travel/service/app/server/DyApiService.php

<?php
namespace app\server;

use app\model\Orders;
use app\model\ThirdMobileLogs;
use http\Client;
use support\Log;
use support\Redis;
use think\Exception;

/**
 * 抖音接口
 */
class DyApiService {
    // 生成 client_token
    CONST CLIENT_TOKEN = '/oauth/client_token/';
    // 确认接单
    CONST ORDER_CONFIRM = '/goodlife/v1/trip/trade/travelagency/order/confirm/';
    // 订单POI信息查询接口
    CONST POI_QUERY = '/goodlife/v1/trip/trade/travelagency/order/poi/query/';

    // redis key
    CONST DY_TOKEN_KEY = 'dy_client_key';
    // 请求地址
    private $host;
    private $app_id;
    // 加密密钥
    private $app_secret;

    /**
     * 构造函数.
     */
    public function __construct() {
        $this->host = env('DY_API_URL');
        $this->app_id = env('DY_APPID');
        $this->app_secret = env('DY_APPSECRET');
    }

    /**
     * @param       $url
     * @param array $data
     * @param array $extra
     * @return array
     * @throws \GuzzleHttp\Exception\GuzzleException
     */
    public function send($url, array $data = [], $extra = []): array {
        $signData = [
            'Api-App-Key' => $this->app_id,
            'Api-Time-Stamp' => time() * 1000,
        ];
        // 组装请求数据
        $reqData = $data;

        // 请求头加上签名
        // $header['Api-Sign'] = $this->getSign($signData, $reqData);
        $header['access-token'] = $this->getAccessToken();
        if ($this->app_id == 'sandbox289') {
            $header['x-sandbox-token'] = 1;
        }

        return $this->request($url, $reqData, $header, $extra);
    }

    /**
     * 获取token
     * @return bool|mixed|string
     * @throws Exception
     * @throws \GuzzleHttp\Exception\GuzzleException
     */
    private function getAccessToken() {
        // 测试token
        if ($this->app_id == 'sandbox289') {
            return 'ka.F9tiX0EN5QB5plK43W22p3cDgji9O9ZTAigryyd1A7AlbDwTmDxEN0PwjfI9';
        }
        $key = self::DY_TOKEN_KEY;
        if ($token = Redis::get($key)) {
            return $token;
        }

        $reqData = [
            'client_key' => $this->app_id,
            'client_secret' => $this->app_secret,
            'grant_type' => 'client_credential',
        ];
        $res = $this->request(self::CLIENT_TOKEN, $reqData);
        if (!$res['flag'] || !isset($res['data']['access_token'])) {
            throw new Exception('获取token失败');
        }
        Redis::setEx($key, $res['data']['expires_in'], $res['data']['access_token']);
        return $res['data']['access_token'];
    }

    /**
     * 获取签名
     */
    public function getSign($signData, $postData): string {
        // $signData = array_merge($signData, $postData);
        $buff = "";
        ksort($signData);
        // 将key和value按照顺序直接拼接到一起
        foreach ($signData as $k => $v){
            if (!empty($v)) {
                if (is_array($v)) {
                    $v = json_encode(ksort($v), JSON_UNESCAPED_UNICODE);
                }
                $buff .= $k . $v;
            }
        }

        // 签名步骤三：在上一步的结果后直接拼secretKey
        $str = $buff . $this->app_secret;
        // 在上一步结果后直接拼接，经过去除空白字符(\s)的HTTP Body原始字符串
        $str .= preg_replace('/\s+/', '', json_encode($postData));
        // 对上一步结果进行sha1加密，得到16进制字符串
        $str = sha1($str);
        // 对上一步结果进行md5加密，得到16进制字符串
        // 将上一步结果转为大写
        return strtoupper(md5($str));
    }

    /**
     * @param string $url
     * @param array  $data
     * @param array  $header
     * @param array  $extra
     * @return array
     * @throws \GuzzleHttp\Exception\GuzzleException
     */
    private function request(string $url, array $data = [], $header = []): array {
        $client = new \GuzzleHttp\Client();
        try {
            $reqUrl = $this->host . $url;
            $header['Content-Type'] = 'application/json';
            $header['charset'] = 'UTF-8';
            $options['headers'] = $header;
            $options['json'] = $data;
            $method = 'POST';

