API对接技术文档

代收下单

# 代码示例

  • 代码示例仅供参考，具体参数说明请参考请求参数说明

TopPayRequestUtil(点击获取代码示例)


import com.google.gson.Gson;
import com.google.gson.JsonObject;
import java.io.IOException;
import java.security.NoSuchAlgorithmException;
import java.security.spec.InvalidKeySpecException;
import java.util.Map;
import java.util.TreeMap;

public class TopPayDemo {

  //请登录商户后台，点击 个人中心 > 个人信息 在基本信息中获取商户ID
  private static final String MCH_ID = "S820250514103726000009";
  // 平台公钥
  private static final String PLAT_PUBLIC_KEY = "MIGfMA0GCSqG.........iDtQIDAQAB";
  // 商户私钥
  private static final String MCH_PRIVATE_KEY = "MIICeAIBAD9Fz0.......jKTtoWN6j3F1V0bdyvhh";
  private static final String payUrl = "https://vnm-openapi.toppay.asia/gateway/prePayIn";
  private static final String payNotify = "your notify url";

  public static void main(String[] args) throws Exception {
    // 代收
    pay();
  }
  private static void pay() throws Exception {
    Map<String, String> requestParams = new TreeMap<>();
    requestParams.put("merchantCode", MCH_ID);
    // 订单类型默认传0
    requestParams.put("orderType", "0");
    // 支付方式(BANK_QR/MOMO/ZOLA/VN_BANKAPI/VTPAY/BANK_TRANSFER)
    requestParams.put("method", "BANK_QR");
    // 商户订单号
    requestParams.put("orderNum", "T1324657980");
    // 订单金额（仅支持正整数格式金额）
    requestParams.put("payMoney", "10000");
    // 回调地址
    requestParams.put("notifyUrl", payNotify);
    requestParams.put("dateTime", "20240514102512");// 时间戳 格式 yyyyMMddHHmmss
    List<String> paramNameList = new ArrayList<>();
    for (String key : requestParams.keySet()) {
      paramNameList.add(key);
    }
    Collections.sort(paramNameList);
    StringBuilder stringBuilder = new StringBuilder();
    //拼接签名串
    for (String key : paramNameList) {
      stringBuilder.append(requestParams.get(key));  
    }

    String keyStr = stringBuilder.toString();  
    System.out.println("keyStr:" + keyStr);
    //签名
    String signedStr = TopPayRequestUtil.privateEncrypt(keyStr, TopPayRequestUtil.getPrivateKey(MCH_PRIVATE_KEY));  
    requestParams.put("sign", signedStr);

    String postJson = new Gson().toJson(requestParams);
    System.out.println("Post Json Params:" + postJson);

    String responseJson = TopPayRequestUtil.doPost(payUrl, postJson); 
    System.out.println("Response Msg:" + responseJson);
  }
}


<?php
    // 平台公钥，从密钥配置中获取
    $platPublicKey = 'MIGfMA0GCSqG.........iDtQIDAQAB';
    // 商户私钥，商户自己生成
    $mchPrivateKey = 'MIICeAIBAD9Fz0.......jKTtoWN6j3F1V0bdyvhh';
    // merchantCode: 商户ID
    // 请登录商户后台，点击 个人中心 > 个人信息 在基本信息中获取商户ID
    $merchantCode = 'S820250514103726000009';
     //订单类型默认传0
    $orderType = '0';
     // 商户订单号
    $orderNum = 'T1324657980';
    // 支付金额（仅支持正整数格式金额）
    $payMoney = '10000';
    // 回调地址
    $notifyUrl = 'http://XXXXX';
    // 订单时间
    $dateTime = date("YmdHis",time());
    $params = array(
        'merchantCode' => $merchantCode,
        'orderType' => $orderType,
        'orderNum' => $orderNum,
        'payMoney' => $payMoney,
        'notifyUrl' => $notifyUrl,
        'dateTime' => $dateTime,
    );

    ksort($params);
    $params_str = '';
    foreach ($params as $key => $val) {
        $params_str = $params_str . $val;
    }


    $sign = pivate_key_encrypt($params_str, $mchPrivateKey);

    $params['sign'] = $sign;

    $params_string = json_encode($params);
    $url = 'https://vnm-openapi.toppay.asia/gateway/prePayIn';
    $ch = curl_init();

    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "POST");
    curl_setopt($ch, CURLOPT_POSTFIELDS, $params_string);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_HTTPHEADER, array(
        'Content-Type: application/json',
        'Content-Length: ' . strlen($params_string))
    );
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);

