feat(v2): stripe adapter — Checkout Session 跳转 + webhook 验签(stripe-go/v79 pin)
This commit is contained in:
wangjia
@@ -0,0 +1,138 @@
|
||||
// Package stripe adapts Stripe Checkout to provider.Provider: Create → hosted
|
||||
// Checkout Session (redirect), VerifyCallback → webhook signature verify, Query →
|
||||
// session lookup. The *client.API + webhook secret are injected at assembly (default
|
||||
// backend in prod; httptest backend in tests) so nothing hits the real network in CI.
|
||||
package stripe
|
||||
|
||||
import (
|
||||
"context"
|
||||
"encoding/json"
|
||||
"fmt"
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
gostripe "github.com/stripe/stripe-go/v79"
|
||||
"github.com/stripe/stripe-go/v79/client"
|
||||
"github.com/stripe/stripe-go/v79/webhook"
|
||||
|
||||
"github.com/wangjia/pay/internal/provider"
|
||||
)
|
||||
|
||||
// USD 是 Stripe 最小单位(cent)= money 包的 USD minor(均为 1e-2),两边天然对齐,
|
||||
// Create/Query/VerifyCallback 全程直传 int64 分,不经 money.Parse/Format。
|
||||
//
|
||||
// 零小数币种注意(如 JPY/KRW):Stripe 对这类币种的"最小单位"就是整数主单位本身(无 cent
|
||||
// 概念),若未来扩展这类币种,不能再假设 AmountMinor 与 Stripe 金额 1:1——当前仅支持
|
||||
// USD,不涉及该分支,留此注释供后续扩展参考。
|
||||
const supportedCurrency = "USD"
|
||||
|
||||
type Provider struct {
|
||||
sc *client.API
|
||||
webhookSecret string
|
||||
}
|
||||
|
||||
// New 装配期注入已配置好 backend(生产走默认;测试注入指向 httptest 的 backend)的
|
||||
// *client.API,以及来自 env(CredentialEnvPrefix)的 webhook 签名密钥。
|
||||
func New(sc *client.API, webhookSecret string) *Provider {
|
||||
return &Provider{sc: sc, webhookSecret: webhookSecret}
|
||||
}
|
||||
|
||||
func (p *Provider) Method() string { return "stripe" }
|
||||
|
||||
func (p *Provider) Capabilities() provider.Capabilities {
|
||||
return provider.Capabilities{
|
||||
RenderTypes: []provider.RenderType{provider.RenderRedirect},
|
||||
SupportsRefund: false, // P4
|
||||
SettleCurrencies: []string{supportedCurrency},
|
||||
Regions: []string{"global"},
|
||||
}
|
||||
}
|
||||
|
||||
func (p *Provider) Create(_ context.Context, req provider.CreateRequest) (*provider.Session, error) {
|
||||
if req.Currency != supportedCurrency {
|
||||
return nil, fmt.Errorf("stripe: 仅支持 %s, got %s", supportedCurrency, req.Currency)
|
||||
}
|
||||
params := &gostripe.CheckoutSessionParams{
|
||||
Mode: gostripe.String(string(gostripe.CheckoutSessionModePayment)),
|
||||
SuccessURL: gostripe.String(req.ReturnURL),
|
||||
ClientReferenceID: gostripe.String(req.OutTradeNo),
|
||||
LineItems: []*gostripe.CheckoutSessionLineItemParams{{
|
||||
Quantity: gostripe.Int64(1),
|
||||
PriceData: &gostripe.CheckoutSessionLineItemPriceDataParams{
|
||||
Currency: gostripe.String(strings.ToLower(supportedCurrency)),
|
||||
UnitAmount: gostripe.Int64(req.AmountMinor), // cent = USD minor,直传
|
||||
ProductData: &gostripe.CheckoutSessionLineItemPriceDataProductDataParams{
|
||||
Name: gostripe.String(req.Subject),
|
||||
},
|
||||
},
|
||||
}},
|
||||
}
|
||||
sess, err := p.sc.CheckoutSessions.New(params)
|
||||
if err != nil {
|
||||
return nil, fmt.Errorf("stripe: 创建 Checkout Session 失败: %w", err)
|
||||
}
|
||||
return &provider.Session{
|
||||
ProviderRef: sess.ID,
|
||||
RenderType: provider.RenderRedirect,
|
||||
Payload: map[string]any{"url": sess.URL},
|
||||
}, nil
|
||||
}
|
||||
|
||||
func (p *Provider) VerifyCallback(_ context.Context, in provider.CallbackInput) (*provider.PaidEvent, error) {
