| | |
|---|
| | | import java.nio.charset.StandardCharsets; |
|---|
| | | import java.security.MessageDigest; |
|---|
| | | import java.time.LocalDateTime; |
|---|
| | | import java.util.ArrayList; |
|---|
| | | import java.util.LinkedHashMap; |
|---|
| | | import java.util.List; |
|---|
| | | import java.util.Map; |
|---|
| | |
|---|
| | | import com.talentcard.server.common.SensitiveDataCrypto; |
|---|
| | | import com.talentcard.server.common.BusinessException; |
|---|
| | | import com.talentcard.server.common.ErrorCode; |
|---|
| | | import lombok.extern.slf4j.Slf4j; |
|---|
| | | import org.springframework.jdbc.core.JdbcTemplate; |
|---|
| | | import org.springframework.stereotype.Service; |
|---|
| | | import org.springframework.transaction.annotation.Transactional; |
|---|
| | | |
|---|
| | | @Slf4j |
|---|
| | | @Service |
|---|
| | | public class MerchantSettlementService { |
|---|
| | | private final JdbcTemplate jdbc; |
|---|
| | |
|---|
| | | if (enterprise && (request.subjectIdNumber() == null || !request.subjectIdNumber().trim().matches("(?:\\d{15}|\\d{17}[0-9X])"))) throw new BusinessException(ErrorCode.BAD_REQUEST, "请输入法人正确的身份证号"); |
|---|
| | | if (enterprise && (request.subjectCertificateBeginDate() == null || request.subjectCertificateBeginDate().isBlank())) throw new BusinessException(ErrorCode.BAD_REQUEST, "请输入营业执照成立日期"); |
|---|
| | | if (!enterprise && (request.subjectIdNumber() == null || !request.subjectIdNumber().trim().matches("(?:\\d{15}|\\d{17}[0-9X])"))) throw new BusinessException(ErrorCode.BAD_REQUEST, "请输入正确的身份证号"); |
|---|
| | | requireCertificatePeriod(request.subjectCertificateValidityType(), request.subjectCertificateBeginDate(), request.subjectCertificateEndDate(), "Identity document"); |
|---|
| | | if (enterprise) { |
|---|
| | | requireCertificatePeriod(request.licenseValidityType(), request.licenseBeginDate(), request.licenseEndDate(), "Business licence"); |
|---|
| | | if (blank(request.registeredProvinceCode()) || blank(request.registeredCityCode()) || blank(request.registeredDistrictCode())) throw new BusinessException(ErrorCode.BAD_REQUEST, "Enterprise registration address codes are required"); |
|---|
| | | } |
|---|
| | | String no = BusinessIdGenerator.next("MO"); |
|---|
| | | String certificateValidityType = certificateValidityType(request.subjectCertificateValidityType()); |
|---|
| | | String certificateBeginDate = certificateBeginDate(request.subjectCertificateBeginDate()); |
|---|
| | | jdbc.update("insert into merchant_onboarding_application(merchant_id, store_id, application_no, subject_type, subject_name, credit_code, subject_id_no_masked, subject_id_no_encrypted, subject_cert_validity_type, subject_cert_begin_date, registered_region, registered_address, contact_name, contact_mobile, idempotency_key) values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)", principal.merchantId(), principal.storeId(), no, request.subjectType(), request.subjectName().trim(), clean(request.creditCode()), maskId(request.subjectIdNumber()), sensitiveDataCrypto.encrypt(clean(request.subjectIdNumber()).toUpperCase()), certificateValidityType, certificateBeginDate, clean(request.registeredRegion()), clean(request.registeredAddress()), request.contactName().trim(), request.contactMobile().trim(), key.trim()); |
|---|
| | | jdbc.update("insert into merchant_onboarding_application(merchant_id, store_id, application_no, subject_type, subject_name, credit_code, license_validity_type, license_begin_date, license_end_date, subject_id_no_masked, subject_id_no_encrypted, subject_cert_validity_type, subject_cert_begin_date, subject_cert_end_date, registered_region, registered_province_code, registered_city_code, registered_district_code, registered_address, contact_name, contact_mobile, idempotency_key) values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)", principal.merchantId(), principal.storeId(), no, request.subjectType(), request.subjectName().trim(), clean(request.creditCode()), certificateValidityType(request.licenseValidityType()), certificateBeginDate(request.licenseBeginDate()), certificateEndDate(request.licenseEndDate()), maskId(request.subjectIdNumber()), sensitiveDataCrypto.encrypt(clean(request.subjectIdNumber()).toUpperCase()), certificateValidityType, certificateBeginDate, certificateEndDate(request.subjectCertificateEndDate()), clean(request.registeredRegion()), clean(request.registeredProvinceCode()), clean(request.registeredCityCode()), clean(request.registeredDistrictCode()), clean(request.registeredAddress()), request.contactName().trim(), request.contactMobile().trim(), key.trim()); |
