勺子支付 · 商户接入指南

mchId=DEMO_MCH_001&nonceStr=72a66a99dc4644e69ee3&outTradeNo=SHOP20260830001&payType=CASHIER&subject=咖啡一杯&totalAmount=100

import java.security.*;
import java.security.spec.PKCS8EncodedKeySpec;
import java.util.*;

public static String sign(Map<String,Object> params, String privateKeyBase64) throws Exception {
    // 1) 排序 + 拼串（跳过 sign 与空值）
    StringBuilder sb = new StringBuilder();
    for (Map.Entry<String,Object> e : new TreeMap<>(params).entrySet()) {
        if ("sign".equals(e.getKey()) || e.getValue() == null) continue;
        String v = String.valueOf(e.getValue());
        if (v.isEmpty()) continue;
        if (sb.length() > 0) sb.append('&');
        sb.append(e.getKey()).append('=').append(v);
    }
    // 2) SHA256withRSA 签名 → Base64
    PrivateKey key = KeyFactory.getInstance("RSA")
        .generatePrivate(new PKCS8EncodedKeySpec(Base64.getDecoder().decode(privateKeyBase64)));
    Signature sig = Signature.getInstance("SHA256withRSA");
    sig.initSign(key);
    sig.update(sb.toString().getBytes("UTF-8"));
    return Base64.getEncoder().encodeToString(sig.sign());
}

function spoonSign(array $params, string $privateKeyBase64): string {
    unset($params['sign']);
    $params = array_filter($params, fn($v) => $v !== null && $v !== '');
    ksort($params);                          // ASCII 升序
    $parts = [];
    foreach ($params as $k => $v) { $parts[] = $k . '=' . $v; }
    $content = implode('&', $parts);

    $pem = "-----BEGIN PRIVATE KEY-----\n"
         . chunk_split($privateKeyBase64, 64, "\n")
         . "-----END PRIVATE KEY-----\n";
    openssl_sign($content, $sig, $pem, OPENSSL_ALGO_SHA256);
    return base64_encode($sig);
}

import base64
from cryptography.hazmat.primitives import hashes, serialization
from cryptography.hazmat.primitives.asymmetric import padding

def spoon_sign(params: dict, private_key_b64: str) -> str:
    items = sorted((k, v) for k, v in params.items()
                   if k != 'sign' and v is not None and str(v) != '')
    content = '&'.join(f'{k}={v}' for k, v in items)

    key = serialization.load_der_private_key(base64.b64decode(private_key_b64), None)
    sig = key.sign(content.encode('utf-8'), padding.PKCS1v15(), hashes.SHA256())
    return base64.b64encode(sig).decode()

const crypto = require('crypto');

function spoonSign(params, privateKeyBase64) {
  const content = Object.keys(params)
    .filter(k => k !== 'sign' && params[k] != null && String(params[k]) !== '')
    .sort()                                  // ASCII 升序
    .map(k => `${k}=${params[k]}`)
    .join('&');

  const pem = `-----BEGIN PRIVATE KEY-----\n${privateKeyBase64.match(/.{1,64}/g).join('\n')}\n-----END PRIVATE KEY-----\n`;
  return crypto.sign('sha256', Buffer.from(content, 'utf8'), pem).toString('base64');
}

{
  "mchId": "DEMO_MCH_001",
  "outTradeNo": "SHOP20260830001",
  "totalAmount": 100,
  "payType": "CASHIER",
  "subject": "咖啡一杯",
  "nonceStr": "72a66a99dc4644e69ee3",
  "sign": "GSs+Nn7kiVEQo6OzcBJCm7iwr0SMCohOZEXO5LF7Hzo+..."
}

{
  "code": "0000",
  "message": "成功",
  "data": {
    "cashierUrl": "https://api.tcozon.top/checkout.html?t=P5d511fddfca745f0bfb3",
    "tradeNo": "P5d511fddfca745f0bfb3",      // 平台流水号，退款/查询时可用
    "outTradeNo": "SHOP20260830001"
  },
  "sign": "kQ8D3oJi8qJFFf9b99FjadVO0qJkQoin4sC702CoSh/..."   // 可用平台公钥验签
}

{
  "tradeNo": "P5d511fddfca745f0bfb3",
  "outTradeNo": "SHOP20260830001",
  "state": "SUCCESS"     // NOTPAY 待支付 / SUCCESS 已支付 / CLOSED 已关闭 / REFUND 已退款
}

{
  "mchId": "DEMO_MCH_001",
  "outTradeNo": "SHOP20260830001",   // 你的订单号
  "tradeNo": "P5d511fddfca745f0bfb3",  // 平台流水号
  "totalAmount": 100,                  // 分
  "state": "SUCCESS",
  "sign": "..."                          // 用平台公钥验证
}

// 1. 验签
if (!verifyWithPlatformPublicKey(body, body.sign)) return "FAIL";

// 2. 查自己的订单，做幂等
Order o = myOrderDao.findByOrderNo(body.outTradeNo);
if (o == null) return "FAIL";
if (o.isPaid()) return "SUCCESS";          // 已处理过，直接确认

// 3. 校验金额后再发货
if (o.getAmountFen() != body.totalAmount) return "FAIL";
o.markPaid();
deliverGoods(o);

return "SUCCESS";                          // 纯文本

# 参数 t 就是下单返回的 tradeNo
curl -X POST "https://api.tcozon.top/v1/pay/sandbox/pay?t=P5d511fddfca745f0bfb3"

# 响应
{ "code": "0000", "data": { "state": "SUCCESS", "amount": 100, "sandbox": true } }

# 模拟失败
curl -X POST "https://api.tcozon.top/v1/pay/sandbox/fail?t=P5d511fddfca745f0bfb3"

// 实物发货
{
  "mchId": "DEMO_MCH_001",
  "outTradeNo": "SHOP20260830001",
  "logisticsType": 1,              // 1快递 2同城 3虚拟 4自提
  "trackingNo": "SF1234567890123",  // 物流单号
  "expressCompany": "SF",          // SF顺丰 YTO圆通 ZTO中通 JD京东
  "nonceStr": "...",
  "sign": "..."
}

// 虚拟发货（服务类，不需要单号）
{ "mchId": "...", "outTradeNo": "...", "logisticsType": 3, "sign": "..." }