|
||||
sig := in.Headers["Stripe-Signature"]
|
||||
// stripe-go 默认 ConstructEvent 会额外校验 event.api_version == SDK 编译期常量
|
||||
// stripe.APIVersion,但 webhook 端点的 API 版本是在 Stripe Dashboard 独立配置的,
|
||||
// 与所拉取的 SDK 版本不必一致——我们又不依赖 SDK 按版本反序列化(下面对
|
||||
// event.Data.Raw 自己 json.Unmarshal 成 CheckoutSession,不吃 SDK 的类型化解码),
|
||||
// 所以显式 IgnoreAPIVersionMismatch:true,避免把"版本不同"误判成"验签失败"。
|
||||
// 时间容差不受影响:Tolerance 留零值,constructEvent 内部仍回退到 DefaultTolerance
|
||||
// (5 分钟),签名 HMAC 校验本身完全不受此 flag 影响。
|
||||
event, err := webhook.ConstructEventWithOptions(in.Raw, sig, p.webhookSecret,
|
||||
webhook.ConstructEventOptions{IgnoreAPIVersionMismatch: true})
|
||||
if err != nil {
|
||||
return nil, fmt.Errorf("stripe: webhook 验签失败: %w", err)
|
||||
}
|
||||
if event.Type != "checkout.session.completed" {
|
||||
// 其它事件此阶段不处理:归一化 pending(管线 Settle 视为 ignored)。
|
||||
return &provider.PaidEvent{Status: provider.PaidPending, Raw: string(in.Raw)}, nil
|
||||
}
|
||||
var sess gostripe.CheckoutSession
|
||||
if err := json.Unmarshal(event.Data.Raw, &sess); err != nil {
|
||||
return nil, fmt.Errorf("stripe: 解析 session 失败: %w", err)
|
||||
}
|
||||
ev := sessionToEvent(&sess, in.Raw)
|
||||
if event.Created > 0 {
|
||||
paidAt := unixToTime(event.Created)
|
||||
ev.PaidAt = &paidAt
|
||||
}
|
||||
return ev, nil
|
||||
}
|
||||
|
||||
func (p *Provider) Query(_ context.Context, req provider.QueryRequest) (*provider.PaidEvent, error) {
|
||||
sess, err := p.sc.CheckoutSessions.Get(req.ProviderRef, nil)
|
||||
if err != nil {
|
||||
return nil, fmt.Errorf("stripe: 查询 session 失败: %w", err)
|
||||
}
|
||||
ev := sessionToEvent(sess, nil)
|
||||
ev.ProviderRef = req.ProviderRef
|
||||
return ev, nil
|
||||
}
|
||||
|
||||
func unixToTime(sec int64) time.Time { return time.Unix(sec, 0).UTC() }
|
||||
|
||||
func sessionToEvent(sess *gostripe.CheckoutSession, raw []byte) *provider.PaidEvent {
|
||||
status := provider.PaidPending
|
||||
switch sess.PaymentStatus {
|
||||
case gostripe.CheckoutSessionPaymentStatusPaid, gostripe.CheckoutSessionPaymentStatusNoPaymentRequired:
|
||||
status = provider.PaidSucceeded
|
||||
case gostripe.CheckoutSessionPaymentStatusUnpaid:
|
||||
status = provider.PaidPending
|
||||
}
|
||||
return &provider.PaidEvent{
|
||||
ProviderRef: sess.ID,
|
||||
Status: status,
|
||||
PaidAmountMinor: sess.AmountTotal, // cent
|
||||
PaidCurrency: strings.ToUpper(string(sess.Currency)),
|
||||
Raw: string(raw),
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
package stripe_test
|
||||
|
||||
import (
|
||||
"context"
|
||||
"crypto/hmac"
|
||||
"crypto/sha256"
|
||||
"encoding/hex"
|
||||
"fmt"
|
||||
"net/http"
|
||||
"net/http/httptest"
|
||||
"strings"
|
||||
"testing"
|
||||
"time"
|
||||
|
||||
gostripe "github.com/stripe/stripe-go/v79"
|
||||
"github.com/stripe/stripe-go/v79/client"
|
||||
|
||||
"github.com/wangjia/pay/internal/provider"
|
||||
st "github.com/wangjia/pay/internal/provider/stripe"
|
||||
)
|
||||
|
||||
const whSecret = "whsec_test_secret"
|
||||
|
||||
func fakeStripeAPI(t *testing.T) *httptest.Server {
|
||||
return httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
||||
w.Header().Set("Content-Type", "application/json")
|
||||
switch {
|
||||
case r.Method == http.MethodPost && strings.HasPrefix(r.URL.Path, "/v1/checkout/sessions"):
|
||||
