Files
wordpress-theme-aksrt/inc/classes/class-aksrt-balance-service.php
T
kate522 c45a0ecef5 feat(pay): capability gates for transfer and withdraw
AND feature flags with user_caps balance_transfer / points_transfer /
balance_withdraw on REST and user-center buttons.
2026-07-16 22:35:48 +08:00

1009 lines
36 KiB
PHP

<?php
/**
* AKSRT Balance Service — recharge packages + transfer REST.
*
* Zibll parity targets:
* - balance charge packages (pay_balance_product)
* - balance/points transfer
* - credit wallet after paid recharge orders
*
* @package AKSRT
*/
defined('ABSPATH') || exit;
class AKSRT_Balance_Service {
private static $instance = null;
public static function get_instance(): self {
if (null === self::$instance) {
self::$instance = new self();
}
return self::$instance;
}
public function init(): void {
add_action('rest_api_init', [$this, 'register_routes']);
add_action('aksrt_order_paid', [$this, 'on_order_paid'], 20, 2);
}
public function register_routes(): void {
register_rest_route('aksrt/v1', '/pay/balance/charge', [
[
'methods' => WP_REST_Server::READABLE,
'callback' => [$this, 'rest_charge_options'],
'permission_callback' => static function () {
return is_user_logged_in();
},
],
[
'methods' => WP_REST_Server::CREATABLE,
'callback' => [$this, 'rest_charge_create'],
'permission_callback' => static function () {
return is_user_logged_in();
},
],
]);
register_rest_route('aksrt/v1', '/pay/transfer', [
[
'methods' => WP_REST_Server::CREATABLE,
'callback' => [$this, 'rest_transfer'],
'permission_callback' => static function () {
return is_user_logged_in();
},
],
]);
register_rest_route('aksrt/v1', '/pay/transfer/search', [
[
'methods' => WP_REST_Server::READABLE,
'callback' => [$this, 'rest_transfer_search'],
'permission_callback' => static function () {
return is_user_logged_in();
},
],
]);
register_rest_route('aksrt/v1', '/pay/balance/exchange', [
[
'methods' => WP_REST_Server::CREATABLE,
'callback' => [$this, 'rest_exchange_from_credits'],
'permission_callback' => static function () {
return is_user_logged_in();
},
],
]);
register_rest_route('aksrt/v1', '/pay/points/buy', [
[
'methods' => WP_REST_Server::READABLE,
'callback' => [$this, 'rest_points_buy_options'],
'permission_callback' => static function () {
return is_user_logged_in();
},
],
[
'methods' => WP_REST_Server::CREATABLE,
'callback' => [$this, 'rest_points_buy_create'],
'permission_callback' => static function () {
return is_user_logged_in();
},
],
]);
register_rest_route('aksrt/v1', '/pay/balance/withdraw', [
[
'methods' => WP_REST_Server::CREATABLE,
'callback' => [$this, 'rest_balance_withdraw'],
'permission_callback' => static function () {
return is_user_logged_in();
},
],
]);
}
/**
* GET charge options (packages + methods + limits).
*/
public function rest_charge_options(WP_REST_Request $request) {
if (!class_exists('AKSRT_Balance') || !AKSRT_Balance::enabled()) {
return new WP_Error('aksrt_balance_disabled', __('余额功能未启用', 'aksrt'), ['status' => 403]);
}
$user_id = get_current_user_id();
return rest_ensure_response([
'success' => true,
'data' => $this->get_charge_view($user_id),
]);
}
/**
* POST create recharge order and initiate payment.
*/
public function rest_charge_create(WP_REST_Request $request) {
if (!class_exists('AKSRT_Balance') || !AKSRT_Balance::enabled()) {
return new WP_Error('aksrt_balance_disabled', __('余额功能未启用', 'aksrt'), ['status' => 403]);
}
$user_id = get_current_user_id();
$params = $request->get_json_params();
if (!is_array($params)) {
$params = $request->get_params();
}
$package_key = sanitize_text_field((string) ($params['package'] ?? 'custom'));
$custom_price = isset($params['custom_price']) ? (float) $params['custom_price'] : 0.0;
$payment_method = sanitize_key((string) ($params['payment_method'] ?? 'alipay'));
$result = $this->create_charge_order($user_id, $package_key, $custom_price, $payment_method);
if (is_wp_error($result)) {
return $result;
}
return rest_ensure_response(['success' => true, 'data' => $result]);
}
/**
* Transfer balance or points between users.
