ESignServer.php 6.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186
  1. <?php
  2. namespace App\Servers\ESign;
  3. use App\Models\Member;
  4. use App\Servers\ESign\comm\EsignHttpHelper;
  5. use App\Servers\ESign\comm\EsignLogHelper;
  6. use App\Servers\ESign\emun\HttpEmun;
  7. use App\Servers\System\RedisDataServer;
  8. use App\Servers\System\SmsServer;
  9. class ESignServer
  10. {
  11. static private $server = null;
  12. public $config = [
  13. 'eSignAppId'=>'', //app id
  14. 'eSignAppSecret'=>'', // app key
  15. // 'eSignHost'=>'https://smlopenapi.esign.cn', //模拟环境
  16. 'eSignHost'=>'https://openapi.esign.cn' //正式环境
  17. ];
  18. function __construct()
  19. {
  20. $this->config['eSignAppId']=env('E_SIGN_APP_ID');
  21. $this->config['eSignAppSecret']=env('E_SIGN_APP_SECRET');
  22. $this->config['eSignPublicKey']=env('E_SIGN_PUBLIC_KEY');
  23. $this->config['eSignHost']=env('E_SIGN_HOST');
  24. }
  25. /**
  26. * 创建对象
  27. * @return ESignServer
  28. */
  29. static function creatServer()
  30. {
  31. if (empty(self::$server)) self::$server = new ESignServer();
  32. return self::$server;
  33. }
  34. /**
  35. * @param $expireTime
  36. * @return float
  37. */
  38. function expireTime($expireTime){
  39. list($t1, $t2) = explode(' ', microtime());
  40. $nowTime=(float)sprintf('%.0f',(floatval($t1)+floatval($t2))*1000);
  41. $num=$expireTime-$nowTime;
  42. return $num;
  43. }
  44. /**
  45. * 获取个人认证&授权页面链接
  46. * @return bool
  47. */
  48. function psnauthurl($m_id,$phone,$psnName,$id_number,$psnId='')
  49. {
  50. $authShortUrl=RedisDataServer::creatServer()->getData($m_id.'_memberUrl');
  51. if($authShortUrl){
  52. return true;
  53. }
  54. $config=$this->config;
  55. $apiaddr="/v3/psn-auth-url";
  56. $requestType = HttpEmun::POST;
  57. $data=[
  58. "psnAuthConfig"=>[
  59. "psnAccount"=>$phone ?? '',
  60. "psnId"=>$psnId,
  61. "psnInfo" => [
  62. "psnName" => $psnName,
  63. "psnIDCardNum" => $id_number,
  64. "psnIDCardType" => "CRED_PSN_CH_IDCARD",
  65. ],
  66. ],
  67. "authorizeConfig" =>[
  68. "authorizedScopes" => [
  69. "get_psn_identity_info","psn_initiate_sign","manage_psn_resource","psn_sign_file_storage"
  70. ],
  71. ],
  72. "redirectConfig"=>[
  73. "redirectUrl"=>'',
  74. ],
  75. "notifyUrl"=>route('notify.esignNotify'),
  76. "clientType"=>"ALL",
  77. "appScheme"=>""
  78. ];
  79. $paramStr = json_encode($data);
  80. //生成签名验签+json体的header
  81. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], $paramStr, $requestType, $apiaddr);
  82. //发起接口请求
  83. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, $paramStr);
  84. $ret=json_decode($response->getBody(),true);
  85. if(isset($ret['code']) && $ret['code']==0){
  86. $authShortUrl=RedisDataServer::creatServer()->getData($m_id.'_memberUrl');
  87. if($authShortUrl){
  88. return true;
  89. }
  90. $signMember=Member::where('m_id',$m_id)->where('authType','PSN')->where([['updated_at','<=',date('Y-m-d H:i:s',time()-600),'or'],['authShortUrl','=','','or']])->first();
  91. if($signMember){
  92. $authUrl = $ret['data']['authUrl'];
  93. $authShortUrl = $ret['data']['authShortUrl'];
  94. RedisDataServer::creatServer()->setData($m_id.'_memberUrl',$authShortUrl,'str',600);
  95. $authFlowId = $ret['data']['authFlowId'];
  96. $content='尊敬的'.$signMember['name'].',您有待认证信息,点击认证 '.$authShortUrl;
  97. SmsServer::creatServer()->sendContent($signMember['phone'],$content);
  98. //存入数据库
  99. $signMember->update([
  100. 'authUrl'=>$authUrl,
  101. 'authShortUrl'=>$authShortUrl,
  102. 'authFlowId'=>$authFlowId,
  103. ]);
  104. }
  105. return true;
  106. }else{//认证授权错误
  107. return false;
  108. }
  109. }
  110. /**
  111. * 查询个人认证信息
  112. * @param $phone //手机号
  113. * @param $psnName //认证人姓名
  114. * @param $id_number //认证人身份证号
  115. * @return SignMember|\Illuminate\Database\Eloquent\Builder|\Illuminate\Database\Eloquent\Model|object|null
  116. */
  117. function personsidentityinfo($m_id,$phone,$psnName,$id_number)
  118. {
  119. $info = Member::where('id_number',$id_number)->where('id',$m_id)->where('authType','PSN')->first();
  120. if($info->{'realnameStatus'}==1 && $info->{'psnId'}!=''){
  121. return $info->{'realnameStatus'};
  122. }
  123. $config=$this->config;
  124. $apiaddr="/v3/persons/identity-info?psnIDCardNum=".$id_number."&psnIDCardType=CRED_PSN_CH_IDCARD";
  125. $requestType = HttpEmun::GET;
  126. $signAndBuildSignAndJsonHeader = EsignHttpHelper::signAndBuildSignAndJsonHeader($config['eSignAppId'], $config['eSignAppSecret'], "", $requestType, $apiaddr);
  127. //发起接口请求
  128. $response = EsignHttpHelper::doCommHttp($config['eSignHost'], $apiaddr, $requestType, $signAndBuildSignAndJsonHeader, "");
  129. $ret=json_decode($response->getBody(),true);
  130. if(isset($ret['code']) && $ret['code']==0){
  131. //realnameStatus 0 - 未实名,1 - 已实名
  132. $realnameStatus = $ret['data']['realnameStatus'];
  133. //true - 已授权,false - 未授权
  134. $authorizeUserInfo = $ret['data']['authorizeUserInfo'] ? 1 : 0;
  135. //个人账号ID
  136. $psnId = $ret['data']['psnId'];
  137. //更新认证信息
  138. Member::where('id_number',$id_number)->update([
  139. 'realnameStatus'=>$realnameStatus,
  140. 'authorizeUserInfo'=>$authorizeUserInfo,
  141. 'psnId'=>$psnId,
  142. ]);
  143. if (empty($realnameStatus) || empty($authorizeUserInfo)){//走个人认证授权流程
  144. $this->psnauthurl($m_id,$phone,$psnName,$id_number,$psnId);
  145. }
  146. //未授权也注销
  147. if(empty($authorizeUserInfo))$realnameStatus=0;
  148. }else{//证明从来没有在e签宝注册过
  149. //realnameStatus 0 - 未实名,1 - 已实名
  150. $realnameStatus = 0;
  151. //true - 已授权,false - 未授权
  152. $authorizeUserInfo = 0;
  153. //个人账号ID
  154. $psnId = '';
  155. //走认证授权流程
  156. $this->psnauthurl($m_id,$phone,$psnName,$id_number);
  157. }
  158. return $realnameStatus;
  159. }
  160. }