ESignServer.php 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305
  1. <?php
  2. namespace App\Servers\ESign;
  3. use App\Models\Member;
  4. use App\Models\MemberSeal;
  5. use App\Servers\ESign\comm\EsignHttpHelper;
  6. use App\Servers\ESign\comm\EsignLogHelper;
  7. use App\Servers\ESign\emun\HttpEmun;
  8. use App\Servers\System\RedisDataServer;
  9. use App\Servers\System\SmsServer;
  10. class ESignServer
  11. {
  12. static private $server = null;
  13. public $config = [
  14. 'eSignAppId'=>'', //app id
  15. 'eSignAppSecret'=>'', // app key
  16. // 'eSignHost'=>'https://smlopenapi.esign.cn', //模拟环境
  17. 'eSignHost'=>'https://openapi.esign.cn' //正式环境
  18. ];
  19. function __construct()
  20. {
  21. $this->config['eSignAppId']=env('E_SIGN_APP_ID');
  22. $this->config['eSignAppSecret']=env('E_SIGN_APP_SECRET');
  23. $this->config['eSignPublicKey']=env('E_SIGN_PUBLIC_KEY');
  24. $this->config['eSignHost']=env('E_SIGN_HOST');
  25. }
  26. /**
  27. * 创建对象
  28. * @return ESignServer
  29. */
  30. static function creatServer()
  31. {
  32. if (empty(self::$server)) self::$server = new ESignServer();
  33. return self::$server;
  34. }
  35. /**
  36. * @param $expireTime
  37. * @return float
  38. */
  39. function expireTime($expireTime){
  40. list($t1, $t2) = explode(' ', microtime());
  41. $nowTime=(float)sprintf('%.0f',(floatval($t1)+floatval($t2))*1000);
  42. $num=$expireTime-$nowTime;
  43. return $num;
  44. }
  45. /**
  46. * 获取个人认证&授权页面链接
  47. * @return bool
  48. */
  49. function psnauthurl($m_id,$phone,$psnName,$id_number,$psnId='')
  50. {
  51. $authShortUrl=RedisDataServer::creatServer()->getData($m_id.'_memberUrl');
  52. if($authShortUrl){
  53. return true;
  54. }
  55. $config=$this->config;
  56. $apiaddr="/v3/psn-auth-url";
  57. $requestType = HttpEmun::POST;
  58. $data=[
  59. "psnAuthConfig"=>[
  60. "psnAccount"=>$phone ?? '',
  61. "psnId"=>$psnId,
  62. "psnInfo" => [
  63. "psnName" => $psnName,
  64. "psnIDCardNum" => $id_number,
  65. "psnIDCardType" => "CRED_PSN_CH_IDCARD",
  66. ],
  67. ],
  68. "authorizeConfig" =>[
  69. "authorizedScopes" => [
  70. "get_psn_identity_info","psn_initiate_sign","manage_psn_resource","psn_sign_file_storage"
  71. ],
  72. ],
  73. "redirectConfig"=>[
  74. "redirectUrl"=>'',
  75. ],
  76. "notifyUrl"=>route('notify.esignNotify'),
  77. "clientType"=>"ALL",
  78. "appScheme"=>""
  79. ];
  80. $paramStr = json_encode($data);
  81. //生成签名验签+json体的header
  82. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr);
  83. //发起接口请求
  84. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr);
  85. $ret=json_decode($response->getBody(),true);
  86. if(isset($ret['code']) && $ret['code']==0){
  87. $authShortUrl=RedisDataServer::creatServer()->getData($m_id.'_memberUrl');
  88. if($authShortUrl){
  89. return true;
  90. }
  91. $signMember=Member::where('m_id',$m_id)->where('authType','PSN')->where([['updated_at','<=',date('Y-m-d H:i:s',time()-600),'or'],['authShortUrl','=','','or']])->first();
  92. if($signMember){
  93. $authUrl = $ret['data']['authUrl'];
