忆梦星河支付回调地址辅助页

\n 这个页面部署在 Valtown 后，会自动生成一组公网地址，方便你对照填写本地\n scripts/ymxh_cli/.env。\n

当前公网基地址

${input.baseUrl}

当前页面地址

${input.requestUrl}

\n\n

建议填写的两个地址

YMXH_NOTIFY_URL（临时联调用测试地址）

${input.notifyUrl}

YMXH_RETURN_URL

${input.returnUrl}

YMXH_NOTIFY_URL=\"${input.notifyUrl}\"\nYMXH_RETURN_URL=\"${input.returnUrl}\"

\n\n

两项配置分别是干什么的？

\n YMXH_NOTIFY_URL：支付平台服务器异步回调你的地址。
\n 更适合做：验签、确认订单状态、更新支付结果、推进后续业务。\n
\n YMXH_RETURN_URL：支付完成后，平台把用户浏览器跳转回来的地址。
\n 更适合做：页面提示、展示支付结果、引导用户返回订单页。\n

\n 重要提醒：
\n 这里提供的 ${input.notifyUrl} 更适合“临时联调观察”。
\n 如果你要在支付成功后直接推进自己项目的正式业务流程，YMXH_NOTIFY_URL 最好还是填写你自己项目的公网回调接口。\n