|---|
| | | if ("individual".equals(request.subjectType())) submitIndividualOnboarding(no, request); |
|---|
| | | else submitEnterpriseOnboarding(no, request); |
|---|
| | | return onboarding(rows("select * from merchant_onboarding_application where application_no = ?", no).get(0)); |
|---|
| | |
|---|
| | | try { |
|---|
| | | HuifuEnterpriseOnboardingGateway.Result result = enterpriseOnboardingGateway.create(new HuifuEnterpriseOnboardingCommand( |
|---|
| | | applicationNo, request.subjectName().trim(), request.creditCode().trim(), |
|---|
| | | certificateValidityType(request.subjectCertificateValidityType()), certificateBeginDate(request.subjectCertificateBeginDate()), |
|---|
| | | clean(request.registeredRegion()), clean(request.registeredAddress()), request.contactName().trim(), |
|---|
| | | certificateValidityType(request.licenseValidityType()), certificateBeginDate(request.licenseBeginDate()), certificateEndDate(request.licenseEndDate()), |
|---|
| | | clean(request.registeredProvinceCode()), clean(request.registeredCityCode()), clean(request.registeredDistrictCode()), clean(request.registeredAddress()), request.subjectName().trim(), |
|---|
| | | clean(request.subjectIdNumber()).toUpperCase(), certificateValidityType(request.subjectCertificateValidityType()), |
|---|
| | | certificateBeginDate(request.subjectCertificateBeginDate()), request.contactName().trim(), request.contactMobile().trim())); |
|---|
| | | certificateBeginDate(request.subjectCertificateBeginDate()), certificateEndDate(request.subjectCertificateEndDate()), request.contactName().trim(), request.contactMobile().trim())); |
|---|
| | | if (result.accepted() && !result.huifuId().isBlank()) jdbc.update("update merchant_onboarding_application set status='approved', provider_huifu_id=?, reviewed_at=now(), reject_reason=null where application_no=? and status='pending'", result.huifuId(), applicationNo); |
|---|
| | | else if (!result.accepted()) jdbc.update("update merchant_onboarding_application set status='rejected', reject_reason=?, reviewed_at=now() where application_no=? and status='pending'", providerReason(result.code(), result.message()), applicationNo); |
|---|
| | | else jdbc.update("update merchant_onboarding_application set reject_reason=? where application_no=? and status='pending'", "Huifu accepted the request but did not return huifu_id", applicationNo); |
|---|
| | |
|---|
| | | |
|---|
| | | private void submitIndividualOnboarding(String applicationNo, MerchantOnboardingRequest request) { |
|---|
| | | try { |
|---|
| | | HuifuIndividualOnboardingGateway.Result result = individualOnboardingGateway.create(new HuifuIndividualOnboardingCommand(applicationNo, request.subjectName().trim(), request.subjectIdNumber().trim().toUpperCase(), certificateValidityType(request.subjectCertificateValidityType()), certificateBeginDate(request.subjectCertificateBeginDate()), request.contactMobile().trim(), clean(request.registeredAddress()))); |
|---|
| | | log.error("Huifu Individual onboarding request: {},{}", request,applicationNo); |
|---|
| | | HuifuIndividualOnboardingGateway.Result result = individualOnboardingGateway.create(new HuifuIndividualOnboardingCommand(applicationNo, request.subjectName().trim(), request.subjectIdNumber().trim().toUpperCase(), certificateValidityType(request.subjectCertificateValidityType()), certificateBeginDate(request.subjectCertificateBeginDate()), certificateEndDate(request.subjectCertificateEndDate()), request.contactMobile().trim(), clean(request.registeredAddress()))); |
|---|
| | | log.error("Huifu Individual onboarding result: {}", result); |
|---|
| | | if (result.accepted() && !result.huifuId().isBlank()) jdbc.update("update merchant_onboarding_application set status='approved', provider_huifu_id=?, reviewed_at=now(), reject_reason=null where application_no=? and status='pending'", result.huifuId(), applicationNo); |
|---|
| | | else if (!result.accepted()) jdbc.update("update merchant_onboarding_application set status='rejected', reject_reason=?, reviewed_at=now() where application_no=? and status='pending'", providerReason(result), applicationNo); |
|---|
