2.2.1.双向认证

商户、合作方与灵付智控交易报文双向认证。

商户、合作方保存自己的私钥和灵付智控公钥。

灵付智控保存自己的私钥和商户、合作方的公钥。

商户、合作方向灵付智控发起交易请求时，商户、合作方使用自己的私钥签名。

灵付智控接收商户、合作交易请求时，灵付智控使用商户、合作方公钥进行验签。

灵付智控返回商户、合作方应答时，灵付智控使用自己的私钥签名。

商户、合作方接收灵付智控交易应答时，商户、合作方使用灵付智控的公钥验签

2.2.2 签名

获取所有post请求内容，不包括字节类型参数，如文件、字节流，剔除值为空的参数（包含null与空字符串），按照第一个字符的键值 ASCII 码递增排序（字母升序排序），如果遇到相同字符则按照第二个字符的键值 ASCII 码递增排序，以此类推。

将排序后的参数与其对应值，组合成参数=参数值的格式，并且把这些参数用 & 字符连接起来，此时生成的字符串为待签名字符串。

请求内容

{
    "appId": "APP_8428691003",
    "timestamp": 1736161389,
    "requestId": "20250106190309282906",
    "signType": "RSA2",
    "bizContent": "{"payType":"ALIPAY","paySubType":"NATIVE","mchOrderNo":"20250106190309762141","amount":"0.1","subject":"\u6d4b\u8bd5","description":"\u6d4b\u8bd5","notifyUrl":"https:\/\/api.huilianlink.com\/openapi","clientIp":"192.168.1.1"}"
}

生成待签名串

appId=APP_8428691003&bizContent={"payType":"ALIPAY","paySubType":"NATIVE","mchOrderNo":"20250106190309762141","amount":"0.1","subject":"\u6d4b\u8bd5","description":"\u6d4b\u8bd5","notifyUrl":"https:\/\/api.huilianlink.com\/openapi","clientIp":"192.168.1.1"}&requestId=20250106190309282906&signType=RSA2&timestamp=1736161389

签名结果

slkk/cNEv9kMey0Ae8tqVeoMl1g0KPluLLNkMoQu3GoimNJSNk+yWShFtpSwbh/LzxEm3/IIjjdInNyTG4By7xpEXWeGBzXlDNwW/keKr0qZcLDOWjM9x1Z8L9TZ4M01HpAu1rSrccFIhwfoaHF3aF0xz1HGNx6mlQl+oJ02L772RDfxgszA9nVgy8Cyti8paBnVEUENa3MZVEde/JN8VdsuPZeO7G50YoXzcqHTkp2ZnL6wiTxMiuxnyb4L8b/qTFo4B2TaSNt4Yp6E3A194ei84r8LdZezQYLKSnGzN6be7YuCpwDm1eMrzEYoqGiToBuoAhz+TzuA1vceHIGPlA==

实际请求参数

{
    "appId": "APP_8428691003",
    "timestamp": 1736161389,
    "requestId": "20250106190309282906",
    "signType": "RSA2",
    "bizContent": "{"payType":"ALIPAY","paySubType":"NATIVE","mchOrderNo":"20250106190309762141","amount":"0.1","subject":"\u6d4b\u8bd5","description":"\u6d4b\u8bd5","notifyUrl":"https:\/\/api.huilianlink.com\/openapi","clientIp":"192.168.1.1"}",
    "sign": "slkk/cNEv9kMey0Ae8tqVeoMl1g0KPluLLNkMoQu3GoimNJSNk+yWShFtpSwbh/LzxEm3/IIjjdInNyTG4By7xpEXWeGBzXlDNwW/keKr0qZcLDOWjM9x1Z8L9TZ4M01HpAu1rSrccFIhwfoaHF3aF0xz1HGNx6mlQl+oJ02L772RDfxgszA9nVgy8Cyti8paBnVEUENa3MZVEde/JN8VdsuPZeO7G50YoXzcqHTkp2ZnL6wiTxMiuxnyb4L8b/qTFo4B2TaSNt4Yp6E3A194ei84r8LdZezQYLKSnGzN6be7YuCpwDm1eMrzEYoqGiToBuoAhz+TzuA1vceHIGPlA=="
}

2.2.3 验签

商户/代理方用以验证返回的报文是否合法。

值为空字符或null不参与签名

先对返回报文中的data字段数据进行排空，按照名称的ASCII码从小到大先分别进行排序，如果名称的首字母相同，则比较第二个字母，以此类推。将重新排序后的data字段进行json转换成字符串。再对整个返回报文按照名称的ASCII码从小到大先分别进行排序，如果名称的首字母相同，则比较第二个字母，以此类推，

将排序后的参数与其对应值，组合成参数=参数值的格式，并且把这些参数用 & 字符连接起来，此时生成的字符串为待验签名字符串。
:::

