<?php

namespace app\lib;

use app\util\Tools;
use app\util\ReturnCode;
use think\facade\Response;
use think\facade\Env;
use \Exception;
use app\util\Aes;
use think\facade\Log;

/**
 * 中国银行系统接口
 * Sign(签名)是接口验证安全性的一种常用技术，在一定程度上可以保证数据接口的安全性，Sign一般都需要配合加密算法来使用，
 * 常用的AES系列算法（对称算法）、SHA系列算法(安全散列算法)、RSA系列算法(非对称算法)
 */
class BOCApi
{
    //接收预评估结果接口
    const PRE_ESTIMATE_API = '/jkpt/pggsApi/estimate/receivePreResult';
    //接收正式评估结果接口
    const OFFICIAL_ESTIMATE_API = '/jkpt/pggsApi/estimate/receiveOff';

    //const GY_AES_KEY =  "bocguoyupinggupf";
    const TEST_GY_RSA_PUBLIC_KEY_STR = "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDKOUoNyzZQER1eeRySa5zbV21qPYGM6QE241M5JlTjkuYn4oYc8WTaTEM4BaQPwkleZ2fF71hy9v15DO9Bev03kXoZQZSHN6gapxERVBjBL5wIoRAGdUtkTAtBkbDFpfeO4WFD3Mxlye97WAlpp/yuvGnGuTvcNC3H8KkIH31zgQIDAQAB";
    const TEST_GY_RSA_PRIVATE_KEY_STR = "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";
    const TEST_BOC_RSA_PUBLIC_KEY_STR = "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCCHZmX7xJMAcztH3iqTYjfft5gGBRTNYNP9Vzfclilg9j+Yyr+YELo+TzEA30cl0zd7G1R1C9nUdL1GU9p5NnbvqGRgK0N32gnd7v9DS+onYvqhv2shLfLjUuW96+uRaCHJc2evjmbzNWc32ahc6JHz/79/4Z5zCgMllsiNMknjwIDAQAB";
    const PROD_GY_RSA_PUBLIC_KEY_STR =  "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCpC9n13422gtdpyaHMdCPLxNE6NT22cWzl0hK2tOhyAzKliZ4eFatDPd3XhTIHa3cXsfwcYzMONRdwG30dgup+jQiOuryWkKeGVun4BpOqpgIsrVO36aqMvd/6cqA/5XjZ7O0+HAMDRKLEmvU2JfKUa/d7YOK7cADP+eyFjcssGQIDAQAB";
    const PROD_GY_RSA_PRIVATE_KEY_STR = "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";
    const PROD_BOC_RSA_PUBLIC_KEY_STR = "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCjEv+5pGVlqRN/UxeMrZIBJtyCQEk/QuRLQUoHHO05Jwf3TD0HcWVjBn/apYZlcJFs0Bk9n0VgbYHSuACMv7n5MvcFfC0vuRGOOcdwDkrpJhwBDiMWMUiFP1q1jAhZJ//WVmFEKeG0R6iAao0ZH9d6B1jNHTTgxWE1K9oZGwPMwwIDAQAB";


    private $bochost;
    private $GY_AES_KEY;

    private $GY_RSA_PUBLIC_KEY_STR;
    private $GY_RSA_PRIVATE_KEY_STR;
    private $BOC_RSA_PUBLIC_KEY_STR;

    public function __construct(){

         $this->bochost  = Env::get('bocapi.boc_host');
         $this->GY_AES_KEY = Env::get('bocapi.GY_AES_KEY');
         $key_env = Env::get('bocapi.KEY_ENV');
         if ( $key_env == "TEST") {
           $this->GY_RSA_PUBLIC_KEY_STR = self::TEST_GY_RSA_PUBLIC_KEY_STR;
           $this->GY_RSA_PRIVATE_KEY_STR = self::TEST_GY_RSA_PRIVATE_KEY_STR;
           $this->BOC_RSA_PUBLIC_KEY_STR = self::TEST_BOC_RSA_PUBLIC_KEY_STR;
         } else {
           $this->GY_RSA_PUBLIC_KEY_STR = self::PROD_GY_RSA_PUBLIC_KEY_STR;
           $this->GY_RSA_PRIVATE_KEY_STR = self::PROD_GY_RSA_PRIVATE_KEY_STR;
           $this->BOC_RSA_PUBLIC_KEY_STR = self::PROD_BOC_RSA_PUBLIC_KEY_STR;
         }

