linquan
2 months ago
13 changed files with 350 additions and 4 deletions
@ -0,0 +1,117 @@ |
|||||||
|
package internal |
||||||
|
|
||||||
|
import ( |
||||||
|
"bytes" |
||||||
|
"encoding/json" |
||||||
|
"fmt" |
||||||
|
"github.com/SermoDigital/jose" |
||||||
|
"github.com/gogf/gf/v2/encoding/gjson" |
||||||
|
"github.com/golang-jwt/jwt/v5" |
||||||
|
"io" |
||||||
|
"log" |
||||||
|
"net/http" |
||||||
|
"strings" |
||||||
|
"time" |
||||||
|
"tyj_admin/api/v1/game" |
||||||
|
) |
||||||
|
|
||||||
|
// Apple JWT 认证配置
|
||||||
|
type AppleAPIConfig struct { |
||||||
|
IssuerID string `json:"issuer_id"` // 苹果开发者团队ID（格式：57246542-96fe-1a63e053-0824d011072a）
|
||||||
|
BundleID string `json:"bundle_id"` // 应用Bundle ID（如：com.example.game）
|
||||||
|
KeyID string `json:"key_id"` // 苹果API密钥ID（格式：2X9R4HXF34）
|
||||||
|
PrivateKey []byte `json:"private_key"` // 从苹果开发者平台下载的.p8私钥文件内容
|
||||||
|
} |
||||||
|
|
||||||
|
// 订单查询响应结构体
|
||||||
|
type AppleOrderResponse struct { |
||||||
|
Status int `json:"status"` // 状态码（0表示成功）
|
||||||
|
SignedTransactions []string `json:"signedTransactions"` |
||||||
|
} |
||||||
|
|
||||||
|
func LoadP8File() []byte { |
||||||
|
return []byte(`-----BEGIN PRIVATE KEY----- |
||||||
|
MIGTAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBHkwdwIBAQQg2XqPEHgWj2cUnO2GoPfIeEcAc0tJsTehvNNNBTGf4KigCgYIKoZIzj0DAQehRANCAAT6IdBMPYuNAQYuZsYi3EkflniotI/KJa6ELt1ednywlOpuwgNOn2WXONmDzzVVMJqQjD/6FSJ4jH7fRtP+Eci6 |
||||||
|
-----END PRIVATE KEY-----`) |
||||||
|
} |
||||||
|
|
||||||
|
func GenerateAppleJWT(config AppleAPIConfig) (string, error) { |
||||||
|
// 使用ES256算法签名
|
||||||
|
key, _ := jwt.ParseECPrivateKeyFromPEM(config.PrivateKey) |
||||||
|
token := jwt.NewWithClaims(jwt.SigningMethodES256, jwt.MapClaims{ |
||||||
|
"iss": config.IssuerID, |
||||||
|
"iat": time.Now().Unix(), |
||||||
|
"exp": time.Now().Add(5 * time.Minute).Unix(), // 有效期5分钟
|
||||||
|
"aud": "appstoreconnect-v1", |
||||||
|
"bid": config.BundleID, |
||||||
|
}) |
||||||
|
token.Header["kid"] = config.KeyID |
||||||
|
return token.SignedString(key) |
||||||
|
} |
||||||
|
|
||||||
|
func QueryAppleOrder(orderID string) (*game.SignedTransaction, error) { |
||||||
|
config := AppleAPIConfig{ |
||||||
|
IssuerID: "b8b82821-922e-4b43-a3cf-d293020a70d1", |
||||||
|
BundleID: "com.XiamenAvatar.PeachValley", |
||||||
|
KeyID: "J4RAWQBLHF", |
||||||
|
PrivateKey: LoadP8File(), |
||||||
|
} |
||||||
|
|
||||||
|
// 构造API地址
|
||||||
|
baseURL := "https://api.storekit.itunes.apple.com/inApps/v1/lookup/" |
||||||
|
if isSandboxOrder(orderID) { // 根据订单号自动判断环境
|
||||||
|
baseURL = strings.Replace(baseURL, "storekit", "storekit-sandbox", 1) |
||||||
|
} |
||||||
|
url := baseURL + orderID |
||||||
|
|
||||||
|
// 生成JWT令牌
|
||||||
|
authToken, err := GenerateAppleJWT(config) |
||||||
|
if err != nil { |
||||||
|
return nil, fmt.Errorf("JWT生成失败: %v", err) |
||||||
|
} |
||||||
|
|
||||||
|
log.Printf("authToken %v", gjson.MustEncodeString(authToken)) |
||||||
|
// 创建HTTP请求
|
||||||
|
req, _ := http.NewRequest("GET", url, nil) |
||||||
|
req.Header.Set("Authorization", "Bearer "+authToken) |
||||||
|
req.Header.Set("Content-Type", "application/json") |
||||||
|
|
||||||
|
client := &http.Client{Timeout: 15 * time.Second} |
||||||
|
resp, err := client.Do(req) |
||||||
|
if err != nil { |
||||||
|
return nil, fmt.Errorf("API请求失败: %v", err) |
||||||
|
} |
||||||
|
defer resp.Body.Close() |
||||||
|
|
||||||
|
// 解析响应
|
||||||
|
if resp.StatusCode != http.StatusOK { |
||||||
|
body, _ := io.ReadAll(resp.Body) |
||||||
|
return nil, fmt.Errorf("苹果接口异常[%d]: %s", resp.StatusCode, string(body)) |
||||||
|
} |
||||||
|
var result AppleOrderResponse |
||||||
|
if err = json.NewDecoder(resp.Body).Decode(&result); err != nil { |
||||||
|
return nil, err |
||||||
|
} |
||||||
|
if result.Status != 0 { |
||||||
|
return nil, fmt.Errorf("订单查询失败，状态码：%d", result.Status) |
||||||
|
} |
||||||
|
|
||||||
|
data, err := DecodeJWSTransaction([]byte(result.SignedTransactions[0])) |
||||||
|
log.Printf("result %v", gjson.MustEncodeString(data)) |
||||||
|
return data, err |
||||||
|
} |
||||||
|
|
||||||
|
func DecodeJWSTransaction(jwsToken []byte) (inappOrder *game.SignedTransaction, err error) { |
||||||
|
parts := bytes.Split(jwsToken, []byte{'.'}) |
||||||
|
// todo: parts[0] 为header 用作验证jwt, 暂未验证
|
||||||
|
dec, err := jose.Base64Decode(parts[1]) |
||||||
|
log.Println("解码64", string(dec)) |
||||||
|
err = json.Unmarshal(dec, &inappOrder) |
||||||
|
return |
||||||
|
} |
||||||
|
|
||||||
|
// 根据订单号特征判断沙盒环境（测试订单通常以特定前缀开头）
|
||||||
|
func isSandboxOrder(orderID string) bool { |
||||||
|
return strings.HasPrefix(orderID, "SANDBOX_") || |
||||||
|
strings.HasPrefix(orderID, "TEST_") |
||||||
|
} |
||||||
@ -0,0 +1,3 @@ |
|||||||
|
`-----BEGIN PRIVATE KEY----- |
||||||
|
MIGTAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBHkwdwIBAQQg2XqPEHgWj2cUnO2GoPfIeEcAc0tJsTehvNNNBTGf4KigCgYIKoZIzj0DAQehRANCAAT6IdBMPYuNAQYuZsYi3EkflniotI/KJa6ELt1ednywlOpuwgNOn2WXONmDzzVVMJqQjD/6FSJ4jH7fRtP+Eci6 |
||||||
|
-----END PRIVATE KEY-----` |
||||||
Loading…
Reference in new issue