ESignServer.php 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332
  1. <?php
  2. namespace App\Servers\ESign;
  3. use App\Models\Member;
  4. use App\Models\MemberSeal;
  5. use App\Servers\ESign\comm\EsignHttpHelper;
  6. use App\Servers\ESign\comm\EsignLogHelper;
  7. use App\Servers\ESign\emun\HttpEmun;
  8. use App\Servers\System\JobServer;
  9. use App\Servers\System\RedisDataServer;
  10. use App\Servers\System\SmsServer;
  11. use Illuminate\Support\Facades\Log;
  12. class ESignServer
  13. {
  14. static private $server = null;
  15. public $config = [
  16. 'eSignAppId'=>'', //app id
  17. 'eSignAppSecret'=>'', // app key
  18. 'eSignHost'=>'https://smlopenapi.esign.cn', //模拟环境
  19. // 'eSignHost'=>'https://openapi.esign.cn' //正式环境
  20. ];
  21. function __construct()
  22. {
  23. $this->config['eSignAppId']=env('E_SIGN_APP_ID');
  24. $this->config['eSignAppSecret']=env('E_SIGN_APP_SECRET');
  25. $this->config['eSignPublicKey']=env('E_SIGN_PUBLIC_KEY');
  26. $this->config['eSignHost']=env('E_SIGN_HOST');
  27. }
  28. /**
  29. * 创建对象
  30. * @return ESignServer
  31. */
  32. static function creatServer()
  33. {
  34. if (empty(self::$server)) self::$server = new ESignServer();
  35. return self::$server;
  36. }
  37. /**
  38. * @param $expireTime
  39. * @return float
  40. */
  41. function expireTime($expireTime){
  42. list($t1, $t2) = explode(' ', microtime());
  43. $nowTime=(float)sprintf('%.0f',(floatval($t1)+floatval($t2))*1000);
  44. $num=$expireTime-$nowTime;
  45. return $num;
  46. }
  47. /**
  48. * 获取个人认证&授权页面链接
  49. * @return bool
  50. */
  51. function psnauthurl($m_id,$phone,$psnName,$id_number,$psnId='')
  52. {
  53. $authShortUrl=RedisDataServer::creatServer()->getData($m_id.'_memberUrl');
  54. if($authShortUrl){
  55. return true;
  56. }
  57. $config=$this->config;
  58. $apiaddr="/v3/psn-auth-url";
  59. $requestType = HttpEmun::POST;
  60. $data=[
  61. "psnAuthConfig"=>[
  62. "psnAccount"=>$phone ?? '',
  63. "psnId"=>$psnId,
  64. "psnInfo" => [
  65. "psnName" => $psnName,
  66. "psnIDCardNum" => $id_number,
  67. "psnIDCardType" => "CRED_PSN_CH_IDCARD",
  68. ],
  69. ],
  70. // "authorizeConfig" =>[
  71. // "authorizedScopes" => [
  72. // "get_psn_identity_info","psn_initiate_sign","manage_psn_resource","psn_sign_file_storage"
  73. // ],
  74. // ],
  75. "redirectConfig"=>[
  76. "redirectUrl"=>'',
  77. ],
  78. "notifyUrl"=>route('adminApi.notify.esignNotify'),
  79. "clientType"=>"ALL",
  80. "appScheme"=>""
  81. ];
  82. $paramStr = json_encode($data);
  83. //生成签名验签+json体的header
  84. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr);
  85. //发起接口请求
  86. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr);
  87. // dd($response->getBody());
  88. Log::channel('daily')->info('个人实名认证:',$response->getBody());
  89. $ret=json_decode($response->getBody(),true);
  90. if(isset($ret['code']) && $ret['code']==0){
  91. $authShortUrl=RedisDataServer::creatServer()->getData($m_id.'_memberUrl');
  92. if($authShortUrl){
  93. return true;
  94. }
  95. $signMember=Member::where('id',$m_id)->where('authType','PSN')->where([['updated_at','<=',date('Y-m-d H:i:s',time()-600),'or'],['authShortUrl','=','','or']])->first();
  96. if($signMember){
  97. $authUrl = $ret['data']['authUrl'];
  98. $authShortUrl = $ret['data']['authShortUrl'];
  99. $parts = parse_url($authShortUrl);
  100. $path = trim($parts['path'],'/');
  101. $zh_url = route('member.user').'?'.$path;
