'', //app id 'eSignAppSecret'=>'', // app key 'eSignHost'=>'https://smlopenapi.esign.cn', //模拟环境 // 'url'=>'https://openapi.esign.cn' //正式环境 ]; function __construct() { $this->config['eSignAppId']=env('E_SIGN_APP_ID'); $this->config['eSignAppSecret']=env('E_SIGN_APP_SECRET'); $this->config['eSignPublicKey']=env('E_SIGN_PUBLIC_KEY'); $this->config['eSignHost']=env('E_SIGN_HOST'); } /** * 创建对象 * @return ESignFirmServer */ static function creatServer() { if (empty(self::$server)) self::$server = new ESignFirmServer(); return self::$server; } /** * 查询企业授权详情 * @param $orgId * @return \App\Servers\ESign\comm\EsignResponse */ function organizationsAuthorizedInfo($orgId){ $config=$this->config; $apiaddr="/v3/organizations/".$orgId."/authorized-info"; $requestType = HttpEmun::GET; $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr); //发起接口请求 EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader); $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, ""); EsignLogHelper::printMsg($response->getStatus()); EsignLogHelper::printMsg($response->getBody()); return $response; } /** * 查询企业实名状态 * @param $orgName * @return mixed */ function organizationsIdentityInfo($m_id,$firm_id,$orgName){ $info = SignMember::where('firm_id',$firm_id)->where('authType','ORG')->first(); if (empty($info)){ //入库 $info= SignMember::create([ 'm_id' => $m_id, 'firm_id' => $firm_id, 'firm_name' => $orgName, 'phone' => '', 'id_number' => '', 'realnameStatus'=>0, 'authorizeUserInfo'=>0, 'psnId'=>'', 'orgId'=>'', 'authShortUrl'=>'', 'authType' => 'ORG', ]); }else{ if($info->{'realnameStatus'}==1 && $info->{'orgId'}!=''){ FirmServer::creatServer()->updateFirmStatus($firm_id); $signFirm=SignFirm::where('firm_id',$firm_id)->first(); if(empty($signFirm)){ SignFirm::create([ 'firm_id' => $firm_id, 'org_id' => $info->{'orgId'}, 'realname_status'=>1 ]); }else{ $signFirm->update([ 'org_id' => $info->{'orgId'}, 'realname_status'=>1 ]); } return $info; } } $config=$this->config; $firm=Firm::where('id',$firm_id)->select(['id','license_number','firm_name'])->first(); $apiaddr="/v3/organizations/identity-info?orgIDCardNum=".$firm['license_number'].'&orgIDCardType=CRED_ORG_USCC'; $requestType = HttpEmun::GET; $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr); //发起接口请求 $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, ""); $ret=json_decode($response->getBody(),true); if(isset($ret['code']) && $ret['code']==0){ //realnameStatus 0 - 未实名,1 - 已实名 $this->setSignFirm($ret['data']); //realnameStatus 0 - 未实名,1 - 已实名 $realnameStatus = $ret['data']['realnameStatus']; //true - 已授权,false - 未授权 $authorizeUserInfo = $ret['data']['authorizeUserInfo'] ? 1 : 0; //个人账号ID $orgId = $ret['data']['orgId']; //更新认证信息 SignMember::where('m_id',$m_id)->where('firm_id',$firm_id)->where('authType','ORG')->update([ 'realnameStatus'=>$realnameStatus, 'authorizeUserInfo'=>$authorizeUserInfo, 'orgId'=>$orgId, ]); if ($realnameStatus == 1){//更新企业认证状态 FirmServer::creatServer()->updateFirmStatus($firm_id); } if (empty($realnameStatus) || empty($authorizeUserInfo)){//走认证授权流程 $this->orgAuthUrl($m_id,$firm_id,$orgName); } }else{ //走认证授权流程 $this->orgAuthUrl($m_id,$firm_id,$orgName); } return $info; } /** * 企业实名 * @param $orgName */ function orgAuthUrl($m_id,$firm_id,$orgName){ $authShortUrl=RedisDataServer::creatServer()->getData($firm_id.'