  94. $authShortUrl = $ret['data']['authShortUrl'];
  95. RedisDataServer::creatServer()->setData($m_id.'_memberUrl',$authShortUrl,'str',600);
  96. $authFlowId = $ret['data']['authFlowId'];
  97. $content='尊敬的'.$signMember['name'].',您有待认证信息,点击认证 '.$authShortUrl;
  98. SmsServer::creatServer()->sendContent($signMember['phone'],$content);
  99. //存入数据库
  100. $signMember->update([
  101. 'authUrl'=>$authUrl,
  102. 'authShortUrl'=>$authShortUrl,
  103. 'authFlowId'=>$authFlowId,
  104. ]);
  105. }
  106. return true;
  107. }else{//认证授权错误
  108. return false;
  109. }
  110. }
  111. /**
  112. * 查询个人认证信息
  113. * @param $phone //手机号
  114. * @param $psnName //认证人姓名
  115. * @param $id_number //认证人身份证号
  116. * @return SignMember|\Illuminate\Database\Eloquent\Builder|\Illuminate\Database\Eloquent\Model|object|null
  117. */
  118. function personsidentityinfo($m_id,$phone,$psnName,$id_number)
  119. {
  120. $info = Member::where('id_number',$id_number)->where('id',$m_id)->where('authType','PSN')->first();
  121. if($info->{'realnameStatus'}==1 && $info->{'psnId'}!=''){
  122. return $info->{'realnameStatus'};
  123. }
  124. $config=$this->config;
  125. $apiaddr="/v3/persons/identity-info?psnIDCardNum=".$id_number."&psnIDCardType=CRED_PSN_CH_IDCARD";
  126. $requestType = HttpEmun::GET;
  127. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr);
  128. //发起接口请求
  129. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, "");
  130. $ret=json_decode($response->getBody(),true);
  131. if(isset($ret['code']) && $ret['code']==0){
  132. //realnameStatus 0 - 未实名,1 - 已实名
  133. $realnameStatus = $ret['data']['realnameStatus'];
  134. //true - 已授权,false - 未授权
  135. $authorizeUserInfo = $ret['data']['authorizeUserInfo'] ? 1 : 0;
  136. //个人账号ID
  137. $psnId = $ret['data']['psnId'];
  138. //更新认证信息
  139. Member::where('id_number',$id_number)->update([
  140. 'realnameStatus'=>$realnameStatus,
  141. 'authorizeUserInfo'=>$authorizeUserInfo,
  142. 'psnId'=>$psnId,
  143. ]);
  144. if (empty($realnameStatus) || empty($authorizeUserInfo)){//走个人认证授权流程
  145. $this->psnauthurl($m_id,$phone,$psnName,$id_number,$psnId);
  146. }
  147. //未授权也注销
  148. if(empty($authorizeUserInfo))$realnameStatus=0;
  149. }else{//证明从来没有在e签宝注册过
  150. //realnameStatus 0 - 未实名,1 - 已实名
  151. $realnameStatus = 0;
  152. //true - 已授权,false - 未授权
  153. $authorizeUserInfo = 0;
  154. //个人账号ID
  155. $psnId = '';
  156. //走认证授权流程
  157. $this->psnauthurl($m_id,$phone,$psnName,$id_number);
  158. }
  159. return $realnameStatus;
  160. }
  161. /**
  162. * 获取用户签章列表
  163. * @param $mId
  164. * @param $psnId
  165. * @param $pageNum
  166. * @return array|string[]
  167. */
  168. function internalAuthInfo($mId,$psnId,$pageNum=1){
  169. $config=$this->config;
  170. $apiaddr="/v3/seals/psn-seal-list?psnId=".$psnId."&pageNum={$pageNum}&pageSize=20";
  171. $requestType = HttpEmun::GET;
  172. //生成签名验签+json体的header
  173. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr);
  174. //发起接口请求
  175. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, "");
  176. $ret=json_decode($response->getBody(),true);
