ESignFirmServer.php 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423
  1. <?php
  2. namespace App\Servers\ESign;
  3. use App\Models\Firm;
  4. use App\Models\FirmSeal;
  5. use App\Models\Member;
  6. use App\Servers\ESign\comm\EsignHttpHelper;
  7. use App\Servers\ESign\comm\EsignLogHelper;
  8. use App\Servers\ESign\emun\HttpEmun;
  9. use App\Servers\System\CommonServer;
  10. use App\Servers\System\JobServer;
  11. use App\Servers\System\RedisDataServer;
  12. use App\Servers\System\SmsServer;
  13. class ESignFirmServer
  14. {
  15. static private $server = null;
  16. public $config = [
  17. 'eSignAppId'=>'', //app id
  18. 'eSignAppSecret'=>'', // app key
  19. 'eSignHost'=>'https://smlopenapi.esign.cn', //模拟环境
  20. // 'url'=>'https://openapi.esign.cn' //正式环境
  21. ];
  22. function __construct()
  23. {
  24. $this->config['eSignAppId']=env('E_SIGN_APP_ID');
  25. $this->config['eSignAppSecret']=env('E_SIGN_APP_SECRET');
  26. $this->config['eSignPublicKey']=env('E_SIGN_PUBLIC_KEY');
  27. $this->config['eSignHost']=env('E_SIGN_HOST');
  28. }
  29. /**
  30. * 创建对象
  31. * @return ESignFirmServer
  32. */
  33. static function creatServer()
  34. {
  35. if (empty(self::$server)) self::$server = new ESignFirmServer();
  36. return self::$server;
  37. }
  38. /**
  39. * 查询企业授权详情
  40. * @param $orgId
  41. * @return \App\Servers\ESign\comm\EsignResponse
  42. */
  43. function organizationsAuthorizedInfo($orgId){
  44. $config=$this->config;
  45. $apiaddr="/v3/organizations/".$orgId."/authorized-info";
  46. $requestType = HttpEmun::GET;
  47. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr);
  48. //发起接口请求
  49. EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader);
  50. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, "");
  51. EsignLogHelper::printMsg($response->getStatus());
  52. EsignLogHelper::printMsg($response->getBody());
  53. return $response;
  54. }
  55. /**
  56. * 查询企业实名状态
  57. * @param $orgName
  58. * @return mixed
  59. */
  60. function organizationsIdentityInfo($firm_id,$orgName){
  61. $info = Firm::where('id',$firm_id)->where('authType','ORG')->select(['realnameStatus','authorizeUserInfo','orgId'])->first();
  62. if($info->{'realnameStatus'}==1 && $info->{'orgId'}!=''){
  63. return $info->{'realnameStatus'};
  64. }
  65. $config=$this->config;
  66. $firm=Firm::where('id',$firm_id)->select(['id','license_number','firm_name'])->first();
  67. $apiaddr="/v3/organizations/identity-info?orgIDCardNum=".$firm['license_number'].'&orgIDCardType=CRED_ORG_USCC';
  68. $requestType = HttpEmun::GET;
  69. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr);
  70. //发起接口请求
  71. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, "");
  72. $ret=json_decode($response->getBody(),true);
  73. if(isset($ret['code']) && $ret['code']==0){
  74. //realnameStatus 0 - 未实名,1 - 已实名
  75. $realnameStatus = $ret['data']['realnameStatus'];
  76. //true - 已授权,false - 未授权
  77. $authorizeUserInfo = $ret['data']['authorizeUserInfo'] ? 1 : 0;
  78. //个人账号ID
  79. $orgId = $ret['data']['orgId'];
  80. //更新认证信息
  81. Firm::where('id',$firm_id)->where('authType','ORG')->update([
  82. 'realnameStatus'=>$realnameStatus,
  83. 'authorizeUserInfo'=>$authorizeUserInfo,
  84. 'orgId'=>$orgId,
  85. ]);
  86. // if (empty($realnameStatus) || empty($authorizeUserInfo)){//走认证授权流程
  87. // $this->orgAuthUrl($firm_id,$orgName);
