ESignFirmServer.php 27 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664
  1. <?php
  2. namespace App\Servers\ESign;
  3. use App\Models\Firm;
  4. use App\Models\Member;
  5. use App\Models\SignFirm;
  6. use App\Models\SignMember;
  7. use App\Models\SignSeal;
  8. use App\Models\SignSealAuth;
  9. use App\Servers\ESign\comm\EsignHttpHelper;
  10. use App\Servers\ESign\comm\EsignLogHelper;
  11. use App\Servers\ESign\emun\HttpEmun;
  12. use App\Servers\Firm\FirmServer;
  13. use App\Servers\System\CommonServer;
  14. use App\Servers\System\JobServer;
  15. use App\Servers\System\RedisDataServer;
  16. use App\Servers\System\SmsServer;
  17. class ESignFirmServer
  18. {
  19. static private $server = null;
  20. public $config = [
  21. 'eSignAppId'=>'', //app id
  22. 'eSignAppSecret'=>'', // app key
  23. 'eSignHost'=>'https://smlopenapi.esign.cn', //模拟环境
  24. // 'url'=>'https://openapi.esign.cn' //正式环境
  25. ];
  26. function __construct()
  27. {
  28. $this->config['eSignAppId']=env('E_SIGN_APP_ID');
  29. $this->config['eSignAppSecret']=env('E_SIGN_APP_SECRET');
  30. $this->config['eSignPublicKey']=env('E_SIGN_PUBLIC_KEY');
  31. $this->config['eSignHost']=env('E_SIGN_HOST');
  32. }
  33. /**
  34. * 创建对象
  35. * @return ESignFirmServer
  36. */
  37. static function creatServer()
  38. {
  39. if (empty(self::$server)) self::$server = new ESignFirmServer();
  40. return self::$server;
  41. }
  42. /**
  43. * 查询企业授权详情
  44. * @param $orgId
  45. * @return \App\Servers\ESign\comm\EsignResponse
  46. */
  47. function organizationsAuthorizedInfo($orgId){
  48. $config=$this->config;
  49. $apiaddr="/v3/organizations/".$orgId."/authorized-info";
  50. $requestType = HttpEmun::GET;
  51. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr);
  52. //发起接口请求
  53. EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader);
  54. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, "");
  55. EsignLogHelper::printMsg($response->getStatus());
  56. EsignLogHelper::printMsg($response->getBody());
  57. return $response;
  58. }
  59. /**
  60. * 查询企业实名状态
  61. * @param $orgName
  62. * @return mixed
  63. */
  64. function organizationsIdentityInfo($m_id,$firm_id,$orgName){
  65. $info = SignMember::where('firm_id',$firm_id)->where('authType','ORG')->first();
  66. if (empty($info)){
  67. //入库
  68. $info= SignMember::create([
  69. 'm_id' => $m_id,
  70. 'firm_id' => $firm_id,
  71. 'firm_name' => $orgName,
  72. 'phone' => '',
  73. 'id_number' => '',
  74. 'realnameStatus'=>0,
  75. 'authorizeUserInfo'=>0,
  76. 'psnId'=>'',
  77. 'orgId'=>'',
  78. 'authShortUrl'=>'',
  79. 'authType' => 'ORG',
  80. ]);
  81. }else{
  82. if($info->{'realnameStatus'}==1 && $info->{'orgId'}!=''){
  83. FirmServer::creatServer()->updateFirmStatus($firm_id);
  84. $signFirm=SignFirm::where('firm_id',$firm_id)->first();
  85. if(empty($signFirm)){
  86. SignFirm::create([
  87. 'firm_id' => $firm_id,
  88. 'org_id' => $info->{'orgId'},
  89. 'realname_status'=>1
  90. ]);
  91. }else{
  92. $signFirm->update([
  93. 'org_id' => $info->{'orgId'},
  94. 'realname_status'=>1
  95. ]);
  96. }
  97. return $info;