    //execute post
    $request = curl_exec($ch);
    $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);

    if($httpCode == 200)
    {
        $result = json_decode($request, true);
        echo "platRespCode :". $result['platRespCode'] . "\n";
        echo "platRespMessage :". $result['platRespMessage'] . "\n";
        echo "platOrderNum :". $result['platOrderNum'] . "\n";
        echo "orderNum :". $result['orderNum'] . "\n";
        echo "payMoney :". $result['payMoney'] . "\n";
        echo "platSign :". $result['platSign'] . "\n";

        $decryptStr = public_key_decrypt($result['platSign'], $platPublicKey);
        echo "decryptStr :". $decryptStr . "\n";
    }
    else {
        echo $httpCode;
    }

    function pivate_key_encrypt($data, $pivate_key)
    {
        $pivate_key = '-----BEGIN PRIVATE KEY-----'."\n".$pivate_key."\n".'-----END PRIVATE KEY-----';
        $pi_key = openssl_pkey_get_private($pivate_key);
        $crypto = '';
        foreach (str_split($data, 117) as $chunk) {
            openssl_private_encrypt($chunk, $encryptData, $pi_key);
            $crypto .= $encryptData;
        }

        return base64_encode($crypto);
    }

    function public_key_decrypt($data, $public_key)
    {
        $public_key = '-----BEGIN PUBLIC KEY-----'."\n".$public_key."\n".'-----END PUBLIC KEY-----';
        $data = base64_decode($data);
        $pu_key =  openssl_pkey_get_public($public_key);
        $crypto = '';
        foreach (str_split($data, 128) as $chunk) {
            openssl_public_decrypt($chunk, $decryptData, $pu_key);
            $crypto .= $decryptData;
        }

        return $crypto;
    }

using demo.utils;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Net;
using System.Text;
using System.Threading.Tasks;

namespace demo.demos
{
    class CreateBillDemo
    {
        // MCH_ID: 商户ID
        // 请登录商户后台，点击 个人中心 > 个人信息 在基本信息中获取商户
        private static readonly string MCH_ID = "S820250514103726000009";
        // 平台公钥
        private static readonly string PLAT_PUBLIC_KEY = "MIGfMA0GCSqG.........iDtQIDAQAB";
        // 商户私钥
        private static readonly string MCH_PRIVATE_KEY = "MIICeAIBAD9Fz0.......jKTtoWN6j3F1V0bdyvhh";
        private static readonly string payUrl = "https://vnm-openapi.toppay.asia/gateway/prePayIn";
        public static void requestPayment()
        {
            long currenttimemillis = (long)(DateTime.UtcNow - new DateTime(1970, 1, 1, 0, 0, 0, DateTimeKind.Utc)).TotalMilliseconds;
            string merchantCode = MCH_ID;                                               // 商户ID
            string orderType = "0";                                                     // 订单类型默认传0
            string method = "BANK_QR";                                                  // 支付方式(BANK_QR/MOMO/ZOLA)
            string orderNum = "T1324657980";                                            // 商户订单号
            string payMoney = "10000";                                                  // 订单金额
            string notifyUrl = "https://www.baidu.com";                                 // 回调地址，即客户支付成功后通知地址
            string dateTime = "20251107105500";                                         // 时间戳 格式 yyyyMMddHHmmss
            Dictionary<string, object> VarPost = new Dictionary<string, object>(); ;
            VarPost.Add("merchantCode", merchantCode);//用a标识的参数，并用POST传值方式传给网页 ­
            VarPost.Add("orderType", orderType);
            VarPost.Add("method", method);
            VarPost.Add("orderNum", orderNum);
            VarPost.Add("payMoney", payMoney);
            VarPost.Add("notifyUrl", notifyUrl);
            VarPost.Add("dateTime", dateTime);
            List<string> paramNameList = new List<string>();
            foreach (string key in VarPost.Keys)
            {
                paramNameList.Add(key);
            }
            paramNameList.Sort();// 排序key
            StringBuilder stringBuilder = new StringBuilder();
            for (int i = 0; i < paramNameList.Count; i++)
            {
                string key = paramNameList[i];
                stringBuilder.Append(VarPost[key]);  // 拼接参数
            }
            string keyStr = stringBuilder.ToString();  // 得到待加密的字符串
            int len = keyStr.Length;
            string signedStr = "";
            try
            {
                RSAForJava rsa = new RSAForJava();
                signedStr = rsa.EncryptByPrivateKey(keyStr, MCH_PRIVATE_KEY);
            }
            catch (Exception ex)
            {
                Console.WriteLine(ex.Message);
            }
            VarPost.Add("sign", signedStr);