  88. // }else{
  89. // //检测系统内部的企业印章信息
  90. // JobServer::creatServer()->createFirmSealJob($orgId);
  91. // }
  92. if (empty($realnameStatus)){//走认证授权流程
  93. $this->orgAuthUrl($firm_id,$orgName);
  94. }
  95. }else{//证明从来没有在e签宝注册过
  96. //realnameStatus 0 - 未实名,1 - 已实名
  97. $realnameStatus = 0;
  98. //true - 已授权,false - 未授权
  99. $authorizeUserInfo = 0;
  100. //个人账号ID
  101. $orgId = '';
  102. //走认证授权流程
  103. $this->orgAuthUrl($firm_id,$orgName);
  104. }
  105. return $realnameStatus;
  106. }
  107. /**
  108. * 企业实名
  109. * @param $orgName
  110. */
  111. function orgAuthUrl($firm_id,$orgName){
  112. $authShortUrl=RedisDataServer::creatServer()->getData($firm_id.'_firmUrl');
  113. if($authShortUrl){
  114. return true;
  115. }
  116. $config=$this->config;
  117. $apiaddr="/v3/org-auth-url";
  118. $requestType = HttpEmun::POST;
  119. $firm=Firm::where('id',$firm_id)->first();
  120. $data=[
  121. "orgAuthConfig"=>[
  122. "orgName"=>$orgName,
  123. "orgInfo"=>[
  124. "orgIDCardNum"=>$firm['license_number'],
  125. "legalRepName"=>$firm['legal_name'],
  126. "orgIDCardType"=>"CRED_ORG_USCC",
  127. ],
  128. "transactorInfo"=>[
  129. "psnAccount"=>$firm['phone'],
  130. "psnInfo"=>[
  131. "psnIDCardNum"=>$firm['legal_id_number'],
  132. "psnName"=>$firm['legal_name'],
  133. "psnIDCardType"=>"CRED_PSN_CH_IDCARD"
  134. ]
  135. ],
  136. ],
  137. // "authorizeConfig"=>[
  138. // "authorizedScopes"=>[
  139. // "get_org_identity_info","get_psn_identity_info","org_initiate_sign","psn_initiate_sign","manage_org_resource","manage_psn_resource","psn_sign_file_storage","org_sign_file_storage","org_approval_info","use_org_order"
  140. // ]
  141. // ],
  142. "notifyUrl"=>route('adminApi.notify.esignNotify'),
  143. "clientType"=>"ALL",
  144. "appScheme"=>""
  145. ];
  146. if($firm['auth_bank']){
  147. $data['orgAuthConfig']['orgInfo']['orgBankAccountNum']=$firm['auth_bank'];
  148. $data['orgAuthConfig']['orgAuthPageConfig']['orgDefaultAuthMode']='ORG_BANK_TRANSFER';
  149. $data['orgAuthConfig']['orgAuthPageConfig']['orgAvailableAuthModes']=['ORG_BANK_TRANSFER'];
  150. }else{
  151. $data['orgAuthConfig']['orgInfo']['legalRepIDCardNum']=$firm['legal_id_number'];
  152. $data['orgAuthConfig']['orgInfo']['legalRepIDCardType']='CRED_PSN_CH_IDCARD';
  153. }
  154. $paramStr = json_encode($data);
  155. //生成签名验签+json体的header
  156. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr);
  157. //发起接口请求
  158. // EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader);
  159. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr);
  160. // EsignLogHelper::printMsg($response->getStatus());
  161. // EsignLogHelper::printMsg($response->getBody());
  162. $ret=json_decode($response->getBody(),true);
  163. if(isset($ret['code']) && $ret['code']==0){
  164. $authShortUrl=RedisDataServer::creatServer()->getData($firm_id.'_firmUrl');
  165. if($authShortUrl){
  166. return true;
  167. }
  168. $authShortUrl = $ret['data']['authShortUrl'];
  169. RedisDataServer::creatServer()->setData($firm_id.'_firmUrl',$authShortUrl,'str',600);
  170. $authUrl = $ret['data']['authUrl'];
  171. $authFlowId = $ret['data']['authFlowId'];
  172. $parts = parse_url($authShortUrl);
  173. $path = trim($parts['path'],'/');
  174. $zh_url = route('member.firm').'?'.$path;
  175. // $content='尊敬的'.$firm['legal_name'].',您有关联的企业信息待认证,点击认证 '.$authShortUrl.'。拒收请回复R';