  98. }
  99. }
  100. $config=$this->config;
  101. $firm=Firm::where('id',$firm_id)->select(['id','license_number','firm_name'])->first();
  102. $apiaddr="/v3/organizations/identity-info?orgIDCardNum=".$firm['license_number'].'&orgIDCardType=CRED_ORG_USCC';
  103. $requestType = HttpEmun::GET;
  104. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr);
  105. //发起接口请求
  106. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, "");
  107. $ret=json_decode($response->getBody(),true);
  108. if(isset($ret['code']) && $ret['code']==0){
  109. //realnameStatus 0 - 未实名,1 - 已实名
  110. $this->setSignFirm($ret['data']);
  111. //realnameStatus 0 - 未实名,1 - 已实名
  112. $realnameStatus = $ret['data']['realnameStatus'];
  113. //true - 已授权,false - 未授权
  114. $authorizeUserInfo = $ret['data']['authorizeUserInfo'] ? 1 : 0;
  115. //个人账号ID
  116. $orgId = $ret['data']['orgId'];
  117. //更新认证信息
  118. SignMember::where('m_id',$m_id)->where('firm_id',$firm_id)->where('authType','ORG')->update([
  119. 'realnameStatus'=>$realnameStatus,
  120. 'authorizeUserInfo'=>$authorizeUserInfo,
  121. 'orgId'=>$orgId,
  122. ]);
  123. if ($realnameStatus == 1){//更新企业认证状态
  124. FirmServer::creatServer()->updateFirmStatus($firm_id);
  125. }
  126. if (empty($realnameStatus) || empty($authorizeUserInfo)){//走认证授权流程
  127. $this->orgAuthUrl($m_id,$firm_id,$orgName);
  128. }
  129. }else{
  130. //走认证授权流程
  131. $this->orgAuthUrl($m_id,$firm_id,$orgName);
  132. }
  133. return $info;
  134. }
  135. /**
  136. * 企业实名
  137. * @param $orgName
  138. */
  139. function orgAuthUrl($m_id,$firm_id,$orgName){
  140. $authShortUrl=RedisDataServer::creatServer()->getData($firm_id.'_firmUrl');
  141. if($authShortUrl){
  142. return true;
  143. }
  144. $config=$this->config;
  145. $apiaddr="/v3/org-auth-url";
  146. $requestType = HttpEmun::POST;
  147. $firm=Firm::where('id',$firm_id)->first();
  148. $member=Member::where('id',$m_id)->select(['id','promissory_name','promissory_id_number','phone'])->first();
  149. $data=[
  150. "orgAuthConfig"=>[
  151. "orgName"=>$orgName,
  152. "orgInfo"=>[
  153. "orgIDCardNum"=>$firm['license_number'],
  154. "legalRepName"=>$firm['legal_name'],
  155. "orgIDCardType"=>"CRED_ORG_USCC",
  156. ],
  157. "transactorInfo"=>[
  158. "psnAccount"=>$member['phone'],
  159. "psnInfo"=>[
  160. "psnIDCardNum"=>$member['promissory_id_number'],
  161. "psnName"=>$member['promissory_name'],
  162. "psnIDCardType"=>"CRED_PSN_CH_IDCARD"
  163. ]
  164. ],
  165. ],
  166. "authorizeConfig"=>[
  167. "authorizedScopes"=>[
  168. "get_org_identity_info","get_psn_identity_info","org_initiate_sign","psn_initiate_sign","manage_org_resource","manage_psn_resource","psn_sign_file_storage","org_sign_file_storage","org_approval_info","use_org_order"
  169. ]
  170. ],
  171. "notifyUrl"=>route('wps.esignNotify'),
  172. "clientType"=>"ALL",
  173. "appScheme"=>""
  174. ];
  175. if($firm['auth_bank']){
  176. $data['orgAuthConfig']['orgInfo']['orgBankAccountNum']=$firm['auth_bank'];
  177. $data['orgAuthConfig']['orgAuthPageConfig']['orgDefaultAuthMode']='ORG_BANK_TRANSFER';
