test/pay
1
0
Fork 0
mirror of https://gitee.com/yansongda/pay.git synced 2024-11-29 18:58:38 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix: 提前读取响应数据造成验签错误的问题 (#633)

Browse Source 
* fix: 提前读取响应数据造成验签错误的问题
This commit is contained in:
yansongda 2022-07-21 22:18:15 +08:00 committed by GitHub
parent c51793e88a
commit 1ad9a4c09a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 21 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
CHANGELOG.md
View File

@ -1,3 +1,9 @@
## v3.1.8
### fixed
- fix: 提前读取响应数据造成验签错误的问题(#633)
## v3.1.7 ## v3.1.7
### fixed ### fixed

2
src/Functions.php
View File

@ -195,7 +195,7 @@ if (!function_exists('verify_wechat_sign')) {
$timestamp = $message->getHeaderLine('Wechatpay-Timestamp'); $timestamp = $message->getHeaderLine('Wechatpay-Timestamp');
$random = $message->getHeaderLine('Wechatpay-Nonce'); $random = $message->getHeaderLine('Wechatpay-Nonce');
$sign = $message->getHeaderLine('Wechatpay-Signature'); $sign = $message->getHeaderLine('Wechatpay-Signature');
$body = $message->getBody()->getContents(); $body = (string) $message->getBody();
$content = $timestamp."\n".$random."\n".$body."\n"; $content = $timestamp."\n".$random."\n".$body."\n";
$public = get_wechat_config($params)->get('wechat_public_cert_path.'.$wechatSerial); $public = get_wechat_config($params)->get('wechat_public_cert_path.'.$wechatSerial);

14
tests/FunctionTest.php
View File

@ -210,6 +210,20 @@ class FunctionTest extends TestCase
$serverRequest = new ServerRequest('POST', 'http://localhost'); $serverRequest = new ServerRequest('POST', 'http://localhost');
verify_wechat_sign($serverRequest, []); verify_wechat_sign($serverRequest, []);
self::assertTrue(true); self::assertTrue(true);
$response = new Response(
200,
[
'Wechatpay-Nonce' => 'e59e78a6c3f7dfd7e84aabee71be0452',
'Wechatpay-Signature' => 'Bb10ZUsON47E/qLjecjk6ESLt7obZCvCCAXAEoD1Q+K548fz9h6YBgR3PZzviTmjsA3/r22qEC3r/yelFAn4pl4rJBGqrjo4ODJkOPlaDnHZwYotDvf6RcASpKB9ExCb33hAijHCiMzr9V9skNrj5F9eXc96lNZN3R5MVLsTF97nV922JIzyCrZ668khYPrn1jl5pCBpYDQ3rskgmZ+nnjg7M9vRAfTowEydSEGtsKjXUSaaKui2RDUuX8ZwxVcBTRng978Gh9s4mdRxs+mlv3gP1xQHdpa0mYMG0yGzLcWOTgrkt27sAwFnuXj9WtlEAgz/1DYntujKPxilMVGRow==',
'Wechatpay-Timestamp' => '1626444144',
'Wechatpay-Serial' => '45F59D4DABF31918AFCEC556D5D2C6E376675D57',
],
json_encode(['h5_url' => 'https://wx.tenpay.com/cgi-bin/mmpayweb-bin/checkmweb?prepay_id=wx16220223998099f898c5b24eed5c320000&package=4049184564'], JSON_UNESCAPED_SLASHES),
);
$response->getBody()->read(10);
verify_wechat_sign($response, []);
self::assertTrue(true);
} }
public function testEncryptWechatContents() public function testEncryptWechatContents()