fadd

internal/infrastructure/external/rongxing/crypto.go

@@ -0,0 +1,94 @@
+package rongxing
+
+import (
+	"crypto"
+	"crypto/md5"
+	"crypto/rand"
+	"crypto/rsa"
+	"crypto/sha256"
+	"crypto/x509"
+	"encoding/base64"
+	"encoding/hex"
+	"encoding/pem"
+	"fmt"
+	"sort"
+	"strings"
+)
+
+// MD5Upper 对明文做 MD5，返回 32 位大写十六进制（入参说明要求大写）。
+func MD5Upper(plaintext string) string {
+	sum := md5.Sum([]byte(strings.TrimSpace(plaintext)))
+	return strings.ToUpper(hex.EncodeToString(sum[:]))
+}
+
+// EncodePasswordBase64 将明文密码做 Base64 编码（登录接口要求）。
+func EncodePasswordBase64(password string) string {
+	return base64.StdEncoding.EncodeToString([]byte(password))
+}
+
+// BuildSignContent 生成登录签名原文：过滤 sign/空值 → 按 key 升序 → key=value&...
+func BuildSignContent(params map[string]interface{}) string {
+	keys := make([]string, 0, len(params))
+	for k, v := range params {
+		if strings.EqualFold(k, "sign") || v == nil {
+			continue
+		}
+		keys = append(keys, k)
+	}
+	sort.Strings(keys)
+
+	parts := make([]string, 0, len(keys))
+	for _, k := range keys {
+		parts = append(parts, fmt.Sprintf("%s=%v", k, params[k]))
+	}
+	return strings.Join(parts, "&")
+}
+
+// SignSHA256WithRSA 使用私钥对原文做 SHA256withRSA 签名，返回 Base64。
+func SignSHA256WithRSA(content string, privateKey *rsa.PrivateKey) (string, error) {
+	if privateKey == nil {
+		return "", fmt.Errorf("私钥为空")
+	}
+	hashed := sha256.Sum256([]byte(content))
+	signed, err := rsa.SignPKCS1v15(rand.Reader, privateKey, crypto.SHA256, hashed[:])
+	if err != nil {
+		return "", fmt.Errorf("RSA 签名失败: %w", err)
+	}
+	return base64.StdEncoding.EncodeToString(signed), nil
+}
+
+// ParsePrivateKey 解析 RSA 私钥（支持 PEM / PKCS#8 / PKCS#1 原始 Base64）。
+func ParsePrivateKey(raw string) (*rsa.PrivateKey, error) {
+	raw = strings.TrimSpace(raw)
+	if raw == "" {
+		return nil, fmt.Errorf("私钥为空")
+	}
+
+	var der []byte
+	if block, _ := pem.Decode([]byte(raw)); block != nil {
+		der = block.Bytes
+	} else {
+		normalized := strings.ReplaceAll(raw, "\n", "")
+		normalized = strings.ReplaceAll(normalized, "\r", "")
+		normalized = strings.ReplaceAll(normalized, " ", "")
+		decoded, err := base64.StdEncoding.DecodeString(normalized)
+		if err != nil {
+			return nil, fmt.Errorf("私钥 Base64 解码失败: %w", err)
+		}
+		der = decoded
+	}
+
+	if key, err := x509.ParsePKCS8PrivateKey(der); err == nil {
+		rsaKey, ok := key.(*rsa.PrivateKey)
+		if !ok {
+			return nil, fmt.Errorf("私钥不是 RSA 类型")
+		}
+		return rsaKey, nil
+	}
+
+	if key, err := x509.ParsePKCS1PrivateKey(der); err == nil {
+		return key, nil
+	}
+
+	return nil, fmt.Errorf("无法解析 RSA 私钥（需 PKCS#8 或 PKCS#1）")
+}