    }

    private function getGYRSAPRIVATEKEY() {
        return "-----BEGIN RSA PRIVATE KEY-----\n" . wordwrap($this->GY_RSA_PRIVATE_KEY_STR, 64, "\n", true) . "\n-----END RSA PRIVATE KEY-----";
    }
    private function getGYRSAPUBLICKEY() {
        return  "-----BEGIN PUBLIC KEY-----\n" . wordwrap($this->GY_RSA_PUBLIC_KEY_STR, 64, "\n", true) . "\n-----END PUBLIC KEY-----";
    }

    private function getBOCRSAPUBLICKEY() {
        return "-----BEGIN PUBLIC KEY-----\n" . wordwrap($this->BOC_RSA_PUBLIC_KEY_STR, 64, "\n", true) . "\n-----END PUBLIC KEY-----";
    }
    public function decodeFromBOC($cipherkey,$ciphertext,$sign) {
           $aeskey = $this->getBOCAESKEY($cipherkey);
           $ciphertext_decode = $this->aesDecode($aeskey,$ciphertext);
           return $ciphertext_decode;
    }

    public function encryptGYAESKEY() {
        $encrypted_aes_key = "";
        openssl_public_encrypt($this->GY_AES_KEY, $encrypted_aes_key, $this->getBOCRSAPUBLICKEY());
        $cipherkey = base64_encode($encrypted_aes_key);
        return $cipherkey;
    }
    public function encodeForBOC($data){
         $cipherkey = $this->encryptGYAESKEY();
         $aes =  new Aes($this->GY_AES_KEY);
         $ciphertext = $aes->aesEn(json_encode($data));

         $sign =$this->getGYSign($ciphertext);

         $postData = array(
                        'ciphertext' => $ciphertext,
                        'cipherkey' =>$cipherkey,
                        'sign' =>$sign,
                        'companyCode' => '20'
                     );
         return $postData;
    }


    public function getURLPreResult() {
       return $this->bochost . self::PRE_ESTIMATE_API;
    }

    public function getURLOfficialResult() {
       return $this->bochost  . self::OFFICIAL_ESTIMATE_API;
    }

    public function sendPreResult($data) {
       $url = $this->getURLPreResult();
       return $this->sendToBOC($url,$data);
    }

    public function sendOfficialResult($data) {
           $url = $this->getURLOfficialResult();
           return $this->sendToBOC($url,$data);
    }

    /**
     *发送给银行
     */
    public function sendToBOC($url,$data) {
       $postData = $this->encodeForBOC($data);
        Log::debug("--------------------sendToBOC start -------------------");
        Log::debug($data);
        Log::debug("--------------------after encode -------------------");
        Log::debug($url);
        Log::debug($postData);
       $arr_header[] = "Content-Type: application/json; charset=utf-8";
       $httpreturn = $this->http_post($url,$postData,false,60,$arr_header);
        Log::debug($httpreturn);
        Log::debug("--------------------sendToBOC end -------------------");
       return $httpreturn;
    }

