[WeChatPay.V3] 修正微信支付公钥验签

essensoft · Nov 4, 2024 · 2409408 · 2409408
1 parent 2e4976e
commit 2409408
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/src/Essensoft.Paylink.WeChatPay/V3/WeChatPayClient.cs b/src/Essensoft.Paylink.WeChatPay/V3/WeChatPayClient.cs
@@ -270,7 +270,7 @@ private async Task CheckResponseSignAsync(WeChatPayHeaders headers, string body,
                 if (!string.IsNullOrEmpty(options.WeChatPayPublicKeyId) && headers.Serial == options.WeChatPayPublicKeyId)
                 {
                     var signSourceData = WeChatPayUtility.BuildSignatureSourceData(headers.Timestamp, headers.Nonce, body);
-                    var signCheck = SHA256WithRSA.Verify(options.WeChatPayPublicKey, signSourceData, headers.Signature);
+                    var signCheck = SHA256WithRSA.Verify(signSourceData, headers.Signature, options.WeChatPayPublicKey);
                     if (!signCheck)
                     {
                         throw new WeChatPayException("sign check fail: check Sign and Data Fail!");

diff --git a/src/Essensoft.Paylink.WeChatPay/V3/WeChatPayNotifyClient.cs b/src/Essensoft.Paylink.WeChatPay/V3/WeChatPayNotifyClient.cs
@@ -119,7 +119,7 @@ private async Task CheckNotifySignAsync(WeChatPayHeaders headers, string body, W
                 if (!string.IsNullOrEmpty(options.WeChatPayPublicKeyId) && headers.Serial == options.WeChatPayPublicKeyId)
                 {
                     var signSourceData = WeChatPayUtility.BuildSignatureSourceData(headers.Timestamp, headers.Nonce, body);
-                    var signCheck = SHA256WithRSA.Verify(options.WeChatPayPublicKey, signSourceData, headers.Signature);
+                    var signCheck = SHA256WithRSA.Verify(signSourceData, headers.Signature, options.WeChatPayPublicKey);
                     if (!signCheck)
                     {
                         throw new WeChatPayException("sign check fail: check Sign and Data Fail!");