\n\n

辅助入口

\n \n 打开 notify 调试入口\n \n
\n \n 打开 return 展示入口\n \n

\n \n`;\n}\n\n// 这个函数把回调请求中的参数收集成普通对象，方便页面展示。\nasync function collectRequestSnapshot(\n request: Request,\n): Promise {\n // 先把 URL 查询参数转成对象。\n const query: Record = {};\n\n // 用 forEach 收集查询参数，兼容 TypeScript 当前的 DOM 类型定义。\n new URL(request.url).searchParams.forEach((value, key) => {\n query[key] = value;\n });\n\n // 读取请求头，便于在页面里看清平台到底回传了什么。\n const headers: Record = {};\n\n // 同样用 forEach 收集请求头。\n request.headers.forEach((value, key) => {\n headers[key] = value;\n });\n\n // 根据 content-type 判断是否要解析表单或 JSON。\n const contentType = request.headers.get(\"content-type\") ?? \"\";\n\n // 默认 body 先置空，后续按类型填充。\n let body: unknown = null;\n\n // 对表单请求做标准解析。\n if (contentType.includes(\"application/x-www-form-urlencoded\")) {\n // 先读取表单对象，后面再手动转成普通对象。\n const formData = await request.clone().formData();\n\n // 用普通对象承接表单字段，避免直接依赖 `FormData.entries()` 的类型定义。\n const formBody: Record = {};\n\n // 使用 `forEach` 逐项收集字段，这样在 Valtown / Deno 的类型环境里兼容性更稳。\n formData.forEach((value, key) => {\n // `FormData` 的值可能是字符串，也可能是 `File`。\n // 这里统一转成可读字符串，便于你在调试页面直观看到传了什么。\n formBody[key] = typeof value === \"string\" ? value : value.name;\n });\n\n // 把整理后的表单对象放进快照结果里。\n body = formBody;\n } else if (contentType.includes(\"application/json\")) {\n // 对 JSON 请求做 JSON 解析。\n body = await request.clone().json().catch(() => null);\n } else {\n // 其他类型统一保留原始文本，方便调试观察。\n const text = await request.clone().text();\n body = text.length > 0 ? text : null;\n }\n\n // 返回一份完整快照。\n return {\n method: request.method,\n url: request.url,\n headers,\n query,\n body,\n };\n}\n\n// 这个函数做最基础的 HTML 转义，避免原始数据直接插进页面破坏结构。\nfunction escapeHtml(rawText: unknown): string {\n // 先统一转字符串，保证数字、布尔值也能共用同一个展示函数。\n const text = String(rawText ?? \"\");\n\n // 依次转义最常见的特殊字符。\n return text\n .replaceAll(\"&\", \"&\")\n .replaceAll(\"<\", \"<\")\n .replaceAll(\">\", \">\")\n .replaceAll('\"', \""\")\n .replaceAll(\"'\", \"'\");\n}\n\n// 这个函数尝试把任意值转成“普通对象”，方便后面统一读取字段。\nfunction asStringRecord(value: unknown): Record {\n // 只有普通对象才继续处理。\n if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n return {};\n }\n\n // 创建一个新对象承接结果。\n const result: Record = {};\n\n // 把所有值统一转成字符串，后面渲染时就能直接复用。\n for (const [key, entryValue] of Object.entries(value)) {\n result[key] = String(entryValue ?? \"\");\n }\n\n return result;\n}\n\n// 这个函数优先抽取真正和支付业务相关的载荷。\nfunction getBusinessPayload(snapshot: RequestSnapshot): Record {\n // notify 的 POST 一般在 body 里；return 的 GET 一般在 query 里。\n const bodyRecord = asStringRecord(snapshot.body);\n\n // body 有值时优先使用 body。\n if (Object.keys(bodyRecord).length > 0) {\n return bodyRecord;\n }\n\n // 否则退回到 query 参数。\n return snapshot.query;\n}\n\n// 这个函数专门取业务字段值，避免每次都重复写空值判断。\nfunction getFieldValue(\n payload: Record,\n key: string,\n): string | undefined {\n // 去掉首尾空格后再决定是否展示。\n const value = payload[key]?.trim();\n return value && value.length > 0 ? value : undefined;\n}\n\n// 这个函数把 trade_status 转成更显眼的状态标签。\nfunction getTradeStatusBadge(tradeStatus: string | undefined): {\n label: string;\n cssClass: string;\n} {\n // 没带状态时给一个中性提示。\n if (!tradeStatus) {\n return {\n label: \"未提供支付状态\",\n cssClass: \"badge-neutral\",\n };\n }\n\n // 成功态高亮绿色。\n if (tradeStatus === \"TRADE_SUCCESS\") {\n return {\n label: \"支付成功\",\n cssClass: \"badge-success\",\n };\n }\n\n // 处理中高亮蓝色。\n if (tradeStatus.includes(\"WAIT\") || tradeStatus.includes(\"PROCESS\")) {\n return {\n label: `处理中 · ${tradeStatus}`,\n cssClass: \"badge-info\",\n };\n }\n\n // 失败/关闭类统一高亮红色。\n if (\n tradeStatus.includes(\"FAIL\") || tradeStatus.includes(\"CLOSE\") ||\n tradeStatus.includes(\"CANCEL\")\n ) {\n return {\n label: `异常/关闭 · ${tradeStatus}`,\n cssClass: \"badge-danger\",\n };\n }\n\n // 其他状态按中性展示。\n return {\n label: tradeStatus,\n cssClass: \"badge-neutral\",\n };\n}\n\n// 这个函数输出 notify / return 页共用的 CSS，统一视觉风格。\nfunction renderCommonStyles(pageTitle: string): string {\n // 样式尽量做得紧凑一点，同时把重点字段和普通信息层次拉开。\n return `\n\n \n \n \n ${pageTitle}\n \n \n `;\n}\n\n// 这个函数把一组字段渲染成紧凑卡片，专门给“可读版”复用。\nfunction renderFieldCards(\n fields: Array<{ label: string; value?: string; mono?: boolean }>,\n): string {\n // 把真正没有值的字段过滤掉，避免页面太长。\n const visibleFields = fields.filter((field) =>\n typeof field.value === \"string\" && field.value.length > 0\n );\n\n // 没有字段时给一个提示卡片。\n if (visibleFields.length === 0) {\n return `

提示

当前没有可展示字段。

`;\n }\n\n // 统一渲染为紧凑小卡片。\n return visibleFields.map((field) =>\n `

${escapeHtml(field.label)}

${\n escapeHtml(field.value)\n }

`\n ).join(\"\");\n}\n\n// 这个函数渲染“请求来源信息”，帮助你快速看浏览器/平台是怎么访问过来的。\nfunction renderRequestMeta(snapshot: RequestSnapshot): string {\n // 请求头里优先挑最有调试价值的几项。\n return `

请求来源

\n ${escapeHtml(snapshot.method)}\n

\n ${\n renderFieldCards([\n { label: \"当前访问 URL\", value: snapshot.url, mono: true },\n { label: \"Referer\", value: snapshot.headers.referer, mono: true },\n {\n label: \"来源 IP\",\n value: snapshot.headers[\"cf-connecting-ip\"] ??\n snapshot.headers[\"true-client-ip\"] ??\n snapshot.headers[\"x-forwarded-for\"],\n mono: true,\n },\n {\n label: \"User-Agent\",\n value: snapshot.headers[\"user-agent\"],\n mono: true,\n },\n {\n label: \"Content-Type\",\n value: snapshot.headers[\"content-type\"] ?? \"(空)\",\n mono: true,\n },\n ])\n }\n

