支付接口php

<?php
// 支付接口调用示例
function pay($amount, $orderId) {
    $apiKey = 'your_api_key';
    $apiSecret = 'your_api_secret';
    $url = 'https://payment.service.com/api/pay';

    $data = [
        'amount' => $amount,
        'orderId' => $orderId,
        'currency' => 'USD',
        // 其他必需参数
    ];

    $headers = [
        'Authorization: Bearer ' . $apiKey,
        'Content-Type: application/json',
    ];

    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($data));
    curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

    $response = curl_exec($ch);
    curl_close($ch);

    return $response;
}

// 支付回调处理示例
function handleCallback() {
    $data = json_decode(file_get_contents('php://input'), true);

    // 验证回调数据的完整性和真实性
    if (verifySignature($data)) {
        // 处理支付结果
        if ($data['status'] == 'success') {
            // 支付成功，更新订单状态等操作
        } else {
            // 支付失败，处理失败逻辑
        }
    } else {
        // 签名验证失败，记录日志并返回错误响应
    }
}

// 签名验证函数（示例）
function verifySignature($data) {
    $apiSecret = 'your_api_secret';
    $signature = $data['signature'];
    unset($data['signature']);

    ksort($data);
    $str = http_build_query($data);
    $calculatedSignature = hash_hmac('sha256', $str, $apiSecret);

    return $calculatedSignature === $signature;
}
?>