四端上传

yelaymaths_api/src/modules/payments/payments.controller.ts

@@ -0,0 +1,34 @@
+import { Controller, Post, Req, Res } from '@nestjs/common';
+import type { Request, Response } from 'express';
+import { Public } from '../../common/auth';
+import { PaymentsService } from './payments.service';
+
+/** 取原始请求体。虚拟支付回调是 XML，必须拿到未经解析的字节。 */
+function rawBodyOf(req: Request): string {
+  const withRaw = req as Request & { rawBody?: Buffer };
+  if (withRaw.rawBody) return withRaw.rawBody.toString('utf8');
+  return typeof req.body === 'string' ? req.body : String(req.body ?? '');
+}
+
+/**
+ * 虚拟支付回调。由微信服务器调用，不带小程序身份，靠签名与业务校验保证安全。
+ * 请求体是 XML，应答也必须是 XML。
+ */
+@Controller('v1/payments')
+export class PaymentsController {
+  constructor(private readonly payments: PaymentsService) {}
+
+  @Public()
+  @Post('notify')
+  async notify(@Req() req: Request, @Res() res: Response): Promise<void> {
+    const xml = await this.payments.handleDeliverNotify(rawBodyOf(req));
+    res.type('application/xml').send(xml);
+  }
+
+  @Public()
+  @Post('refund-notify')
+  async refundNotify(@Req() req: Request, @Res() res: Response): Promise<void> {
+    const xml = await this.payments.handleRefundNotify(rawBodyOf(req));
+    res.type('application/xml').send(xml);
+  }
+}