*/
public function rest_transfer(WP_REST_Request $request) {
$params = $request->get_json_params();
if (!is_array($params)) {
$params = $request->get_params();
}
$type = sanitize_key((string) ($params['type'] ?? 'balance'));
$recipient = (int) ($params['recipient'] ?? 0);
$amount_raw = $params['amount'] ?? $params['price'] ?? 0;
$from_id = get_current_user_id();
if (!in_array($type, ['balance', 'points'], true)) {
return new WP_Error('aksrt_transfer_type', __('转账类型无效', 'aksrt'), ['status' => 400]);
}
if ($from_id <= 0) {
return new WP_Error('aksrt_need_login', __('请先登录', 'aksrt'), ['status' => 401]);
}
if ($recipient <= 0 || $recipient === $from_id) {
return new WP_Error('aksrt_transfer_user', __('请选择有效的收款用户', 'aksrt'), ['status' => 400]);
}
if (!get_userdata($recipient)) {
return new WP_Error('aksrt_transfer_user', __('收款用户不存在', 'aksrt'), ['status' => 404]);
}
$cfg = class_exists('AKSRT_Settings') ? AKSRT_Settings::get_payment_recharge_settings() : [];
if ($type === 'balance') {
if (empty($cfg['enabled']) || empty($cfg['transfer']['enabled'])) {
return new WP_Error('aksrt_transfer_closed', __('余额转账未开启', 'aksrt'), ['status' => 403]);
}
if (class_exists('AKSRT_Settings_Capabilities') && !AKSRT_Settings_Capabilities::user_can('balance_transfer', $from_id)) {
return new WP_Error('aksrt_transfer_forbidden', __('当前账号无权转账余额', 'aksrt'), ['status' => 403]);
}
$amount = round((float) $amount_raw, 2);
if ($amount <= 0) {
return new WP_Error('aksrt_transfer_amount', __('请输入有效金额', 'aksrt'), ['status' => 400]);
}
if (!class_exists('AKSRT_Balance')) {
return new WP_Error('aksrt_balance_unavailable', __('余额系统不可用', 'aksrt'), ['status' => 500]);
}
$from_bal = AKSRT_Balance::balance($from_id);
if ($from_bal < $amount) {
return new WP_Error('aksrt_balance_insufficient', __('余额不足', 'aksrt'), ['status' => 402]);
}
$fee_rate = max(0, min(50, (int) ($cfg['transfer']['service_charge'] ?? 0)));
$credit = $fee_rate > 0 ? round($amount * (100 - $fee_rate) / 100, 2) : $amount;
$from_user = wp_get_current_user();
$to_user = get_userdata($recipient);
$deduct = AKSRT_Balance::deduct(
$from_id,
$amount,
'transfer_out',
['type' => 'user', 'id' => $recipient],
sprintf(__('转账给用户[%s]', 'aksrt'), $to_user ? $to_user->display_name : (string) $recipient)
);
if (is_wp_error($deduct)) {
return $deduct;
}
AKSRT_Balance::add(
$recipient,
$credit,
'transfer_in',
['type' => 'user', 'id' => $from_id],
sprintf(__('来自用户[%s]的转账', 'aksrt'), $from_user->display_name ?: (string) $from_id)
);
return rest_ensure_response([
'success' => true,
'data' => [
'message' => __('转账成功', 'aksrt'),
'reload' => true,
'balance' => AKSRT_Balance::balance($from_id),
],
]);
}
// points transfer
$points_transfer_on = !empty(AKSRT_Settings::get_all()['points_transfer_s']);
if (!class_exists('AKSRT_Settings') || !AKSRT_Settings::credits_enabled() || !$points_transfer_on) {
return new WP_Error('aksrt_transfer_closed', __('积分转账未开启', 'aksrt'), ['status' => 403]);
}
if (class_exists('AKSRT_Settings_Capabilities') && !AKSRT_Settings_Capabilities::user_can('points_transfer', $from_id)) {
return new WP_Error('aksrt_transfer_forbidden', __('当前账号无权转账积分', 'aksrt'), ['status' => 403]);
}
$amount = (int) $amount_raw;
if ($amount <= 0) {
return new WP_Error('aksrt_transfer_amount', __('请输入有效积分', 'aksrt'), ['status' => 400]);
}
if (!class_exists('AKSRT_Credits')) {
return new WP_Error('aksrt_credits_unavailable', __('积分系统不可用', 'aksrt'), ['status' => 500]);
}
$fee_rate = max(0, min(50, (int) (AKSRT_Settings::get_all()['points_service_charge'] ?? 0)));
$credit = $fee_rate > 0 ? (int) floor($amount * (100 - $fee_rate) / 100) : $amount;
$from_user = wp_get_current_user();
$to_user = get_userdata($recipient);
$deduct = AKSRT_Credits::deduct(
$from_id,
$amount,
'transfer_out',
['type' => 'user', 'id' => $recipient],
sprintf(__('转账给用户[%s]', 'aksrt'), $to_user ? $to_user->display_name : (string) $recipient)
);
if (is_wp_error($deduct)) {
return $deduct;
}
AKSRT_Credits::add(
$recipient,
$credit,
'transfer_in',
['type' => 'user', 'id' => $from_id],
sprintf(__('来自用户[%s]的转账', 'aksrt'), $from_user->display_name ?: (string) $from_id)
);
return rest_ensure_response([
'success' => true,
'data' => [
'message' => __('转账成功', 'aksrt'),
'reload' => true,
'balance' => AKSRT_Credits::balance($from_id),
],
]);
}
public function rest_transfer_search(WP_REST_Request $request) {
$s = sanitize_text_field((string) $request->get_param('s'));
if (mb_strlen($s) < 1) {
return rest_ensure_response(['success' => true, 'data' => ['users' => []]]);
}
$exclude = [get_current_user_id()];
$q = new WP_User_Query([
'search' => '*' . $s . '*',
'search_columns' => ['user_login', 'user_nicename', 'display_name', 'user_email'],
'exclude' => $exclude,
'number' => 20,
'fields' => ['ID', 'display_name', 'user_login'],
]);
$users = [];
foreach ((array) $q->get_results() as $u) {
$users[] = [
'id' => (int) $u->ID,
'display_name' => (string) $u->display_name,
'user_login' => (string) $u->user_login,
'avatar' => get_avatar_url((int) $u->ID, ['size' => 48]),
];
}
return rest_ensure_response(['success' => true, 'data' => ['users' => $users]]);
}
/**
* Exchange points → cash wallet (pay_balance_exchange_*).
