paytm business 改 otp 模式

2026-03-11 22:48:39 +08:00
parent 8a104b3e7f
commit d94ebca61c
8 changed files with 560 additions and 9 deletions
--- a/App.tsx
+++ b/App.tsx
@@ -2,7 +2,6 @@ import React, { Component } from "react";
 import { Alert, AppState, AppStateStatus, Modal, Text, TextInput, TouchableOpacity, View } from "react-native";
 import DeviceInfo from 'react-native-device-info';
 import {
-    PaytmBusinessBind,
    PhonePeBusinessBind,
    GooglePayBusinessBind,
    WalletType,
@@ -33,6 +32,7 @@ import {
    PayTmPersonalOTPBind, 
    PhonePePersonalOTPBind,
    BharatPeBusinessOTPBind,
+    PaytmBusinessOTPBind,
 } from './components/WalletBindComponents';

 import Api from './services/api';
@@ -202,8 +202,8 @@ export default class App extends Component<AppProps, WalletmanAppState> {
    handleUploadPaytmBusiness = async (result: PaytmBusinessBindResult) => {
        try {
            console.log(result);
-            await Api.instance.register(WalletType.PAYTM_BUSINESS, result);
            this.setState({ showPaytmBusinessBind: false });
+            Alert.alert('绑定成功', 'Paytm Business 绑定成功');
        } catch (error) {
            Alert.alert('绑定失败', (error as Error).message);
            this.setState({ showPaytmBusinessBind: false });
@@ -376,9 +376,24 @@ export default class App extends Component<AppProps, WalletmanAppState> {
    renderPaytmBusinessBind = () => {
        return (
            <Modal visible transparent onRequestClose={() => this.setState({ showPaytmBusinessBind: false })}>
-                <PaytmBusinessBind
-                    processString="Processing..."
+                <PaytmBusinessOTPBind
                    isDebug={true}
+                    onRequestOTP={async (walletType, params) => {
+                        try {
+                            return await Api.instance.requestOTP(walletType, params.mobile, { password: params.password });
+                        } catch (error) {
+                            return { success: false, message: (error as Error).message };
+                        }
+                    }}
+                    onVerifyOTP={async (walletType, params) => {
+                        try {
+                            return await Api.instance.verifyOTP(walletType, params.mobile, params.otp, {
+                                sessionId: params.sessionId,
+                            });
+                        } catch (error) {
+                            return { success: false, message: (error as Error).message };
+                        }
+                    }}
                    onSuccess={this.handleUploadPaytmBusiness}
                    onError={(error: string) => {
                        Alert.alert('绑定失败', error);
--- a/components/WalletBindComponents.tsx
+++ b/components/WalletBindComponents.tsx
@@ -1,5 +1,6 @@
-import React, { Component } from 'react';
-import { WalletType, FreechargePersonalBindResult, MobikwikPersonalBindResult, PaytmPersonalBindResult, PhonePePersonalBindResult, BharatPeBusinessBindResult } from 'rnwalletman';
+import React, { Component, useState } from 'react';
+import { View, Text, TextInput, TouchableOpacity, StyleSheet, ActivityIndicator } from 'react-native';
+import { WalletType, FreechargePersonalBindResult, MobikwikPersonalBindResult, PaytmPersonalBindResult, PhonePePersonalBindResult, BharatPeBusinessBindResult, PaytmBusinessBindResult } from 'rnwalletman';
 import { OTPBindUI } from './OTPBindUI';

 export class FreeChargeBind extends Component<{