  102. RedisDataServer::creatServer()->setData($m_id.'_memberUrl',$authShortUrl,'str',600);
  103. $authFlowId = $ret['data']['authFlowId'];
  104. // $content='尊敬的'.$signMember['name'].',您有待认证信息,点击认证 '.$authShortUrl.'。拒收请回复R';
  105. $zh_url=str_replace('esign.jhcs888.com','app.jhcs888.com',$zh_url);
  106. $zh_url=str_replace('http://','https://',$zh_url);
  107. $content='尊敬的'.$signMember['name'].',您有待认证信息,点击认证 '.$zh_url.'。拒收请回复R';
  108. SmsServer::creatServer()->sendContent($signMember['phone'],$content);
  109. //存入数据库
  110. $signMember->update([
  111. 'authUrl'=>$authUrl,
  112. 'authShortUrl'=>$authShortUrl,
  113. 'zh_url'=>$zh_url,
  114. 'authFlowId'=>$authFlowId,
  115. ]);
  116. }
  117. return true;
  118. }else{//认证授权错误
  119. return false;
  120. }
  121. }
  122. /**
  123. * 查询个人认证信息
  124. * @param $phone //手机号
  125. * @param $psnName //认证人姓名
  126. * @param $id_number //认证人身份证号
  127. * @return SignMember|\Illuminate\Database\Eloquent\Builder|\Illuminate\Database\Eloquent\Model|object|null
  128. */
  129. function personsidentityinfo($m_id,$phone,$psnName,$id_number)
  130. {
  131. $info = Member::where('id_number',$id_number)->where('id',$m_id)->where('authType','PSN')->select(['realnameStatus','authorizeUserInfo','psnId'])->first();
  132. if($info->{'realnameStatus'}==1 && $info->{'psnId'}!=''){
  133. return $info->{'realnameStatus'};
  134. }
  135. $config=$this->config;
  136. $apiaddr="/v3/persons/identity-info?psnIDCardNum=".$id_number."&psnIDCardType=CRED_PSN_CH_IDCARD";
  137. $requestType = HttpEmun::GET;
  138. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr);
  139. //发起接口请求
  140. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, "");
  141. Log::channel('daily')->info('个人实名认证:',$response->getBody());
  142. $ret=json_decode($response->getBody(),true);
  143. if(isset($ret['code']) && $ret['code']==0){
  144. //realnameStatus 0 - 未实名,1 - 已实名
  145. $realnameStatus = $ret['data']['realnameStatus'];
  146. //true - 已授权,false - 未授权
  147. $authorizeUserInfo = $ret['data']['authorizeUserInfo'] ? 1 : 0;
  148. //个人账号ID
  149. $psnId = $ret['data']['psnId'];
  150. //更新认证信息
  151. Member::where('id_number',$id_number)->update([
  152. 'realnameStatus'=>$realnameStatus,
  153. 'authorizeUserInfo'=>$authorizeUserInfo,
  154. 'psnId'=>$psnId,
  155. ]);
  156. // if (empty($realnameStatus) || empty($authorizeUserInfo)){//走个人认证授权流程
  157. // $this->psnauthurl($m_id,$phone,$psnName,$id_number,$psnId);
  158. // }else{
  159. // //检测系统内部的印章信息
  160. // JobServer::creatServer()->createMemberSealJob($psnId);
  161. // }
  162. if (empty($realnameStatus)){//走个人认证授权流程
  163. $this->psnauthurl($m_id,$phone,$psnName,$id_number,$psnId);
  164. }
  165. //未授权也注销
  166. if(empty($authorizeUserInfo))$realnameStatus=0;
  167. }else{//证明从来没有在e签宝注册过
  168. //realnameStatus 0 - 未实名,1 - 已实名
  169. $realnameStatus = 0;
  170. //true - 已授权,false - 未授权
  171. $authorizeUserInfo = 0;
  172. //个人账号ID
  173. $psnId = '';
  174. //走认证授权流程
  175. $this->psnauthurl($m_id,$phone,$psnName,$id_number);
  176. }
  177. return $realnameStatus;
  178. }
  179. /**
  180. * 获取用户签章列表
  181. * @param $mId
  182. * @param $psnId
  183. * @param $pageNum
  184. * @return array|string[]
  185. */
  186. function internalAuthInfo($mId,$psnId,$pageNum=1){
  187. $config=$this->config;
  188. $data['psnId'] = $psnId;
  189. $data['pageNum'] = $pageNum;
  190. $data['pageSize'] = 20;
  191. ksort($data);
  192. $apiaddr="/v3/seals/psn-seal-list?".http_build_query($data);