*/
public function rest_exchange_from_credits(WP_REST_Request $request) {
if (!class_exists('AKSRT_Balance') || !AKSRT_Balance::enabled()) {
return new WP_Error('aksrt_balance_disabled', __('余额功能未启用', 'aksrt'), ['status' => 403]);
}
$cfg = class_exists('AKSRT_Settings') ? AKSRT_Settings::get_payment_recharge_settings() : [];
if (empty($cfg['exchange']['enabled'])) {
return new WP_Error('aksrt_exchange_closed', __('积分兑换余额未开启', 'aksrt'), ['status' => 403]);
}
if (!class_exists('AKSRT_Credits') || !AKSRT_Settings::credits_enabled()) {
return new WP_Error('aksrt_credits_disabled', __('积分功能未启用', 'aksrt'), ['status' => 403]);
}
$params = $request->get_json_params();
if (!is_array($params)) {
$params = $request->get_params();
}
$points = (int) ($params['points'] ?? 0);
$rate = max(1, (int) ($cfg['exchange']['rate'] ?? 100)); // N points = 1 yuan
if ($points < $rate) {
return new WP_Error('aksrt_exchange_min', sprintf(__('最少兑换 %d 积分', 'aksrt'), $rate), ['status' => 400]);
}
// Floor to whole yuan.
$yuan = (int) floor($points / $rate);
$cost = $yuan * $rate;
if ($yuan <= 0 || $cost <= 0) {
return new WP_Error('aksrt_exchange_amount', __('兑换数量无效', 'aksrt'), ['status' => 400]);
}
$user_id = get_current_user_id();
$deduct = AKSRT_Credits::deduct(
$user_id,
$cost,
'exchange_to_balance',
['type' => 'balance'],
sprintf(__('积分兑换余额 %d 元', 'aksrt'), $yuan)
);
if (is_wp_error($deduct)) {
return $deduct;
}
$add = AKSRT_Balance::add(
$user_id,
(float) $yuan,
'exchange_from_credits',
['type' => 'credits'],
sprintf(__('积分兑换:消耗 %d 积分', 'aksrt'), $cost)
);
if (is_wp_error($add)) {
// best-effort refund points
AKSRT_Credits::add($user_id, $cost, 'exchange_refund', [], __('兑换失败退回积分', 'aksrt'));
return $add;
}
return rest_ensure_response([
'success' => true,
'data' => [
'message' => sprintf(__('兑换成功:+%d 元', 'aksrt'), $yuan),
'wallet_balance' => AKSRT_Balance::balance($user_id),
'credit_balance' => AKSRT_Credits::balance($user_id),
'reload' => true,
],
]);
}
/**
* When a recharge order is paid, credit the wallet.
*
* @param string $order_number Order number.
* @param array<string,mixed> $order Order row.
*/
public function on_order_paid(string $order_number, array $order = []): void {
if ($order === [] && class_exists('AKSRT_Order_Repository')) {
$order = AKSRT_Order_Repository::get_instance()->get($order_number) ?: [];
}
if (!$order) {
return;
}
$type = sanitize_key((string) ($order['product_type'] ?? ''));
$user_id = (int) ($order['user_id'] ?? 0);
if ($user_id <= 0) {
return;
}
// Points purchase fulfill (zibll order_type=9).