  178. $data['orgAuthConfig']['orgAuthPageConfig']['orgAvailableAuthModes']=['ORG_BANK_TRANSFER'];
  179. }else{
  180. $data['orgAuthConfig']['orgInfo']['legalRepIDCardNum']=$firm['legal_id_number'];
  181. $data['orgAuthConfig']['orgInfo']['legalRepIDCardType']='CRED_PSN_CH_IDCARD';
  182. }
  183. $paramStr = json_encode($data);
  184. //生成签名验签+json体的header
  185. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr);
  186. //发起接口请求
  187. // EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader);
  188. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr);
  189. // EsignLogHelper::printMsg($response->getStatus());
  190. // EsignLogHelper::printMsg($response->getBody());
  191. $ret=json_decode($response->getBody(),true);
  192. if(isset($ret['code']) && $ret['code']==0){
  193. $authShortUrl=RedisDataServer::creatServer()->getData($firm_id.'_firmUrl');
  194. if($authShortUrl){
  195. return true;
  196. }
  197. $signMember= SignMember::where('m_id',$m_id)->where('firm_id',$firm_id)->where('authType','ORG')->first();
  198. if(!empty($signMember)){
  199. $authShortUrl = $ret['data']['authShortUrl'];
  200. RedisDataServer::creatServer()->setData($firm_id.'_firmUrl',$authShortUrl,'str',600);
  201. $authUrl = $ret['data']['authUrl'];
  202. $authFlowId = $ret['data']['authFlowId'];
  203. $member=Member::where('id',$m_id)->select(['phone','promissory_name'])->first();
  204. $content='尊敬的'.$member['promissory_name'].',您有关联的企业信息待认证,点击认证 '.$authShortUrl;
  205. SmsServer::creatServer()->sendContent($member['phone'],$content);
  206. //存入数据库
  207. $signMember->update([
  208. 'authUrl'=>$authUrl,
  209. 'authShortUrl'=>$authShortUrl,
  210. 'authFlowId'=>$authFlowId,
  211. ]);
  212. }
  213. return true;
  214. }else{//认证授权错误
  215. return false;
  216. }
  217. }
  218. /**
  219. * 企业授权
  220. * @param $orgName
  221. */
  222. function orgAuthorizehUrl($orgName){
  223. $config=$this->config;
  224. $apiaddr="/v3/org-auth-url";
  225. $requestType = HttpEmun::POST;
  226. $data=[
  227. "orgAuthConfig"=>[
  228. "orgName"=>$orgName,
  229. "orgInfo"=>[
  230. "orgIDCardNum"=>"",
  231. "orgIDCardType"=>" "
  232. ],
  233. "transactorInfo"=>[
  234. "psnAccount"=>"",
  235. "psnInfo"=>[
  236. "psnIDCardNum"=>"",
  237. "psnName"=>""
  238. ]
  239. ],
  240. ],
  241. "authorizeConfig"=>[
  242. "authorizedScopes"=>[
  243. "get_org_identity_info","get_psn_identity_info","org_initiate_sign","psn_initiate_sign","manage_org_resource","manage_psn_resource","use_org_order"
  244. ]
  245. ],
  246. "notifyUrl"=>route('wps.esignNotify'),
  247. "clientType"=>"ALL",
  248. "appScheme"=>""
  249. ];
  250. $paramStr = json_encode($data);
  251. //生成签名验签+json体的header
  252. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr);
  253. //发起接口请求
  254. EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader);
  255. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr);
  256. EsignLogHelper::printMsg($response->getStatus());
  257. EsignLogHelper::printMsg($response->getBody());
  258. }
  259. /**
  260. * 记录E签宝审核基本信息
  261. * @param $data
  262. * @return array|void
  263. */
  264. function setSignFirm($data)
  265. {
  266. if(empty($data['orgName'])){