`;\n}\n\n// 这个函数渲染“可阅读版本”的核心业务区域。\nfunction renderReadableBusinessSection(\n pageKind: \"notify\" | \"return\",\n snapshot: RequestSnapshot,\n): string {\n // 先取真正的业务载荷。\n const payload = getBusinessPayload(snapshot);\n\n // 支付状态单独做醒目徽标。\n const tradeStatus = getFieldValue(payload, \"trade_status\");\n const tradeStatusBadge = getTradeStatusBadge(tradeStatus);\n\n // notify 和 return 页的引导文案稍微区分一下。\n const intro = pageKind === \"notify\"\n ? \"这是支付平台异步回调到你服务端的调试页，更适合核对签名、订单号、金额、支付状态等服务端字段。\"\n : \"这是支付完成后浏览器跳回来的展示页，更适合查看浏览器带回了哪些参数。\";\n\n const warn = pageKind === \"notify\"\n ? \"正式业务里，notify_url 应在服务端完成验签、幂等更新订单、推进后续业务，并按平台要求返回 success。\"\n : \"return_url 页面主要用于展示，不建议只依赖这里的参数作为最终支付成功依据。\";\n\n // 顶部区域突出核心定位和支付状态。\n return `

YMXH ${\n pageKind === \"notify\" ? \"Notify 调试页\" : \"Return 展示页\"\n }

${escapeHtml(intro)}

\n ${\n escapeHtml(tradeStatusBadge.label)\n }\n

\n\n

\n ${escapeHtml(warn)}\n

\n\n

核心业务字段

\n ${\n escapeHtml(\n pageKind === \"notify\" ? \"服务端回调\" : \"浏览器跳转\",\n )\n }\n

\n ${\n renderFieldCards([\n { label: \"商户号 pid\", value: getFieldValue(payload, \"pid\") },\n {\n label: \"平台订单号 trade_no\",\n value: getFieldValue(payload, \"trade_no\"),\n },\n {\n label: \"商户订单号 out_trade_no\",\n value: getFieldValue(payload, \"out_trade_no\"),\n },\n {\n label: \"上游订单号 api_trade_no\",\n value: getFieldValue(payload, \"api_trade_no\"),\n },\n { label: \"支付方式 type\", value: getFieldValue(payload, \"type\") },\n { label: \"订单标题 name\", value: getFieldValue(payload, \"name\") },\n { label: \"金额 money\", value: getFieldValue(payload, \"money\") },\n { label: \"支付状态 trade_status\", value: tradeStatus },\n { label: \"买家标识 buyer\", value: getFieldValue(payload, \"buyer\") },\n { label: \"附加参数 param\", value: getFieldValue(payload, \"param\") },\n { label: \"时间戳 timestamp\", value: getFieldValue(payload, \"timestamp\") },\n {\n label: \"签名方式 sign_type\",\n value: getFieldValue(payload, \"sign_type\"),\n },\n ])\n }\n

\n\n

签名与关键长字段

\n 重点核对\n

\n ${\n renderFieldCards([\n { label: \"签名 sign\", value: getFieldValue(payload, \"sign\"), mono: true },\n {\n label: \"错误信息 errmsg / msg\",\n value: getFieldValue(payload, \"errmsg\") ??\n getFieldValue(payload, \"msg\"),\n },\n { label: \"响应码 code\", value: getFieldValue(payload, \"code\") },\n ])\n }\n

\n\n ${renderRequestMeta(snapshot)}\n\n

怎么看这页

核心业务字段：快速看订单号、状态、金额、买家、附加参数。
签名与关键长字段：快速核对 sign、错误码、错误消息。
请求来源：快速看浏览器来源、Referer、IP、User-Agent。
原始 JSON 快照：用于和抓包、日志、支付商文档逐项对照。

`;\n}\n\n// 这个函数把原始快照完整展示出来，方便做最底层核对。\nfunction renderRawSnapshotSection(snapshot: RequestSnapshot): string {\n // 原始快照仍然完整保留，只是默认折叠，避免页面一上来过于杂乱。\n return `

