<?php
// MiniPay 统一下单 - PHP Demo
$appId     = '你的AppID';
$appSecret = '你的AppSecret';
$timestamp = time();
$sign      = md5($appId . $appSecret . $timestamp);

$data = [
    'app_id'         => $appId,
    'timestamp'      => $timestamp,
    'sign'           => $sign,
    // 'mch_id'      => '16888888',  // 可选，不传则自动轮询
    'amount'         => 0.01,
    'out_order_no'   => 'ORDER' . date('YmdHis') . rand(1000,9999),
    'user_ip'        => $_SERVER['REMOTE_ADDR'] ?? '127.0.0.1',
    'notify_url'     => 'https://yoursite.com/pay/notify',
    'sync_notify_url'=> 'https://yoursite.com/pay/sync',
    'description'    => '商品描述',
];

$ch = curl_init('https://minipay.1.taolianwl.cn/api/pay/unified-order');
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_POSTFIELDS    => json_encode($data),
    CURLOPT_HTTPHEADER    => ['Content-Type: application/json'],
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT        => 30,
]);
$result = curl_exec($ch);
curl_close($ch);

$resp = json_decode($result, true);
if ($resp['code'] === 0) {
    header('Location: ' . $resp['data']['url_link']);
} else {
    echo '下单失败: ' . $resp['msg'];
}

// === 异步通知验签 ===
$notify = json_decode(file_get_contents('php://input'), true);
$keys = array_filter(array_keys($notify), fn($k) => $k !== 'sign');
sort($keys);
$signStr = implode('&', array_map(fn($k) => $k.'='.$notify[$k], $keys)) . '&key=' . $appSecret;
if (md5($signStr) === $notify['sign'] && $notify['status'] === 'paid') {
    // 验签通过，处理订单
    echo json_encode(['code' => 0, 'msg' => 'ok']);
}

# MiniPay 统一下单 - Python Demo
import hashlib, time, requests

APP_ID     = '你的AppID'
APP_SECRET = '你的AppSecret'
timestamp  = str(int(time.time()))
sign       = hashlib.md5((APP_ID + APP_SECRET + timestamp).encode()).hexdigest()

data = {
    'app_id':         APP_ID,
    'timestamp':      timestamp,
    'sign':           sign,
    # 'mch_id':      '16888888',  # 可选，不传则自动轮询
    'amount':         0.01,
    'out_order_no':   f'ORDER{int(time.time())}',
    'user_ip':        '127.0.0.1',
    'notify_url':     'https://yoursite.com/pay/notify',
    'sync_notify_url':'https://yoursite.com/pay/sync',
    'description':    '商品描述',
}

resp = requests.post(
    'https://minipay.1.taolianwl.cn/api/pay/unified-order',
    json=data, timeout=30
).json()

if resp['code'] == 0:
    print('支付链接:', resp['data']['url_link'])
else:
    print('下单失败:', resp['msg'])

# === 异步通知验签 (Flask) ===
from flask import Flask, request
app = Flask(__name__)

@app.route('/pay/notify', methods=['POST'])
def pay_notify():
    data = request.json
    keys = sorted(k for k in data if k != 'sign')
    sign_str = '&'.join(f'{k}={data[k]}' for k in keys) + f'&key={APP_SECRET}'
    expected = hashlib.md5(sign_str.encode()).hexdigest()
    if expected == data.get('sign') and data.get('status') == 'paid':
        return {'code': 0, 'msg': 'ok'}
    return {'code': 1, 'msg': '验签失败'}, 400

// MiniPay 统一下单 - Node.js Demo
const crypto = require('crypto');
const https  = require('https');

const APP_ID     = '你的AppID';
const APP_SECRET = '你的AppSecret';
const timestamp  = Math.floor(Date.now() / 1000).toString();
const sign       = crypto.createHash('md5').update(APP_ID + APP_SECRET + timestamp).digest('hex');

const data = JSON.stringify({
    app_id:         APP_ID,
    timestamp,
    sign,
    // mch_id:      '16888888',  // 可选，不传则自动轮询
    amount:         0.01,
    out_order_no:   `ORDER${Date.now()}`,
    user_ip:        '127.0.0.1',
    notify_url:     'https://yoursite.com/pay/notify',
    sync_notify_url:'https://yoursite.com/pay/sync',
    description:    '商品描述',
});

const req = https.request({
    hostname: 'minipay.1.taolianwl.cn',
    path: '/api/pay/unified-order',
    method: 'POST',
    headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(data) },
}, (res) => {
    let body = '';
    res.on('data', c => body += c);
    res.on('end', () => {
        const resp = JSON.parse(body);
        if (resp.code === 0) console.log('支付链接:', resp.data.url_link);
        else console.log('下单失败:', resp.msg);
    });
});
req.write(data);
req.end();