            WebClient w = new WebClient();
            w.Headers[HttpRequestHeader.ContentType] = "application/json";
            string jsonStr = JsonNewtonsoft.SerializeDictionaryToJsonString(VarPost);
            Console.WriteLine("postJson:" + jsonStr);     //发送字符串
            string sRemoteInfo = w.UploadString(payUrl, "POST", jsonStr);
            Console.WriteLine("return:" + sRemoteInfo);     //接收字符串
            //string sRemoteInfo = System.Text.Encoding.UTF8.GetString(byRemoteInfo);
            Dictionary<string, object> dict = JsonNewtonsoft.DeserializeJsonToDict(sRemoteInfo);
            bool pass = false;
            try
            {
                RSAForJava rsa = new RSAForJava();
                pass = rsa.verifySign(dict, PLAT_PUBLIC_KEY);  // 签名验证
            }
            catch (Exception ex)
            {
                Console.WriteLine(ex.Message);
            }
            Console.WriteLine("verifysign:"+pass);
        }

    }
}


package main

import (
	"bytes"
	"encoding/base64"
	"encoding/json"
	"fmt"
	"io/ioutil"
	"net/http"
	"reflect"
	"sort"
	"strings"
)

// 创建json请求结构
type RequestBody struct {
	MerchantCode string `json:"merchantCode"`
	OrderType    string `json:"orderType"`
	OrderNum     string `json:"orderNum"`
	PayMoney     string `json:"payMoney"`
	NotifyUrl    string `json:"notifyUrl"`
	DateTime     string `json:"dateTime"`
	Method       string `json:"Method"`
	Sign         string `json:"sign"`
}

func main() {
	//公私钥（仅用于测试）
	cryptor := NewCryptor()
	cryptor.Pub64 = "MIGfMA0GCSqG.........iDtQIDAQAB"
	cryptor.Pri64 = "MIICeAIBAD9Fz0.......jKTtoWN6j3F1V0bdyvhh"
	//代收订单模式一(收银台模式)
	url := "https://vnm-openapi.toppay.asia/gateway/prePayIn"
	//代收模式二(直连模式)
	//url := "https://vnm-openapi.toppay.asia/gateway/payment"
	//具体下单参数内容
	request := RequestBody{
		// MerchantCode: 商户ID
        // 请登录商户后台，点击 个人中心 > 个人信息 在基本信息中获取商户
		MerchantCode: "S820250514103726000009",
		// 订单类型默认传0
		OrderType:    "0",
		// 商户订单号
		OrderNum:     "T1324657980",
	    // 支付金额(仅支持正整数格式金额)
		PayMoney:     "10000",
		//回调通知地址
		NotifyUrl:    "http://xxxxxx",
		//支付方式(BANK_QR/MOMO/ZOLA/VN_BANKAPI/VTPAY/BANK_TRANSFER)
		Method:       "BANK_QR",
		// 时间 格式 yyyyMMddHHmmss
		DateTime:     "20250101235959",
	}
	// 将结构体的字段按JSON标签排序并拼接其值
	sortedValues, err := sortedConcatenatedValues(request)
	if err != nil {
		fmt.Printf("Error: %s\n", err)
		return
	}
	//将排序拼接后的值，使用私钥进行加密，并进行base64编码
	encryptedData := cryptor.PriEncrypt([]byte(sortedValues))
	encodedString := base64.StdEncoding.EncodeToString(encryptedData)
	//将获得签名放入请求结构中
	request.Sign = encodedString
	jsonBytes, err := json.Marshal(request)
	if err != nil {
		fmt.Printf("Error: %s", err.Error())
		return
	}
	fmt.Println("json2", bytes.NewBuffer(jsonBytes))
	//进行http请求
	req, err := http.NewRequest("POST", url, bytes.NewBuffer(jsonBytes))
	if err != nil {
		fmt.Println("Error creating HTTP request:", err)
		return
	}
	req.Header.Set("Content-Type", "application/json")
	client := &http.Client{}
	resp, err := client.Do(req)
	if err != nil {
		fmt.Println("Error sending HTTP request:", err)
		return
	}
	defer resp.Body.Close()
	// 读取并打印响应体
	respBody, err := ioutil.ReadAll(resp.Body)
	if err != nil {
		fmt.Println("Error reading response body:", err)
		return
	}
	fmt.Println("Response Body:", string(respBody))
}