if ($type === AKSRT_Domain_Model::ORDER_PRODUCT_POINTS_BUY) {
if (!class_exists('AKSRT_Credits')) {
return;
}
$note = json_decode((string) ($order['note'] ?? ''), true);
if (!is_array($note)) {
$note = [];
}
if (!empty($note['points_credited'])) {
return;
}
$rate = 100;
if (class_exists('AKSRT_Settings')) {
$rate = max(1, (int) (AKSRT_Settings::get_all()['points_rate'] ?? 100));
}
$points = isset($note['points_amount'])
? (int) $note['points_amount']
: (int) round((float) ($order['amount'] ?? 0) * $rate);
if ($points <= 0) {
return;
}
$add = AKSRT_Credits::add(
$user_id,
$points,
'points_buy',
['type' => 'order', 'order' => $order_number],
sprintf(__('购买积分订单 %s', 'aksrt'), $order_number)
);
if (is_wp_error($add)) {
return;
}
$note['points_credited'] = 1;
$note['credited_points'] = $points;
global $wpdb;
$wpdb->update(
$wpdb->prefix . 'aksrt_order',
['note' => wp_json_encode($note, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES)],
['order_number' => $order_number],
['%s'],
['%s']
);
return;
}
if ($type !== AKSRT_Domain_Model::ORDER_PRODUCT_RECHARGE) {
return;
}
if (!class_exists('AKSRT_Balance')) {
return;
}
$note = json_decode((string) ($order['note'] ?? ''), true);
if (!is_array($note)) {
$note = [];
}
if (!empty($note['balance_credited'])) {
return;
}
$credit_amount = isset($note['credit_amount'])
? round((float) $note['credit_amount'], 2)
: round((float) ($order['amount'] ?? 0), 2);
if ($credit_amount <= 0) {
return;
}
$result = AKSRT_Balance::add(
$user_id,
$credit_amount,
'recharge',
['type' => 'order', 'order' => $order_number],
sprintf(__('余额充值订单 %s', 'aksrt'), $order_number)
);
if (is_wp_error($result)) {
return;
}
$note['balance_credited'] = 1;
$note['credited_amount'] = $credit_amount;
global $wpdb;
$wpdb->update(
$wpdb->prefix . 'aksrt_order',
['note' => wp_json_encode($note, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES)],
['order_number' => $order_number],
['%s'],
['%s']
);
}
/**
* @return array<string,mixed>
*/
public function get_charge_view(int $user_id): array {
$cfg = class_exists('AKSRT_Settings') ? AKSRT_Settings::get_payment_recharge_settings() : [];
$packages = $this->parse_packages((string) ($cfg['packages_raw'] ?? ''));
$custom_s = !isset($cfg['product']['custom_s']) || !empty($cfg['product']['custom_s']);
$custom_limit = max(1, (int) ($cfg['product']['custom_limit'] ?? 9999));
$methods = [];
if (function_exists('aksrt_list_cash_payment_methods')) {
// Exclude balance gateway for recharge (cannot pay wallet with wallet).
foreach (aksrt_list_cash_payment_methods(true) as $m) {
$id = is_array($m) ? (string) ($m['id'] ?? '') : (string) $m;
if ($id === '' || $id === 'balance') {
continue;
}
$methods[] = is_array($m) ? $m : ['id' => $id, 'name' => $id];
}
}
return [
'enabled' => !empty($cfg['enabled']),
'desc' => (string) ($cfg['desc'] ?? ''),
'wallet' => class_exists('AKSRT_Balance') ? AKSRT_Balance::balance($user_id) : 0.0,
'packages' => $packages,
'custom_s' => $custom_s,
'custom_limit' => $custom_limit,
'currency_mark' => (string) ($cfg['product']['tag'] ?? '元'),
'payment_methods' => $methods,
'transfer' => [
'enabled' => !empty($cfg['transfer']['enabled']),
'service_charge' => (int) ($cfg['transfer']['service_charge'] ?? 0),
'desc' => (string) ($cfg['transfer']['desc'] ?? ''),
],
'exchange' => [
'enabled' => !empty($cfg['exchange']['enabled']),
'rate' => (int) ($cfg['exchange']['rate'] ?? 100),
'desc' => (string) ($cfg['exchange']['desc'] ?? ''),
],
'pass_charge' => is_array($cfg['pass_charge'] ?? null) ? $cfg['pass_charge'] : [],
];
}
/**
* @return array<int,array{key:string,price:float,pay_price:float,title:string,tag:string}>
*/
public function parse_packages(string $raw): array {
$out = [];
$lines = preg_split('/\r\n|\r|\n/', $raw) ?: [];
$i = 0;
foreach ($lines as $line) {
$line = trim((string) $line);
if ($line === '') {
continue;
}
// pay|credit|title OR credit|pay|title — Zibll uses price(credit)|pay_price|tag
// Admin help: 支付金额|到账金额|标题
$parts = array_map('trim', explode('|', $line));
if (count($parts) < 2) {
continue;
}
$pay = (float) $parts[0];
$credit = (float) $parts[1];
$title = $parts[2] ?? '';
if ($pay <= 0 || $credit <= 0) {
continue;
}
$out[] = [
'key' => (string) $i,
'pay_price' => round($pay, 2),
'price' => round($credit, 2),
'title' => $title !== '' ? $title : sprintf(__('充值 %s 元', 'aksrt'), (string) $credit),
'tag' => $title,
];
$i++;
