1 public function zhiFen($order0no=‘‘, $ya_money=2)
 2     {
 3         $url = "https://api.mch.weixin.qq.com/v3/payscore/serviceorder";
 4         $json = [ // JSON请求体
 5             ‘out_order_no‘ => $order0no,//订单号
 6             ‘appid‘ => ‘‘,
 7             ‘service_id‘ => ‘‘,
 8             ‘service_introduction‘ => ‘陪护宝使用租金‘,
 9             ‘time_range‘ => [‘start_time‘ => ‘OnAccept‘],
10             ‘risk_fund‘ => [‘name‘ => ‘DEPOSIT‘, ‘amount‘ => 2],
11             ‘notify_url‘ => url(‘index‘, ‘‘, false, true),
12             ‘need_user_confirm‘ => true,
13         ];
14 
15         $arr_header[] = "Content-Type: application/json";
16         $arr_header[] = "Accept: application/json";
17         $arr_header[] = "User-Agent: " . $_SERVER[‘HTTP_USER_AGENT‘];
18 
19         $http_method = ‘POST‘;
20         $timestamp = time();
21         $nonce = $this->str_rand(32);
22         $body = json_encode($json, true);
23         $merchant_id = ‘‘;  //商户号
24         $serial_no = ‘‘;       //这个是证书号  这个必须使用新版证书
25 
26         $url_parts = parse_url($url);
27         $path = APP_PATH . ‘cert/‘;
28         $mch_private_key = PemUtil::loadPrivateKey($path . ‘apiclient_key.pem‘);
29 
30         $canonical_url = ($url_parts[‘path‘] . (!empty($url_parts[‘query‘]) ? "?${url_parts[‘query‘]}" : ""));
31         $message = $http_method . "\n" .
32             $canonical_url . "\n" .
33             $timestamp . "\n" .
34             $nonce . "\n" .
35             $body . "\n";
36 
37         openssl_sign($message, $raw_sign, $mch_private_key, ‘sha256WithRSAEncryption‘);
38         $sign = base64_encode($raw_sign);
39 
40         $schema = ‘WECHATPAY2-SHA256-RSA2048 ‘;
41         $token = sprintf(‘mchid="%s",nonce_str="%s",timestamp="%d",serial_no="%s",signature="%s"‘,
42             $merchant_id, $nonce, $timestamp, $serial_no, $sign);
43         //这个是生成认证参数  并加到请求头中
44         $arr_header[] = "Authorization:" . $schema . $token;
45         $res = $this->https_request($url, json_encode($json), $arr_header);
46         $res_arr = json_decode($res, true);
47         $sign_type = "HMAC-SHA256";//HMAC-SHA256签名方式
48         $key = "hHezylOkgatMqYKrVeQthR4qfGvyOebD";
49         $res_arr[‘timestamp‘] = $timestamp;
50         $res_arr[‘nonce_str‘] = $nonce;
51         $res_arr[‘sign_type‘] = $sign_type;
52 
53         $res_arr[‘sign‘] = bc_sign([
54             ‘mch_id‘=>$merchant_id,
55             ‘package‘=>$res_arr[‘package‘],
56             ‘timestamp‘=>$timestamp,
57             ‘nonce_str‘=>$nonce,
58             ‘sign_type‘=>$sign_type,
59         ],$key);
60         $this->success(‘‘, $res_arr);
61     }
62 
63     //生成随机字符串
64     public function str_rand($length = 32, $char = ‘0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ‘)
65     {
66         if (!is_int($length) || $length < 0) {
67             return false;
68         }
69         $string = ‘‘;
70         for ($i = $length; $i > 0; $i--) {
71             $string .= $char[mt_rand(0, strlen($char) - 1)];
72         }
73 
74         return $string;
75     }
76 
77     //请求方法    
78     private function https_request($url, $data = null, $arr_header = [])
79     {
80         $curl = curl_init();
81         //curl_setopt ( $curl, CURLOPT_SAFE_UPLOAD, false);
82         curl_setopt($curl, CURLOPT_URL, $url);
83         curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE);
84         curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, FALSE);
85         if (!empty ($data)) {
86             curl_setopt($curl, CURLOPT_POST, 1);
87             curl_setopt($curl, CURLOPT_POSTFIELDS, $data);
88         }
89 
90         if (!empty($arr_header)) {
91             curl_setopt($curl, CURLOPT_HTTPHEADER, $arr_header);
92         }
93 
94         curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
95         $output = curl_exec($curl);
96         curl_close($curl);
97         return $output;
98     }
99