wlt/ai-dimension
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: v3支付接线商户证书——请求签名用商户证书序列号（WX_PAY_MCH_CERT_SERIAL），PUB_KEY_ID仅用于应答验签

Browse Source
This commit is contained in:
txai-dev
2026-09-13 12:43:34 +08:00
parent 5bd1c5765c
commit e872b6d157
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker-compose.prod.yml
+1
View File
@@ -45,6 +45,7 @@ services:
- WX_SECRET=${WX_SECRET:-} - WX_SECRET=${WX_SECRET:-}
- WX_PAY_MCH_ID=${WX_PAY_MCH_ID:-} - WX_PAY_MCH_ID=${WX_PAY_MCH_ID:-}
- WX_PAY_SERIAL_NO=${WX_PAY_SERIAL_NO:-} - WX_PAY_SERIAL_NO=${WX_PAY_SERIAL_NO:-}
- WX_PAY_MCH_CERT_SERIAL=${WX_PAY_MCH_CERT_SERIAL:-}
- WX_PAY_API_KEY=${WX_PAY_API_KEY:-} - WX_PAY_API_KEY=${WX_PAY_API_KEY:-}
- WX_PAY_NOTIFY_URL=${WX_PAY_NOTIFY_URL:-} - WX_PAY_NOTIFY_URL=${WX_PAY_NOTIFY_URL:-}
- ADMIN_USERNAME=${ADMIN_USERNAME:-admin} - ADMIN_USERNAME=${ADMIN_USERNAME:-admin}
server/src/utils/weixin.js
+3 -1
View File
@@ -46,7 +46,9 @@ class WeChatService {
signer.update(message) signer.update(message)
signer.end() signer.end()
const signature = signer.sign(this.privateKey, 'base64') const signature = signer.sign(this.privateKey, 'base64')
return `WECHATPAY2-SHA256-RFC4648 mchid="${this.mchId}",nonce_str="${nonce}",signature="${signature}",timestamp="${timestamp}",serial_no="${this.serialNo}"` // 请求头 serial_no 用商户证书序列号；WX_PAY_SERIAL_NO（PUB_KEY_ID_ 开头）是微信支付公钥ID，仅用于验签微信应答
const requestSerial = process.env.WX_PAY_MCH_CERT_SERIAL || this.serialNo
return `WECHATPAY2-SHA256-RFC4648 mchid="${this.mchId}",nonce_str="${nonce}",signature="${signature}",timestamp="${timestamp}",serial_no="${requestSerial}"`
} }
/** /**