浦云支付商户对接文档

{
  "code": 0,
  "msg": "SUCCESS",
  "data": {},
  "sign": "响应 data 的 MD5 签名"
}

amount=50000&appId=APP_DEMO_10001&body=浦云支付接口测试&clientIp=203.0.113.10&currency=CNY&expiredTime=1800&extParam=user_10001&mchNo=M_DEMO_10001&mchOrderNo=ORDER202608190001&notifyUrl=https://merchant.example.com/pay/notify&reqTime=1787078400000&returnUrl=https://merchant.example.com/pay/result&signType=MD5&subject=测试订单&version=1.0&wayCode=ALIPAY_DE&key=DEMO_APP_SECRET

{
  "mchNo": "M_DEMO_10001",
  "appId": "APP_DEMO_10001",
  "mchOrderNo": "ORDER202608190001",
  "wayCode": "ALIPAY_DE",
  "amount": 50000,
  "currency": "CNY",
  "clientIp": "203.0.113.10",
  "subject": "测试订单",
  "body": "浦云支付接口测试",
  "notifyUrl": "https://merchant.example.com/pay/notify",
  "returnUrl": "https://merchant.example.com/pay/result",
  "expiredTime": 1800,
  "extParam": "user_10001",
  "reqTime": "1787078400000",
  "version": "1.0",
  "signType": "MD5",
  "sign": "8FC1237997EC94C5DD3D3EABF2F1ECF8"
}

{
  "code": 0,
  "msg": "SUCCESS",
  "data": {
    "payOrderId": "P20260819000100001",
    "mchOrderNo": "ORDER202608190001",
    "orderState": 1,
    "payDataType": "payUrl",
    "payData": "https://checkout.example/pay/xxx",
    "errCode": null,
    "errMsg": null
  },
  "sign": "响应签名"
}

{
  "mchNo": "M_DEMO_10001",
  "appId": "APP_DEMO_10001",
  "payOrderId": "P20260819000100001",
  "reqTime": "1787078460000",
  "version": "1.0",
  "signType": "MD5",
  "sign": "按本文算法计算"
}

payOrderId=P20260819000100001
mchNo=M_DEMO_10001
appId=APP_DEMO_10001
mchOrderNo=ORDER202608190001
ifCode=wfpay
wayCode=ALIPAY_DE
amount=50000
currency=CNY
state=2
extParam=user_10001
createdAt=1787078400000
successTime=1787078499000
reqTime=1787078500000
sign=回调签名

curl -X POST 'https://pay.125.mom/api/pay/unifiedOrder' \
  -H 'Content-Type: application/json' \
  -d '{"mchNo":"M_DEMO_10001","appId":"APP_DEMO_10001","mchOrderNo":"ORDER202608190001","wayCode":"ALIPAY_DE","amount":50000,"currency":"CNY","subject":"测试订单","body":"浦云支付接口测试","notifyUrl":"https://merchant.example.com/pay/notify","reqTime":"1787078400000","version":"1.0","signType":"MD5","sign":"请由服务端计算"}'

<?php
function puyunSign(array $data, string $secret): string {
    unset($data['sign']);
    $data = array_filter($data, fn($v) => $v !== null && $v !== '');
    uksort($data, 'strcasecmp');
    $text = '';
    foreach ($data as $key => $value) {
        $text .= $key . '=' . $value . '&';
    }
    return strtoupper(md5($text . 'key=' . $secret));
}

$payload['sign'] = puyunSign($payload, getenv('PUYUNPAY_APP_SECRET'));

import crypto from 'node:crypto';

export function puyunSign(input, secret) {
  const data = { ...input };
  delete data.sign;
  const text = Object.entries(data)
    .filter(([, value]) => value !== null && value !== '')
    .sort(([a], [b]) => a.toLowerCase().localeCompare(b.toLowerCase()))
    .map(([key, value]) => `${key}=${value}&`)
    .join('') + `key=${secret}`;
  return crypto.createHash('md5').update(text, 'utf8').digest('hex').toUpperCase();
}

import hashlib

def puyun_sign(data: dict, secret: str) -> str:
    items = [(k, v) for k, v in data.items()
             if k != "sign" and v is not None and v != ""]
    items.sort(key=lambda item: item[0].lower())
    text = "".join(f"{k}={v}&" for k, v in items) + f"key={secret}"
    return hashlib.md5(text.encode("utf-8")).hexdigest().upper()

static String puyunSign(Map<String, Object> input, String secret) throws Exception {
    List<Map.Entry<String, Object>> items = input.entrySet().stream()
        .filter(e -> !"sign".equals(e.getKey()))
        .filter(e -> e.getValue() != null && !"".equals(e.getValue()))
        .sorted((a, b) -> a.getKey().compareToIgnoreCase(b.getKey()))
        .toList();
    StringBuilder text = new StringBuilder();
    for (var item : items) text.append(item.getKey()).append('=')
        .append(item.getValue()).append('&');
    text.append("key=").append(secret);
    byte[] digest = MessageDigest.getInstance("MD5")
        .digest(text.toString().getBytes(StandardCharsets.UTF_8));
    return HexFormat.of().withUpperCase().formatHex(digest);
}

<?php
$params = $_POST;
$receivedSign = $params['sign'] ?? '';
$expectedSign = puyunSign($params, getenv('PUYUNPAY_APP_SECRET'));

if (!hash_equals($expectedSign, strtoupper($receivedSign))) {
    http_response_code(400);
    exit('INVALID SIGN');
}
if (($params['state'] ?? '') !== '2') exit('WAIT');

// 开启数据库事务；锁定 mchOrderNo；核对金额、币种；仅首次成功时入账；提交事务。
header('Content-Type: text/plain; charset=UTF-8');
echo 'SUCCESS';

{
  "mchNo":"M_DEMO_10001","appId":"APP_DEMO_10001",
  "mchOrderNo":"TRANSFER202608190001","ifCode":"bitcart",
  "entryType":"USDT_TRC20","amount":10000,"currency":"USD",
  "accountNo":"TRC20收款地址","transferDesc":"USDT代付",
  "notifyUrl":"https://merchant.example.com/transfer/notify",
  "reqTime":1787078400000,"version":"1.0","signType":"MD5","sign":"服务端计算"
}