_firmUrl'); if($authShortUrl){ return true; } $config=$this->config; $apiaddr="/v3/org-auth-url"; $requestType = HttpEmun::POST; $firm=Firm::where('id',$firm_id)->first(); $member=Member::where('id',$m_id)->select(['id','promissory_name','promissory_id_number','phone'])->first(); $data=[ "orgAuthConfig"=>[ "orgName"=>$orgName, "orgInfo"=>[ "orgIDCardNum"=>$firm['license_number'], "legalRepName"=>$firm['legal_name'], "orgIDCardType"=>"CRED_ORG_USCC", ], "transactorInfo"=>[ "psnAccount"=>$member['phone'], "psnInfo"=>[ "psnIDCardNum"=>$member['promissory_id_number'], "psnName"=>$member['promissory_name'], "psnIDCardType"=>"CRED_PSN_CH_IDCARD" ] ], ], "authorizeConfig"=>[ "authorizedScopes"=>[ "get_org_identity_info","get_psn_identity_info","org_initiate_sign","psn_initiate_sign","manage_org_resource","manage_psn_resource","psn_sign_file_storage","org_sign_file_storage","org_approval_info","use_org_order" ] ], "notifyUrl"=>route('wps.esignNotify'), "clientType"=>"ALL", "appScheme"=>"" ]; if($firm['auth_bank']){ $data['orgAuthConfig']['orgInfo']['orgBankAccountNum']=$firm['auth_bank']; $data['orgAuthConfig']['orgAuthPageConfig']['orgDefaultAuthMode']='ORG_BANK_TRANSFER'; $data['orgAuthConfig']['orgAuthPageConfig']['orgAvailableAuthModes']=['ORG_BANK_TRANSFER']; }else{ $data['orgAuthConfig']['orgInfo']['legalRepIDCardNum']=$firm['legal_id_number']; $data['orgAuthConfig']['orgInfo']['legalRepIDCardType']='CRED_PSN_CH_IDCARD'; } $paramStr = json_encode($data); //生成签名验签+json体的header $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr); //发起接口请求 // EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader); $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr); // EsignLogHelper::printMsg($response->getStatus()); // EsignLogHelper::printMsg($response->getBody()); $ret=json_decode($response->getBody(),true); if(isset($ret['code']) && $ret['code']==0){ $authShortUrl=RedisDataServer::creatServer()->getData($firm_id.'_firmUrl'); if($authShortUrl){ return true; } $signMember= SignMember::where('m_id',$m_id)->where('firm_id',$firm_id)->where('authType','ORG')->first(); if(!empty($signMember)){ $authShortUrl = $ret['data']['authShortUrl']; RedisDataServer::creatServer()->setData($firm_id.'_firmUrl',$authShortUrl,'str',600); $authUrl = $ret['data']['authUrl']; $authFlowId = $ret['data']['authFlowId']; $member=Member::where('id',$m_id)->select(['phone','promissory_name'])->first(); $content='尊敬的'.$member['promissory_name'].',您有关联的企业信息待认证,点击认证 '.$authShortUrl; SmsServer::creatServer()->sendContent($member['phone'],$content); //存入数据库 $signMember->update([ 'authUrl'=>$authUrl, 'authShortUrl'=>$authShortUrl, 'authFlowId'=>$authFlowId, ]); } return true; }else{//认证授权错误 return false; } } /** * 企业授权 * @param $orgName */ function orgAuthorizehUrl($orgName){ $config=$this->config; $apiaddr="/v3/org-auth-url"; $requestType = HttpEmun::POST; $data=[ "orgAuthConfig"=>[ "orgName"=>$orgName, "orgInfo"=>[ "orgIDCardNum"=>"", "orgIDCardType"=>" " ], "transactorInfo"=>[ "psnAccount"=>"", "psnInfo"=>[ "psnIDCardNum"=>"", "psnName"=>"" ] ], ], "authorizeConfig"=>[ "authorizedScopes"=>[ "get_org_identity_info","get_psn_identity_info","org_initiate_sign","psn_initiate_sign","manage_org_resource","manage_psn_resource","use_org_order" ] ], "notifyUrl"=>route('wps.esignNotify'), "clientType"=>"ALL", "appScheme"=>"" ]; $paramStr = json_encode($data); //生成签名验签+json体的header $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr); //发起接口请求 EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader); $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr); EsignLogHelper::printMsg($response->getStatus()); EsignLogHelper::printMsg($response->getBody()); } /** * 记录E签宝审核基本信息 * @param $data * @return array|void */ function setSignFirm($data) { if(empty($data['orgName'])){ return ['code'=>0,'msg'=>'暂无企业信息']; } $firm=Firm::where('firm_name',$data['orgName'])->select(['id','firm_name','status'])->first(); if(empty($firm)){ return ['code'=>0,'msg'=>'企业暂未注册']; } if($data['realnameStatus']==1){ if($firm->{'status'}!