renyang9876 /
yentwechat
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | namespace YEntWeChat\Payment; |
||
| 4 | |||
| 5 | use YEntWeChat\Core\Exceptions\FaultException; |
||
| 6 | use YEntWeChat\Support\Url as UrlHelper; |
||
| 7 | use YEntWeChat\Support\XML; |
||
| 8 | use Overtrue\Socialite\AccessTokenInterface; |
||
| 9 | use Symfony\Component\HttpFoundation\Response; |
||
| 10 | |||
| 11 | /** |
||
| 12 | * Class Payment. |
||
| 13 | * |
||
| 14 | * @mixin API |
||
| 15 | */ |
||
| 16 | class Payment |
||
| 17 | { |
||
| 18 | /** |
||
| 19 | * Scheme base path. |
||
| 20 | */ |
||
| 21 | const SCHEME_PATH = 'weixin://wxpay/bizpayurl'; |
||
| 22 | |||
| 23 | /** |
||
| 24 | * @var API |
||
| 25 | */ |
||
| 26 | protected $api; |
||
| 27 | |||
| 28 | /** |
||
| 29 | * Merchant instance. |
||
| 30 | * |
||
| 31 | * @var \EntWeChat\Payment\Merchant |
||
| 32 | */ |
||
| 33 | protected $merchant; |
||
| 34 | |||
| 35 | /** |
||
| 36 | * Constructor. |
||
| 37 | * |
||
| 38 | * @param Merchant $merchant |
||
| 39 | */ |
||
| 40 | public function __construct(Merchant $merchant) |
||
| 41 | { |
||
| 42 | $this->merchant = $merchant; |
||
|
0 ignored issues
–
show
|
|||
| 43 | } |
||
| 44 | |||
| 45 | /** |
||
| 46 | * Build payment scheme for product. |
||
| 47 | * |
||
| 48 | * @param string $productId |
||
| 49 | * |
||
| 50 | * @return string |
||
| 51 | */ |
||
| 52 | public function scheme($productId) |
||
| 53 | { |
||
| 54 | $params = [ |
||
| 55 | 'appid' => $this->merchant->app_id, |
||
| 56 | 'mch_id' => $this->merchant->merchant_id, |
||
| 57 | 'time_stamp' => time(), |
||
| 58 | 'nonce_str' => uniqid(), |
||
| 59 | 'product_id' => $productId, |
||
| 60 | ]; |
||
| 61 | |||
| 62 | $params['sign'] = generate_sign($params, $this->merchant->key, 'md5'); |
||
| 63 | |||
| 64 | return self::SCHEME_PATH.'?'.http_build_query($params); |
||
| 65 | } |
||
| 66 | |||
| 67 | /** |
||
| 68 | * Handle payment notify. |
||
| 69 | * |
||
| 70 | * @param callable $callback |
||
| 71 | * |
||
| 72 | * @return Response |
||
| 73 | */ |
||
| 74 | public function handleNotify(callable $callback) |
||
| 75 | { |
||
| 76 | $notify = $this->getNotify(); |
||
| 77 | |||
| 78 | if (!$notify->isValid()) { |
||
| 79 | throw new FaultException('Invalid request payloads.', 400); |
||
| 80 | } |
||
| 81 | |||
| 82 | $notify = $notify->getNotify(); |
||
| 83 | $successful = $notify->get('result_code') === 'SUCCESS'; |
||
| 84 | |||
| 85 | $handleResult = call_user_func_array($callback, [$notify, $successful]); |
||
| 86 | |||
| 87 | if (is_bool($handleResult) && $handleResult) { |
||
| 88 | $response = [ |
||
| 89 | 'return_code' => 'SUCCESS', |
||
| 90 | 'return_msg' => 'OK', |
||
| 91 | ]; |
||
| 92 | } else { |
||
| 93 | $response = [ |
||
| 94 | 'return_code' => 'FAIL', |
||
| 95 | 'return_msg' => $handleResult, |
||
| 96 | ]; |
||
| 97 | } |
||
| 98 | |||
| 99 | return new Response(XML::build($response)); |
||
| 100 | } |
||
| 101 | |||
| 102 | /** |
||
| 103 | * Handle native scan notify. |
||
| 104 | * https://pay.weixin.qq.com/wiki/doc/api/native.php?chapter=6_4 |
||
| 105 | * The callback shall return string of prepay_id or throw an exception. |
||
| 106 | * |
||
| 107 | * @param callable $callback |
||
| 108 | * |
||
| 109 | * @return Response |
||
| 110 | */ |
||
| 111 | public function handleScanNotify(callable $callback) |
||
| 112 | { |
||
| 113 | $notify = $this->getNotify(); |
||
| 114 | |||
| 115 | if (!$notify->isValid()) { |
||
| 116 | throw new FaultException('Invalid request payloads.', 400); |
||
| 117 | } |
||
| 118 | |||
| 119 | $notify = $notify->getNotify(); |
||
| 120 | |||
| 121 | try { |
||