| | | else jdbc.update("update merchant_onboarding_application set reject_reason=? where application_no=? and status='pending'", "Huifu accepted the request but did not return huifu_id", applicationNo); |
|---|
| | |
|---|
| | | String number = request.cardNumber().trim(); String hash = sha256(number); |
|---|
| | | List<Map<String, Object>> same = rows("select * from merchant_bank_card where merchant_id = ? and card_hash = ? limit 1", principal.merchantId(), hash); |
|---|
| | | if (!same.isEmpty()) return bankCard(same.get(0)); |
|---|
| | | jdbc.update("insert into merchant_bank_card(merchant_id, store_id, bank_name, branch_name, city_code, card_tail, card_masked, card_hash, idempotency_key) values (?, ?, ?, ?, ?, ?, ?, ?, ?)", principal.merchantId(), principal.storeId(), request.bankName().trim(), request.branchName().trim(), request.cityCode().trim(), number.substring(number.length() - 4), "**** **** **** " + number.substring(number.length() - 4), hash, key.trim()); |
|---|
| | | List<Map<String, Object>> branchRecords = rows("select clearing_code, branch_name, bank_name from bank_branch_directory where clearing_code = ? limit 1", request.branchCode().trim()); |
|---|
| | | if (branchRecords.isEmpty()) throw new BusinessException(ErrorCode.BAD_REQUEST, "请选择真实开户行"); |
|---|
| | | Map<String, Object> branch = branchRecords.get(0); |
|---|
| | | jdbc.update("insert into merchant_bank_card(merchant_id, store_id, bank_name, branch_name, branch_code, city_code, card_tail, card_masked, card_hash, idempotency_key) values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)", principal.merchantId(), principal.storeId(), clean(branch.get("bankName")), clean(branch.get("branchName")), clean(branch.get("clearingCode")), request.cityCode().trim(), number.substring(number.length() - 4), "**** **** **** " + number.substring(number.length() - 4), hash, key.trim()); |
|---|
| | | return bankCard(rows("select * from merchant_bank_card where merchant_id = ? and card_hash = ?", principal.merchantId(), hash).get(0)); |
|---|
| | | } |
|---|
| | | |
|---|
| | | @Transactional(readOnly = true) |
|---|
| | | public PageResult<Map<String, Object>> bankBranches(String cityCode, String keyword, int page, int size) { |
|---|
| | | public PageResult<Map<String, Object>> bankBranches(String cityCode, String cityName, String keyword, int page, int size) { |
|---|
| | | if (jdbc != null) return bankBranchesFromDirectory(cityCode, cityName, keyword, page, size); |
|---|
| | | // The payment provider's bank directory should replace this curated fallback during Huifu onboarding. |
|---|
| | | List<Map<String, Object>> all = List.of( |
|---|
| | | branch("CCB510400", "中国建设银行攀枝花东区支行营业部", "中国建设银行"), branch("CCB510401", "中国建设银行攀枝花分行营业部", "中国建设银行"), |
|---|
| | |
|---|
| | | List<Map<String, Object>> matched = all.stream().filter(value -> query.isEmpty() || (value.get("branchName") + "" + value.get("bankName")).toLowerCase().contains(query)).toList(); |
|---|
| | | int start = Math.min((safePage - 1) * safeSize, matched.size()); int end = Math.min(start + safeSize, matched.size()); |
|---|
| | | return new PageResult<>(matched.subList(start, end), safePage, safeSize, matched.size()); |
|---|
| | | } |
|---|
| | | |
|---|
| | | private PageResult<Map<String, Object>> bankBranchesFromDirectory(String cityCode, String cityName, String keyword, int page, int size) { |
|---|
| | | int safePage = Math.max(page, 1); |
|---|
| | | int safeSize = Math.min(Math.max(size, 1), 50); |
|---|
| | | StringBuilder where = new StringBuilder(" where 1=1"); |
|---|
| | | List<Object> params = new ArrayList<>(); |
|---|
| | | String cityFilter = blank(cityName) ? clean(cityCode) : clean(cityName); |
|---|
| | | int citySeparator = cityFilter.lastIndexOf(' '); |
|---|
| | | if (citySeparator >= 0 && citySeparator + 1 < cityFilter.length()) cityFilter = cityFilter.substring(citySeparator + 1).trim(); |
|---|
| | | cityFilter = cityKeyword(cityFilter); |
|---|
| | | if (!blank(cityFilter)) { |
|---|
| | | where.append(" and (branch_name like ? or bank_name like ?)"); |
|---|
| | | String match = "%" + cityFilter + "%"; |
|---|
| | | params.add(match); |
|---|
| | | params.add(match); |
|---|
| | | } |
|---|
| | | if (!blank(keyword)) { |
|---|
| | | where.append(" and (branch_name like ? or bank_name like ? or clearing_code = ?)"); |
|---|
| | | String match = "%" + clean(keyword) + "%"; |
|---|
| | | params.add(match); |
|---|
| | | params.add(match); |
|---|
