商户审核结果通知

using Newtonsoft.Json;
using Org.BouncyCastle.Crypto;
using Org.BouncyCastle.Crypto.Parameters;
using Org.BouncyCastle.Security;
using System;
using System.Collections.Generic;
using System.IO;
using System.Linq;
using System.Security.Cryptography;
using System.Text;

namespace Api.XYFPay.Helper.Test
{
    public class RSA2Helper
    {
        private static string pubKey = "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWb4rG/iWIxLVM9u7LtAWWliOpLUG4gat7t1DACtwsdxIrxG2eIRvVyol6lMnulGE6kx7c2P9AiJZTcZ4iQjK1BTj0s4IhpPgGibF0xo6mesvw/1IyTQs02c+gCcy3C7qJgIVF4IhF7DA4RhHJ/wUixTITdbpw2JIVw+VRiEAPXOOi6uIOlvKflDWQW8AP/bYRWISxgb6finKhbMGNJgeUh/QAtsPOvocRVTCd/OvmSCcP8y+Qck8qbdJdgHOSuCNontHsa3TBHzJASkwJSnRmkdRuNq+fFgPMqItj9p0wu7KcI0wm+Llk5R+xeYdLOspmf4JMNh+XX7zP/B2AARgQIDAQAB";

        static void Main(string[] args)
        {
            try
            {
                var notifyBody = "{\"agetId\":\"61000000583951\",\"pdata\":\"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\"}";

                var parameters = JsonConvert.DeserializeObject<Dictionary<string, object>>(notifyBody);
                if (parameters == null || !parameters.TryGetValue("pdata", out object pdataObj))
                    throw new Exception("未找到 pdata 字段");

                string pdata = pdataObj.ToString();

                // 分段解密 pdata（整个 JSON 密文）
                byte[] plainBytes = DecryptByPublicKey(pdata, pubKey);
                string plainTextStr = Encoding.UTF8.GetString(plainBytes);
                Console.WriteLine("解密后的 JSON 明文: " + plainTextStr);

                var plainText = JsonConvert.DeserializeObject<Dictionary<string, object>>(plainTextStr);
                if (plainText == null || !plainText.TryGetValue("sign", out object signObj))
                    throw new Exception("pdata 中未找到 sign 字段");

                string sign = signObj.ToString();
                plainText.Remove("sign");

                // 按字典序排序并拼接
                var sortedParams = plainText.OrderBy(p => p.Key, StringComparer.Ordinal)
                    .Select(p => $"{p.Key}={p.Value}");
                string parameterString = string.Join("&", sortedParams);
                Console.WriteLine("待签名字符串: " + parameterString);

                // 计算本地 SHA256 （十六进制）
                string localSha256Hex = SHA256Encrypt(parameterString);
                Console.WriteLine("本地 SHA256: " + localSha256Hex);

                // 解密 sign
                byte[] signDecryptedBytes = DecryptByPublicKey(sign, pubKey);
                string signSha256Hex = Encoding.UTF8.GetString(signDecryptedBytes);
                Console.WriteLine("sign解密: " + signSha256Hex);

                // 比较
                if (signSha256Hex == localSha256Hex)
                    Console.WriteLine("验签通过");
                else
                    Console.WriteLine("验签失败");
            }
            catch (Exception ex)
            {
                Console.WriteLine($"异常: {ex.Message}");
                Console.WriteLine(ex.StackTrace);
            }
        }

        /// <summary>
        /// 分段 RSA 公钥解密
        /// </summary>
        public static byte[] DecryptByPublicKey(string data, string publicKey)
        {
            byte[] encryptedData = Convert.FromBase64String(data);
            string xmlPublicKey = RSAPublicKeyJava2DotNet(publicKey);

            using (var rsa = new RSACryptoServiceProvider())
            {
                rsa.FromXmlString(xmlPublicKey);
                int keySizeBytes = rsa.KeySize / 8; // 2048 位 → 256 字节

                // 检查长度是否为 keySizeBytes 的整数倍
                if (encryptedData.Length % keySizeBytes != 0)
                    throw new Exception($"密文长度 {encryptedData.Length} 不是 {keySizeBytes} 的整数倍，可能密钥不匹配或数据损坏。");

                // 初始化 BouncyCastle 解密器
                var keyParam = DotNetUtilities.GetRsaPublicKey(rsa);
                IBufferedCipher cipher = CipherUtilities.GetCipher("RSA/ECB/PKCS1Padding");
                cipher.Init(false, keyParam);

                using (var outStream = new MemoryStream())
                {
                    int offset = 0;
                    while (offset < encryptedData.Length)
                    {
                        byte[] block = new byte[keySizeBytes];
                        Array.Copy(encryptedData, offset, block, 0, keySizeBytes);
                        byte[] decryptedBlock = cipher.DoFinal(block);
                        outStream.Write(decryptedBlock, 0, decryptedBlock.Length);
                        offset += keySizeBytes;
                    }
                    return outStream.ToArray();
                }
            }
        }