| 122 | $prepayId = call_user_func_array($callback, [$notify->get('product_id'), $notify->get('openid'), $notify]); |
||
| 123 | $response = [ |
||
| 124 | 'return_code' => 'SUCCESS', |
||
| 125 | 'appid' => $this->merchant->app_id, |
||
| 126 | 'mch_id' => $this->merchant->merchant_id, |
||
| 127 | 'nonce_str' => uniqid(), |
||
| 128 | 'prepay_id' => strval($prepayId), |
||
| 129 | 'result_code' => 'SUCCESS', |
||
| 130 | ]; |
||
| 131 | $response['sign'] = generate_sign($response, $this->merchant->key); |
||
| 132 | } catch (\Exception $e) { |
||
| 133 | $response = [ |
||
| 134 | 'return_code' => 'SUCCESS', |
||
| 135 | 'return_msg' => $e->getCode(), |
||
| 136 | 'result_code' => 'FAIL', |
||
| 137 | 'err_code_des' => $e->getMessage(), |
||
| 138 | ]; |
||
| 139 | } |
||
| 140 | |||
| 141 | return new Response(XML::build($response)); |
||
| 142 | } |
||
| 143 | |||
| 144 | /** |
||
| 145 | * [WeixinJSBridge] Generate js config for payment. |
||
| 146 | * |
||
| 147 | * <pre> |
||
| 148 | * WeixinJSBridge.invoke( |
||
| 149 | * 'getBrandWCPayRequest', |
||
| 150 | * ... |
||
| 151 | * ); |
||
| 152 | * </pre> |
||
| 153 | * |
||
| 154 | * @param string $prepayId |
||
| 155 | * @param bool $json |
||
| 156 | * |
||
| 157 | * @return string|array |
||
| 158 | */ |
||
| 159 | public function configForPayment($prepayId, $json = true) |
||
| 160 | { |
||
| 161 | $params = [ |
||
| 162 | 'appId' => $this->merchant->app_id, |
||
| 163 | 'timeStamp' => strval(time()), |
||
| 164 | 'nonceStr' => uniqid(), |
||
| 165 | 'package' => "prepay_id=$prepayId", |
||
| 166 | 'signType' => 'MD5', |
||
| 167 | ]; |
||
| 168 | |||
| 169 | $params['paySign'] = generate_sign($params, $this->merchant->key, 'md5'); |
||
| 170 | |||
| 171 | return $json ? json_encode($params) : $params; |
||
| 172 | } |
||
| 173 | |||
| 174 | /** |
||
| 175 | * [JSSDK] Generate js config for payment. |
||
| 176 | * |
||
| 177 | * <pre> |
||
| 178 | * wx.chooseWXPay({...}); |
||
| 179 | * </pre> |
||
| 180 | * |
||
| 181 | * @param string $prepayId |
||
| 182 | * |
||
| 183 | * @return array|string |
||
| 184 | */ |
||
| 185 | public function configForJSSDKPayment($prepayId) |
||
| 186 | { |
||
| 187 | $config = $this->configForPayment($prepayId, false); |
||
| 188 | |||
| 189 | $config['timestamp'] = $config['timeStamp']; |
||
| 190 | unset($config['timeStamp']); |
||
| 191 | |||
| 192 | return $config; |
||
| 193 | } |
||
| 194 | |||
| 195 | /** |
||
| 196 | * Generate app payment parameters. |
||
| 197 | * |
||
| 198 | * @param string $prepayId |
||
| 199 | * |
||
| 200 | * @return array |
||
| 201 | */ |
||
| 202 | public function configForAppPayment($prepayId) |
||
| 203 | { |
||
| 204 | $params = [ |
||
| 205 | 'appid' => $this->merchant->app_id, |
||
| 206 | 'partnerid' => $this->merchant->merchant_id, |
||
| 207 | 'prepayid' => $prepayId, |
||
| 208 | 'noncestr' => uniqid(), |
||
| 209 | 'timestamp' => time(), |
||
| 210 | 'package' => 'Sign=WXPay', |
||
| 211 | ]; |
||
| 212 | |||
| 213 | $params['sign'] = generate_sign($params, $this->merchant->key); |
||
| 214 | |||
| 215 | return $params; |
||
| 216 | } |
||
| 217 | |||
| 218 | /** |
||
| 219 | * Generate js config for share user address. |
||
| 220 | * |
||
| 221 | * @param string|\Overtrue\Socialite\AccessTokenInterface $accessToken |
||
| 222 | * @param bool $json |
||
| 223 | * |
||
| 224 | * @return string|array |
||
| 225 | */ |
||
| 226 | public function configForShareAddress($accessToken, $json = true) |
||
| 227 | { |
||
| 228 | if ($accessToken instanceof AccessTokenInterface) { |
||
|
0 ignored issues
–
show
The class
Overtrue\Socialite\AccessTokenInterface does not exist. Did you forget a USE statement, or did you not list all dependencies?