| | | params.add(clean(keyword)); |
|---|
| | | } |
|---|
| | | Long total = jdbc.queryForObject("select count(*) from bank_branch_directory" + where, Long.class, params.toArray()); |
|---|
| | | List<Map<String, Object>> values = rows("select clearing_code as id, clearing_code as branch_code, branch_name, head_bank_code, bank_name from bank_branch_directory" + where + " order by branch_name limit ? offset ?", appendPaging(params, safeSize, (safePage - 1) * safeSize)); |
|---|
| | | return new PageResult<>(values, safePage, safeSize, total == null ? 0 : total); |
|---|
| | | } |
|---|
| | | |
|---|
| | | @Transactional(readOnly = true) |
|---|
| | |
|---|
| | | private Map<String, Object> bankCard(Map<String, Object> row) { return Map.of("id", String.valueOf(row.get("id")), "bankName", row.get("bankName"), "branchName", row.get("branchName"), "cardMasked", row.get("cardMasked"), "status", row.get("status"), "reason", clean(row.get("rejectReason")), "createdAt", String.valueOf(row.get("createdAt"))); } |
|---|
| | | private Map<String, Object> withdrawal(Map<String, Object> row) { Map<String, Object> value = new LinkedHashMap<>(); value.put("id", String.valueOf(row.get("id"))); value.put("withdrawalNo", row.get("withdrawalNo")); value.put("amountCents", row.get("amountCents")); value.put("status", row.get("status")); value.put("reason", clean(row.get("failureReason"))); value.put("bankName", clean(row.get("bankName"))); value.put("cardMasked", clean(row.get("cardMasked"))); value.put("createdAt", String.valueOf(row.get("createdAt"))); value.put("reviewedAt", clean(row.get("reviewedAt"))); value.put("paidAt", clean(row.get("paidAt"))); return value; } |
|---|
| | | private Map<String, Object> branch(String id, String branchName, String bankName) { return Map.of("id", id, "branchName", branchName, "bankName", bankName); } |
|---|
| | | private Object[] appendPaging(List<Object> params, int size, int offset) { Object[] values = new Object[params.size() + 2]; for (int index = 0; index < params.size(); index++) values[index] = params.get(index); values[params.size()] = size; values[params.size() + 1] = offset; return values; } |
|---|
| | | private List<Map<String, Object>> rows(String sql, Object... args) { return DatabaseRows.normalize(jdbc.queryForList(sql, args)); } |
|---|
| | | private Long number(String value) { try { return Long.valueOf(value); } catch (Exception ignored) { throw new BusinessException(ErrorCode.BAD_REQUEST, "编号无效"); } } |
|---|
| | | private String clean(Object value) { return value == null ? "" : String.valueOf(value).trim(); } |
|---|
| | | private String cityKeyword(String value) { String text = clean(value); for (String suffix : List.of("自治州", "地区", "盟", "市", "州")) if (text.endsWith(suffix)) return text.substring(0, text.length() - suffix.length()); return text; } |
|---|
| | | private String certificateValidityType(String value) { return "long_term".equals(value) ? "1" : "0"; } |
|---|
| | | private String certificateBeginDate(String value) { return clean(value).replace("-", ""); } |
|---|
| | | private String certificateEndDate(String value) { return certificateBeginDate(value); } |
|---|
| | | private void requireCertificatePeriod(String validityType, String beginDate, String endDate, String label) { |
|---|
| | | if (blank(beginDate)) throw new BusinessException(ErrorCode.BAD_REQUEST, label + " begin date is required"); |
|---|
| | | if (!"long_term".equals(validityType) && blank(endDate)) throw new BusinessException(ErrorCode.BAD_REQUEST, label + " end date is required when it is not long-term"); |
|---|
| | | if (!blank(endDate) && clean(beginDate).compareTo(clean(endDate)) > 0) throw new BusinessException(ErrorCode.BAD_REQUEST, label + " end date must not precede its begin date"); |
|---|
| | | } |
|---|
| | | private boolean blank(String value) { return value == null || value.isBlank(); } |
|---|
| | | private String providerReason(HuifuIndividualOnboardingGateway.Result result) { return providerReason(result.code(), result.message()); } |
|---|
| | | private String providerReason(String code, String message) { String value = clean(message); return value.isEmpty() ? "Huifu onboarding rejected: " + clean(code) : value; } |
|---|
| | | private String maskId(String id) { String value = clean(id); return value.length() < 8 ? "" : value.substring(0, 3) + "********" + value.substring(value.length() - 4); } |
|---|