// 使用结构体的 JSON 标签按照ASCII进行排序并拼接对应值为一个字符串
func sortedConcatenatedValues(v interface{}) (string, error) {
	valueOf := reflect.ValueOf(v)
	typeOf := valueOf.Type()
	kv := make(map[string]string)
	for i := 0; i < valueOf.NumField(); i++ {
		field := typeOf.Field(i)
		jsonTag := field.Tag.Get("json")
		if jsonTag == "" || jsonTag == "-" {
			continue
		}
		tagName := strings.Split(jsonTag, ",")[0] // 忽略omitempty选项
		kv[tagName] = fmt.Sprint(valueOf.Field(i).Interface())
	}
	keys := make([]string, 0, len(kv))
	for k := range kv {
		keys = append(keys, k)
	}
	sort.Strings(keys)
	var concatenatedValues strings.Builder
	for _, key := range keys {
		concatenatedValues.WriteString(kv[key])
	}
	return concatenatedValues.String(), nil
}


      
import json
import requests
import base64
import easyocr
from M2Crypto import RSA
from collections import OrderedDict

class TopPayDemo:
    # 商户私钥存储地址
    MCH_PRI_KEY_FILE = 'data\company_rsa_private_key.pem'
    # 平台公钥保存地址
    MCH_PUBLIC_KEY_FILE = 'data\plat_rsa_public_key.pem'
    # MCH_ID: 商户ID
    # 请登录商户后台，点击 个人中心 > 个人信息 在基本信息中获取商户
    MCH_ID = "S820250514103726000009"
    # 收银台模式，使用我们的收银台页面
    url = "https://vnm-openapi.toppay.asia/gateway/prePayIn"  
    #直连模式，获取相关支付信息，没有收银台页面
    # pay_url = "https://vnm-openapi.toppay.asia/gateway/payment"
    pay_notify = "your notify url"

    @staticmethod
    def pay():
        request_params = OrderedDict()
        # 商户ID，可以在商户后台获取
        request_params["merchantCode"] = TopPayDemo.MCH_ID
        # 订单类型默认传0
        request_params["orderType"] = "0"
        # 支付金额（仅支持正整数格式金额）
        request_params["payMoney"] = "10000"
        # 商户订单号
        request_params["orderNum"] = "T1642592278863"
        # 支付方式(BANK_QR/MOMO/ZOLA/VN_BANKAPI/VTPAY/BANK_TRANSFER)
        request_params["method"] = "BANK_QR" 
        # 回调地址
        request_params["notifyUrl"] = "http://xxxxxx"
        # 时间戳 格式 yyyyMMddHHmmss
        request_params["dateTime"] = "20250514102565"

        # 根据key进行参数排序
        key_str = ''.join([str(value) for value in request_params.values()])
        print("keyStr:", key_str)

        # 加密
        signed_str = TopPayDemo.private_encrypt(key_str, TopPayDemo.MCH_PRI_KEY_FILE)
        request_params["sign"] = signed_str

        # 发送请求
        post_json = json.dumps(request_params)
        print("Post Json Params:", post_json)

        response_json = TopPayDemo.do_post(TopPayDemo.url, post_json)
        print("Response Msg:", response_json)

        check = TopPayDemo.public_key_decrypt(signed_str, TopPayDemo.MCH_PUBLIC_KEY_FILE);
        print("check:", check)

    @staticmethod
    def private_encrypt(data, prikey_file):
        rsa_pri = RSA.load_key(prikey_file)
        # 使用私钥加密数据
        # M2Crypto.RSA.pkcs1_padding 是一种常见的填充方式
        crypto = b''
        for chunk in [data[i:i + 117] for i in range(0, len(data), 117)]:
            encrypt_data = rsa_pri.private_encrypt(chunk.encode('utf-8'), RSA.pkcs1_padding)
            crypto += encrypt_data
        return base64.b64encode(crypto).decode('utf-8')


    @staticmethod
    def public_key_decrypt(data, public_file):
        rsa_key = RSA.load_pub_key(public_file)
        data = base64.b64decode(data)
        crypto = b''
        for chunk in [data[i:i+128] for i in range(0, len(data), 128)]:
            decrypt_data = rsa_key.public_decrypt(chunk, RSA.pkcs1_padding)
            crypto += decrypt_data
        return crypto.decode('utf-8')
    @staticmethod
    def do_post(url, data):
        headers = {"Content-Type": "application/json"}
        response = requests.post(url, data=data, headers=headers)
        if response.status_code == 200:
            return response.json()
        return None

if __name__ == '__main__':
    TopPayDemo.pay()

const { encryptWithPrivateKey } = require('./RSAUtil');
const axios = require('axios');