This error could be the result of: 1. Missing dependenciesPHP Analyzer uses your Are you sure this class is defined by one of your dependencies, or did you maybe
not list a dependency in either the 2. Missing use statementPHP does not complain about undefined classes in if ($x instanceof DoesNotExist) {
// Do something.
}
If you have not tested against this specific condition, such errors might go unnoticed. Loading history...
|
|||
| 229 | $accessToken = $accessToken->getToken(); |
||
| 230 | } |
||
| 231 | |||
| 232 | $params = [ |
||
| 233 | 'appId' => $this->merchant->app_id, |
||
| 234 | 'scope' => 'jsapi_address', |
||
| 235 | 'timeStamp' => strval(time()), |
||
| 236 | 'nonceStr' => uniqid(), |
||
| 237 | 'signType' => 'SHA1', |
||
| 238 | ]; |
||
| 239 | |||
| 240 | $signParams = [ |
||
| 241 | 'appid' => $params['appId'], |
||
| 242 | 'url' => UrlHelper::current(), |
||
| 243 | 'timestamp' => $params['timeStamp'], |
||
| 244 | 'noncestr' => $params['nonceStr'], |
||
| 245 | 'accesstoken' => strval($accessToken), |
||
| 246 | ]; |
||
| 247 | |||
| 248 | ksort($signParams); |
||
| 249 | |||
| 250 | $params['addrSign'] = sha1(urldecode(http_build_query($signParams))); |
||
| 251 | |||
| 252 | return $json ? json_encode($params) : $params; |
||
| 253 | } |
||
| 254 | |||
| 255 | /** |
||
| 256 | * Merchant setter. |
||
| 257 | * |
||
| 258 | * @param Merchant $merchant |
||
| 259 | */ |
||
| 260 | public function setMerchant(Merchant $merchant) |
||
| 261 | { |
||
| 262 | $this->merchant = $merchant; |
||
|
0 ignored issues
–
show
It seems like
$merchant of type object<YEntWeChat\Payment\Merchant> is incompatible with the declared type object<EntWeChat\Payment\Merchant> of property $merchant.
Our type inference engine has found an assignment to a property that is incompatible with the declared type of that property. Either this assignment is in error or the assigned type should be added to the documentation/type hint for that property.. Loading history...
|
|||
| 263 | } |
||
| 264 | |||
| 265 | /** |
||
| 266 | * Merchant getter. |
||
| 267 | * |
||
| 268 | * @return Merchant |
||
| 269 | */ |
||
| 270 | public function getMerchant() |
||
| 271 | { |
||
| 272 | return $this->merchant; |
||
| 273 | } |
||
| 274 | |||
| 275 | /** |
||
| 276 | * Return Notify instance. |
||
| 277 | * |
||
| 278 | * @return \EntWeChat\Payment\Notify |
||
| 279 | */ |
||
| 280 | public function getNotify() |
||
| 281 | { |
||
| 282 | return new Notify($this->merchant); |
||
| 283 | } |
||
| 284 | |||
| 285 | /** |
||
| 286 | * API setter. |
||
| 287 | * |
||
| 288 | * @param API $api |
||
| 289 | */ |
||
| 290 | public function setAPI(API $api) |
||
| 291 | { |
||
| 292 | $this->api = $api; |
||
| 293 | } |
||
| 294 | |||
| 295 | /** |
||
| 296 | * Return API instance. |
||
| 297 | * |
||
| 298 | * @return API |
||
| 299 | */ |
||
| 300 | public function getAPI() |
||
| 301 | { |
||
| 302 | return $this->api ?: $this->api = new API($this->getMerchant()); |
||
| 303 | } |
||
| 304 | |||
| 305 | /** |
||
| 306 | * Magic call. |
||
| 307 | * |
||
| 308 | * @param string $method |
||
| 309 | * @param array $args |
||
| 310 | * |
||
| 311 | * @return mixed |
||
| 312 | * |
||
| 313 | * @codeCoverageIgnore |
||
| 314 | */ |
||
| 315 | public function __call($method, $args) |
||
| 316 | { |
||
| 317 | if (is_callable([$this->getAPI(), $method])) { |
||
| 318 | return call_user_func_array([$this->api, $method], $args); |
||
| 319 | } |
||
| 320 | } |
||
| 321 | } |
||
| 322 |
Our type inference engine has found an assignment to a property that is incompatible with the declared type of that property.
Either this assignment is in error or the assigned type should be added to the documentation/type hint for that property..