  267. return ['code'=>0,'msg'=>'暂无企业信息'];
  268. }
  269. $firm=Firm::where('firm_name',$data['orgName'])->select(['id','firm_name','status'])->first();
  270. if(empty($firm)){
  271. return ['code'=>0,'msg'=>'企业暂未注册'];
  272. }
  273. if($data['realnameStatus']==1){
  274. if($firm->{'status'}!=3){
  275. $firm->update(['status' => 3]);
  276. }
  277. }
  278. $signFirm=SignFirm::where('firm_id',$firm['id'])->first();
  279. if(empty($signFirm)){
  280. SignFirm::create([
  281. 'firm_id' => $firm['id'],
  282. 'org_id' => $data['orgId'],
  283. 'realname_status' => $data['realnameStatus']
  284. ]);
  285. }else{
  286. $signFirm->update(['org_id' => $data['orgId'],'realname_status' => $data['realnameStatus']]);
  287. }
  288. //检测系统内部的企业印章信息
  289. JobServer::creatServer()->createFirmSealJob($firm['id']);
  290. }
  291. /**
  292. * 获取orgId
  293. * @param $firmId
  294. * @return false|mixed
  295. */
  296. function getFirmOrgId($firmId)
  297. {
  298. $orgId=SignFirm::where('firm_id',$firmId)->value('org_id');
  299. if(empty($orgId)){
  300. return false;
  301. }
  302. return $orgId;
  303. }
  304. /**
  305. * 获取企业外部签章列表
  306. * @param $firmId
  307. * @param $pageNum
  308. * @return array|string[]
  309. */
  310. function orgAuthorizedSealList($firmId,$pageNum=1){
  311. $orgId=$this->getFirmOrgId($firmId);
  312. if(empty($orgId)){
  313. return ['code'=>'0','msg'=>'暂无企业授权信息'];
  314. }
  315. $config=$this->config;
  316. $apiaddr="/v3/seals/org-authorized-seal-list?orgId=".$orgId."&pageNum={$pageNum}&pageSize=20";
  317. $requestType = HttpEmun::GET;
  318. //生成签名验签+json体的header
  319. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr);
  320. //发起接口请求头
  321. //EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader);
  322. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, "");
  323. $ret=json_decode($response->getBody(),true);
  324. if(isset($ret['code']) && $ret['code']==0){
  325. $this->setSealList($firmId,$ret['data']['seals'],2);
  326. return ['code'=>'1','msg'=>'ok','data'=>['total'=>$ret['data']['total'],'items'=>$ret['data']['seals']]];
  327. }else{
  328. return ['code'=>'0','msg'=>$ret['message']];
  329. }
  330. }
  331. /**
  332. * 获取企业内部使用签章列表
  333. * @param $firmId
  334. * @param $pageNum
  335. * @return array|string[]
  336. */
  337. function internalAuthInfo($firmId,$pageNum=1){
  338. $orgId=$this->getFirmOrgId($firmId);
  339. if(empty($orgId)){
  340. return ['code'=>'0','msg'=>'暂无企业授权信息'];
  341. }
  342. $config=$this->config;
  343. $apiaddr="/v3/seals/org-own-seal-list?orgId=".$orgId."&pageNum={$pageNum}&pageSize=20";
  344. $requestType = HttpEmun::GET;
  345. //生成签名验签+json体的header
  346. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr);
  347. //发起接口请求
  348. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, "");
  349. $ret=json_decode($response->getBody(),true);
  350. if(isset($ret['code']) && $ret['code']==0){
  351. $this->setSealList($firmId,$ret['data']['seals'],1);
  352. return ['code'=>'1','msg'=>'ok','data'=>['total'=>$ret['data']['total'],'items'=>$ret['data']['seals']]];
  353. }else{