=3){ $firm->update(['status' => 3]); } } $signFirm=SignFirm::where('firm_id',$firm['id'])->first(); if(empty($signFirm)){ SignFirm::create([ 'firm_id' => $firm['id'], 'org_id' => $data['orgId'], 'realname_status' => $data['realnameStatus'] ]); }else{ $signFirm->update(['org_id' => $data['orgId'],'realname_status' => $data['realnameStatus']]); } //检测系统内部的企业印章信息 JobServer::creatServer()->createFirmSealJob($firm['id']); } /** * 获取orgId * @param $firmId * @return false|mixed */ function getFirmOrgId($firmId) { $orgId=SignFirm::where('firm_id',$firmId)->value('org_id'); if(empty($orgId)){ return false; } return $orgId; } /** * 获取企业外部签章列表 * @param $firmId * @param $pageNum * @return array|string[] */ function orgAuthorizedSealList($firmId,$pageNum=1){ $orgId=$this->getFirmOrgId($firmId); if(empty($orgId)){ return ['code'=>'0','msg'=>'暂无企业授权信息']; } $config=$this->config; $apiaddr="/v3/seals/org-authorized-seal-list?orgId=".$orgId."&pageNum={$pageNum}&pageSize=20"; $requestType = HttpEmun::GET; //生成签名验签+json体的header $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr); //发起接口请求头 //EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader); $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, ""); $ret=json_decode($response->getBody(),true); if(isset($ret['code']) && $ret['code']==0){ $this->setSealList($firmId,$ret['data']['seals'],2); return ['code'=>'1','msg'=>'ok','data'=>['total'=>$ret['data']['total'],'items'=>$ret['data']['seals']]]; }else{ return ['code'=>'0','msg'=>$ret['message']]; } } /** * 获取企业内部使用签章列表 * @param $firmId * @param $pageNum * @return array|string[] */ function internalAuthInfo($firmId,$pageNum=1){ $orgId=$this->getFirmOrgId($firmId); if(empty($orgId)){ return ['code'=>'0','msg'=>'暂无企业授权信息']; } $config=$this->config; $apiaddr="/v3/seals/org-own-seal-list?orgId=".$orgId."&pageNum={$pageNum}&pageSize=20"; $requestType = HttpEmun::GET; //生成签名验签+json体的header $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr); //发起接口请求 $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, ""); $ret=json_decode($response->getBody(),true); if(isset($ret['code']) && $ret['code']==0){ $this->setSealList($firmId,$ret['data']['seals'],1); return ['code'=>'1','msg'=>'ok','data'=>['total'=>$ret['data']['total'],'items'=>$ret['data']['seals']]]; }else{ return ['code'=>'0','msg'=>$ret['message']]; } } /** * 设置企业签章信息 * @param $firmId * @param $list * @param $useType * @return void */ public function setSealList($firmId,$list,$useType) { if($list){ foreach ($list as $item){ $sealRow=[ 'firm_id'=>$firmId, 'seal_id'=>$item['sealId'], 'seal_name'=>$item['sealName'], 'seal_type'=>$item['sealBizType'], 'seal_url'=>$item['sealImageDownloadUrl'], 'use_type'=>$useType, ]; $sealModel=SignSeal::where('firm_id',$firmId)->where('seal_id',$item['sealId'])->first(); if(empty($sealModel)){ $sealModel=SignSeal::create($sealRow); }else{ $sealModel->update($sealRow); } $this->setSealImg($sealModel); } } } /** * 保持印章图片 * @param SignSeal $signSeal * @return void */ function setSealImg(SignSeal $signSeal) { $path=public_path('storage/seal/'.date('Ymd').'