}
return $out;
}
/**
* @return array<string,mixed>|WP_Error
*/
public function create_charge_order(int $user_id, string $package_key, float $custom_price, string $payment_method) {
if ($user_id <= 0) {
return new WP_Error('aksrt_need_login', __('请先登录', 'aksrt'), ['status' => 401]);
}
if (!class_exists('AKSRT_Order_Repository') || !class_exists('AKSRT_Order')) {
return new WP_Error('aksrt_pay_unavailable', __('订单系统不可用', 'aksrt'), ['status' => 500]);
}
$view = $this->get_charge_view($user_id);
$credit_amount = 0.0;
$pay_amount = 0.0;
$title = __('余额充值', 'aksrt');
if ($package_key === 'custom' || $package_key === '') {
if (empty($view['custom_s'])) {
return new WP_Error('aksrt_custom_closed', __('未开放自定义金额', 'aksrt'), ['status' => 400]);
}
$custom_price = round($custom_price, 2);
$min = 1.0;
$max = (float) $view['custom_limit'];
if ($custom_price < $min || $custom_price > $max) {
return new WP_Error('aksrt_custom_limit', sprintf(__('充值金额需在 %s ~ %s 之间', 'aksrt'), (string) $min, (string) $max), ['status' => 400]);
}
$pay_amount = $custom_price;
$credit_amount = $custom_price;
$title = sprintf(__('自定义充值 %s 元', 'aksrt'), (string) $custom_price);
$package_key = 'custom';
} else {
$found = null;
foreach ((array) $view['packages'] as $pkg) {
if ((string) ($pkg['key'] ?? '') === (string) $package_key) {
$found = $pkg;
break;
}
}
if (!$found) {
return new WP_Error('aksrt_invalid_package', __('充值套餐无效', 'aksrt'), ['status' => 400]);
}
$pay_amount = (float) $found['pay_price'];
$credit_amount = (float) $found['price'];
$title = (string) $found['title'];
}
if ($pay_amount <= 0 || $credit_amount <= 0) {
return new WP_Error('aksrt_invalid_price', __('金额无效', 'aksrt'), ['status' => 400]);
}
$payment_method = sanitize_key($payment_method);
if ($payment_method === '' || $payment_method === 'balance') {
// Prefer first non-balance method.
$methods = $view['payment_methods'] ?? [];
$payment_method = !empty($methods[0]['id']) ? (string) $methods[0]['id'] : 'alipay';
}
$note = wp_json_encode([
'balance_recharge' => 1,
'package' => $package_key,
'credit_amount' => $credit_amount,
'pay_amount' => $pay_amount,
'title' => $title,
], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
$order_number = AKSRT_Order_Repository::get_instance()->create([
'user_id' => $user_id,
'product_type' => AKSRT_Domain_Model::ORDER_PRODUCT_RECHARGE,
'product_id' => 0,
'amount' => $pay_amount,
'currency' => 'CNY',
'status' => AKSRT_Order::STATUS_PENDING,
'payment_method' => $payment_method,
'note' => is_string($note) ? $note : '',
'expires_at' => gmdate('Y-m-d H:i:s', time() + 30 * MINUTE_IN_SECONDS),
]);
if ($order_number === '') {
return new WP_Error('aksrt_order_create_failed', __('创建订单失败', 'aksrt'), ['status' => 500]);
}
$order = AKSRT_Order_Repository::get_instance()->get($order_number);
if (!$order) {
return new WP_Error('aksrt_order_create_failed', __('创建订单失败', 'aksrt'), ['status' => 500]);
}
$order['subject'] = $title;
$order['payment_method'] = $payment_method;
if (!class_exists('AKSRT_Payment_Gateway')) {
return new WP_Error('aksrt_pay_unavailable', __('支付网关不可用', 'aksrt'), ['status' => 500]);
}
$gateway = AKSRT_Payment_Gateway::get_instance()->get_gateway($payment_method);
if (!$gateway) {
return new WP_Error('aksrt_gateway_unavailable', __('当前支付方式不可用', 'aksrt'), [
'status' => 400,
'order_number' => $order_number,
]);
}
if (method_exists($gateway, 'is_configured') && !$gateway->is_configured()) {
return new WP_Error('aksrt_gateway_unconfigured', __('该支付方式尚未配置,请联系站长。', 'aksrt'), [
'status' => 400,
'order_number' => $order_number,
]);
}
$payment_result = $gateway->create_payment($order);
if (empty($payment_result['success'])) {
return new WP_Error(
'aksrt_pay_failed',
(string) ($payment_result['message'] ?? __('支付失败', 'aksrt')),
['status' => 402, 'order_number' => $order_number]
);
}
$code_url = (string) ($payment_result['payment_data']['code_url'] ?? '');
$payment_url = (string) ($payment_result['payment_url'] ?? '');
if ($payment_url !== '' || $code_url !== '') {
return [
'redirect' => true,
'payment_url' => $payment_url,
'qr_content' => $code_url,
'order_number' => $order_number,
'amount' => $pay_amount,
'credit_amount' => $credit_amount,
'message' => $payment_result['message'] ?? __('请在新页面完成支付。', 'aksrt'),
'reload' => false,
'poll' => true,
];
}
// Synchronous gateway (rare for recharge): mark paid → on_order_paid credits wallet.