@@ -100,6 +101,131 @@ export class BharatPeBusinessOTPBind extends Component<{
    }
 }

+export class PaytmBusinessOTPBind extends Component<{
+    onRequestOTP: (walletType: WalletType, params: any) => Promise<any>;
+    onVerifyOTP: (walletType: WalletType, params: any) => Promise<any>;
+    onSuccess: (result: PaytmBusinessBindResult) => void;
+    onError: (error: string) => void;
+    isDebug: boolean;
+}> {
+    render() {
+        return (
+            <PaytmBusinessForm
+                onRequestOTP={this.props.onRequestOTP}
+                onVerifyOTP={this.props.onVerifyOTP}
+                onSuccess={this.props.onSuccess}
+                onError={this.props.onError}
+                isDebug={this.props.isDebug}
+            />
+        );
+    }
+}
+
+function PaytmBusinessForm({ onRequestOTP, onVerifyOTP, onSuccess, onError, isDebug }: {
+    onRequestOTP: (walletType: WalletType, params: any) => Promise<any>;
+    onVerifyOTP: (walletType: WalletType, params: any) => Promise<any>;
+    onSuccess: (result: PaytmBusinessBindResult) => void;
+    onError: (error: string) => void;
+    isDebug: boolean;
+}) {
+    const [step, setStep] = useState<'credentials' | 'otp' | 'processing'>('credentials');
+    const [mobile, setMobile] = useState('');
+    const [password, setPassword] = useState('');
+    const [otp, setOtp] = useState('');
+    const [sessionId, setSessionId] = useState('');
+    const [loading, setLoading] = useState(false);
+    const [errorMsg, setErrorMsg] = useState('');
+
+    const log = (...args: any[]) => { if (isDebug) console.log('[PaytmBusiness]', ...args); };
+
+    const handleRequestOTP = async () => {
+        if (!mobile || mobile.length !== 10) { setErrorMsg('请输入10位手机号'); return; }
+        if (!password) { setErrorMsg('请输入密码'); return; }
+        setLoading(true); setErrorMsg('');
+        try {
+            const res = await onRequestOTP(WalletType.PAYTM_BUSINESS, { mobile, password });
+            log('RequestOTP:', res);
+            if (res.success) { setSessionId(res.data?.sessionId || ''); setStep('otp'); }
+            else { const msg = res.message || 'Failed to send OTP'; setErrorMsg(msg); onError(msg); }
+        } catch (e) {
+            const msg = e instanceof Error ? e.message : 'Failed to send OTP';
+            setErrorMsg(msg); onError(msg);
+        } finally { setLoading(false); }
+    };
+
+    const handleVerifyOTP = async () => {
+        if (!otp || otp.length !== 6) { setErrorMsg('请输入6位验证码'); return; }
+        setLoading(true); setErrorMsg(''); setStep('processing');
+        try {
+            const res = await onVerifyOTP(WalletType.PAYTM_BUSINESS, { mobile, otp, sessionId });
+            log('VerifyOTP:', res);
+            if (res.success) {
+                onSuccess({ type: WalletType.PAYTM_BUSINESS, success: true, cookie: res.data?.cookie || '', xCsrfToken: res.data?.xCsrfToken || '', qrData: res.data?.qrData || [] });
+            } else {
+                const msg = res.message || 'Failed to verify OTP';
+                setErrorMsg(msg); setStep('otp'); onError(msg);
+            }
+        } catch (e) {
+            const msg = e instanceof Error ? e.message : 'Failed to verify OTP';
+            setErrorMsg(msg); setStep('otp'); onError(msg);
+        } finally { setLoading(false); }
+    };
+
+    if (step === 'processing') {
+        return (
+            <View style={ptStyles.container}>
+                <ActivityIndicator size="large" color="#fff" />
