,$psnId,$pageNum=1){

        $config=$this->config;
        $data['psnId'] = $psnId;
        $data['pageNum'] = $pageNum;
        $data['pageSize'] = 20;

        ksort($data);
        $apiaddr="/v3/seals/psn-seal-list?".http_build_query($data);
//        var_dump($apiaddr);
        $requestType = HttpEmun::GET;
        //生成签名验签+json体的header
        $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr);
//        dd($signAndBuildSignAndJsonHeader);
//        EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader);
        //发起接口请求
        $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, "");
        $ret=json_decode($response->getBody(),true);

        if(isset($ret['code']) && $ret['code']==0){
            //存入签章信息
            $this->setMemberSealList($mId,$ret['data']['seals'],1);
            return ['code'=>'1','msg'=>'ok','data'=>['total'=>$ret['data']['total'],'items'=>$ret['data']['seals']]];
        }else{
            return ['code'=>'0','msg'=>$ret['message']];
        }
    }



    /**
     * 设置企业签章信息
     * @param $mId
     * @param $list
     * @param $useType
     * @return void
     */
    public function setMemberSealList($mId,$list)
    {
        if($list){
            foreach ($list as $item){
                $sealRow=[
                    'm_id'=>$mId,
                    'seal_id'=>$item['sealId'],
                    'seal_name'=>$item['sealName'],
                    'seal_status'=>$item['sealStatus'],
                    'seal_url'=>$item['sealImageDownloadUrl'],
                ];
                $sealModel=MemberSeal::where('m_id',$mId)->where('seal_id',$item['sealId'])->first();
                if(empty($sealModel)){
                    $sealModel=MemberSeal::create($sealRow);
                }else{
                    $sealModel->update($sealRow);
                }
                $this->setSealImg($sealModel);
            }
        }
    }


    /**
     * 保持印章图片
     * @param MemberSeal $memberSeal
     * @return void
     */
    function setSealImg(MemberSeal  $memberSeal)
    {
        $path=public_path('storage/memberSeal/'.date('Ymd').'/');
        if(!is_dir($path)){
            mkdir($path,0777,true);
        }
        $name=$memberSeal['seal_id'].'.png';
        file_put_contents($path.$name,file_get_contents($memberSeal['seal_url']));
        $url=env('APP_URL').'/storage/memberSeal/'.date('Ymd').'/'.$name;
        $memberSeal->update(['seal_url'=>$url]);
    }



    /**
     * 创建合同印章
     * @param $mId
     * @param $psnId
     * @return string[]|void
     */
    function createOrgsealsbyTemplate($mId,$psnId){
        $sealNum=MemberSeal::where('m_id',$mId)->count();
        if($sealNum>0){
            return ['code'=>'0','msg'=>'印章已创建'];
        }

        $config=$this->config;
        $apiaddr="/v3/seals/psn-seals/create-by-template";
        $requestType = HttpEmun::POST;
//生成签名验签+json体的header
        $data=[
            "psnId"=>$psnId,
            "sealName"=>"合同印章",//机构印章名称（用户自定义，且名称不可重复）
            "sealTemplateStyle"=>"RECTANGLE_NO_BORDER",//机构模板印章样式
            "sealSize"=>"20_10",
            "sealColor"=>"RED",//机构印章颜色，默认是红色
            "sealOpacity" =>80
        ];
        $paramStr = json_encode($data);
        //请求参数
        // EsignLogHelper::printMsg($paramStr);
        $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr);
        //发起接口请求头
//        EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader);
        $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr);
        $ret=json_decode($response->getBody(),true);
        if(isset($ret['code']) && $ret['code']==0){
            //realnameStatus 0 - 未实名，1 - 已实名
            MemberSeal::create([
                'm_id' => $mId,
                'seal_id' => $ret['data']['sealId'],
            ]);
            //获取完成印章以后重新拉取一下印章信息
            $this->internalAuthInfo($mId,$psnId);
            return ['code'=>'1','msg'=>'ok'];
        }else{
            return ['code'=>'0','msg'=>$ret['message']];
        }
    }
}