GlobePay 开发者技术参考文档

curl -X POST "https://gateway.example.com/api/v1/payments" \
  -H "Content-Type: application/json" \
  -H "X-Key-Id: GP_TEST_KEY_01" \
  -H "X-Timestamp: 1760000000" \
  -H "X-Nonce: a1b2c3d4e5f6g7h8" \
  -H "X-Signature: 6f9b2d8...c4" \
  -d '{
    "merchant_order_no": "ORD_20261009_001",
    "amount": 100,
    "currency": "CNY",
    "subject": "高级会员订阅",
    "notify_url": "https://merchant.example.com/webhook",
    "return_url": "https://merchant.example.com/pay/return"
  }'

<?php
declare(strict_types=1);

$keyId  = 'GP_TEST_KEY_01';
$secret = 'sec_demo_secret_1234567890abcdef';
$time   = (string)time();
$nonce  = bin2hex(random_bytes(16));
$path   = '/api/v1/payments';

$payload = json_encode([
    'merchant_order_no' => 'ORD_' . time() . '_' . rand(100, 999),
    'amount'            => 100, // 1.00 元
    'currency'          => 'CNY',
    'subject'           => '高级会员订阅',
    'notify_url'        => 'https://merchant.example.com/webhook',
    'return_url'        => 'https://merchant.example.com/pay/return'
], JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);

$canonical = "POST\n{$path}\n{$time}\n{$nonce}\n" . hash('sha256', $payload);
$signature = hash_hmac('sha256', $canonical, $secret);

$ch = curl_init('https://gateway.example.com' . $path);
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_POSTFIELDS     => $payload,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => [
        'Content-Type: application/json',
        "X-Key-Id: {$keyId}",
        "X-Timestamp: {$time}",
        "X-Nonce: {$nonce}",
        "X-Signature: {$signature}"
    ]
]);
$response = curl_exec($ch);
curl_close($ch);
echo $response;

import time, secrets, hashlib, hmac, json, urllib.request

key_id = "GP_TEST_KEY_01"
secret = "sec_demo_secret_1234567890abcdef"
timestamp = str(int(time.time()))
nonce = secrets.token_hex(16)
path = "/api/v1/payments"

data = {
    "merchant_order_no": f"ORD_{int(time.time())}",
    "amount": 100, # 1.00 元
    "currency": "CNY",
    "subject": "高级会员订阅",
    "notify_url": "https://merchant.example.com/webhook"
}
body = json.dumps(data, separators=(',', ':'), ensure_ascii=False)
body_hash = hashlib.sha256(body.encode('utf-8')).hexdigest()

canonical = f"POST\n{path}\n{timestamp}\n{nonce}\n{body_hash}"
signature = hmac.new(secret.encode('utf-8'), canonical.encode('utf-8'), hashlib.sha256).hexdigest()

req = urllib.request.Request(
    f"https://gateway.example.com{path}",
    data=body.encode('utf-8'),
    headers={
        "Content-Type": "application/json",
        "X-Key-Id": key_id,
        "X-Timestamp": timestamp,
        "X-Nonce": nonce,
        "X-Signature": signature
    }
)
with urllib.request.urlopen(req) as resp:
    print(resp.read().decode('utf-8'))

const crypto = require('crypto');
const https = require('https');

const keyId = 'GP_TEST_KEY_01';
const secret = 'sec_demo_secret_1234567890abcdef';
const timestamp = Math.floor(Date.now() / 1000).toString();
const nonce = crypto.randomBytes(16).toString('hex');
const path = '/api/v1/payments';

const body = JSON.stringify({
  merchant_order_no: `ORD_${Date.now()}`,
  amount: 100,
  currency: 'CNY',
  subject: '高级会员订阅',
  notify_url: 'https://merchant.example.com/webhook'
});

const bodyHash = crypto.createHash('sha256').update(body).digest('hex');
const canonical = `POST\n${path}\n${timestamp}\n${nonce}\n${bodyHash}`;
const signature = crypto.createHmac('sha256', secret).update(canonical).digest('hex');

const req = https.request({
  hostname: 'gateway.example.com',
  path,
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-Key-Id': keyId,
    'X-Timestamp': timestamp,
    'X-Nonce': nonce,
    'X-Signature': signature
  }
}, res => {
  let chunks = '';
  res.on('data', d => chunks += d);
  res.on('end', () => console.log(chunks));
});
req.write(body);
req.end();