order_site/apps/backend/scripts/curl-send-callback.ts

/**
 * 生成快手 Open API 回调 curl 命令（手动测试用）
 *
 * 用法:
 *   npm run test:industry:curl                          # 发码回调 (默认)
 *   npm run test:industry:curl -- --mode=consume        # 核销回调
 *   npm run test:industry:curl -- --oid=xxx --token=xxx --accessToken=xxx
 */

import crypto from 'node:crypto'
import path from 'node:path'
import process from 'node:process'
import { fileURLToPath } from 'node:url'

import { loadEnvFiles } from '../src/config/runtime-env.js'

type JsonObject = Record<string, unknown>

const CURRENT_DIR = path.dirname(fileURLToPath(import.meta.url))
const PROJECT_ROOT = path.resolve(CURRENT_DIR, '..')
const WORKSPACE_ROOT = path.resolve(PROJECT_ROOT, '../..')

loadEnvFiles([
  path.join(WORKSPACE_ROOT, '.env'),
  path.join(PROJECT_ROOT, '.env'),
])

const accessToken = String(process.env.KUASHOU_INDUSTRY_ACCESS_TOKEN || 'your_access_token').trim()
const appKey = String(process.env.KUASHOU_INDUSTRY_APP_KEY || 'your_app_key').trim()
const signSecret = String(process.env.KUASHOU_INDUSTRY_SIGN_SECRET || 'your_sign_secret').trim()

const args = parseArgs(process.argv.slice(2))
const mode = String(args.mode || 'send').trim() // send | consume | destroy
const oid = String(args.oid || String(Date.now())).trim()  // 快手要求纯数字 oid
const sendNum = normalizeInt(args.num, 3)
const token = String(args.token || `test-token-${Date.now()}`).trim()
const bodyAccessToken = String(args.accessToken || accessToken).trim()

const KUAISHOU_OPEN_API = 'https://openapi.kwaixiaodian.com'

const now = Date.now()
const validEnd = now + 30 * 24 * 60 * 60 * 1000

const bizParams: JsonObject = mode === 'consume'
  ? {
      oid,
      etickets: Array.from({ length: sendNum }, (_, i) => ({
        id: String(i + 1),
        num: 1,
        goodsValue: 10,
      })),
      status: 'CONSUMED',
      consumeType: 'consume',
      consumeTime: now,
      storeName: '测试门店',
      storeAddress: '测试地址',
      seriallNum: `SN${Date.now()}`,
      token,
    }
  : mode === 'destroy'
  ? {
      oid,
      etickets: Array.from({ length: sendNum }, (_, i) => ({
        id: String(i + 1),
        num: 1,
        goodsValue: 100,
      })),
      reason: 'ETICKET_EXPIRED',
      token,
    }
  : {
      oid,
      sendType: 'VIRTUAL',
      etickets: Array.from({ length: sendNum }, (_, i) => ({
        id: String(i + 1),
        num: 1,
        validStartTime: now,
        validEndTime: validEnd,
      })),
      sendNum,
      token,
    }

const method = mode === 'consume'
  ? 'integration.callback.virtual.eticket.consume'
  : mode === 'destroy'
  ? 'integration.callback.virtual.eticket.destroy'
  : 'integration.callback.virtual.eticket.send'

const endpoint = mode === 'consume'
  ? '/integration/callback/virtual/eticket/consume'
  : mode === 'destroy'
  ? '/integration/callback/virtual/eticket/destroy'
  : '/integration/callback/virtual/eticket/send'

const paramStr = JSON.stringify(bizParams)

const signParams: JsonObject = {
  method,
  appkey: appKey,
  access_token: bodyAccessToken,
  version: '1',
  timestamp: now,
  signMethod: 'MD5',
  param: paramStr,
}

const sign = signPayload(signParams, signSecret)

console.log('')
const modeLabel = mode === 'consume' ? '核销' : mode === 'destroy' ? '销毁' : '发码'
console.log(`# 电子凭证${modeLabel}回调 curl 命令`)
console.log(`# oid=${oid}  sendNum=${sendNum}  access_token=${bodyAccessToken.slice(0, 10)}...`)
console.log(`# 先测试网络连通性:`)
console.log(`curl -s -o /dev/null -w "%{http_code}" --connect-timeout 5 https://openapi.kwaixiaodian.com/`)
console.log('# 如果返回 000，说明网络不通，需要关闭代理或换服务器')
console.log('')
console.log('curl -X POST \\')
console.log(`  '${KUAISHOU_OPEN_API}${endpoint}' \\`)
console.log("  -H 'Content-Type: application/x-www-form-urlencoded' \\")
console.log(`  --data-urlencode 'method=${method}' \\`)
console.log(`  --data-urlencode 'appkey=${appKey}' \\`)
console.log(`  --data-urlencode 'access_token=${bodyAccessToken}' \\`)
console.log(`  --data-urlencode 'version=1' \\`)
console.log(`  --data-urlencode 'timestamp=${now}' \\`)
console.log(`  --data-urlencode 'signMethod=MD5' \\`)
console.log(`  --data-urlencode 'sign=${sign}' \\`)
console.log(`  --data-urlencode 'param=${paramStr}'`)
console.log('')

// 本地签名校验（不调快手）
console.log('# 本地签名校验（不会真正调用快手）:')
const localEndpoint = mode === 'consume' ? 'consume-code' : mode === 'destroy' ? 'destroy-code' : 'send-code'
console.log(`curl -s -X POST http://127.0.0.1:3000/api/v1/open/kuaishou-industry/${localEndpoint} \\`)
console.log("  -H 'Content-Type: application/x-www-form-urlencoded' \\")
console.log(`  -d 'appkey=${appKey}&version=1&timestamp=${now}&signMethod=MD5&access_token=&method=&sign=${sign}&param=${encodeURIComponent(paramStr)}'`)
console.log('')

function signPayload(params: JsonObject, secret: string): string {
  const entries = Object.entries(params)
    .filter(([k]) => k !== 'sign' && k !== 'signSecret')
    .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
  const qs = entries.map(([k, v]) => `${k}=${stringify(v)}`).join('&')
  return crypto.createHash('md5').update(`${qs}&signSecret=${secret}`, 'utf8').digest('hex').toLowerCase()
}

function stringify(v: unknown): string {
  if (typeof v === 'number' && Number.isFinite(v)) return String(v)
  if (typeof v === 'boolean') return v ? 'true' : 'false'
  if (v == null) return ''
  if (typeof v === 'object') return JSON.stringify(v, Object.keys(v as JsonObject).sort())
  return String(v)
}

function normalizeInt(v: unknown, d: number): number {
  const n = Number(v)
  return Number.isInteger(n) && n > 0 ? n : d
}

function parseArgs(raw: string[]): JsonObject {
  const p: JsonObject = {}
  for (const a of raw) {
    const arg = String(a || '').trim()
    if (!arg) continue
    const n = arg.startsWith('--') ? arg.slice(2) : arg
    const eq = n.indexOf('=')
    if (eq < 0) { p[n] = true; continue }
    p[n.slice(0, eq).trim()] = n.slice(eq + 1).trim()
  }
  return p
}