原始 JSON 快照

点击展开原始 method / url / headers / query / body

${escapeHtml(JSON.stringify(snapshot, null, 2))}

`;\n}\n\n// 这个函数渲染 notify 调试页面。\nfunction renderNotifyPage(snapshot: RequestSnapshot): string {\n // notify 页先展示可阅读版，再保留原始快照。\n return `${renderCommonStyles(\"YMXH Notify 调试页\")}\n

\n ${renderReadableBusinessSection(\"notify\", snapshot)}\n ${renderRawSnapshotSection(snapshot)}\n

\n \n`;\n}\n\n// 这个函数渲染 return 展示页面。\nfunction renderReturnPage(snapshot: RequestSnapshot): string {\n // return 页同样先展示可阅读版，再展示原始快照。\n return `${renderCommonStyles(\"YMXH Return 展示页\")}\n

\n ${renderReadableBusinessSection(\"return\", snapshot)}\n ${renderRawSnapshotSection(snapshot)}\n

\n \n`;\n}\n\n// Valtown HTTP Val 的主入口。\nexport default async function (request: Request): Promise {\n // 从当前请求 URL 中拿到部署后的公网基地址。\n const currentUrl = new URL(request.url);\n\n // 这里把“当前 origin + pathname 根目录”拼成可复用基地址。\n const baseUrl = `${currentUrl.protocol}//${currentUrl.host}`;\n\n // 约定 `/notify` 作为异步回调调试入口。\n const notifyUrl = `${baseUrl}/notify`;\n\n // 约定 `/return` 作为同步跳转结果页。\n const returnUrl = `${baseUrl}/return`;\n\n // 如果访问的是首页，就展示配置说明与可填写地址。\n if (currentUrl.pathname === \"/\") {\n return new Response(\n renderHomePage({\n baseUrl,\n notifyUrl,\n returnUrl,\n requestUrl: request.url,\n }),\n {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n },\n },\n );\n }\n\n // 如果访问的是 `/notify`，则把收到的请求内容完整展示出来。\n if (currentUrl.pathname === \"/notify\") {\n // 先收集请求快照，便于调试查看。\n const snapshot = await collectRequestSnapshot(request);\n\n // 浏览器直接访问时，返回 HTML 页面更好读。\n if (request.method === \"GET\") {\n return new Response(renderNotifyPage(snapshot), {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n },\n });\n }\n\n // 对支付平台的实际异步回调，直接回 `success` 更贴近常见支付网关要求。\n return new Response(\"success\", {\n headers: {\n \"content-type\": \"text/plain; charset=utf-8\",\n },\n });\n }\n\n // 如果访问的是 `/return`，就展示浏览器跳回来的参数。\n if (currentUrl.pathname === \"/return\") {\n // 收集请求快照并渲染结果页。\n const snapshot = await collectRequestSnapshot(request);\n\n // 返回清晰可读的 HTML 页面。\n return new Response(renderReturnPage(snapshot), {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n },\n });\n }\n\n // 其他路径统一返回 404，避免出现含糊不清的默认行为。\n return new Response(\"Not Found\", { status: 404 });\n}",[130],"pulls","branches",1,"forks","envVars",{"_146":58,"_148":58},"connections",{"_146":58,"_147":58},"count","unfilledCount","emptyCount",{"_41":129,"_31":130,"_29":131,"_124":-5,"_39":40,"_38":132,"_125":116,"_36":155,"_13":134,"_32":135,"_34":136,"_23":24,"_127":-5,"_152":156,"_26":157},{"_41":123,"_31":27,"_29":30,"_124":-5,"_39":40,"_38":14,"_125":24,"_36":151,"_13":58,"_32":33,"_34":35,"_23":24,"_127":-5,"_152":153,"_26":154},["D",1777252954615],"children",[],[27],["D",1777170281977],[],[130],["D",1777131036990],{"_92":91,"_98":35},{"_92":91,"_93":-5,"_94":35,"_18":52,"_95":96,"_97":24},{"_13":81,"_31":82,"_41":40,"_83":42,"_84":-5,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":43,"_90":91},"ctx",{"_74":-5,"_118":195,"_196":197,"_198":199,"_200":24,"_201":24,"_202":24,"_203":116,"_204":-5,"_205":-7,"_206":-7,"_207":58,"_208":24,"_209":24,"_210":-5,"_211":24,"_212":24,"_213":24,"_214":-5},"ENV",{"_166":167,"_168":169,"_170":82,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v5