店火火支付 dhhpay API 文档

所有 API 请求均需在 Body（JSON）中包含以下公共参数（继承自 AbstractRQ）：

说明： 以下公共参数已包含在各接口请求参数表中，此处统一说明，后续不再重复列出。

商户相关接口还需额外包含以下参数（继承自 AbstractMchAppRQ）：

签名算法： MD5

签名步骤：

1. 将请求参数（除去 sign 本身）转换为 JSON 对象
2. 按照 key 的自然排序（不区分大小写的 ASCII 升序）拼接 key=value& 字符串
3. 在末尾拼接 key（商户 API 密钥 appSecret）
4. 计算 MD5 并转为大写

各语言签名示例：

Java

import java.security.MessageDigest;
import java.util.*;

public class SignUtil {

    public static String genSign(Map<String, Object> params, String appSecret) throws Exception {
        List<String> list = new ArrayList<>();
        for (Map.Entry<String, Object> entry : params.entrySet()) {
            if (entry.getValue() != null && !"".equals(entry.getValue())) {
                list.add(entry.getKey() + "=" + entry.getValue() + "&");
            }
        }
        String[] arr = list.toArray(new String[0]);
        Arrays.sort(arr, String.CASE_INSENSITIVE_ORDER);
        StringBuilder sb = new StringBuilder();
        for (String s : arr) sb.append(s);
        sb.append("key=").append(appSecret);
        MessageDigest md = MessageDigest.getInstance("MD5");
        byte[] digest = md.digest(sb.toString().getBytes("UTF-8"));
        StringBuilder hex = new StringBuilder();
        for (byte b : digest) hex.append(String.format("%02X", b));
        return hex.toString();
    }

    public static boolean verifySign(Map<String, Object> data, String appSecret, String sign) throws Exception {
        return genSign(data, appSecret).equalsIgnoreCase(sign);
    }
}

Python

import hashlib

def gen_sign(params: dict, app_secret: str) -> str:
    items = [f"{k}={v}&" for k, v in params.items()
             if v is not None and v != '']
    items.sort(key=str.lower)
    raw = ''.join(items) + f"key={app_secret}"
    return hashlib.md5(raw.encode('utf-8')).hexdigest().upper()

def verify_sign(data: dict, app_secret: str, sign: str) -> bool:
    return gen_sign(data, app_secret) == sign.upper()

JavaScript (Node.js)

const crypto = require('crypto');

function genSign(params, appSecret) {
  const items = [];
  for (const [k, v] of Object.entries(params)) {
    if (v !== null && v !== undefined && v !== '') {
      items.push(`${k}=${v}&`);
    }
  }
  items.sort((a, b) => a.toLowerCase().localeCompare(b.toLowerCase()));
  const raw = items.join('') + `key=${appSecret}`;
  return crypto.createHash('md5').update(raw, 'utf8').digest('hex').toUpperCase();
}

function verifySign(data, appSecret, sign) {
  return genSign(data, appSecret) === sign.toUpperCase();
}

PHP

function genSign(array $params, string $appSecret): string {
    $items = [];
    foreach ($params as $k => $v) {
        if ($v !== null && $v !== '') {
            $items[] = "$k=$v&";
        }
    }
    sort($items, SORT_STRING | SORT_FLAG_CASE);
    $raw = implode('', $items) . "key=$appSecret";
    return strtoupper(md5($raw));
}

function verifySign(array $data, string $appSecret, string $sign): bool {
    return strtoupper(genSign($data, $appSecret)) === strtoupper($sign);
}

Go

import (
    "crypto/md5"
    "fmt"
    "sort"
    "strings"
)

func GenSign(params map[string]interface{}, appSecret string) string {
    items := make([]string, 0)
    for k, v := range params {
        if v != nil && fmt.Sprintf("%v", v) != "" {
            items = append(items, fmt.Sprintf("%s=%v&", k, v))
        }
    }
    sort.Slice(items, func(i, j int) bool {
        return strings.ToLower(items[i]) < strings.ToLower(items[j])
    })
    raw := strings.Join(items, "") + "key=" + appSecret
    hash := md5.Sum([]byte(raw))
    return fmt.Sprintf("%X", hash)
}

func VerifySign(data map[string]interface{}, appSecret, sign string) bool {
    return strings.EqualFold(GenSign(data, appSecret), sign)
}

C#

using System.Security.Cryptography;
using System.Text;

public static class SignUtil
{
    public static string GenSign(Dictionary<string, object> paramsDict, string appSecret)
    {
        var items = new List<string>();
        foreach (var kv in paramsDict)
        {
            if (kv.Value != null && kv.Value.ToString() != "")
            {
                items.Add($"{kv.Key}={kv.Value}&");
            }
        }
        items.Sort(StringComparer.OrdinalIgnoreCase);
        var raw = string.Concat(items) + $"key={appSecret}";
        var bytes = MD5.HashData(Encoding.UTF8.GetBytes(raw));
        return Convert.ToHexString(bytes);
    }

    public static bool VerifySign(Dictionary<string, object> data, string appSecret, string sign)
    {
        return string.Equals(GenSign(data, appSecret), sign,
                             StringComparison.OrdinalIgnoreCase);
    }
}

所有 API 响应使用统一结构体 ApiRes<T>：

{
  "code": 0,
  "msg": "SUCCESS",
  "data": { ... },
  "sign": "md5签名值"
}

聚合支付接口，商户传入支付方式 wayCode，网关自动路由到对应渠道完成支付。支持所有支付方式（支付宝、微信、云闪付、PayPal、网联客等）。

{
  "version": "1.0",
  "signType": "MD5",
  "sign": "xxx",
  "reqTime": "20240101120000",
  "mchNo": "M10001",
  "appId": "a1b2c3d4",
  "mchOrderNo": "MCH20240101001",
  "wayCode": "WX_NATIVE",
  "amount": 100,
  "currency": "cny",
  "subject": "测试商品",
  "body": "测试商品描述",
  "notifyUrl": "https://商户域名/notify",
  "returnUrl": "https://商户域名/return",
  "expiredTime": 7200
}

{
  "code": 0,
  "msg": "SUCCESS",
  "data": {
    "payOrderId": "P2024010112000000001",
    "mchOrderNo": "MCH20240101001",
    "orderState": 2,
    "payDataType": "codeimg",
    "payData": "https://api.dhhpay.com/scan/imgs/xxx.png",
    "errCode": null,
    "errMsg": null
  },
  "sign": "a1b2c3d4e5f6..."
}

除统一下单外，每种支付方式也提供独立接口。请求/响应数据结构与统一下单相同，wayCode 固定。

查询支付订单当前状态。支持 GET/POST，payOrderId 与 mchOrderNo 二选一。