$paid = AKSRT_Order::get_instance()->update_status($order_number, AKSRT_Order::STATUS_PAID, [
'payment_method' => $payment_method,
'payment_transaction_id' => sanitize_text_field((string) ($payment_result['transaction_id'] ?? '')),
'note' => __('余额充值支付完成', 'aksrt'),
]);
if (!$paid) {
return new WP_Error('aksrt_order_confirm_failed', __('支付确认失败', 'aksrt'), ['status' => 500]);
}
// Ensure credit even if status hook shape differs.
$this->on_order_paid($order_number, AKSRT_Order_Repository::get_instance()->get($order_number) ?: $order);
return [
'redirect' => false,
'order_number' => $order_number,
'amount' => $pay_amount,
'credit_amount' => $credit_amount,
'wallet' => AKSRT_Balance::balance($user_id),
'message' => __('充值成功', 'aksrt'),
'reload' => true,
];
}
public function rest_points_buy_options(WP_REST_Request $request) {
if (!$this->points_buy_enabled()) {
return new WP_Error('aksrt_points_buy_disabled', __('购买积分未开启', 'aksrt'), ['status' => 403]);
}
return rest_ensure_response([
'success' => true,
'data' => $this->get_points_buy_view(get_current_user_id()),
]);
}
public function rest_points_buy_create(WP_REST_Request $request) {
if (!$this->points_buy_enabled()) {
return new WP_Error('aksrt_points_buy_disabled', __('购买积分未开启', 'aksrt'), ['status' => 403]);
}
$params = $request->get_json_params();
if (!is_array($params)) {
$params = $request->get_params();
}
$package_key = sanitize_text_field((string) ($params['package'] ?? 'custom'));
$custom_points = (int) ($params['custom_points'] ?? $params['points'] ?? 0);
$payment_method = sanitize_key((string) ($params['payment_method'] ?? 'alipay'));
$result = $this->create_points_buy_order(get_current_user_id(), $package_key, $custom_points, $payment_method);
if (is_wp_error($result)) {
return $result;
}
return rest_ensure_response(['success' => true, 'data' => $result]);
}
public function rest_balance_withdraw(WP_REST_Request $request) {
if (!class_exists('AKSRT_Balance') || !AKSRT_Balance::enabled()) {
return new WP_Error('aksrt_balance_disabled', __('余额功能未启用', 'aksrt'), ['status' => 403]);
}
$settings = class_exists('AKSRT_Settings') ? AKSRT_Settings::get_all() : [];
if (empty($settings['pay_balance_withdraw_s'])) {
return new WP_Error('aksrt_withdraw_closed', __('余额提现未开启', 'aksrt'), ['status' => 403]);
}
if (!class_exists('AKSRT_Withdrawal')) {
return new WP_Error('aksrt_withdraw_unavailable', __('提现系统不可用', 'aksrt'), ['status' => 500]);
}
$params = $request->get_json_params();
if (!is_array($params)) {
$params = $request->get_params();
}
$user_id = get_current_user_id();
if (class_exists('AKSRT_Settings_Capabilities') && !AKSRT_Settings_Capabilities::user_can('balance_withdraw', $user_id)) {
return new WP_Error('aksrt_withdraw_forbidden', __('当前账号无权提现', 'aksrt'), ['status' => 403]);
}
$amount = round((float) ($params['amount'] ?? 0), 2);
$method = sanitize_key((string) ($params['method'] ?? 'alipay'));
$account = sanitize_textarea_field((string) ($params['account_info'] ?? $params['account'] ?? ''));
$lowest = max(1, (float) ($settings['pay_balance_withdraw_lowest_money'] ?? $settings['pay_rebate_withdraw_lowest_money'] ?? 50));
if ($amount < $lowest) {
return new WP_Error('aksrt_withdraw_min', sprintf(__('最低提现 %s 元', 'aksrt'), (string) $lowest), ['status' => 400]);
}
if ($account === '') {
return new WP_Error('aksrt_withdraw_account', __('请填写收款账号信息', 'aksrt'), ['status' => 400]);
}
// One open balance withdrawal at a time (Zibll parity).