//请求结构
//具体下单参数内容
//MerchantCode: 商户ID
//请登录商户后台，点击 个人中心 > 个人信息 在基本信息中获取商户ID
var merchantCode = 'S820250514103726000009'
//订单类型默认传0
var orderType =0
//商户订单号
var orderNum = 'T1642592278863'
// 支付金额（仅支持正整数格式金额）
var payMoney = 10000
//回调地址
var notifyUrl = 'http://xxxxxx'
//时间戳 格式 yyyyMMddHHmmss
var dateTime = '20250514102565'
//支付方式(BANK_QR/MOMO/ZOLA/VN_BANKAPI/VTPAY/BANK_TRANSFER)
var method = 'BANK_QR'
const data = {
    merchantCode: merchantCode,
    orderType: orderType,
    orderNum: orderNum,
    payMoney: payMoney,
    notifyUrl: notifyUrl,
    dateTime: dateTime,
    method: method
};
console.log(merchantCode)
console.log(data.merchantCode)

//将对象的键名按ASCII码排序
const sortedKeys = Object.keys(data).sort();

//使用排序后的键名拼接它们的值
let sortedString = '';
sortedKeys.forEach(key => {
    sortedString += data[key];
});

console.log(sortedString);
var sign = encryptWithPrivateKey(sortedString);
//将sign添加到data对象中
data.sign = sign;
const jsonData = JSON.stringify(data);
console.log(jsonData)

//收银台模式（返回收银台url）
var url = 'https://vnm-openapi.toppay.asia/gateway/prePayIn'
//直连模式（返回相关支付信息）
//var url = 'https://vnm-openapi.toppay.asia/gateway/payment'
//请求选项
axios.post(url, jsonData,{
  headers: {
    'Content-Type': 'application/json'
  }
})
.then((response) => {
  console.log('状态码:', response.status);
  console.log('响应数据:', response.data);
})
.catch((error) => {
  console.error('请求失败:', error);
});

# 请求地址

  • 收银台 (模式1) : 使用我们的收银台进行交易
    • 请求方式 : POST
    • 请求地址 : https://vnm-openapi.toppay.asia/gateway/prePayIn
  • 直连模式 (模式2) : 获取支付信息(适用于有自己收银台页面的商户)
    • 请求方式 : POST
    • 请求地址 : https://vnm-openapi.toppay.asia/gateway/payment

# 请求参数

注：所有的参数中，不要填写中文！！！

  • 收银台及直连
参数 类型 必填 描述 示例
merchantCode string(32) Y 商户ID，在商户平台获取 S820250514103726000009
orderType string(10) Y 订单类型 默认传0
method string(32) N 支付方式, 直连模式必传 BANK_QR
点击查看支持的支付方式
orderNum string(32) Y 商户订单号 T1642592278863
payMoney string(10) Y 付款金额（仅允许正整数格式金额） 10000
notifyUrl string(100) Y 接收订单交易成功通知的地址 https://host:port/notifyUrl
dateTime string(32) Y 时间戳格式：yyyyMMddHHmmss 20190101235959
extendParam string(100) N 透传参数(上传的内容会原路返回) test
sign string(255) Y 签名 fnbSOvY83pr8hXg+Fd ...

# 请求报文示例

{
    "merchantCode": "S820250514103726000009",
    "orderType": "0",
    "orderNum": "T1642593166888",
    "payMoney": "10000",
    "method": "BANK_QR",
    "notifyUrl": "your notify url",
    "dateTime": "20250514102565",
    "extendParam": "TEST",
    "sign": "fnbSOvY83pr8hXg+FdNNYi2ubQUGNv/qGYc4TjRl+Xxd1yc9fpkpTx5UQEDTgmhwdCKBkhHVsx2AiQbYDxZ5WBuU1GZeiJ"
}

# 响应参数

参数 类型 必填 描述 示例
platRespCode String Y 请求业务是否成功 FAIL:失败\SUCCESS:成功
platRespMessage String Y 接口响应信息提示 Request Transaction Success
platOrderNum String Y 平台订单号 PI1453242857400963072
payMoney string Y 支付金额 10000
orderNum String Y 商户订单号 T1234567980
accNo String N 收款人银行卡号 12345678
accName String N 收款人姓名 ZHANG SAN
accBankName String N 收款人银行名称 ACB
paymentCode String N 付款备注 ERD5HGFK
method String N 支付方式 BANK_QR 等
payData String N 响应参数 返回收银台二维码数据或支付链接
extendParam string(100) N 透传参数(上传的内容会原路返回) 123

