对外支付 API 接口文档

<?php
// ===== 只需修改这 3 项 =====
$pid = 1001;                                    // 你的商户ID
$md5Key = '你的商户密钥';                        // 平台分配的密钥
$notifyUrl = 'https://你的域名/notify.php';     // 你的异步通知地址

// ===== 以下无需修改 =====
$apiUrl = 'https://baas-api.wanwang.xin/supabase/proxy/WS20260801233620000001/functions/v1/external-api';
$anonKey = 'eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJyb2xlIjoiYW5vbiIsImlzcyI6InBvbGFyZGIiLCJpYXQiOjE3ODQ2MTQ2MTgsImV4cCI6MjA5OTk3NDYxOH0.StbzHSCkim8How6H3eZWH-RKMiIXqNc1QSm0LKZi_Vg';

function isMobileUA($ua) {
    return (bool) preg_match('/android|iphone|ipod|ipad|windows phone|harmonyos|micromessenger|mobile/i', $ua);
}

function buildSign($params, $key) {
    unset($params['sign']);
    unset($params['sign_type']);
    ksort($params);
    $str = '';
    foreach ($params as $k => $v) {
        if ($v === '' || $v === null) continue;
        $str .= $k . '=' . $v . '&';
    }
    return md5(rtrim($str, '&') . $key);
}

$params = [
    'pid'          => $pid,
    'type'         => 'alipay',
    'out_trade_no' => 'order_' . time(),
    'notify_url'   => $notifyUrl,
    'return_url'   => 'https://你的域名/return.php',
    'name'         => '测试商品',
    'money'        => '0.01',
    'clientip'     => $_SERVER['REMOTE_ADDR'],
    // 服务端发起请求必须显式传 device：PC 站点传 pc，手机站/H5 传 mobile
    // 若希望走扫码收银台（含仅扫码场景可用的通道，如当面付），传 qr
    // 不传时平台只能读到 curl 的 UA，无法识别终端类型，会归为网页端场景
    'device'       => isMobileUA($_SERVER['HTTP_USER_AGENT'] ?? '') ? 'mobile' : 'pc',
    'sign_type'    => 'MD5',
];
$params['sign'] = buildSign($params, $md5Key);

$ch = curl_init();
curl_setopt_array($ch, [
    CURLOPT_URL            => $apiUrl,
    CURLOPT_POST           => true,
    CURLOPT_POSTFIELDS     => http_build_query($params),
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_SSL_VERIFYPEER => false,
    CURLOPT_TIMEOUT        => 15,
    CURLOPT_REFERER        => 'https://www.ruqianshop.cn',
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . $anonKey,
        'apikey: ' . $anonKey,
    ],
]);
$response = curl_exec($ch);
curl_close($ch);

$data = json_decode($response, true);
if ($data['code'] == 1) {
    header('Location: ' . $data['payurl']);
} else {
    echo '错误：' . $data['msg'];
}