feat: v3支付接线商户证书——请求签名用商户证书序列号（WX_PAY_MCH_CERT_SERIAL），PUB_KEY_ID仅用于应答验签

2026-09-13 12:43:34 +08:00
parent 5bd1c5765c
commit e872b6d157
2 changed files with 4 additions and 1 deletions
@@ -46,7 +46,9 @@ class WeChatService {
    signer.update(message)
    signer.end()
    const signature = signer.sign(this.privateKey, 'base64')
-    return `WECHATPAY2-SHA256-RFC4648 mchid="${this.mchId}",nonce_str="${nonce}",signature="${signature}",timestamp="${timestamp}",serial_no="${this.serialNo}"`
+    // 请求头 serial_no 用商户证书序列号；WX_PAY_SERIAL_NO（PUB_KEY_ID_ 开头）是微信支付公钥ID，仅用于验签微信应答
+    const requestSerial = process.env.WX_PAY_MCH_CERT_SERIAL || this.serialNo
+    return `WECHATPAY2-SHA256-RFC4648 mchid="${this.mchId}",nonce_str="${nonce}",signature="${signature}",timestamp="${timestamp}",serial_no="${requestSerial}"`
  }
  
  /**