# 响应报文示例

  • 模式1响应报文示例
{
    "platOrderNum": "P16546513165462132132",
    "payMoney": "10000",
    "orderNum": "T1642593166888",
    "platSign": "TPd72nbjEWPQHKf9KwhUUmFZkM4j2lnEBl0l...",
    "platRespCode": "SUCCESS",
    "platRespMessage": "Request Transaction Success",
    "payData": "https://vnm-openapi.toppay.asia/gateway/order/P16546513165462132132",
    "extendParam": "TEST"
}
  • 模式2响应报文示例(method=BANK_QR时)
{
  "platOrderNum": "PRE1496117742095368264",
  "payMoney": "51200",
  "paymentCode": "B8DAF293",
  "method": "BANK_QR",
  "extendParam": "test-extend-param",
  "accBankName": "ACB",
  "accNo": "000011111",
  "accName": "ACC NAME",
  "orderNum": "20251015001082223288222221",
  "platRespCode": "SUCCESS",
  "platRespMessage": "Request Transaction Success",
  "payData": "00020101021138520010A000000727012201084489131700069704160208QRIBFTTA54051120062120808B8DAF****"
}
  • 失败响应报文示例
{
    "platRespCode": "FAIL",
    "platRespMessage": "Error message"
}

# 异步通知

  • 进行验签时，要用 商户后台-收付款配置-API配置中提供的平台公钥进行解密！！！
  • 进行验签时，以实际回调的参数为准，不要验签固定的参数
  • 订单的最终状态以通知的status为准！！！
  • 接受异步通知后,需响应 SUCCESS 字符串,否则TopPay将继续发起5次通知！！！
import com.google.gson.JsonObject;

public class TopPayNotify {
    private static final String PLAT_PUBLIC_KEY = "MIGfMA0GCSqG.........iDtQIDAQAB";  // 平台公钥
    public static void main(String[] args) throws Exception {
        // 代收
        JsonObject notifyBody = new jsonObject();
        boolean verifyResult = TopPayRequestUtil.verifySign(notifyBody,PLAT_PUBLIC_KEY);
        if (verifyResult) {
            // ... 签名验证通过,处理正常的业务逻辑
        } else {
            // ... 签名验证错误
        }
    }
}

<?php

$res = json_decode(file_get_contents('php://input'), true);
$platSign = $res['platSign'];
unset($res['platSign']);
$public_key = 'MIGfMA0GCSq.......zXwIDAQAB';
$decryptSign = public_key_decrypt($platSign, $public_key);

$params = $res;
ksort($params);
$params_str = '';
foreach ($params as $key => $val) {
    $params_str = $params_str . $val;
}

if($params_str == $decryptSign) {
    if($res['code'] == '00') {
        echo 'success';
    }
    else {
        echo 'fail';
    }
}
else {
    echo 'fail';
}

function public_key_decrypt($data, $public_key)
{
    $public_key = '-----BEGIN PUBLIC KEY-----'."\n".$public_key."\n".'-----END PUBLIC KEY-----';
    $data = base64_decode($data);
    $pu_key =  openssl_pkey_get_public($public_key);
    $crypto = '';
    foreach (str_split($data, 128) as $chunk) {
        openssl_public_decrypt($chunk, $decryptData, $pu_key);
        $crypto .= $decryptData;
    }

    return $crypto;
}

using demo.utils;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;

namespace demo.demos
{
    class CallbackDemo
    {
        private static readonly string PLAT_PUBLIC_KEY = "MIGfMA0GCSqG.........iDtQIDAQAB";  // 平台公钥
        private static readonly string jsonstr = "{\"code\":\"00\",\"msg\":\"SUCCESS\",\"platOrderNum\":\"I1_1289033071470972928\",\"payMoney\":\"10000\",\"method\":\"BANK_QR\",\"platSign\":\"INaY8jjdvaHdWKc4gXtTee9PwLl1157wC4+XN1tIQpHxnKtEjoGAD1cHok66eK+PzvPFUfmK/opvZhqf/MhOZEX6i/C9/iU4Esi9rfcN/l+DToG+rBPv8B4Ha908irHeosd3W4F1MnPCxxdjL+NH6aYyxX9cT5rZkJz5eUlr5Y8=\",\"orderNum\":\"T1596164382079\",\"status\":\"SUCCESS"}";

        public static void requestCallback()
        {
            bool pass = false;
            try
            {
                Dictionary<string, object> dict = JsonNewtonsoft.DeserializeJsonToDict(jsonstr);

                RSAForJava rsa = new RSAForJava();
                pass = rsa.verifySign(dict, PLAT_PUBLIC_KEY);  // 签名验证
            }
            catch (Exception ex)
            {
                Console.WriteLine(ex.Message);
            }
            Console.WriteLine("verifysign：" + pass.ToString());
        }