返回报文

{
    "code": 200,
    "data": {
        "mchOrderNo": "10_1735817737_2",
        "payOrderNo": "D20250102193537469265920",
        "channelOrderNo": "532025010222001446751453758049",
        "insOrderNo": "532025010222001446751453758049",
        "payDataType": null,
        "payInfo": null,
        "state": 3,
        "amount": "0.10",
        "payAmount": "0.10",
        "payType": "ALIPAY",
        "paySubType": "NATIVE",
        "sceneType": 1,
        "providerCode": "S1524906003",
        "channelCode": "helipay",
        "subChannelId": null,
        "subMchId": "E1808713759",
        "feeAmount": "0.00",
        "feeRate": "0.00",
        "channelFeeAmount": null,
        "channelFeeRate": null,
        "settlementAmount": "0.10",
        "subject": "市内打车",
        "description": null,
        "successTime": 1735817787000,
        "acctInfos": "[{\"accountNo\":\"E1808716289\",\"amount\":0.03,\"description\":\"司机服务\",\"fundStatus\":4,\"outOrderNo\":\"1735817787975khKAHJLk\"}]"
    },
    "msg": "成功",
    "appId": "APP_8428691003",
    "sn": "M428683001",
    "sign": "YGNws+XDZah6NCopyMUwwzd7xtkjDV3jXEc7k34JsCGBeKKu3sMOFrhLaHN7k1Mgp2QEetneOUFrqK2Z+N0gwTwnBX5GJFzjyi12+AJoP3fJq0deVyrpSFt7/OmitFs1nf2HL5ob6xQfnM+5e7CXlwaGoW3OYZ5w1f6FUR1EFhCVp/vC+2lgrOzW10PoiYA0M7KHxIkrnrqGgKYcSLdy4D/rVpyH7biOG3RYFe7qfsKUtvWPfRtwlD6CziFoUTPauW3mgP/bGK4u+4aBnOHPiY3R0lOdtmhEapEliEsBf31WoE+UOVfNpqZBjnEKXkhB5ZuZluB4ELTNShTZXBWsOQ==",
    "timestamp": "1735956920",
    "signType": "RSA2"
}

生成待验签名字符串
此处请注意如果data有返回字段值是一个url地址的请不要将url进行转义否则将会出现验签不通过的情况 php处理转json时请加上JSON_UNESCAPED_UNICODE|JSON_UNESCAPED_SLASHES，如：

p a r am s [^{'} d a t a^{'}] = j so n_{e} n co d e (

this->getSignContentData($params['data']), JSON_UNESCAPED_UNICODE|JSON_UNESCAPED_SLASHES);

appId=APP_8428691003&code=200&data={"acctInfos":"[{\"accountNo\":\"E1808716289\",\"amount\":0.03,\"description\":\"司机服务\",\"fundStatus\":4,\"outOrderNo\":\"1735817787975khKAHJLk\"}]","amount":"0.10","channelCode":"helipay","channelOrderNo":"532025010222001446751453758049","feeAmount":"0.00","feeRate":"0.00","insOrderNo":"532025010222001446751453758049","mchOrderNo":"10_1735817737_2","payAmount":"0.10","payOrderNo":"D20250102193537469265920","paySubType":"NATIVE","payType":"ALIPAY","providerCode":"S1524906003","sceneType":1,"settlementAmount":"0.10","state":3,"subMchId":"E1808713759","subject":"市内打车","successTime":1735817787000}&msg=成功&signType=RSA2&sn=M428683001&timestamp=1735956920

取出sign:

YGNws+XDZah6NCopyMUwwzd7xtkjDV3jXEc7k34JsCGBeKKu3sMOFrhLaHN7k1Mgp2QEetneOUFrqK2Z+N0gwTwnBX5GJFzjyi12+AJoP3fJq0deVyrpSFt7/OmitFs1nf2HL5ob6xQfnM+5e7CXlwaGoW3OYZ5w1f6FUR1EFhCVp/vC+2lgrOzW10PoiYA0M7KHxIkrnrqGgKYcSLdy4D/rVpyH7biOG3RYFe7qfsKUtvWPfRtwlD6CziFoUTPauW3mgP/bGK4u+4aBnOHPiY3R0lOdtmhEapEliEsBf31WoE+UOVfNpqZBjnEKXkhB5ZuZluB4ELTNShTZXBWsOQ==

验签 RSAUtils.verify（待验签字段，rspSign，灵付智控公钥）

验签结果
ture

测试环境灵付智控公钥

MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwU1uQUvv5jsUjet/EKQYnfATAEgu6LMM8LTUMW6VOJ8kj3efB77+Ik28HXJfGfr31mCCq0YQSgb4NN2bXZjxCzhwo/DPXQev065Xhtxs7mK+hQKS4h+7oTAFUrze9Ey8NocraP8RVzJMIcSaGcSMHse4fqfyTbQupWr9ClvvjDlZowVuivXFSzPjCdAWHK1/9zonhjKYs9t/yAY+9I8mm+haT0ux3zE9R9zlApf3JCrCrRheg/WJhJXjb45lIYYMmZkMLKFn4W2ZdXmcH2ZlD1qG3B0nhtd5G6Nwfi+UEKhy5kMlig51rw99w2VAP/t29MFPzklS17SmKMgu7t8MQIDAQAB

生产环境灵付智控公钥【灵付智控通用】

MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvZ5wQisEcO9DSK1WV/HG4E7IQufNPGXJqtyeOdj7z/JF7PzIEQPbDtxjltXei9rZf54RfKAAnJCwqHR81f9KQC6ieUTInSyAcb5zEv3hECjVNq1jMm3LVcalepm0SJNbofW+0LACeXKGmUbcR1dIhdwWu/RDjdek7+/TD3j0fnDkhHUa2XU+nKdelq1gpoO9E090QwroYYOovgPlKHz1SkTz5oXTwga2UoBsfGo8VHjutuWCi2XWavBJrt58JkbXDDrp0oamYA4ZeoK/qmlA2xMBp47+TWnVmVIyFksXca27hAmh8mHA4EaZkmvsosPbh0N92wRAMkD71lU8PKp9wIDAQAB

2.2.4 示例代码【RSA2为例】以下为AI自动生成仅供参考

2.2 加签验签说明

2.2.1.双向认证#

2.2.2 签名#

2.2.3 验签#

2.2.4 示例代码【RSA2为例】以下为AI自动生成仅供参考#

2.2.1.双向认证

2.2.2 签名

2.2.3 验签

2.2.4 示例代码【RSA2为例】以下为AI自动生成仅供参考