        /// <summary>
        /// Java RSA 公钥格式转 .NET 格式
        /// </summary>
        private static string RSAPublicKeyJava2DotNet(string publicKey)
        {
            var publicKeyParam = (RsaKeyParameters)PublicKeyFactory.CreateKey(Convert.FromBase64String(publicKey));
            return string.Format("<RSAKeyValue><Modulus>{0}</Modulus><Exponent>{1}</Exponent></RSAKeyValue>",
                Convert.ToBase64String(publicKeyParam.Modulus.ToByteArrayUnsigned()),
                Convert.ToBase64String(publicKeyParam.Exponent.ToByteArrayUnsigned()));
        }

        /// <summary>
        /// SHA256 哈希（返回小写十六进制）
        /// </summary>
        public static string SHA256Encrypt(string data)
        {
            using (var sha256 = SHA256.Create())
            {
                byte[] hash = sha256.ComputeHash(Encoding.UTF8.GetBytes(data));
                return BitConverter.ToString(hash).Replace("-", "").ToLower();
            }
        }
    }
}

const crypto = require('crypto');

function decryptByPublicKey(ciphertext, publicKeyBase64, blockSize) {
    const pubKey = crypto.createPublicKey({
        key: Buffer.from(publicKeyBase64, 'base64'),
        format: 'der',
        type: 'spki'
    });


    if (ciphertext.length % blockSize !== 0) {
        throw new Error(`密文长度 ${ciphertext.length} 不是 ${blockSize} 的整数倍`);
    }

    const parts = [];
    for (let offset = 0; offset < ciphertext.length; offset += blockSize) {
        const block = ciphertext.slice(offset, offset + blockSize);
        let decrypted;
        try {
            decrypted = crypto.publicDecrypt(
                { key: pubKey, padding: crypto.constants.RSA_PKCS1_PADDING },
                block
            );
        } catch (err) {
            console.error(`块 ${offset/blockSize} 解密失败:`, err.message);
            throw err;
        }
        parts.push(decrypted);
    }
    return Buffer.concat(parts);
}

function verifySign(jsonStr, publicKeyBase64) {
    const data = JSON.parse(jsonStr);
    const pdata = data.pdata;
    const ciphertext = Buffer.from(pdata, 'base64');

    // 自动推断块大小：从公钥获取模长，若获取不到则尝试 256
    let blockSize = 256;

    let decryptedStr;
    try {
        const plainBuffer = decryptByPublicKey(ciphertext, publicKeyBase64, blockSize);
        decryptedStr = plainBuffer.toString('utf8');
    } catch (err) {
        throw new Error(`解密 pdata 失败: ${err.message}`);
    }
    console.log('解密pdata:', decryptedStr);

    const inner = JSON.parse(decryptedStr);
    const signBase64 = inner.sign;
    delete inner.sign;

    const keys = Object.keys(inner).sort();
    const parts = keys.map(k => `${k}=${typeof inner[k] === 'object' ? JSON.stringify(inner[k]) : String(inner[k])}`);
    const signedStr = parts.join('&');
    console.log('拼接串:', signedStr);

    const hash = crypto.createHash('sha256').update(signedStr, 'utf8').digest('hex');
    console.log('本地SHA256:', hash);

    const signCipher = Buffer.from(signBase64, 'base64');
    const signPlain = decryptByPublicKey(signCipher, publicKeyBase64, blockSize);
    const signHex = signPlain.toString('utf8');
    console.log('sign解密:', signHex);

    return hash === signHex;
}

// 使用
const notifyBody = `{"agetId":"61000000583951","pdata":"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"}`;

const publicKeyBase64 = "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWb4rG/iWIxLVM9u7LtAWWliOpLUG4gat7t1DACtwsdxIrxG2eIRvVyol6lMnulGE6kx7c2P9AiJZTcZ4iQjK1BTj0s4IhpPgGibF0xo6mesvw/1IyTQs02c+gCcy3C7qJgIVF4IhF7DA4RhHJ/wUixTITdbpw2JIVw+VRiEAPXOOi6uIOlvKflDWQW8AP/bYRWISxgb6finKhbMGNJgeUh/QAtsPOvocRVTCd/OvmSCcP8y+Qck8qbdJdgHOSuCNontHsa3TBHzJASkwJSnRmkdRuNq+fFgPMqItj9p0wu7KcI0wm+Llk5R+xeYdLOspmf4JMNh+XX7zP/B2AARgQIDAQAB";

try {
    const ok = verifySign(notifyBody, publicKeyBase64);
    console.log(ok ? '验签通过' : '验签失败');
} catch (err) {
    console.error('验签出错:', err.message);
}