    }
}


package main

import (
	"crypto/rsa"
	"crypto/x509"
	"encoding/base64"
	"fmt"
	"log"
	"math/big"
)

func main() {
	// 示例公钥（Base64格式）
	pubKeyBase64 := "MIGfMA0GCSqGSIb3D............jYvQK7QIDAQAB"
	
	// 示例加密数据（Base64格式）
	encryptedData := "hPgCobTZQM36IxbSATbFncPc9hY............UH0ogKd7sdgw8vYg3fZu7NiI38="

	// 1. 解析公钥
	pubKey, err := parsePublicKey(pubKeyBase64)
	if err != nil {
		log.Fatalf("解析公钥失败: %v", err)
	}

	// 2. 解码加密数据
	encryptedBytes, err := base64.StdEncoding.DecodeString(encryptedData)
	if err != nil {
		log.Fatalf("解码加密数据失败: %v", err)
	}

	// 3. 使用公钥解密
	decryptedData, err := decryptWithPublicKey(pubKey, encryptedBytes)
	if err != nil {
		log.Fatalf("解密失败: %v", err)
	}

	// 4. 输出解密结果
	fmt.Printf("解密后的数据: %s\n", string(decryptedData))
}

// 解析公钥
func parsePublicKey(pubKeyBase64 string) (*rsa.PublicKey, error) {
	// 解码Base64格式的公钥
	pubKeyBytes, err := base64.StdEncoding.DecodeString(pubKeyBase64)
	if err != nil {
		return nil, fmt.Errorf("解码公钥失败: %v", err)
	}

	// 尝试解析PKIX格式的公钥
	pubKeyInterface, err := x509.ParsePKIXPublicKey(pubKeyBytes)
	if err != nil {
		// 如果PKIX格式失败，尝试解析PKCS1格式
		pubKeyInterface, err = x509.ParsePKCS1PublicKey(pubKeyBytes)
		if err != nil {
			return nil, fmt.Errorf("解析公钥失败: %v", err)
		}
	}

	// 类型断言为RSA公钥
	pubKey, ok := pubKeyInterface.(*rsa.PublicKey)
	if !ok {
		return nil, fmt.Errorf("不是RSA公钥")
	}

	return pubKey, nil
}

// 使用公钥解密
func decryptWithPublicKey(pubKey *rsa.PublicKey, encryptedData []byte) ([]byte, error) {
	// 获取密钥长度
	k := (pubKey.N.BitLen() + 7) / 8
	if k != len(encryptedData) {
		return nil, fmt.Errorf("加密数据长度错误")
	}

	// 将加密数据转换为大整数
	m := new(big.Int).SetBytes(encryptedData)
	if m.Cmp(pubKey.N) > 0 {
		return nil, fmt.Errorf("加密数据太大")
	}

	// 使用公钥指数进行解密
	m.Exp(m, big.NewInt(int64(pubKey.E)), pubKey.N)

	// 处理解密结果
	d := leftPad(m.Bytes(), k)
	if d[0] != 0 {
		return nil, fmt.Errorf("数据损坏")
	}
	if d[1] != 0 && d[1] != 1 {
		return nil, fmt.Errorf("密钥对不匹配")
	}

	// 查找数据开始位置
	var i = 2
	for ; i < len(d); i++ {
		if d[i] == 0 {
			break
		}
	}
	i++
	if i == len(d) {
		return nil, nil
	}

	return d[i:], nil
}

// 左填充函数
func leftPad(input []byte, size int) []byte {
	n := len(input)
	if n > size {
		n = size
	}
	out := make([]byte, size)
	copy(out[len(out)-n:], input)
	return out
} 


import base64
import json
from collections import OrderedDict

import requests
from M2Crypto import RSA


class TopNotifyDemo:
    PLAT_PUBLIC_KEY_FILE = 'data\plat_rsa_public_key.pem'
    MCH_ID = "S820250514103726000009"

    @staticmethod
    def private_encrypt(data, prikey_file):
        rsa_pri = RSA.load_key(prikey_file)
        # 使用私钥加密数据
        # M2Crypto.RSA.pkcs1_padding 是一种常见的填充方式
        crypto = b''
        for chunk in [data[i:i + 117] for i in range(0, len(data), 117)]:
            encrypt_data = rsa_pri.private_encrypt(chunk.encode('utf-8'), RSA.pkcs1_padding)
            crypto += encrypt_data
        return base64.b64encode(crypto).decode('utf-8')

