文档中心

{
    "partnerOrderId": "202512XXXX031300011032631762517",
    "partnerOrderAmount": 52231,
    "currency": "MXN",
    "expireTime": "2025-12-09T01:11:33.000+08:00",
    "finishTime": "2025-12-08T01:12:08.000+08:00",
    "createTime": "2025-12-08T01:11:33.000+08:00",
    "updateTime": "2025-12-08T01:12:08.000+08:00",
    "rejectCode": "",
    "rejectMsg": "",
    "test": true
}

{
    "partnerOrderId": "16000227_20260XXXX796022901278864",
    "partnerRefundId": "16000227_KBOtXXXX20260127202943864",
    "refundAmount": 9999,
    "currency": "MXN",
    "rejectCode": "",
    "rejectMsg": "",
    "refundTime": "2026-01-27T20:29:43.000+08:00",
    "createTime": "2026-01-27T20:29:43.000+08:00",
    "updateTime": "2026-01-27T20:29:48.000+08:00",
    "test": true
}

import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import java.nio.charset.StandardCharsets;
import java.security.InvalidKeyException;
import java.security.NoSuchAlgorithmException;
import java.time.Instant;

/**
 * HMAC-SHA512 验签工具类
 * 格式：eventId:timestamp:data
 * 签名结果：16进制字符串
 */
public class HMACSHA512HexSignerVerify {

    private static final String HMAC_SHA512 = "HmacSHA512";
    private static final String DELIMITER = ":";

    /**
     * 验证签名
     *
     * @param eventId       事件ID, 取值说明: 请求header中的X-Event-ID
     * @param data          数据, 取值说明: 请求的完整响应
     * @param signature     待验证的签名（16进制字符串）, 取值说明: 请求header中的X-Event-Signature
     * @param secretKey     密钥, 取值说明: 租户添加订阅时生成的唯一签名秘钥
     * @param timestamp     时间戳（秒）, 取header中的X-Event-Timestamp
     * @param maxAgeSeconds 签名最大有效期（秒），0表示不验证有效期
     * @return 验证结果
     */
    public static boolean verifySignature(
            String eventId,
            String data,
            String signature,
            String secretKey,
            long timestamp,
            long maxAgeSeconds) {

        try {
            // 验证时间戳有效期
            if (maxAgeSeconds > 0) {
                long currentTime = Instant.now().getEpochSecond();
                if (Math.abs(currentTime - timestamp) > maxAgeSeconds) {
                    return false; // 签名已过期
                }
            }

            // 重新计算签名
            String expectedSignature = generateSignature(eventId, data, secretKey, timestamp);

            // 安全比较签名
            return constantTimeEquals(expectedSignature.toLowerCase(), signature.toLowerCase());

        } catch (Exception e) {
            return false;
        }
    }

    /**
     * 生成签名（16进制字符串，带时间戳）
     *
     * @param eventId   事件ID
     * @param data      数据
     * @param secretKey 密钥
     * @param timestamp 时间戳（秒）
     * @return 16进制字符串签名
     */
    public static String generateSignature(String eventId, String data, String secretKey, long timestamp) {
        try {
            // 构建payload
            String payload = eventId + DELIMITER + timestamp + DELIMITER + data;

            // 计算HMAC-SHA512
            Mac mac = Mac.getInstance(HMAC_SHA512);
            SecretKeySpec secretKeySpec = new SecretKeySpec(
                    secretKey.getBytes(StandardCharsets.UTF_8),
                    HMAC_SHA512
            );
            mac.init(secretKeySpec);
            byte[] hashBytes = mac.doFinal(payload.getBytes(StandardCharsets.UTF_8));

            // 转换为16进制字符串
            return bytesToHex(hashBytes);

        } catch (NoSuchAlgorithmException | InvalidKeyException e) {
            throw new RuntimeException("生成签名失败", e);
        }
    }

    /**
     * 字节数组转16进制字符串
     *
     * @param bytes 字节数组
     * @return 16进制字符串
     */
    private static String bytesToHex(byte[] bytes) {
        StringBuilder hexString = new StringBuilder();
        for (byte b : bytes) {
            String hex = Integer.toHexString(0xff & b);
            if (hex.length() == 1) {
                hexString.append('0');
            }
            hexString.append(hex);
        }
        return hexString.toString();
    }

    /**
     * 安全的字符串比较（防止时序攻击）
     *
     * @param str1 字符串1
     * @param str2 字符串2
     * @return 是否相等
     */
    private static boolean constantTimeEquals(String str1, String str2) {
        if (str1 == null || str2 == null) {
            return false;
        }

        if (str1.length() != str2.length()) {
            return false;
        }

        int result = 0;
        for (int i = 0; i < str1.length(); i++) {
            result |= str1.charAt(i) ^ str2.charAt(i);
        }
        return result == 0;
    }
    
}