积分与余额账务系统硬切重构

src/Payment/Gateway.php

@@ -350,24 +350,28 @@ class Gateway {
         // Provider-confirmed external payments must include an exact amount and transaction ID.
         $expected_currency = strtoupper((string) ($order['currency'] ?? ''));
         $paid_currency = strtoupper(sanitize_key((string) ($verify['currency'] ?? '')));
-        $expected       = (float) ($order['amount'] ?? 0);
-        $paid_amount    = (float) ($verify['amount'] ?? 0);
+		try {
+			$expected = \AKSRT\Ledger\AssetAmount::balance(is_string($order['amount'] ?? null) ? $order['amount'] : '');
+			$paid_amount = \AKSRT\Ledger\AssetAmount::balance(is_string($verify['amount'] ?? null) ? $verify['amount'] : '');
+		} catch (\InvalidArgumentException $e) {
+			return false;
+		}
         $transaction_id = sanitize_text_field((string) ($verify['transaction_id'] ?? ''));
-        if ($expected <= 0
-            || $paid_amount <= 0
+		if ($expected->minor() <= 0
+			|| $paid_amount->minor() <= 0
             || $transaction_id === ''
             || $expected_currency === ''
             || $paid_currency === ''
             || !hash_equals($expected_currency, $paid_currency)
-            || abs($expected - $paid_amount) > 0.01) {
+			|| $expected->minor() !== $paid_amount->minor()) {
             if (defined('WP_DEBUG') && WP_DEBUG) {
                 error_log(sprintf(
-                    '[AKSRT Payment] invalid completion order=%s out_trade_no=%s expected=%.2f %s paid=%.2f %s transaction=%s gateway=%s',
+					'[AKSRT Payment] invalid completion order=%s out_trade_no=%s expected=%s %s paid=%s %s transaction=%s gateway=%s',
                     $order_number,
                     $provider_out_trade_no,
-                    $expected,
+					$expected->decimal(),
                     $expected_currency,
-                    $paid_amount,
+					$paid_amount->decimal(),
                     $paid_currency,
                     $transaction_id !== '' ? 'present' : 'missing',
                     $gateway_id