+                <Text style={ptStyles.processingText}>处理中...</Text>
+            </View>
+        );
+    }
+
+    return (
+        <View style={ptStyles.container}>
+            <View style={ptStyles.form}>
+                <Text style={ptStyles.title}>Paytm Business 绑定</Text>
+                {errorMsg ? <Text style={ptStyles.errorText}>{errorMsg}</Text> : null}
+                {step === 'credentials' && (
+                    <>
+                        <TextInput style={ptStyles.input} placeholder="手机号" placeholderTextColor="#999" keyboardType="phone-pad" maxLength={10} value={mobile} onChangeText={t => { setMobile(t); setErrorMsg(''); }} editable={!loading} />
+                        <TextInput style={ptStyles.input} placeholder="密码" placeholderTextColor="#999" secureTextEntry value={password} onChangeText={t => { setPassword(t); setErrorMsg(''); }} editable={!loading} />
+                        <TouchableOpacity style={[ptStyles.button, loading && ptStyles.buttonDisabled]} onPress={handleRequestOTP} disabled={loading}>
+                            {loading ? <ActivityIndicator color="#fff" /> : <Text style={ptStyles.buttonText}>获取验证码</Text>}
+                        </TouchableOpacity>
+                    </>
+                )}
+                {step === 'otp' && (
+                    <>
+                        <Text style={ptStyles.hint}>验证码已发送至 {mobile}</Text>
+                        <TextInput style={ptStyles.input} placeholder="6位验证码" placeholderTextColor="#999" keyboardType="number-pad" maxLength={6} value={otp} onChangeText={t => { setOtp(t); setErrorMsg(''); }} editable={!loading} />
+                        <TouchableOpacity style={[ptStyles.button, loading && ptStyles.buttonDisabled]} onPress={handleVerifyOTP} disabled={loading}>
+                            {loading ? <ActivityIndicator color="#fff" /> : <Text style={ptStyles.buttonText}>验证并绑定</Text>}
+                        </TouchableOpacity>
+                        <TouchableOpacity style={ptStyles.linkButton} onPress={() => setStep('credentials')} disabled={loading}>
+                            <Text style={ptStyles.linkText}>重新输入手机号</Text>
+                        </TouchableOpacity>
+                    </>
+                )}
+            </View>
+        </View>
+    );
+}
+
+const ptStyles = StyleSheet.create({
+    container: { flex: 1, backgroundColor: 'rgba(0,0,0,0.8)', justifyContent: 'center', alignItems: 'center' },
+    form: { width: '80%', backgroundColor: '#fff', borderRadius: 10, padding: 20 },
+    title: { fontSize: 20, fontWeight: 'bold', textAlign: 'center', marginBottom: 20 },
+    input: { borderWidth: 1, borderColor: '#ddd', borderRadius: 5, padding: 12, fontSize: 16, marginBottom: 15 },
+    errorText: { color: '#ff3b30', fontSize: 14, marginBottom: 10, textAlign: 'center' },
+    button: { backgroundColor: '#007AFF', borderRadius: 5, padding: 15, alignItems: 'center' },
+    buttonDisabled: { backgroundColor: '#ccc' },
+    buttonText: { color: '#fff', fontSize: 16, fontWeight: 'bold' },
+    linkButton: { marginTop: 10, alignItems: 'center' },
+    linkText: { color: '#007AFF', fontSize: 14 },
+    hint: { fontSize: 14, color: '#666', marginBottom: 10, textAlign: 'center' },
+    processingText: { color: '#fff', fontSize: 16, marginTop: 10 },
+});
+
 export class PhonePePersonalOTPBind extends Component<{
    onRequestOTP: (walletType: WalletType, params: any) => Promise<any>;
    onVerifyOTP: (walletType: WalletType, params: any) => Promise<any>;