            $response = $client->request($method, $reqUrl, $options);
            Log::info(sprintf('dy url:%s, req:%s, response:%s', $reqUrl, json_encode($data), $response->getBody())) ;
            $result = ['code' => $response->getStatusCode(), 'body' => json_decode($response->getBody(), true, 512, JSON_BIGINT_AS_STRING)];
            if (isset($result['code']) && $result['code'] == 200) {
                if ($result['body']['data']['error_code'] == '0') {
                    return ['flag' => true, 'data' => $result['body']['data'] ?? [], 'message' => $result['body']['data']['description '] ?? ''];
                } else {
                    return ['flag' => false, 'data' => $result['body']['data'] ?? [], 'message' => $result['body']['data']['description '] ?? ''];
                }
            }

            return ['flag' => false, 'message' => $result['body']['data']['description'] ?? '', 'data' => []];
        } catch (\Exception $exception) {
            Log::info(sprintf('dy req fail:%s, req:%s,res:%s', $exception->getMessage(), $exception->getFile(), $exception->getLine())) ;
            return ['flag' => false, 'message' => $exception->getMessage(), 'data' => []];
        }
    }

    /**
    1.根据ClientKev找到ClientSecret，将ClientSecret向左右使用字符补齐32位/裁剪至32位，补齐:补位字符:#，先补左侧再补右侧再补左侧………直到补满32位。
    裁剪:先裁剪左侧再裁右侧再裁左侧………直到剩余32位。(正常不需要补齐，secret默认为32位，此举是为了
    以防万一)
    2.将ClientSecret作为Key,右侧16位为向量IV
    3.将密文进行base64解码。
    4.使用AES-256-CBC模式解密解码后的密文，对齐使用PKCS5Padding方式
     * @param $cipherText
     * @param $clientSecret
     * @return false|string
     */
    public function decrypt($cipherText, $clientSecret) {
        Log::info('$cipherText:' . $cipherText);
        // 补齐或裁剪 ClientSecret 为 32 位
        $clientSecret = $this->padOrTruncate($clientSecret);
        Log::info('$cipherText step 2:' . $clientSecret);

        // 使用 ClientSecret 作为密钥
        $key = $clientSecret;

        // 右侧16位为初始化向量IV
        $iv = substr($key, 16, 16);

        // 将密文 base64 解码
        $cipherTextDecoded = base64_decode($cipherText);

        // 使用 AES-256-CBC 解密
        return openssl_decrypt($cipherTextDecoded, 'AES-256-CBC', $key, OPENSSL_RAW_DATA, $iv);
    }

    public function encrypt($cipherText, $clientSecret) {
        Log::info('$cipherText:' . $cipherText);
        // 补齐或裁剪 ClientSecret 为 32 位
        $clientSecret = $this->padOrTruncate($clientSecret);
        Log::info('$cipherText step 2:' . $clientSecret);

        // 使用 ClientSecret 作为密钥
        $key = $clientSecret;

        // 右侧16位为初始化向量IV
        $iv = substr($key, 16, 16);

        // 使用 AES-256-CBC 解密
        return base64_encode(openssl_encrypt($cipherText, 'AES-256-CBC', $key, OPENSSL_RAW_DATA, $iv));
    }

    /**
     * @param $clientSecret
     * @return false|string
     */
    private function padOrTruncate($clientSecret) {
        // 1. 如果 clientSecret 长度为32，直接返回
        if (strlen($clientSecret) == 32) {
            return $clientSecret;
        }

        // 2. 如果 length < 32，补齐至32位
        if (strlen($clientSecret) < 32) {
            // 补齐过程：先补左侧，再补右侧，再补左侧，直到长度为32
            $paddingChar = '#';
            $padded = $clientSecret;

            // 左侧补齐
            $left = true;
            while (strlen($padded) < 32) {
                if ($left) {
                    $padded = $paddingChar . $padded;
                    $left = false;
                } else {
                    $padded = $padded . $paddingChar;
                    $left = true;
                }
            }

            return substr($padded, 0, 32); // 确保返回32位
        }

        // 3. 如果 length > 32，裁剪至32位
        if (strlen($clientSecret) > 32) {
            // 裁剪过程：先裁左侧，再裁右侧，再裁左侧，直到长度为32
            $cropped = $clientSecret;

            // 左侧裁剪
            while (strlen($cropped) > 32) {
                $cropped = substr($cropped, 1);
            }

            // 右侧裁剪
            while (strlen($cropped) > 32) {
                $cropped = substr($cropped, 0, -1);
            }

            // 左侧裁剪（再一次）
            while (strlen($cropped) > 32) {
                $cropped = substr($cropped, 1);
            }

            return substr($cropped, 0, 32); // 确保返回32位
        }

        return $clientSecret;
    }
}