    public function responseToBOC($code,$msg,$data) {
         $res['code'] = $code;
         $res['message'] = $msg;
         $res['data'] = $data;
         $forBOC = $this->encodeForBOC($res);
         $response = Response::create($forBOC, 'json');
         return $response;
    }
    public function getGYSign($ciphertext) {
        return md5($this->BOC_RSA_PUBLIC_KEY_STR . $ciphertext);
    }
    public function getBOCAESKEY($cipherkey) {
       $private_key = openssl_pkey_get_private($this->getGYRSAPRIVATEKEY());
       if (!$private_key) {
           throw new Exception('私钥不可用');
       }
       $decrypted = "";
       $return_de = openssl_private_decrypt(base64_decode($cipherkey), $decrypted, $private_key);
       if (!$return_de) {
           throw new Exception('解密失败,请检查传入RSA秘钥');
       }
       return $decrypted;
    }

    public function aesDecode($aeskey,$ciphertext) {
        $aes =  new Aes($aeskey);
        $ciphertext_decode = $aes->aesDe($ciphertext);
        $result = json_decode($ciphertext_decode,true);
        return $result;
    }

    /**
     * GET 请求
     * @param string $url
     */
    public function http_get($url,$param,$arr_header=array()){
        $oCurl = curl_init();
        if (is_string($param)) {
            $strPOST = $param;
        } else {
            $aPOST = array();
            foreach ($param as $key => $val) {
                $aPOST[] = $key . "=" . $val;
            }
            $strPOST = join("&", $aPOST);
        }
        $url = $url."?".$strPOST;
        if (stripos($url, "https://") !== false) {
            curl_setopt($oCurl, CURLOPT_SSL_VERIFYPEER, false);
            curl_setopt($oCurl, CURLOPT_SSL_VERIFYHOST, false);
            curl_setopt($oCurl, CURLOPT_SSLVERSION, 1); //CURL_SSLVERSION_TLSv1
        }
        curl_setopt($oCurl, CURLOPT_URL, $url);
        curl_setopt($oCurl, CURLOPT_RETURNTRANSFER, 1);
        if(!empty($arr_header)){
            $arr_header[] = "Content-Type: application/json; charset=utf-8";
        }
        curl_setopt($oCurl, CURLOPT_HTTPHEADER, $arr_header);
        
        $sContent = curl_exec($oCurl);
        if (curl_errno($oCurl)){
            throw new Exception(curl_error($oCurl),0);
        }else{
            $httpStatusCode = curl_getinfo($oCurl, CURLINFO_HTTP_CODE);
            if (200 !== $httpStatusCode){
                
                throw new Exception($arr_header[1],$httpStatusCode);
            }
        }
        curl_close($oCurl);
        return $sContent;
    }

    /**
     * POST 请求
     * @param string $url
     * @param array $param
     * @param boolean $post_file 是否文件上传
     * @param boolean $timeout 超时时间，单位秒
     * @param boolean $arr_header http请求头
     * @return string content
     */
    public function http_post($url, $param, $post_file = false, $timeout = 30,$arr_header=array()){
        $ch = curl_init();

        curl_setopt_array($ch, array(
                // 不直接输出，返回到变量
                CURLOPT_RETURNTRANSFER => true,
                // 设置超时为60s，防止机器被大量超时请求卡死
                CURLOPT_TIMEOUT => $timeout
            ));
        // 支持POST请求
        if (!empty($param)) {
            curl_setopt_array($ch, array(
                CURLOPT_POST => true,
                // 设置POST参数
                CURLOPT_POSTFIELDS => json_encode($param)
            ));
        }
/*
        if (is_string($param) || $post_file) {
            $strPOST = $param;
        } else {
            $aPOST = array();
            foreach ($param as $key => $val) {
                $aPOST[] = $key . "=" . $val;
            }
            $strPOST = join("&", $aPOST);
        }
*/
        curl_setopt($ch, CURLOPT_URL, $url);

        curl_setopt($ch, CURLOPT_HTTPHEADER, $arr_header);

        $sContent = curl_exec($ch);
        $aStatus = curl_getinfo($ch);
        curl_close($ch);

        if (intval($aStatus["http_code"]) == 200) {
            return $sContent;
        } else {
            return $aStatus;
        }
    }