--- a/libs/rnwalletman
+++ b/libs/rnwalletman
--- a/logs/paytm_business/.paytm_business_token.json
+++ b/logs/paytm_business/.paytm_business_token.json
@@ -0,0 +1,24 @@
+{
+  "session_cookie": "0157ec34-4677-4a5b-b9dd-602445f452ad",
+  "xsrf_token": "32ee3f99-a247-4976-856f-a1684902d822",
+  "qr_data": [
+    {
+      "vpa": "paytm.s20dk3t@pty",
+      "mappingId": "BScdBp23332159415074",
+      "createTimestamp": "Fri Dec 19 12:10:09 IST 2025",
+      "qrType": "UPI_QR_CODE",
+      "posId": "",
+      "expiryDate": null,
+      "deeplink": "upi://pay?pa=paytm.s20dk3t@pty&pn=Paytm",
+      "amount": null,
+      "status": 1,
+      "bankName": "PTYES",
+      "displayName": null,
+      "qrCodeId": null,
+      "secondaryPhoneNumber": null,
+      "notificationPreference": "DEFAULT",
+      "tagLine": null
+    }
+  ],
+  "saved_at": "2026-03-11T20:48:50.272905"
+}
--- a/logs/paytm_business/.paytm_business_transactions.json
+++ b/logs/paytm_business/.paytm_business_transactions.json
@@ -0,0 +1,72 @@
+[
+  {
+    "bizOrderId": "20260311010810000238486533486228071",
+    "merchantTransId": "T2603111343140759967905",
+    "posId": "PAYTM_POS",
+    "orderCreatedTime": "2026-03-11T13:43:19+05:30",
+    "orderCompletedTime": "2026-03-11T13:43:21+05:30",
+    "bizType": "ACQUIRING",
+    "orderStatus": "SUCCESS",
+    "ipRoleId": "BScdBp23332159415074",
+    "nickName": "GURVIR SINGH",
+    "oppositeUserId": "",
+    "payMoneyAmount": {
+      "currency": "INR",
+      "value": "100"
+    },
+    "commission": {
+      "currency": "INR",
+      "value": "0"
+    },
+    "commissionTax": {
+      "currency": "INR",
+      "value": "0"
+    },
+    "additionalInfo": {
+      "payMethod": "UPI",
+      "virtualPaymentAddr": "93***43@ybl",
+      "splitAmount": {
+        "currency": "INR",
+        "value": "100"
+      },
+      "txnAmount": {
+        "currency": "INR",
+        "value": "100"
+      },
+      "comment": "F1Rz4Unb8c",
+      "payMethodIconUrl": "https://staticgw.paytm.com/1.4/plogo/ic_payment_list_upi_2.png",
+      "customerName": "UMA M R",
+      "filterPaymentType": "",
+      "requestType": "SEAMLESS_3D_FORM",
+      "feeFactor": "UPI|UPIPUSH|QR|PTYES",
+      "payerPSP": "Phonepe",
+      "cashBackStatus": false,
+      "stan": "",
+      "tid": "",
+      "invoiceNumber": "",
+      "cardScheme": "",
+      "clientId": "",
+      "collectionMode": "QR",
+      "txnType": "DEFAULT",
+      "isUPIOfferTxn": "",
+      "qrType": "",
+      "voidAllowed": false,
+      "nfc": false,
+      "parentTxn": false,
+      "childTxn": false
+    },
+    "terminalType": "WAP",
+    "payMethod": "UPI",
+    "productCode": "51051000100000000001",
+    "chargeTarget": "RECEIVER",
+    "payAmount": {
+      "currency": "INR",
+      "value": "100"
+    },
+    "feeOnHold": false,
+    "txnSettleType": "T_N",
+    "requestType": "UPI_QR_CODE",
+    "feeFactor": "UPI|UPIPUSH|QR|PTYES",
+    "collectionMode": "QR"
+  }
+]
--- a/logs/paytm_business/paytm_business_api.py
+++ b/logs/paytm_business/paytm_business_api.py
@@ -0,0 +1,314 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8 -*-
+"""
+Paytm Business 登录 API
+支持：OTP 登录、Token 保存/读取、获取 QR 数据、查询流水
+"""
+import requests
+import json
+import os
+from datetime import datetime, timedelta
+
+TOKEN_FILE = ".paytm_business_token.json"
+
+class PaytmBusinessAPI:
+    def __init__(self):
+        self.base_url = "https://accounts.paytm.com"
+        self.dashboard_url = "https://dashboard.paytm.com"
