package com.tourguide.common.huifu;

import com.alibaba.fastjson.JSONObject;
import com.huifu.bspay.sdk.opps.core.utils.RsaUtils;
import com.tourguide.common.huifu.properties.HuiFuProperties;
import org.springframework.stereotype.Component;
import org.springframework.util.StringUtils;

@Component
public class HuifuCallbackVerifier {
    private final HuiFuProperties properties;

    public HuifuCallbackVerifier(HuiFuProperties properties) {
        this.properties = properties;
    }

    public JSONObject verify(String sign, String respData) {
        if (!StringUtils.hasText(sign) || !StringUtils.hasText(respData)) {
            throw new IllegalArgumentException("汇付回调缺少签名参数");
        }
        if (!StringUtils.hasText(properties.getRsaPublicKey())) {
            throw new IllegalStateException("汇付公钥未配置");
        }
        String normalized = normalize(respData);
        if (!RsaUtils.verify(normalized, properties.getRsaPublicKey(), sign)) {
            throw new IllegalArgumentException("汇付回调验签失败");
        }
        return JSONObject.parseObject(normalized);
    }

    private String normalize(String respData) {
        return respData
                .replace("(", "(")
                .replace(")", ")")
                .replace("(", "(")
                .replace(")", ")")
                .replace("& #40;", "(")
                .replace("& #41;", ")");
    }
}