  354. return ['code'=>'0','msg'=>$ret['message']];
  355. }
  356. }
  357. /**
  358. * 设置企业签章信息
  359. * @param $firmId
  360. * @param $list
  361. * @param $useType
  362. * @return void
  363. */
  364. public function setSealList($firmId,$list,$useType)
  365. {
  366. if($list){
  367. foreach ($list as $item){
  368. $sealRow=[
  369. 'firm_id'=>$firmId,
  370. 'seal_id'=>$item['sealId'],
  371. 'seal_name'=>$item['sealName'],
  372. 'seal_type'=>$item['sealBizType'],
  373. 'seal_url'=>$item['sealImageDownloadUrl'],
  374. 'use_type'=>$useType,
  375. ];
  376. $sealModel=SignSeal::where('firm_id',$firmId)->where('seal_id',$item['sealId'])->first();
  377. if(empty($sealModel)){
  378. $sealModel=SignSeal::create($sealRow);
  379. }else{
  380. $sealModel->update($sealRow);
  381. }
  382. $this->setSealImg($sealModel);
  383. }
  384. }
  385. }
  386. /**
  387. * 保持印章图片
  388. * @param SignSeal $signSeal
  389. * @return void
  390. */
  391. function setSealImg(SignSeal $signSeal)
  392. {
  393. $path=public_path('storage/seal/'.date('Ymd').'/');
  394. if(!is_dir($path)){
  395. mkdir($path,0777,true);
  396. }
  397. $name=$signSeal['seal_id'].'.png';
  398. file_put_contents($path.$name,file_get_contents($signSeal['seal_url']));
  399. $url=env('APP_URL').'/storage/seal/'.date('Ymd').'/'.$name;
  400. $signSeal->update(['seal_url'=>$url]);
  401. }
  402. /**
  403. * 创建企业合同印章
  404. * @param $firmId
  405. * @return string[]|void
  406. */
  407. function createOrgsealsbyTemplate($firmId){
  408. $sealNum=SignSeal::where('firm_id',$firmId)->where('seal_type','CONTRACT')->count();
  409. if($sealNum>0){
  410. return ['code'=>'0','msg'=>'合同印章已创建'];
  411. }
  412. $orgId=$this->getFirmOrgId($firmId);
  413. if(empty($orgId)){
  414. return ['code'=>'0','msg'=>'暂无企业授权信息'];
  415. }
  416. $license_number=Firm::where('id',$firmId)->value('license_number');
  417. $config=$this->config;
  418. $apiaddr="/v3/seals/org-seals/create-by-template";
  419. $requestType = HttpEmun::POST;
  420. //生成签名验签+json体的header
  421. $data=[
  422. "orgId"=>$orgId,
  423. "sealName"=>"合同印章",//机构印章名称(用户自定义,且名称不可重复)
  424. "sealTemplateStyle"=>"CONTRACT_ROUND_STAR",//机构模板印章样式
  425. "sealSize"=>"38_38",
  426. "sealColor"=>"RED",//机构印章颜色,默认是红色
  427. "sealHorizontalText"=>"合同专用章",//自定义印章横向文,示例值:XX专用章
  428. "sealBottomText" =>$license_number,//印章下弦文(实体印章防伪码),示例值:9133********1
  429. "sealOpacity" =>80
  430. ];
  431. $paramStr = json_encode($data);
  432. //请求参数
  433. // EsignLogHelper::printMsg($paramStr);
  434. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr);
  435. //发起接口请求头
  436. // EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader);
  437. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr);
  438. $ret=json_decode($response->getBody(),true);
  439. if(isset($ret['code']) && $ret['code']==0){
  440. //realnameStatus 0 - 未实名,1 - 已实名
  441. SignSeal::create([
  442. 'firm_id' => $firmId,
  443. 'seal_id' => $ret['data']['sealId'],
  444. 'seal_name' => "合同印章",
  445. 'seal_type' => 'CONTRACT'
  446. ]);
  447. //获取完成印章以后重新拉取一下印章信息
  448. $this->internalAuthInfo($firmId);
  449. return ['code'=>'1','msg'=>'ok'];