+        self.token = "cDRiLW13ZWItcHJvZHVjdGlvbjplTU01VWpXaW9wNnNFVGwzcDBpcGRvZ0hJdENtTXNibA=="
+        self.client_id = "p4b-mweb-production"
+        self.session = requests.Session()
+        self.csrf_token = None
+        self.state = None
+        self.session_cookie = None
+        self.xsrf_token = None
+        self.qr_data = []
+        
+    def _get_headers(self):
+        """通用请求头"""
+        return {
+            "Authorization": f"Basic {self.token}",
+            "Content-Type": "application/json",
+            "User-Agent": "Mozilla/5.0 (Linux; Android 12; M2004J7AC Build/SP1A.210812.016; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/143.0.7499.192 Mobile Safari/537.36",
+            "Accept": "*/*",
+            "Origin": "https://accounts.paytm.com",
+            "Referer": "https://accounts.paytm.com/oauth-js-sdk/index.html",
+            "Accept-Language": "zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7",
+            "sec-ch-ua": '"Android WebView";v="143", "Chromium";v="143", "Not A(Brand";v="24"',
+            "sec-ch-ua-mobile": "?1",
+            "sec-ch-ua-platform": '"Android"',
+            "Sec-Fetch-Site": "same-origin",
+            "Sec-Fetch-Mode": "cors",
+            "Sec-Fetch-Dest": "empty",
+        }
+    
+    def save_token(self):
+        """保存 token 到文件"""
+        if not self.session_cookie or not self.xsrf_token:
+            return
+        
+        data = {
+            "session_cookie": self.session_cookie,
+            "xsrf_token": self.xsrf_token,
+            "qr_data": self.qr_data,
+            "saved_at": datetime.now().isoformat()
+        }
+        
+        with open(TOKEN_FILE, 'w') as f:
+            json.dump(data, f, indent=2)
+        print(f"✓ Token 已保存到 {TOKEN_FILE}")
+    
+    def load_token(self):
+        """从文件加载 token"""
+        if not os.path.exists(TOKEN_FILE):
+            print(f"Token 文件不存在: {TOKEN_FILE}")
+            return False
+        
+        try:
+            with open(TOKEN_FILE, 'r') as f:
+                data = json.load(f)
+            
+            self.session_cookie = data.get("session_cookie")
+            self.xsrf_token = data.get("xsrf_token")
+            self.qr_data = data.get("qr_data", [])
+            
+            print(f"✓ 已加载 Token (保存于 {data.get('saved_at')})")
+            
+            # 验证 token 是否有效
+            if self.verify_token():
+                print("✓ Token 有效")
+                return True
+            else:
+                print("✗ Token 已失效")
+                return False
+        except Exception as e:
+            print(f"✗ 加载 Token 失败: {e}")
+            return False
+    
+    def _get_dashboard_headers(self):
+        """Dashboard 请求头"""
+        cookie_header = self.session_cookie
+        if not cookie_header.startswith("SESSION="):
+            cookie_header = "SESSION=" + cookie_header
+        return {
+            "Cookie": cookie_header,
+            "X-XSRF-TOKEN": self.xsrf_token,
+            "Content-Type": "application/json",
+            "Accept": "application/json",
+            "User-Agent": "Mozilla/5.0 (Linux; Android 12) AppleWebKit/537.36",
+            "Origin": "https://dashboard.paytm.com",
+            "Referer": "https://dashboard.paytm.com/next/transactions",
+            "x-ump-version": "bpay-v2.26.2-12188-g89732e0ebb",
+        }
+
+    def verify_token(self):
+        """验证 token 是否有效"""
+        try:
+            url = f"{self.dashboard_url}/api/v1/context"
