业务回调域名

const express = require('express');
const app = express();
const bodyParser = require('body-parser');

app.use(bodyParser.json());

app.post('/callback', (req, res) => {
    const { signature, data } = req.body;

    // 验证签名
    if (!verifySignature(signature, data)) {
        return res.status(403).send('Invalid signature');
    }

    // 处理回调数据
    console.log('Callback data:', data);

    res.status(200).send('Callback received');
});

function verifySignature(signature, data) {
    // 实现签名验证逻辑
    const secretKey = 'your-secret-key';
    const computedSignature = computeSignature(data, secretKey);
    return signature === computedSignature;
}

function computeSignature(data, secretKey) {
    // 实现签名生成逻辑
    const crypto = require('crypto');
    const hash = crypto.createHmac('sha256', secretKey);
    hash.update(JSON.stringify(data));
    return hash.digest('hex');
}

app.listen(3000, () => {
    console.log('Callback server listening on port 3000');
});