    @staticmethod
    def public_key_decrypt(data, public_file):
        rsa_key = RSA.load_pub_key(public_file)
        data = base64.b64decode(data)
        crypto = b''
        for chunk in [data[i:i + 128] for i in range(0, len(data), 128)]:
            decrypt_data = rsa_key.public_decrypt(chunk, RSA.pkcs1_padding)
            crypto += decrypt_data
        return crypto.decode('utf-8')


if __name__ == '__main__':
    response = '{"platOrderNum":"T123465790","payMoney":"10000","method":"BANK_QR","platSign":"INaY8jjdvaHdWKc4gXtTee9PwLl1157wC4+XN1tIQpHxnKtEjoGAD1cHok66eK+PzvPFUfmK/opvZhqf/MhOZEX6i/C9/iU4Esi9rfcN/l+DToG+rBPv8B4Ha908irHeosd3W4F1MnPCxxdjL+NH6aYyxX9cT5rZkJz5eUlr5Y8=\",\"orderNum\":\"T1596164382079\",\"code\":\"SUCCESS\",\"msg\":\"Request Transaction Success\",\"status\":\"SUCCESS"}'
    response_json = json.loads(response)
    sign = response_json["sign"]
    del response_json["sign"]
    sign='U/ohCCCF9Ia3Vq+eF0TIxM4yQBMLOANdNPdVJ+U3bVtBjxlAl8YnjgizhKuiaRlP4Em4clLcshlYTjtDX9aRDIjuCew8if4y7PAX5q66Zvka5XCJgu3jOpmOP0InVtTEndhVjNaQwYCnSc3W6w13vjshJZepHgyfjnb/ij4UjJU='
    data = json.JSONDecoder(object_pairs_hook=OrderedDict).decode(response_json)
    key_str = ''.join([str(value) for value in data.values()])
    check = TopNotifyDemo.public_key_decrypt(sign, TopNotifyDemo.PLAT_PUBLIC_KEY_FILE);
    if(key_str == check):
        print("true")
    print("false")
    print(response_json)


const { decryptWithPublicKey } = require('./RSAUtil');
const publicKey = `-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEB..........OQIDAQAB
-----END PUBLIC KEY-----`;

const jsonString = '{"msg":"SUCCESS","code":"00","method":"BANK_QR","orderNum":"20240508224642","platOrderNum":"P416514563454345","payMoney":"10000","platSign":"BCJqad4TC8iUQRlA1SqzWrnV86FNJ1ugcaAS+DToje0NLbDV2kPhI61Y3vXJShZD7Fo0NDmdaW1qu8i3Whf9jFmj4n9QqAAy5jC4dxmk//cpTSYW1kMGBQs0q6dkuMBnRL3WyGxeEW4W43p6NrrvGTcQUNs4Lu4oZhL1Wvg1MyA=","status":"SUCCESS"}';

try {
    //将消息转换为Json结构
    const jsonObj = JSON.parse(jsonString);
    //取出签名后，移除签名
    const signature = jsonObj.platSign;
    delete jsonObj['platSign'];   
    //将对象的键名按ASCII码排序
    const sortedKeys = Object.keys(jsonObj).sort();
    //使用排序后的键名拼接它们的值
    let sortedString = '';
    sortedKeys.forEach(key => {
        sortedString += jsonObj[key];
    });
    console.log(sortedString);
   // 使用公钥解密
   const decryptedData = decryptWithPublicKey(signature);
  
  console.log(sortedString === decryptedData.toString());
  if(sortedString === decryptedData.toString()){
    //业务处理
  }
} catch (e) {
    console.error('验证签名时发生错误:', e);
}

# 通知参数

参数 必填 描述 示例
code Y 响应状态 00
msg Y 响应信息 SUCCESS
method Y 支付方式 BANK_QR / MOMO / ZALO / VTPAY / VN_BANKAPI
status Y 支付结果 点击查看订单状态描述
platOrderNum Y 平台订单号 P16546513165462132132
orderNum Y 商户订单号 T1231511321515
payMoney Y 代收金额 10000
extendParam N 透传参数(上传的内容会原路返回) TEST
platSign 平台签名 ja6R8eukQY9jc8zrhtf34654ungj7u8sdgdfjfs

# 异步通知报文示例

{
    "code": "00",
    "msg": "SUCCESS",
    "status": "SUCCESS",
    "method": "BANK_QR",
    "platOrderNum": "P16546513165462132132",
    "orderNum": "T1642593166888",
    "payMoney": "10000",
    "extendParam": "TEST",
    "platSign": "ja6R8eukQY9jc8zrhtf34654ungj7u8sdgdfjfs"
}

代付下单