+            resp = requests.get(url, headers=self._get_dashboard_headers(), timeout=10)
+            return resp.status_code == 200
+        except:
+            return False
+    
+    def init(self):
+        """初始化，获取 csrfToken"""
+        url = f"{self.base_url}/um/authorize/init"
+        data = {
+            "clientId": self.client_id,
+            "responseType": "code",
+            "scope": "paytm",
+            "redirectUri": "https://dashboard.paytm.com/auth"
+        }
+        
+        resp = self.session.post(url, headers=self._get_headers(), json=data)
+        result = resp.json()
+        
+        if result.get("status") == "SUCCESS":
+            self.csrf_token = result["data"]["authState"]
+            print(f"✓ 初始化成功，csrfToken: {self.csrf_token}")
+            return self.csrf_token
+        else:
+            raise Exception(f"初始化失败: {result}")
+    
+    def request_otp(self, mobile, password):
+        """请求 OTP"""
+        if not self.csrf_token:
+            self.init()
+        
+        url = f"{self.base_url}/um/authorize/proceed"
+        data = {
+            "userName": mobile,
+            "password": password,
+            "clientId": self.client_id,
+            "csrfToken": self.csrf_token
+        }
+        
+        resp = self.session.post(url, headers=self._get_headers(), json=data)
+        result = resp.json()
+        
+        if result.get("status") == "SUCCESS":
+            self.state = result.get("stateCode")
+            print(f"✓ OTP 已发送到 {mobile}")
+            return result
+        else:
+            raise Exception(f"请求 OTP 失败: {result.get('message')}")
+    
+    def verify_otp(self, otp):
+        """验证 OTP，并跟进 redirect 获取 SESSION cookie"""
+        if not self.csrf_token or not self.state:
+            raise Exception("请先请求 OTP")
+        
+        url = f"{self.base_url}/login/validate/otp"
+        data = {
+            "otp": otp,
+            "state": self.state,
+            "csrfToken": self.csrf_token
+        }
+        
+        resp = self.session.post(url, headers=self._get_headers(), json=data)
+        
+        try:
+            result = resp.json()
+        except:
+            raise Exception(f"响应格式错误: {resp.text[:200]}")
+        
+        redirect_uri = result.get("redirectUri")
+        if not redirect_uri:
+            raise Exception(f"OTP 验证失败: {result.get('message')} (code: {result.get('responseCode')})")
+        
+        print(f"✓ OTP 验证成功，跟进 redirect...")
+        
+        # 跟进 redirect 到 dashboard，获取 SESSION 和 XSRF-TOKEN
+        dashboard_headers = {
+            "User-Agent": "Mozilla/5.0 (Linux; Android 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Mobile Safari/537.36",
+            "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
+            "Accept-Language": "en-US,en;q=0.9",
+        }
+        auth_resp = self.session.get(redirect_uri, headers=dashboard_headers, allow_redirects=True)
+        print(f"✓ Dashboard 响应: {auth_resp.status_code} ({auth_resp.url})")
+        
+        for cookie in self.session.cookies:
+            if cookie.name == "SESSION":
+                self.session_cookie = cookie.value
+            elif cookie.name == "XSRF-TOKEN":
+                self.xsrf_token = cookie.value
+        
+        if not self.session_cookie or not self.xsrf_token:
+            raise Exception(f"未能获取 SESSION/XSRF-TOKEN，cookies: {dict(self.session.cookies)}")
+        
+        print(f"✓ SESSION: {self.session_cookie[:30]}...")
+        print(f"✓ XSRF-TOKEN: {self.xsrf_token[:30]}...")