  450. }else{
  451. return ['code'=>'0','msg'=>$ret['message']];
  452. }
  453. }
  454. /**
  455. * 查询企业对平台的授权
  456. * @param $firmId
  457. * @param $sealKey
  458. * @return array|string[]
  459. */
  460. function selectOrgsealsExternalAuth($firmId,$sealKey)
  461. {
  462. $orgId=SignFirm::where('firm_id',$firmId)->value('org_id');
  463. $sealId=SignSeal::where('id',$sealKey)->value('seal_id');
  464. $config=$this->config;
  465. $apiaddr="/v3/seals/org-seals/external-auth?orgId={$orgId}&pageNum=1&pageSize=20&sealId={$sealId}";
  466. $requestType = HttpEmun::GET;
  467. //生成签名验签+json体的header
  468. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr);
  469. //发起接口请求
  470. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, "");
  471. $ret=json_decode($response->getBody(),true);
  472. if(isset($ret['code']) && $ret['code']==0){
  473. $status= $this->setSealAuth($firmId,$sealKey,$ret['data']['sealAuthorizedInfos']);
  474. if(empty($status)){
  475. return ['code'=>'0','msg'=>'暂无授权信息'];
  476. }
  477. return ['code'=>'1','msg'=>'ok','data'=>['total'=>$ret['data']['total'],'items'=>$ret['data']['sealAuthorizedInfos']]];
  478. }else{
  479. return ['code'=>'0','msg'=>$ret['message']];
  480. }
  481. }
  482. function setSealAuth($firmId,$sealKey,$list)
  483. {
  484. $status=false;
  485. if(empty($list)){
  486. return false;
  487. }
  488. $sysOrgId=CommonServer::creatServer()->getConfigValue('sys_org_id');
  489. if(empty($sysOrgId)){
  490. return false;
  491. }
  492. foreach ($list as $value){
  493. if($value['authorizedOrgId']==$sysOrgId &&$value['authorizeStatus']==1){
  494. $seal= SignSeal::where('id',$sealKey)->first();
  495. if($seal){
  496. $seal->update(['is_auth' => 1]);
  497. $member_id=SignMember::where('psnId',$value['authorizerPsnId'])->value('m_id');
  498. if(empty($member_id)){
  499. $member_id=0;
  500. }
  501. SignSealAuth::create([
  502. 'firm_id' => $firmId,
  503. 'seal_id' => $seal->{'seal_id'},
  504. 'member_id' => $member_id,
  505. 'end_at' => date('Y-m-d H:i:s',$value['expireTime']/1000),
  506. 'status' => 1,
  507. 'url' => '',
  508. 'auth_biz_id'=>$value['sealAuthBizId']
  509. ]);
  510. $status=true;
  511. break;
  512. }
  513. }
  514. }
  515. return $status;
  516. }
  517. /**
  518. * 跨企业授权
  519. * @param $firmId
  520. * @param $sealKey
  521. * @param $memberId
  522. * @return void
  523. */
  524. function orgsealsExternalAuth($firmId,$sealKey,$memberId){
  525. $authShortUrl=RedisDataServer::creatServer()->getData($firmId.'_sealUrl'.$sealKey);
  526. if($authShortUrl){
  527. return ;
  528. }
  529. $orgId=SignFirm::where('firm_id',$firmId)->value('org_id');
  530. $sealId=SignSeal::where('id',$sealKey)->value('seal_id');
  531. $transactorPsnId=SignMember::where('m_id',$memberId)->where('authType','PSN')->where('psnId','<>','')->orderBy('id','desc')->value('psnId');
  532. $config=$this->config;
  533. $apiaddr="/v3/seals/org-seals/external-auth";
  534. $requestType = HttpEmun::POST;
  535. $firm_name=CommonServer::creatServer()->getConfigValue('firm_name');
  536. $license_number=CommonServer::creatServer()->getConfigValue('license_number');