// === 异步通知验签 (Express) ===
const express = require('express');
const app = express();
app.use(express.json());

app.post('/pay/notify', (req, res) => {
    const data = req.body;
    const keys = Object.keys(data).filter(k => k !== 'sign').sort();
    const signStr = keys.map(k => `${k}=${data[k]}`).join('&') + `&key=${APP_SECRET}`;
    const expected = crypto.createHash('md5').update(signStr).digest('hex');
    if (expected === data.sign && data.status === 'paid') {
        res.json({ code: 0, msg: 'ok' });
    } else {
        res.status(400).json({ code: 1, msg: '验签失败' });
    }
});

// MiniPay 统一下单 - Java Demo (JDK 11+)
import java.net.http.*;
import java.net.URI;
import java.security.MessageDigest;

public class MiniPayDemo {
    static final String APP_ID     = "你的AppID";
    static final String APP_SECRET = "你的AppSecret";
    static final String BASE_URL   = "https://minipay.1.taolianwl.cn";

    static String md5(String input) throws Exception {
        byte[] hash = MessageDigest.getInstance("MD5").digest(input.getBytes());
        StringBuilder sb = new StringBuilder();
        for (byte b : hash) sb.append(String.format("%02x", b));
        return sb.toString();
    }

    public static void main(String[] args) throws Exception {
        String timestamp = String.valueOf(System.currentTimeMillis() / 1000);
        String sign = md5(APP_ID + APP_SECRET + timestamp);

        String json = String.format(
            "{"app_id":"%s","timestamp":"%s","sign":"%s","
            + ""amount":0.01,"out_order_no":"ORDER%d","
            + ""user_ip":"127.0.0.1","
            + ""notify_url":"https://yoursite.com/pay/notify","
            + ""sync_notify_url":"https://yoursite.com/pay/sync","
            + ""description":"商品描述"}",
            APP_ID, timestamp, sign, System.currentTimeMillis());

        HttpClient client = HttpClient.newHttpClient();
        HttpRequest req = HttpRequest.newBuilder()
            .uri(URI.create(BASE_URL + "/api/pay/unified-order"))
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString(json))
            .build();

        HttpResponse resp = client.send(req, HttpResponse.BodyHandlers.ofString());
        System.out.println(resp.body());
    }
}

// MiniPay 统一下单 - Go Demo
package main

import (
    "bytes"
    "crypto/md5"
    "encoding/hex"
    "encoding/json"
    "fmt"
    "io"
    "net/http"
    "sort"
    "strconv"
    "strings"
    "time"
)

const (
    AppID     = "你的AppID"
    AppSecret = "你的AppSecret"
    BaseURL   = "https://minipay.1.taolianwl.cn"
)

func MD5(s string) string {
    h := md5.Sum([]byte(s))
    return hex.EncodeToString(h[:])
}

func main() {
    timestamp := strconv.FormatInt(time.Now().Unix(), 10)
    sign := MD5(AppID + AppSecret + timestamp)

    body, _ := json.Marshal(map[string]interface{}{
        "app_id":          AppID,
        "timestamp":       timestamp,
        "sign":            sign,
        // "mch_id":       "16888888",  // 可选，不传则自动轮询
        "amount":          0.01,
        "out_order_no":    fmt.Sprintf("ORDER%d", time.Now().UnixMilli()),
        "user_ip":         "127.0.0.1",
        "notify_url":      "https://yoursite.com/pay/notify",
        "sync_notify_url": "https://yoursite.com/pay/sync",
        "description":     "商品描述",
    })

    resp, err := http.Post(BaseURL+"/api/pay/unified-order", "application/json", bytes.NewReader(body))
    if err != nil { panic(err) }
    defer resp.Body.Close()
    data, _ := io.ReadAll(resp.Body)
    fmt.Println(string(data))
}

// === 异步通知验签 ===
func VerifyNotify(params map[string]string, secret string) bool {
    var keys []string
    for k := range params {
        if k != "sign" { keys = append(keys, k) }
    }
    sort.Strings(keys)
    var parts []string
    for _, k := range keys { parts = append(parts, k+"="+params[k]) }
    expected := MD5(strings.Join(parts, "&") + "&key=" + secret)
    return expected == params["sign"]
}

# MiniPay 统一下单 - cURL Demo
# 1. 计算签名: MD5(app_id + app_secret + timestamp)
echo -n "your_app_idyour_app_secret1715827200" | md5sum

# 2. 发起下单请求
curl -X POST https://minipay.1.taolianwl.cn/api/pay/unified-order \
  -H 'Content-Type: application/json' \
  -d '{
    "app_id": "你的AppID",
    "timestamp": "1715827200",
    "sign": "计算出的签名",
    "amount": 0.01,
    "out_order_no": "ORDER_TEST_001",
    "user_ip": "127.0.0.1",
    "notify_url": "https://yoursite.com/pay/notify",
    "sync_notify_url": "https://yoursite.com/pay/sync",
    "description": "商品描述"
  }'

# 3. 查询订单
curl -G https://minipay.1.taolianwl.cn/api/pay/query/ORDER_NO \
  --data-urlencode 'app_id=你的AppID' \
  --data-urlencode 'timestamp=1715827200' \
  --data-urlencode 'sign=计算出的签名'