// 创建 session
|
||||
fmt.Fprint(w, `{"id":"cs_test_123","object":"checkout.session","url":"https://checkout.stripe.com/c/pay/cs_test_123","amount_total":2999,"currency":"usd","payment_status":"unpaid"}`)
|
||||
case r.Method == http.MethodGet && strings.Contains(r.URL.Path, "/v1/checkout/sessions/cs_test_123"):
|
||||
// 查询 session — 已付
|
||||
fmt.Fprint(w, `{"id":"cs_test_123","object":"checkout.session","amount_total":2999,"currency":"usd","payment_status":"paid"}`)
|
||||
default:
|
||||
http.Error(w, `{"error":{"message":"not found"}}`, http.StatusNotFound)
|
||||
}
|
||||
}))
|
||||
}
|
||||
|
||||
func newStripe(t *testing.T, ts *httptest.Server) *st.Provider {
|
||||
backends := &gostripe.Backends{
|
||||
API: gostripe.GetBackendWithConfig(gostripe.APIBackend, &gostripe.BackendConfig{
|
||||
URL: gostripe.String(ts.URL),
|
||||
}),
|
||||
}
|
||||
sc := client.New("sk_test_x", backends)
|
||||
return st.New(sc, whSecret)
|
||||
}
|
||||
|
||||
func TestCreateCheckoutRedirect(t *testing.T) {
|
||||
ts := fakeStripeAPI(t)
|
||||
defer ts.Close()
|
||||
p := newStripe(t, ts)
|
||||
|
||||
sess, err := p.Create(context.Background(), provider.CreateRequest{
|
||||
OutTradeNo: "PAY-1", Subject: "Pro Year", AmountMinor: 2999, Currency: "USD",
|
||||
ReturnURL: "https://x/return",
|
||||
})
|
||||
if err != nil {
|
||||
t.Fatalf("create: %v", err)
|
||||
}
|
||||
if sess.RenderType != provider.RenderRedirect || sess.ProviderRef != "cs_test_123" {
|
||||
t.Fatalf("session = %+v", sess)
|
||||
}
|
||||
if !strings.Contains(sess.Payload["url"].(string), "cs_test_123") {
|
||||
t.Fatalf("url = %v", sess.Payload["url"])
|
||||
}
|
||||
}
|
||||
|
||||
func TestQueryPaid(t *testing.T) {
|
||||
ts := fakeStripeAPI(t)
|
||||
defer ts.Close()
|
||||
p := newStripe(t, ts)
|
||||
|
||||
ev, err := p.Query(context.Background(), provider.QueryRequest{ProviderRef: "cs_test_123", Currency: "USD"})
|
||||
if err != nil {
|
||||
t.Fatalf("query: %v", err)
|
||||
}
|
||||
if ev.Status != provider.PaidSucceeded || ev.PaidAmountMinor != 2999 || ev.PaidCurrency != "USD" {
|
||||
t.Fatalf("event = %+v", ev)
|
||||
}
|
||||
}
|
||||
|
||||
func TestVerifyWebhook(t *testing.T) {
|
||||
ts := fakeStripeAPI(t)
|
||||
defer ts.Close()
|
||||
p := newStripe(t, ts)
|
||||
|
||||
payload := `{"id":"evt_1","object":"event","type":"checkout.session.completed","data":{"object":{"id":"cs_test_123","object":"checkout.session","amount_total":2999,"currency":"usd","payment_status":"paid"}}}`
|
||||
sig := signStripe(payload, whSecret, time.Now().Unix())
|
||||
|
||||
ev, err := p.VerifyCallback(context.Background(), provider.CallbackInput{
|
||||
Raw: []byte(payload),
|
||||
Headers: map[string]string{"Stripe-Signature": sig},
|
||||
})
|
||||
if err != nil {
|
||||
t.Fatalf("verify: %v", err)
|
||||
}
|
||||
if ev.ProviderRef != "cs_test_123" || ev.Status != provider.PaidSucceeded || ev.PaidAmountMinor != 2999 {
|
||||
t.Fatalf("event = %+v", ev)
|
||||
}
|
||||
}
|
||||
|
||||
// signStripe 复刻 Stripe webhook 签名头: t=<ts>,v1=hex(HMAC-SHA256(secret, "<ts>.<payload>"))
|
||||
func signStripe(payload, secret string, ts int64) string {
|
||||
mac := hmac.New(sha256.New, []byte(secret))
|
||||
fmt.Fprintf(mac, "%d.%s", ts, payload)
|
||||
return fmt.Sprintf("t=%d,v1=%s", ts, hex.EncodeToString(mac.Sum(nil)))
|
||||
}
|
||||
Reference in New Issue
Block a user