  537. //生成签名验签+json体的header
  538. $data=[
  539. "orgId"=>$orgId,
  540. "sealId"=>$sealId,//机构印章名称(用户自定义,且名称不可重复)
  541. "transactorPsnId"=>$transactorPsnId,
  542. "authorizedOrgInfo"=>[
  543. "orgName"=>$firm_name,
  544. "orgIDCardNum"=>$license_number
  545. ],
  546. "effectiveTime"=>time() * 1000,//授权生效时间(Unix 时间戳格式,单位:毫秒),示例中获取的当前时间为授权日期
  547. "expireTime"=>strtotime("+365 day",time()) * 1000,//授权失效时间(Unix时间戳格式,单位:毫秒)示例中获取授权有效期为1年
  548. ];
  549. dump($data);
  550. $paramStr = json_encode($data);
  551. //请求参数
  552. EsignLogHelper::printMsg($paramStr);
  553. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr);
  554. //发起接口请求
  555. //发起接口请求头
  556. //EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader);
  557. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr);
  558. EsignLogHelper::printMsg($response->getStatus());
  559. $data=json_decode($response->getBody(),true);
  560. if($data['code']===0){
  561. $authShortUrl=RedisDataServer::creatServer()->getData($firmId.'_sealUrl'.$sealKey);
  562. if($authShortUrl){
  563. return ;
  564. }
  565. $authNum=SignSealAuth::where('firm_id',$firmId)->where('seal_id',$sealId)->where('member_id',$memberId)->where('created_at','>=',date('Y-m-d H:i:s',time()-600))->count();
  566. if($authNum<=0){
  567. RedisDataServer::creatServer()->setData($firmId.'_sealUrl'.$sealKey,$data['data']['authorizationSignShortUrl'],'str',600);
  568. $member=Member::where('id',$memberId)->select(['phone','promissory_name'])->first();
  569. $content='尊敬的'.$member['promissory_name'].',您有待签署印章授权,点击签署 '.$data['data']['authorizationSignShortUrl'];
  570. SmsServer::creatServer()->sendContent($member['phone'],$content);
  571. SignSealAuth::create([
  572. 'firm_id'=>$firmId,
  573. 'seal_id'=>$sealId,
  574. 'member_id'=>$memberId,
  575. 'end_at'=>date('Y-m-d H:i;s',strtotime("+365 day",time())),
  576. 'status'=>0,
  577. 'url'=>$data['data']['authorizationSignShortUrl'],
  578. 'auth_biz_id'=>$data['data']['sealAuthBizId'],
  579. ]);
  580. }
  581. EsignLogHelper::printMsg("跨企业授权接口调用成功");
  582. EsignLogHelper::printMsg($response->getBody());
  583. }else{
  584. EsignLogHelper::printMsg($response->getBody());
  585. }
  586. }
  587. /**
  588. * 添加企业机构成员
  589. * @param $orgId
  590. * @param $psnId
  591. * @param $name
  592. * @return void
  593. */
  594. function addMembers($orgId,$psnId,$name){
  595. $config=$this->config;
  596. $apiaddr="/v3/organizations/".$orgId."/members";
  597. $requestType = HttpEmun::POST;
  598. //生成签名验签+json体的header
  599. $data=[
  600. "members"=>[
  601. [
  602. "psnId"=>$psnId,
  603. "memberName"=>$name,//员工昵称,用于区分企业成员
  604. 'role'=>'4'
  605. ]
  606. ]
  607. ];
  608. $paramStr = json_encode($data);
  609. EsignLogHelper::writeLog($paramStr);
  610. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr);
  611. //发起接口请求
  612. //发起接口请求
  613. // EsignLogHelper::printMsg($signAndBuildSignAndJsonHeader);
  614. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr);
  615. EsignLogHelper::writeLog($response->getStatus());
  616. EsignLogHelper::writeLog($response->getBody());
  617. }
  618. }