/'); if(!is_dir($path)){ mkdir($path,0777,true); } $name=$signSeal['seal_id'].'.png'; file_put_contents($path.$name,file_get_contents($signSeal['seal_url'])); $url=env('APP_URL').'/storage/seal/'.date('Ymd').'/'.$name; $signSeal->update(['seal_url'=>$url]); } /** * 创建企业合同印章 * @param $firmId * @return string[]|void */ function createOrgsealsbyTemplate($firmId){ $sealNum=SignSeal::where('firm_id',$firmId)->where('seal_type','CONTRACT')->count(); if($sealNum>0){ return ['code'=>'0','msg'=>'合同印章已创建']; } $orgId=$this->getFirmOrgId($firmId); if(empty($orgId)){ return ['code'=>'0','msg'=>'暂无企业授权信息']; } $license_number=Firm::where('id',$firmId)->value('license_number'); $config=$this->config; $apiaddr="/v3/seals/org-seals/create-by-template"; $requestType = HttpEmun::POST; //生成签名验签+json体的header $data=[ "orgId"=>$orgId, "sealName"=>"合同印章",//机构印章名称(用户自定义,且名称不可重复) "sealTemplateStyle"=>"CONTRACT_ROUND_STAR",//机构模板印章样式 "sealSize"=>"38_38", "sealColor"=>"RED",//机构印章颜色,默认是红色 "sealHorizontalText"=>"合同专用章",//自定义印章横向文,示例值:XX专用章 "sealBottomText" =>$license_number,//印章下弦文(实体印章防伪码),示例值:9133********1 "sealOpacity" =>80 ]; $paramStr = json_encode($data); //请求参数 // EsignLogHelper::printMsg($paramStr); $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr); //发起接口请求头 // EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader); $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr); $ret=json_decode($response->getBody(),true); if(isset($ret['code']) && $ret['code']==0){ //realnameStatus 0 - 未实名,1 - 已实名 SignSeal::create([ 'firm_id' => $firmId, 'seal_id' => $ret['data']['sealId'], 'seal_name' => "合同印章", 'seal_type' => 'CONTRACT' ]); //获取完成印章以后重新拉取一下印章信息 $this->internalAuthInfo($firmId); return ['code'=>'1','msg'=>'ok']; }else{ return ['code'=>'0','msg'=>$ret['message']]; } } /** * 查询企业对平台的授权 * @param $firmId * @param $sealKey * @return array|string[] */ function selectOrgsealsExternalAuth($firmId,$sealKey) { $orgId=SignFirm::where('firm_id',$firmId)->value('org_id'); $sealId=SignSeal::where('id',$sealKey)->value('seal_id'); $config=$this->config; $apiaddr="/v3/seals/org-seals/external-auth?orgId={$orgId}&pageNum=1&pageSize=20&sealId={$sealId}"; $requestType = HttpEmun::GET; //生成签名验签+json体的header $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr); //发起接口请求 $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, ""); $ret=json_decode($response->getBody(),true); if(isset($ret['code']) && $ret['code']==0){ $status= $this->setSealAuth($firmId,$sealKey,$ret['data']['sealAuthorizedInfos']); if(empty($status)){ return ['code'=>'0','msg'=>'暂无授权信息']; } return ['code'=>'1','msg'=>'ok','data'=>['total'=>$ret['data']['total'],'items'=>$ret['data']['sealAuthorizedInfos']]]; }else{ return ['code'=>'0','msg'=>$ret['message']]; } } function setSealAuth($firmId,$sealKey,$list) { $status=false; if(empty($list)){ return false; } $sysOrgId=CommonServer::creatServer()->getConfigValue('sys_org_id'); if(empty($sysOrgId)){ return false; } foreach ($list as $value){ if($value['authorizedOrgId']==$sysOrgId &&$value['authorizeStatus']==1){ $seal= SignSeal::where('id',$sealKey)->first(); if($seal){ $seal->update(['is_auth' => 1]); $member_id=SignMember::where('psnId',$value['authorizerPsnId'])->value('m_id'); if(empty($member_id)){ $member_id=0; } SignSealAuth::create([ 'firm_id' => $firmId, 'seal_id' => $seal->{'seal_id'}, 'member_id' => $member_id, 'end_at' => date('Y-m-d H:i:s',$value['expireTime']/1000), 'status' => 1, 'url' => '', 'auth_biz_id'=>$value['sealAuthBizId'] ]); $status=true; break; } } } return $status; } /** * 跨企业授权 * @param $firmId * @param $sealKey * @param $memberId * @return void */ function orgsealsExternalAuth($firmId,$sealKey,$memberId){ $authShortUrl=RedisDataServer::creatServer()->getData($firmId.'