fix: 提前读取响应数据造成验签错误的问题 (#633)

* fix: 提前读取响应数据造成验签错误的问题

CHANGELOG.md

@@ -1,3 +1,9 @@
+## v3.1.8
+
+### fixed
+
+- fix: 提前读取响应数据造成验签错误的问题(#633)
+
 ## v3.1.7
 
 ### fixed

src/Functions.php

@@ -195,7 +195,7 @@ if (!function_exists('verify_wechat_sign')) {
         $timestamp = $message->getHeaderLine('Wechatpay-Timestamp');
         $random = $message->getHeaderLine('Wechatpay-Nonce');
         $sign = $message->getHeaderLine('Wechatpay-Signature');
-        $body = $message->getBody()->getContents();
+        $body = (string) $message->getBody();
 
         $content = $timestamp."\n".$random."\n".$body."\n";
         $public = get_wechat_config($params)->get('wechat_public_cert_path.'.$wechatSerial);

tests/FunctionTest.php

@@ -210,6 +210,20 @@ class FunctionTest extends TestCase
         $serverRequest = new ServerRequest('POST', 'http://localhost');
         verify_wechat_sign($serverRequest, []);
         self::assertTrue(true);
+
+        $response = new Response(
+            200,
+            [
+                'Wechatpay-Nonce' => 'e59e78a6c3f7dfd7e84aabee71be0452',
+                'Wechatpay-Signature' => 'Bb10ZUsON47E/qLjecjk6ESLt7obZCvCCAXAEoD1Q+K548fz9h6YBgR3PZzviTmjsA3/r22qEC3r/yelFAn4pl4rJBGqrjo4ODJkOPlaDnHZwYotDvf6RcASpKB9ExCb33hAijHCiMzr9V9skNrj5F9eXc96lNZN3R5MVLsTF97nV922JIzyCrZ668khYPrn1jl5pCBpYDQ3rskgmZ+nnjg7M9vRAfTowEydSEGtsKjXUSaaKui2RDUuX8ZwxVcBTRng978Gh9s4mdRxs+mlv3gP1xQHdpa0mYMG0yGzLcWOTgrkt27sAwFnuXj9WtlEAgz/1DYntujKPxilMVGRow==',
+                'Wechatpay-Timestamp' => '1626444144',
+                'Wechatpay-Serial' => '45F59D4DABF31918AFCEC556D5D2C6E376675D57',
+            ],
+            json_encode(['h5_url' => 'https://wx.tenpay.com/cgi-bin/mmpayweb-bin/checkmweb?prepay_id=wx16220223998099f898c5b24eed5c320000&package=4049184564'], JSON_UNESCAPED_SLASHES),
+        );
+        $response->getBody()->read(10);
+        verify_wechat_sign($response, []);
+        self::assertTrue(true);
     }
 
     public function testEncryptWechatContents()