OMS/app/openapi/lib/entrance.php

<?php
/**
 * Copyright 2012-2026 ShopeX (https://www.shopex.cn)
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

class openapi_entrance extends openapi_response{

    /**
     *
     * 类常量缓存过期时间
     * @var string
     */
    const _EXPIRETIME  = 3600;

    /**
     *
     * 类常量当前脚本执行
     * @var string
     */
    static private $_nowTime = '';

    /**
     *
     * 类常量误差时间
     * @var string
     */
    const _TIME = 3600;

    /**
     *
     * 静态私有变量系统级参数
     * @var array
     */
    static private $_sysParams = array();

    /**
     *
     * 静态私有变量应用级参数
     * @var array
     */
    static private $_appParams = array();

    /**
     *
     * 开放数据接口入口函数
     * @param array $params
     */
    public function service($params){
        ini_set('memory_limit','256M');

        //接收所有参数
        $this->setParams($params);

        //检查系统级参数
        if(!$this->checkSysParams($params)){
            $this->send_error('e000001',self::$_sysParams['charset'],self::$_sysParams['type']);
        }
        
        //签名验证
        $error_code = '';
        $errorData = array();
        if(!$this->validate($params, $error_code, $errorData)){
            $sub_msg = json_encode($errorData);
            $this->send_error($error_code, self::$_sysParams['charset'], self::$_sysParams['type'], $sub_msg);
        }
        
        //检查接口是否存在
        $allow_methods = openapi_conf::getMethods();
        if(!isset($allow_methods[self::$_sysParams['class']]) || !isset($allow_methods[self::$_sysParams['class']]['methods'][self::$_sysParams['method']])){
            $this->send_error('e000003',self::$_sysParams['charset'],self::$_sysParams['type']);
        }

        //检查权限
        if(!openapi_privilege::checkAccess(self::$_sysParams['flag'],self::$_sysParams['class'],self::$_sysParams['method'])){
            $this->send_error('e000004',self::$_sysParams['charset'],self::$_sysParams['type']);
        }

        //监控统计
        $statisticsLib = kernel::single('openapi_statistics');
        $statisticsLib->set(self::$_sysParams['flag'],self::$_sysParams['class'],self::$_sysParams['method']);

        //实例化接口对象
        $dataObjectLib = kernel::single('openapi_object');
        $code = '';
        $sub_msg = '';
        if(!$dataObjectLib->instance(self::$_sysParams,self::$_appParams,$code,$sub_msg)){
            $this->send_error($code,self::$_sysParams['charset'],self::$_sysParams['type'],$sub_msg);
        }

        //执行接口调用处理
        $result = array();
        if($dataObjectLib->process($result,$code,$sub_msg)){
            $this->send_result($result,self::$_sysParams['charset'],self::$_sysParams['type']);
        }else{
            $this->send_error($code,self::$_sysParams['charset'],self::$_sysParams['type'],$sub_msg);
        }

    }

    /**
     *
     * 接收传入参数兼容post数据
     * @param unknown_type $params
     */
    private function setParams(&$params){
        if(empty($params)){
           $params = array();
        }
        
        self::$_nowTime = time();

        foreach($params as &$v){
            $v = urldecode($v);
        }
        return $params = array_merge($params , $_POST);
    }

    /**
     *
     * 检查系统级参数函数
     * @param array $params
     */
    private function checkSysParams($params){
        self::$_sysParams = array(
            'ver' => $params['ver'] ? $params['ver'] : 1,
            'charset' => $this->getFormatCharset($params['charset']) ? $params['charset'] : 'utf-8',
            'type' => $this->getFormatType($params['type']) ? $params['type'] : 'json',
        );

        if(empty($params['method']) || empty($params['flag']) || empty($_POST['sign']) || empty($_POST['timestamp'])){
            return false;
        }

        $args = explode('.',$params['method']);
        $method = array_pop($args);
        $class = array_pop($args);

        if(empty($class) || empty($method)){
            return false;
        }

        $path ='';
        if(count($args)>0){
            $path = implode('_', $args);
            $class = implode('.', $args).'.'.$class;
        }

        self::$_sysParams['path'] = $path;
        self::$_sysParams['flag'] = $params['flag'];
        self::$_sysParams['class'] = $class;
        self::$_sysParams['method'] = $method;
        return true;
    }
    
    /**
     * 验证签名函数
     *
     * @param $params
     * @param $error_code
     * @param $errorData 签名详细错误信息
     * @return bool
     */
    private function validate($params, &$error_code=null, &$errorData=null){
        $sign = $_POST['sign']; //$params['sign'];
        unset($params['sign']);
        
        //sign
        $assemble_str = '';
        $local_sign = $this->gen_sign($params, $assemble_str);
        
        //check
        if($_POST['timestamp'] < self::$_nowTime-self::_TIME || $_POST['timestamp'] > self::$_nowTime+self::_TIME ){
            $error_code = 'e000008';
            return false;
        }elseif(!$local_sign || $sign != $local_sign){
            $error_code = 'e000002';
            
            //签名详细错误信息
            $errorData = array(
                'request_sign' => $sign,
                'assemble_str' => $assemble_str,
            );
            
            return false;
        }elseif($has_done = cachecore::fetch($local_sign)){
            $error_code = 'e000009';
            return false;
        }else{
            unset($params['method']);
            unset($params['flag']);
            unset($params['ver']);
            unset($params['charset']);
            unset($params['type']);
            unset($params['timestamp']);

            self::$_appParams = $params;
            cachecore::store($local_sign, 'done', self::_EXPIRETIME);
            return true;
        }
    }
    
    /**
     * 生成签名算法函数
     *
     * @param $params
     * @param $assemble_str 拼接集合字符参数
     * @return string
     */
    private function gen_sign($params, &$assemble_str='')
    {
        $token = openapi_setting::getConf(self::$_sysParams['flag'],'interfacekey');
        if(!$token){
            return false;
        }
        
        //拼接集合字符参数
        $assemble_str = $this->assemble($params);
        
        return strtoupper(md5(strtoupper(md5($assemble_str)).$token));
    }

    /**
     *
     * 签名参数组合函数
     * @param array $params
     */
    private function assemble($params)
    {
        if(!is_array($params))  return null;
        ksort($params, SORT_STRING);
        $sign = '';
        foreach($params AS $key=>$val){
            if(is_null($val))   continue;
            if(is_bool($val))   $val = ($val) ? 1 : 0;
            $sign .= $key . (is_array($val) ? $this->assemble($val) : $val);
        }
        return $sign;
    }
}