  193. // var_dump($apiaddr);
  194. $requestType = HttpEmun::GET;
  195. //生成签名验签+json体的header
  196. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr);
  197. // dd($signAndBuildSignAndJsonHeader);
  198. // EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader);
  199. //发起接口请求
  200. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, "");
  201. $ret=json_decode($response->getBody(),true);
  202. if(isset($ret['code']) && $ret['code']==0){
  203. //存入签章信息
  204. $this->setMemberSealList($mId,$ret['data']['seals'],1);
  205. return ['code'=>'1','msg'=>'ok','data'=>['total'=>$ret['data']['total'],'items'=>$ret['data']['seals']]];
  206. }else{
  207. return ['code'=>'0','msg'=>$ret['message']];
  208. }
  209. }
  210. /**
  211. * 设置企业签章信息
  212. * @param $mId
  213. * @param $list
  214. * @param $useType
  215. * @return void
  216. */
  217. public function setMemberSealList($mId,$list)
  218. {
  219. if($list){
  220. foreach ($list as $item){
  221. $sealRow=[
  222. 'm_id'=>$mId,
  223. 'seal_id'=>$item['sealId'],
  224. 'seal_name'=>$item['sealName'],
  225. 'seal_status'=>$item['sealStatus'],
  226. 'seal_url'=>$item['sealImageDownloadUrl'],
  227. ];
  228. $sealModel=MemberSeal::where('m_id',$mId)->where('seal_id',$item['sealId'])->first();
  229. if(empty($sealModel)){
  230. $sealModel=MemberSeal::create($sealRow);
  231. }else{
  232. $sealModel->update($sealRow);
  233. }
  234. $this->setSealImg($sealModel);
  235. }
  236. }
  237. }
  238. /**
  239. * 保持印章图片
  240. * @param MemberSeal $memberSeal
  241. * @return void
  242. */
  243. function setSealImg(MemberSeal $memberSeal)
  244. {
  245. $path=public_path('storage/memberSeal/'.date('Ymd').'/');
  246. if(!is_dir($path)){
  247. mkdir($path,0777,true);
  248. }
  249. $name=$memberSeal['seal_id'].'.png';
  250. file_put_contents($path.$name,file_get_contents($memberSeal['seal_url']));
  251. $url=env('APP_URL').'/storage/memberSeal/'.date('Ymd').'/'.$name;
  252. $memberSeal->update(['seal_url'=>$url]);
  253. }
  254. /**
  255. * 创建合同印章
  256. * @param $mId
  257. * @param $psnId
  258. * @return string[]|void
  259. */
  260. function createOrgsealsbyTemplate($mId,$psnId){
  261. $sealNum=MemberSeal::where('m_id',$mId)->count();
  262. if($sealNum>0){
  263. return ['code'=>'0','msg'=>'印章已创建'];
  264. }
  265. $config=$this->config;
  266. $apiaddr="/v3/seals/psn-seals/create-by-template";
  267. $requestType = HttpEmun::POST;
  268. //生成签名验签+json体的header
  269. $data=[
  270. "psnId"=>$psnId,
  271. "sealName"=>"合同印章",//机构印章名称(用户自定义,且名称不可重复)
  272. "sealTemplateStyle"=>"RECTANGLE_NO_BORDER",//机构模板印章样式
  273. "sealSize"=>"20_10",
  274. "sealColor"=>"RED",//机构印章颜色,默认是红色
  275. "sealOpacity" =>80
  276. ];
  277. $paramStr = json_encode($data);
  278. //请求参数
  279. // EsignLogHelper::printMsg($paramStr);
  280. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr);
  281. //发起接口请求头
  282. // EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader);
  283. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr);
  284. $ret=json_decode($response->getBody(),true);
  285. if(isset($ret['code']) && $ret['code']==0){
  286. //realnameStatus 0 - 未实名,1 - 已实名
  287. MemberSeal::create([
  288. 'm_id' => $mId,
  289. 'seal_id' => $ret['data']['sealId'],
  290. ]);
  291. //获取完成印章以后重新拉取一下印章信息
  292. $this->internalAuthInfo($mId,$psnId);
  293. return ['code'=>'1','msg'=>'ok'];
  294. }else{
  295. return ['code'=>'0','msg'=>$ret['message']];
  296. }
  297. }
  298. }