  176. $zh_url=str_replace('esign.jhcs888.com','app.jhcs888.com',$zh_url);
  177. $zh_url=str_replace('http://','https://',$zh_url);
  178. $content='尊敬的'.$firm['legal_name'].',您有关联的企业信息待认证,点击认证 '.$zh_url.'。拒收请回复R';
  179. SmsServer::creatServer()->sendContent($firm['phone'],$content);
  180. //存入数据库
  181. Firm::where('id',$firm_id)->update([
  182. 'authUrl'=>$authUrl,
  183. 'authShortUrl'=>$authShortUrl,
  184. 'zh_url'=>$zh_url,
  185. 'authFlowId'=>$authFlowId,
  186. ]);
  187. return true;
  188. }else{//认证授权错误
  189. return false;
  190. }
  191. }
  192. /**
  193. * 企业授权
  194. * @param $orgName
  195. */
  196. function orgAuthorizehUrl($orgName){
  197. $config=$this->config;
  198. $apiaddr="/v3/org-auth-url";
  199. $requestType = HttpEmun::POST;
  200. $data=[
  201. "orgAuthConfig"=>[
  202. "orgName"=>$orgName,
  203. "orgInfo"=>[
  204. "orgIDCardNum"=>"",
  205. "orgIDCardType"=>" "
  206. ],
  207. "transactorInfo"=>[
  208. "psnAccount"=>"",
  209. "psnInfo"=>[
  210. "psnIDCardNum"=>"",
  211. "psnName"=>""
  212. ]
  213. ],
  214. ],
  215. "authorizeConfig"=>[
  216. "authorizedScopes"=>[
  217. "get_org_identity_info","get_psn_identity_info","org_initiate_sign","psn_initiate_sign","manage_org_resource","manage_psn_resource","use_org_order"
  218. ]
  219. ],
  220. "notifyUrl"=>route('notify.esignNotify'),
  221. "clientType"=>"ALL",
  222. "appScheme"=>""
  223. ];
  224. $paramStr = json_encode($data);
  225. //生成签名验签+json体的header
  226. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr);
  227. //发起接口请求
  228. EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader);
  229. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr);
  230. EsignLogHelper::printMsg($response->getStatus());
  231. EsignLogHelper::printMsg($response->getBody());
  232. }
  233. /**
  234. * 获取企业内部使用签章列表
  235. * @param $firmId
  236. * @param $orgId
  237. * @param $pageNum
  238. * @return array|string[]
  239. */
  240. function internalAuthInfo($firmId,$orgId,$pageNum=1){
  241. $config=$this->config;
  242. $apiaddr="/v3/seals/org-own-seal-list?orgId=".$orgId."&pageNum={$pageNum}&pageSize=20";
  243. $requestType = HttpEmun::GET;
  244. //生成签名验签+json体的header
  245. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr);
  246. //发起接口请求
  247. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, "");
  248. $ret=json_decode($response->getBody(),true);
  249. if(isset($ret['code']) && $ret['code']==0){
  250. //存入签章信息
  251. $this->setSealList($firmId,$ret['data']['seals']);
  252. return ['code'=>'1','msg'=>'ok','data'=>['total'=>$ret['data']['total'],'items'=>$ret['data']['seals']]];
  253. }else{
  254. return ['code'=>'0','msg'=>$ret['message']];
  255. }
  256. }
  257. /**
  258. * 设置企业签章信息
  259. * @param $firmId
  260. * @param $list
  261. * @return void
  262. */
  263. public function setSealList($firmId,$list)
  264. {
  265. if($list){
  266. foreach ($list as $item){
  267. $sealRow=[
  268. 'firm_id'=>$firmId,
  269. 'seal_id'=>$item['sealId'],
  270. 'seal_name'=>$item['sealName'],
  271. 'seal_type'=>$item['sealBizType'],
  272. 'seal_status'=>$item['sealStatus'],
  273. 'seal_url'=>$item['sealImageDownloadUrl'],
  274. ];
  275. $sealModel=FirmSeal::where('firm_id',$firmId)->where('seal_id',$item['sealId'])->first();
  276. if(empty($sealModel)){