if (AKSRT_Withdrawal::get_instance()->has_open_withdrawal($user_id)) {
return new WP_Error('aksrt_withdraw_pending', __('您有处理中的提现申请,请等待完成后再申请', 'aksrt'), ['status' => 409]);
}
$wallet = AKSRT_Balance::balance($user_id);
if ($wallet < $amount) {
return new WP_Error('aksrt_balance_insufficient', __('余额不足', 'aksrt'), ['status' => 402]);
}
$deduct = AKSRT_Balance::deduct($user_id, $amount, 'withdraw_hold', ['type' => 'withdraw'], __('余额提现申请冻结', 'aksrt'));
if (is_wp_error($deduct)) {
return $deduct;
}
$fee_rate = max(0, min(50, (int) ($settings['withdraw_service_charge'] ?? 0)));
$net = $fee_rate > 0 ? round($amount * (100 - $fee_rate) / 100, 2) : $amount;
$account_payload = wp_json_encode([
'account' => $account,
'gross_amount' => $amount,
'fee_rate' => $fee_rate,
'source' => 'balance',
], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES) ?: $account;
$wid = AKSRT_Withdrawal::get_instance()->create($user_id, $net, $method !== '' ? $method : 'alipay', $account_payload);
if ($wid <= 0) {
AKSRT_Balance::add($user_id, $amount, 'withdraw_refund', [], __('提现申请失败退回', 'aksrt'));
return new WP_Error('aksrt_withdraw_failed', __('提现申请失败', 'aksrt'), ['status' => 500]);
}
return rest_ensure_response([
'success' => true,
'data' => [
'message' => __('提现申请已提交,请等待处理', 'aksrt'),
'withdrawal_id' => $wid,
'amount' => $amount,
'net_amount' => $net,
'wallet_balance' => AKSRT_Balance::balance($user_id),
'reload' => true,
],
]);
}
public function points_buy_enabled(): bool {
if (!class_exists('AKSRT_Settings') || !AKSRT_Settings::credits_enabled()) {
return false;
}
$all = AKSRT_Settings::get_all();
return !empty($all['points_pay_s']);
}
/**
* @return array<string,mixed>
*/
public function get_points_buy_view(int $user_id): array {
$all = class_exists('AKSRT_Settings') ? AKSRT_Settings::get_all() : [];
$rate = max(1, (int) ($all['points_rate'] ?? 100));
$packages_raw = (string) ($all['pay_points_product'] ?? '');
$packages = $this->parse_points_packages($packages_raw);
$custom_s = !isset($all['pay_points_product_custom_s']) || !empty($all['pay_points_product_custom_s']);
$custom_limit = max(1, (int) ($all['pay_points_product_custom_limit'] ?? 99999));
$methods = [];
if (function_exists('aksrt_list_cash_payment_methods')) {
foreach (aksrt_list_cash_payment_methods(true) as $m) {
$id = is_array($m) ? (string) ($m['id'] ?? '') : (string) $m;
if ($id === '') {
continue;
}
if ($id === 'balance' && !(class_exists('AKSRT_Balance') && AKSRT_Balance::enabled())) {
continue;
}
$methods[] = is_array($m) ? $m : ['id' => $id, 'name' => $id];
}
}
if (class_exists('AKSRT_Balance') && AKSRT_Balance::enabled()) {
$has_bal = false;
foreach ($methods as $m) {
if (($m['id'] ?? '') === 'balance') {
$has_bal = true;
break;
}
}
if (!$has_bal) {
array_unshift($methods, ['id' => 'balance', 'name' => __('站内余额', 'aksrt')]);
}
}
return [
'enabled' => $this->points_buy_enabled(),
'desc' => (string) ($all['pay_points_desc'] ?? ''),
'rate' => $rate,
'points' => class_exists('AKSRT_Credits') ? AKSRT_Credits::balance($user_id) : 0,
'packages' => $packages,
'custom_s' => $custom_s,
'custom_limit' => $custom_limit,
'payment_methods' => $methods,
];
}
/**
* @return array<int,array{key:string,points:int,pay_price:float,title:string}>
*/
public function parse_points_packages(string $raw): array {
$out = [];
$lines = preg_split('/\r\n|\r|\n/', $raw) ?: [];
$i = 0;
foreach ($lines as $line) {
$line = trim((string) $line);
if ($line === '') {
continue;
}
// 支付金额|积分数量|标题
$parts = array_map('trim', explode('|', $line));
if (count($parts) < 2) {
continue;
}
$pay = (float) $parts[0];
$points = (int) $parts[1];
$title = $parts[2] ?? '';
if ($pay <= 0 || $points <= 0) {
continue;
}
$out[] = [
'key' => (string) $i,
'pay_price' => round($pay, 2),
'points' => $points,
'title' => $title !== '' ? $title : sprintf(__('%d 积分', 'aksrt'), $points),
];
$i++;
}
return $out;
}
/**
* @return array<string,mixed>|WP_Error
*/
public function create_points_buy_order(int $user_id, string $package_key, int $custom_points, string $payment_method) {
if ($user_id <= 0) {
return new WP_Error('aksrt_need_login', __('请先登录', 'aksrt'), ['status' => 401]);
}
if (!class_exists('AKSRT_Order_Repository') || !class_exists('AKSRT_Order')) {
return new WP_Error('aksrt_pay_unavailable', __('订单系统不可用', 'aksrt'), ['status' => 500]);
}
$view = $this->get_points_buy_view($user_id);
$rate = max(1, (int) ($view['rate'] ?? 100));
$points_amount = 0;