_sealUrl'.$sealKey); if($authShortUrl){ return ; } $orgId=SignFirm::where('firm_id',$firmId)->value('org_id'); $sealId=SignSeal::where('id',$sealKey)->value('seal_id'); $transactorPsnId=SignMember::where('m_id',$memberId)->where('authType','PSN')->where('psnId','<>','')->orderBy('id','desc')->value('psnId'); $config=$this->config; $apiaddr="/v3/seals/org-seals/external-auth"; $requestType = HttpEmun::POST; $firm_name=CommonServer::creatServer()->getConfigValue('firm_name'); $license_number=CommonServer::creatServer()->getConfigValue('license_number'); //生成签名验签+json体的header $data=[ "orgId"=>$orgId, "sealId"=>$sealId,//机构印章名称(用户自定义,且名称不可重复) "transactorPsnId"=>$transactorPsnId, "authorizedOrgInfo"=>[ "orgName"=>$firm_name, "orgIDCardNum"=>$license_number ], "effectiveTime"=>time() * 1000,//授权生效时间(Unix 时间戳格式,单位:毫秒),示例中获取的当前时间为授权日期 "expireTime"=>strtotime("+365 day",time()) * 1000,//授权失效时间(Unix时间戳格式,单位:毫秒)示例中获取授权有效期为1年 ]; dump($data); $paramStr = json_encode($data); //请求参数 EsignLogHelper::printMsg($paramStr); $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr); //发起接口请求 //发起接口请求头 //EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader); $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr); EsignLogHelper::printMsg($response->getStatus()); $data=json_decode($response->getBody(),true); if($data['code']===0){ $authShortUrl=RedisDataServer::creatServer()->getData($firmId.'_sealUrl'.$sealKey); if($authShortUrl){ return ; } $authNum=SignSealAuth::where('firm_id',$firmId)->where('seal_id',$sealId)->where('member_id',$memberId)->where('created_at','>=',date('Y-m-d H:i:s',time()-600))->count(); if($authNum<=0){ RedisDataServer::creatServer()->setData($firmId.'_sealUrl'.$sealKey,$data['data']['authorizationSignShortUrl'],'str',600); $member=Member::where('id',$memberId)->select(['phone','promissory_name'])->first(); $content='尊敬的'.$member['promissory_name'].',您有待签署印章授权,点击签署 '.$data['data']['authorizationSignShortUrl']; SmsServer::creatServer()->sendContent($member['phone'],$content); SignSealAuth::create([ 'firm_id'=>$firmId, 'seal_id'=>$sealId, 'member_id'=>$memberId, 'end_at'=>date('Y-m-d H:i;s',strtotime("+365 day",time())), 'status'=>0, 'url'=>$data['data']['authorizationSignShortUrl'], 'auth_biz_id'=>$data['data']['sealAuthBizId'], ]); } EsignLogHelper::printMsg("跨企业授权接口调用成功"); EsignLogHelper::printMsg($response->getBody()); }else{ EsignLogHelper::printMsg($response->getBody()); } } /** * 添加企业机构成员 * @param $orgId * @param $psnId * @param $name * @return void */ function addMembers($orgId,$psnId,$name){ $config=$this->config; $apiaddr="/v3/organizations/".$orgId."/members"; $requestType = HttpEmun::POST; //生成签名验签+json体的header $data=[ "members"=>[ [ "psnId"=>$psnId, "memberName"=>$name,//员工昵称,用于区分企业成员 'role'=>'4' ] ] ]; $paramStr = json_encode($data); EsignLogHelper::writeLog($paramStr); $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr); //发起接口请求 //发起接口请求 // EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader); $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr); EsignLogHelper::writeLog($response->getStatus()); EsignLogHelper::writeLog($response->getBody()); } }