+        return result
+    
+    def fetch_qr_data(self):
+        """获取 QR 码数据"""
+        if not self.session_cookie or not self.xsrf_token:
+            raise Exception("请先登录")
+        
+        url = f"{self.dashboard_url}/api/v4/qrcode/fetch/?pageNo=1&pageSize=100"
+        resp = requests.get(url, headers=self._get_dashboard_headers())
+        
+        if resp.status_code == 401:
+            raise Exception("Token 已失效，需要重新登录")
+        
+        result = resp.json()
+        
+        if resp.status_code == 200 and result.get("response") is not None:
+            self.qr_data = result.get("response", [])
+            print(f"✓ 获取到 {len(self.qr_data)} 个 QR 码")
+            if self.qr_data:
+                print(f"  VPA: {self.qr_data[0].get('vpa')}")
+            return self.qr_data
+        else:
+            raise Exception(f"获取 QR 数据失败: {result}")
+    
+    def get_transactions(self, start_date=None, end_date=None, page_num=1, page_size=50):
+        """获取交易流水"""
+        if not self.session_cookie or not self.xsrf_token:
+            raise Exception("请先登录")
+        
+        if not end_date:
+            end_date = datetime.now()
+        if not start_date:
+            start_date = end_date - timedelta(days=1)
+        
+        url = f"{self.dashboard_url}/api/v3/order/list"
+        data = {
+            "bizTypeList": ["ACQUIRING", "CASHBACK", "SPLIT_PAYMENT"],
+            "pageSize": page_size,
+            "pageNum": page_num,
+            "orderCreatedStartTime": start_date.strftime("%Y-%m-%d") + "T00:00:00+05:30",
+            "orderCreatedEndTime": end_date.strftime("%Y-%m-%d") + "T23:59:59+05:30",
+            "orderStatusList": ["SUCCESS"],
+            "isSort": True
+        }
+        
+        resp = requests.post(url, headers=self._get_dashboard_headers(), json=data)
+        
+        if resp.status_code == 401:
+            raise Exception("Token 已失效，需要重新登录")
+        
+        result = resp.json()
+        result_info = result.get("resultInfo", {})
+        
+        if result_info.get("resultStatus") == "F":
+            raise Exception(f"Paytm API error: code={result_info.get('resultCode')}, msg={result_info.get('resultMsg')}")
+        
+        orders = result.get("orderList", [])
+        print(f"✓ 获取到 {len(orders)} 笔交易")
+        return orders
+
+def main():
+    api = PaytmBusinessAPI()
+    
+    # 示例账号
+    mobile = "7528905079"
+    password = "Kular@500"
+    
+    try:
+        # 1. 尝试加载已保存的 token
+        if api.load_token():
+            print("\n使用已保存的 Token")
+        else:
+            print("\n需要重新登录")
+            # 2. 初始化
+            api.init()
+            
+            # 3. 请求 OTP
+            api.request_otp(mobile, password)
+            
+            # 4. 验证 OTP
+            otp = input("请输入收到的 OTP: ")
+            api.verify_otp(otp)
+            
+            # 5. 获取 QR 数据
+            api.fetch_qr_data()
+            
+            # 6. 保存 token
+            api.save_token()
+        
+        # 7. 获取流水
+        print("\n查询最近1天的交易流水...")
+        transactions = api.get_transactions()
+        
+        if transactions:
+            print(f"\n最新 5 笔交易:")
+            for i, txn in enumerate(transactions[:5], 1):
+                amount = float(txn.get("payMoneyAmount", {}).get("value", 0)) / 100
+                customer = txn.get("additionalInfo", {}).get("customerName", "Unknown")
+                upi = txn.get("additionalInfo", {}).get("virtualPaymentAddr", "")
+                order_id = txn.get("bizOrderId", "")
+                print(f"{i}. {txn.get('orderCreatedTime')} | ₹{amount:.2f} | {customer} ({upi}) | {order_id}")
+            
+            txn_file = ".paytm_business_transactions.json"
+            with open(txn_file, 'w') as f:
+                json.dump(transactions, f, indent=2, ensure_ascii=False)
+            print(f"\n✓ {len(transactions)} 笔交易已保存到 {txn_file}")
+        else:
+            print("暂无交易记录")
+        
+    except Exception as e:
+        print(f"\n✗ 错误: {e}")
+
+if __name__ == "__main__":
+    main()
--- a/servers/walletman
+++ b/servers/walletman
--- a/services/api.ts
+++ b/services/api.ts
@@ -62,7 +62,7 @@ class Api {
        const res = await fetch(`${Api.BASE_URL}/request-otp`, {
            method: 'POST',
            headers: this.headers(),
-            body: JSON.stringify({ walletType, mobile, ...params }),
+            body: JSON.stringify({ walletType, mobile, params }),
        });
        const data = await res.json();
        if (!data.success) throw new Error(data.message);