$pay_amount = 0.0;
$title = __('购买积分', 'aksrt');
if ($package_key === 'custom' || $package_key === '') {
if (empty($view['custom_s'])) {
return new WP_Error('aksrt_custom_closed', __('未开放自定义数量', 'aksrt'), ['status' => 400]);
}
$custom_points = max(0, $custom_points);
$max = (int) ($view['custom_limit'] ?? 99999);
if ($custom_points < $rate || $custom_points > $max) {
return new WP_Error('aksrt_custom_limit', sprintf(__('购买积分需在 %d ~ %d 之间', 'aksrt'), $rate, $max), ['status' => 400]);
}
$points_amount = $custom_points;
$pay_amount = round($custom_points / $rate, 2);
if ($pay_amount <= 0) {
$pay_amount = 0.01;
}
$title = sprintf(__('购买 %d 积分', 'aksrt'), $points_amount);
$package_key = 'custom';
} else {
$found = null;
foreach ((array) $view['packages'] as $pkg) {
if ((string) ($pkg['key'] ?? '') === (string) $package_key) {
$found = $pkg;
break;
}
}
if (!$found) {
return new WP_Error('aksrt_invalid_package', __('积分套餐无效', 'aksrt'), ['status' => 400]);
}
$points_amount = (int) $found['points'];
$pay_amount = (float) $found['pay_price'];
$title = (string) $found['title'];
}
if ($points_amount <= 0 || $pay_amount <= 0) {
return new WP_Error('aksrt_invalid_price', __('金额无效', 'aksrt'), ['status' => 400]);
}
$payment_method = sanitize_key($payment_method);
if ($payment_method === '') {
$methods = $view['payment_methods'] ?? [];
$payment_method = !empty($methods[0]['id']) ? (string) $methods[0]['id'] : 'alipay';
}
$note = wp_json_encode([
'points_buy' => 1,
'package' => $package_key,
'points_amount' => $points_amount,
'pay_amount' => $pay_amount,
'title' => $title,
], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
$order_number = AKSRT_Order_Repository::get_instance()->create([
'user_id' => $user_id,
'product_type' => AKSRT_Domain_Model::ORDER_PRODUCT_POINTS_BUY,
'product_id' => 0,
'amount' => $pay_amount,
'currency' => 'CNY',
'status' => AKSRT_Order::STATUS_PENDING,
'payment_method' => $payment_method,
'note' => is_string($note) ? $note : '',
'expires_at' => gmdate('Y-m-d H:i:s', time() + 30 * MINUTE_IN_SECONDS),
]);
if ($order_number === '') {
return new WP_Error('aksrt_order_create_failed', __('创建订单失败', 'aksrt'), ['status' => 500]);
}
$order = AKSRT_Order_Repository::get_instance()->get($order_number);
if (!$order) {
return new WP_Error('aksrt_order_create_failed', __('创建订单失败', 'aksrt'), ['status' => 500]);
}
$order['subject'] = $title;
$order['payment_method'] = $payment_method;
if (!class_exists('AKSRT_Payment_Gateway')) {
return new WP_Error('aksrt_pay_unavailable', __('支付网关不可用', 'aksrt'), ['status' => 500]);
}
$gateway = AKSRT_Payment_Gateway::get_instance()->get_gateway($payment_method);
if (!$gateway) {
return new WP_Error('aksrt_gateway_unavailable', __('当前支付方式不可用', 'aksrt'), ['status' => 400, 'order_number' => $order_number]);
}
if (method_exists($gateway, 'is_configured') && !$gateway->is_configured()) {
return new WP_Error('aksrt_gateway_unconfigured', __('该支付方式尚未配置,请联系站长。', 'aksrt'), ['status' => 400, 'order_number' => $order_number]);
}
$payment_result = $gateway->create_payment($order);
if (empty($payment_result['success'])) {
return new WP_Error('aksrt_pay_failed', (string) ($payment_result['message'] ?? __('支付失败', 'aksrt')), ['status' => 402, 'order_number' => $order_number]);
}
$code_url = (string) ($payment_result['payment_data']['code_url'] ?? '');
$payment_url = (string) ($payment_result['payment_url'] ?? '');
if ($payment_url !== '' || $code_url !== '') {
return [
'redirect' => true,
'payment_url' => $payment_url,
'qr_content' => $code_url,
'order_number' => $order_number,
'amount' => $pay_amount,
'points_amount' => $points_amount,
'message' => $payment_result['message'] ?? __('请在新页面完成支付。', 'aksrt'),
'reload' => false,
'poll' => true,
];
}
$paid = AKSRT_Order::get_instance()->update_status($order_number, AKSRT_Order::STATUS_PAID, [
'payment_method' => $payment_method,
'payment_transaction_id' => sanitize_text_field((string) ($payment_result['transaction_id'] ?? '')),
'note' => __('购买积分支付完成', 'aksrt'),
]);
if (!$paid) {
return new WP_Error('aksrt_order_confirm_failed', __('支付确认失败', 'aksrt'), ['status' => 500]);
}
$this->on_order_paid($order_number, AKSRT_Order_Repository::get_instance()->get($order_number) ?: $order);
return [
'redirect' => false,
'order_number' => $order_number,
'amount' => $pay_amount,
'points_amount' => $points_amount,
'points' => AKSRT_Credits::balance($user_id),
'message' => __('购买成功', 'aksrt'),
'reload' => true,
];
}
}