🖼️ worldsxinpay直连支付格式

基本信息

• 接口地址：/api/payment
• 请求方式：POST

📌 请求头（Headers）说明

支付接口请求时必须在 HTTP 头中携带以下参数，每个字段都很关键，用于安全校验和身份验证。

⚡ 请求头详细说明

1. Content-Type

   • 必须为 application/json
   • 如果填写错误（如 text/plain），服务器会拒绝请求

2. X-API-Key

   • 商户唯一标识
   • 请妥善保管，不要泄露
   • 与商户后台生成的密钥对应

3. X-User-ID

   • 与商户账户绑定，用于识别操作请求来源
   • 需要和后台注册信息一致，否则会报 “用户不存在” 错误

4. X-Signature

   • 签名算法：
     1. 将请求参数按字母升序排列
     2. 转为 JSON 字符串
     3. 使用 HMAC-SHA256 结合 API Key 生成签名
     4. 放入请求头 X-Signature
   • 示例生成（Node.js）：

     const crypto = require('crypto');
     const apiKey = 'YOUR_API_KEY';
     const payload = JSON.stringify({ order_no: '123', amount: '29.90' });
     const signature = crypto.createHmac('sha256', apiKey).update(payload).digest('hex');
     console.log(signature);

请求参数（JSON Body）

商品信息格式（GoodsJson）

{
  "goodsInfo": [
    {
      "goodsName": "商品名称",
      "goodsPrice": "商品价格",
      "quantity": 1
    }
  ]
}

SDK 自动生成 other 参数示例

<script src="https://js.worldsxinpay.com/payment_sdk_real_jm.js"></script>
<script>
async function makePayment() {
    const orderData = {
        "order_no": "TEST123456789",
        "amount": "29.90",
        "return_url": "https://www.example.com/return",
        "notify_url": "https://www.example.com/notify",
        "card_no": "4111111111111111",
        "exp_month": "12",
        "exp_year": "2025",
        "cvv": "123",
        "bill_full_name": "James Harpool",
        "bill_phone": "9132316070",
        "bill_email": "test@example.com",
        "bill_country": "US",
        "bill_state": "New Mexico",
        "bill_city": "Taos",
        "bill_address1": "316 Don Fernando Street",
        "bill_address2": "Unit B",
        "bill_zip": "87571",
        "ip_address": "128.123.56.14",
        "GoodsJson": "{'goodsInfo':[{'goodsName':'Product 1','goodsPrice':'19.90','quantity':1}]}"
    };
    const result = await PaymentSDK.processPayment(orderData);
}
</script>

完整示例请求

{
  "order_no": "TEST123456789",
  "amount": "29.90",
  "return_url": "https://www.example.com/return",
  "notify_url": "https://www.example.com/notify",
  "card_no": "4111111111111111",
  "exp_month": "12",
  "exp_year": "2025",
  "cvv": "123",
  "bill_full_name": "James Harpool",
  "bill_phone": "9132316070",
  "bill_email": "test@example.com",
  "bill_country": "US",
  "bill_state": "New Mexico",
  "bill_city": "Taos",
  "bill_address1": "316 Don Fernando Street",
  "bill_address2": "Unit B",
  "bill_zip": "87571",
  "ip_address": "128.123.56.14",
  "GoodsJson": "{\"goodsInfo\":[{\"goodsName\":\"Product 1\",\"goodsPrice\":\"19.90\",\"quantity\":1},{\"goodsName\":\"Product 2\",\"goodsPrice\":\"10.00\",\"quantity\":1}]}"
}

成功

{
  "status": "success",
  "data": {
    "status": "success"
  }
}

失败

{
  "status": "failed",
  "ErroMsg": "Payment failed",
  "data": {
    "status": "failed",
    "ErroMsg": "Payment failed"
  }
}

签名算法（Signature）

将所有请求参数按字母顺序排序

转为 JSON 字符串

使用 HMAC-SHA256 + API Key 生成签名

将签名放入请求头 X-Signature