    /**
     * DELETE 请求
     * @param string $url
     * @param array $param
     * @param boolean $user_name AUTH账号
     * @param boolean $password AUTH密码
     * @return string content
     */
    function http_delete($url,$param,$user_name,$password) {
        $oCurl = curl_init();

        if (is_string($param)) {
            $strPOST = $param;
        } else {
            $aPOST = array();
            foreach ($param as $key => $val) {
                $aPOST[] = $key . "=" . $val;
            }
            $strPOST = join("&", $aPOST);
        }
        $url = $url."?".$strPOST;

        curl_setopt($oCurl, CURLOPT_URL, $url);
        curl_setopt($oCurl, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($oCurl, CURLOPT_CUSTOMREQUEST, 'DELETE');

        //设置头
        curl_setopt($oCurl, CURLOPT_USERPWD, "{$user_name}:{$password}");
        curl_setopt($oCurl, CURLOPT_USERAGENT,  'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.98 Safari/537.36');

        curl_setopt($oCurl, CURLOPT_SSL_VERIFYPEER, false);//SSL认证。
        $sContent = curl_exec($oCurl);
        $aStatus = curl_getinfo($oCurl);

        curl_close($oCurl);

        if (intval($aStatus["http_code"]) == 200) {
            return $sContent;
        } else {
            return false;
        }
    }

///////////////////////////////////////////接口说明///////////////////////////////////////////////////////////////

    /**
     * 银行向评估公司推送评估资料,发起预评估申请
     * https://app-host:30012/V2/preApply
     * @Author   llz
     * @DateTime 2022-11-18
     * @version  1.0
     * @param    ciphertext       返回结果的json字符串用AES加密，转base64。UrlBase64（AES（tojson（返回结果）））
     * @param    sign           MD5（SALT+ciphertext）
     * @param    cipherkey      用RSA公钥对AES的秘钥进行加密，转base64。UrlBase64（RSA（AES秘钥））

     * @return   string     查询结果json字符串
     */
    public function preApply($data){

    }


    /**
     * 评估公司将预评估结果推送到银行
     * https://app-host:30012/estimate/receivePreResult
     * @Author   llz
     * @DateTime 2018-10-08
     * @version  1.0
     * @param    ciphertext       返回结果的json字符串用AES加密，转base64。UrlBase64（AES（tojson（返回结果）））
     * @param    sign           MD5（SALT+ciphertext）
     * @param    cipherkey      用RSA公钥对AES的秘钥进行加密，转base64。UrlBase64（RSA（AES秘钥））
     * @param    companyCode    评估公司编码
     * @return   string     查询结果json字符串
     */
    public function preResult($data){


    }


    /**
     * 银行调用该接口通知评估公司生成正式评估报告
     * https://app-host:30012/V2/applyOfficial
     * @Author   llz
     * @DateTime 2022-11-18
     * @version  1.0
     * @param    ciphertext       返回结果的json字符串用AES加密，转base64。UrlBase64（AES（tojson（返回结果）））
     * @param    sign           MD5（SALT+ciphertext）
     * @param    cipherkey      用RSA公钥对AES的秘钥进行加密，转base64。UrlBase64（RSA（AES秘钥））

     * @return   string     查询结果json字符串
     */
    public function applyOfficial($data){
    }

    /**
     * 评估公司将正式评估结果推送到银行
     * https://app-host:30012/estimate/receiveOff
     * @Author   llz
     * @DateTime 2018-10-08
     * @version  1.0
     * @param    ciphertext       返回结果的json字符串用AES加密，转base64。UrlBase64（AES（tojson（返回结果）））
     * @param    sign           MD5（SALT+ciphertext）
     * @param    cipherkey      用RSA公钥对AES的秘钥进行加密，转base64。UrlBase64（RSA（AES秘钥））
     * @param    companyCode    评估公司编码
     * @return   string     查询结果json字符串
     */
    public function officialResult($data){

    }


}