  177. if(isset($ret['code']) && $ret['code']==0){
  178. //存入签章信息
  179. $this->setMemberSealList($mId,$ret['data']['seals'],1);
  180. return ['code'=>'1','msg'=>'ok','data'=>['total'=>$ret['data']['total'],'items'=>$ret['data']['seals']]];
  181. }else{
  182. return ['code'=>'0','msg'=>$ret['message']];
  183. }
  184. }
  185. /**
  186. * 设置企业签章信息
  187. * @param $mId
  188. * @param $list
  189. * @param $useType
  190. * @return void
  191. */
  192. public function setMemberSealList($mId,$list)
  193. {
  194. if($list){
  195. foreach ($list as $item){
  196. $sealRow=[
  197. 'm_id'=>$mId,
  198. 'seal_id'=>$item['sealId'],
  199. 'seal_name'=>$item['sealName'],
  200. 'seal_status'=>$item['sealStatus'],
  201. 'seal_url'=>$item['sealImageDownloadUrl'],
  202. ];
  203. $sealModel=MemberSeal::where('m_id',$mId)->where('seal_id',$item['sealId'])->first();
  204. if(empty($sealModel)){
  205. $sealModel=MemberSeal::create($sealRow);
  206. }else{
  207. $sealModel->update($sealRow);
  208. }
  209. $this->setSealImg($sealModel);
  210. }
  211. }
  212. }
  213. /**
  214. * 保持印章图片
  215. * @param MemberSeal $memberSeal
  216. * @return void
  217. */
  218. function setSealImg(MemberSeal $memberSeal)
  219. {
  220. $path=public_path('storage/memberSeal/'.date('Ymd').'/');
  221. if(!is_dir($path)){
  222. mkdir($path,0777,true);
  223. }
  224. $name=$memberSeal['seal_id'].'.png';
  225. file_put_contents($path.$name,file_get_contents($memberSeal['seal_url']));
  226. $url=env('APP_URL').'/storage/memberSeal/'.date('Ymd').'/'.$name;
  227. $memberSeal->update(['seal_url'=>$url]);
  228. }
  229. /**
  230. * 创建合同印章
  231. * @param $mId
  232. * @param $psnId
  233. * @return string[]|void
  234. */
  235. function createOrgsealsbyTemplate($mId,$psnId){
  236. $sealNum=MemberSeal::where('m_id',$mId)->count();
  237. if($sealNum>0){
  238. return ['code'=>'0','msg'=>'印章已创建'];
  239. }
  240. $config=$this->config;
  241. $apiaddr="/v3/seals/psn-seals/create-by-template";
  242. $requestType = HttpEmun::POST;
  243. //生成签名验签+json体的header
  244. $data=[
  245. "psnId"=>$psnId,
  246. "sealName"=>"合同印章",//机构印章名称(用户自定义,且名称不可重复)
  247. "sealTemplateStyle"=>"RECTANGLE_NO_BORDER",//机构模板印章样式
  248. "sealSize"=>"20_10",
  249. "sealColor"=>"RED",//机构印章颜色,默认是红色
  250. "sealOpacity" =>80
  251. ];
  252. $paramStr = json_encode($data);
  253. //请求参数
  254. // EsignLogHelper::printMsg($paramStr);
  255. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr);
  256. //发起接口请求头
  257. // EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader);
  258. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr);
  259. $ret=json_decode($response->getBody(),true);
  260. if(isset($ret['code']) && $ret['code']==0){
  261. //realnameStatus 0 - 未实名,1 - 已实名
  262. MemberSeal::create([
  263. 'm_id' => $mId,
  264. 'seal_id' => $ret['data']['sealId'],
  265. ]);
  266. //获取完成印章以后重新拉取一下印章信息
  267. $this->internalAuthInfo($mId,$psnId);
  268. return ['code'=>'1','msg'=>'ok'];
  269. }else{
  270. return ['code'=>'0','msg'=>$ret['message']];
  271. }
  272. }
  273. }