  277. $sealModel=FirmSeal::create($sealRow);
  278. }else{
  279. $sealModel->update($sealRow);
  280. }
  281. $this->setSealImg($sealModel);
  282. }
  283. }
  284. }
  285. /**
  286. * 保持印章图片
  287. * @param FirmSeal $firmSeal
  288. * @return void
  289. */
  290. function setSealImg(FirmSeal $firmSeal)
  291. {
  292. $path=public_path('storage/seal/'.date('Ymd').'/');
  293. if(!is_dir($path)){
  294. mkdir($path,0777,true);
  295. }
  296. $name=$firmSeal['seal_id'].'.png';
  297. file_put_contents($path.$name,file_get_contents($firmSeal['seal_url']));
  298. $url=env('APP_URL').'/storage/seal/'.date('Ymd').'/'.$name;
  299. $firmSeal->update(['seal_url'=>$url]);
  300. }
  301. /**
  302. * 创建企业合同印章
  303. * @param $firmId
  304. * @param $orgId
  305. * @return string[]|void
  306. */
  307. function createOrgsealsbyTemplate($firmId,$orgId){
  308. $sealNum=FirmSeal::where('firm_id',$firmId)->where('seal_type','CONTRACT')->count();
  309. if($sealNum>0){
  310. return ['code'=>'0','msg'=>'合同印章已创建'];
  311. }
  312. $license_number=Firm::where('id',$firmId)->value('license_number');
  313. $config=$this->config;
  314. $apiaddr="/v3/seals/org-seals/create-by-template";
  315. $requestType = HttpEmun::POST;
  316. //生成签名验签+json体的header
  317. $data=[
  318. "orgId"=>$orgId,
  319. "sealName"=>"合同印章",//机构印章名称(用户自定义,且名称不可重复)
  320. "sealTemplateStyle"=>"CONTRACT_ROUND_STAR",//机构模板印章样式
  321. "sealSize"=>"38_38",
  322. "sealColor"=>"RED",//机构印章颜色,默认是红色
  323. "sealHorizontalText"=>"合同专用章",//自定义印章横向文,示例值:XX专用章
  324. "sealBottomText" =>$license_number,//印章下弦文(实体印章防伪码),示例值:9133********1
  325. "sealOpacity" =>80
  326. ];
  327. $paramStr = json_encode($data);
  328. //请求参数
  329. // EsignLogHelper::printMsg($paramStr);
  330. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr);
  331. //发起接口请求头
  332. // EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader);
  333. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr);
  334. $ret=json_decode($response->getBody(),true);
  335. if(isset($ret['code']) && $ret['code']==0){
  336. //realnameStatus 0 - 未实名,1 - 已实名
  337. FirmSeal::create([
  338. 'firm_id' => $firmId,
  339. 'seal_id' => $ret['data']['sealId'],
  340. 'seal_name' => "合同印章",
  341. 'seal_type' => 'CONTRACT'
  342. ]);
  343. //获取完成印章以后重新拉取一下印章信息
  344. $this->internalAuthInfo($firmId,$orgId);
  345. return ['code'=>'1','msg'=>'ok'];
  346. }else{
  347. return ['code'=>'0','msg'=>$ret['message']];
  348. }
  349. }
  350. /**
  351. * 添加企业机构成员
  352. * @param $orgId
  353. * @param $psnId
  354. * @param $name
  355. * @return void
  356. */
  357. function addMembers($orgId,$psnId,$name){
  358. $config=$this->config;
  359. $apiaddr="/v3/organizations/".$orgId."/members";
  360. $requestType = HttpEmun::POST;
  361. //生成签名验签+json体的header
  362. $data=[
  363. "members"=>[
  364. [
  365. "psnId"=>$psnId,
  366. "memberName"=>$name,//员工昵称,用于区分企业成员
  367. 'role'=>'4'
  368. ]
  369. ]
  370. ];
  371. $paramStr = json_encode($data);
  372. EsignLogHelper::writeLog($paramStr);
  373. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr);
  374. //发起接口请求
  375. //发起接口请求
  376. // EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader);
  377. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr);
  378. EsignLogHelper::writeLog($response->getStatus());
  379. EsignLogHelper::writeLog($response->getBody());
  380. }
  381. }