关于hmac sha256 我的计算结果和人家的有出入 - 递归火山软件开发平台

import got, { Method } from 'got';
import { createHash, createHmac } from 'crypto';
const endpoint = 'https://xxx.com';
const accessKey = '<your key>';
const accessSecret = '<your secret>';
const signatureVersion = '2.0';
async function call(method: Method, body?: Record<string, any>) {
const pathname = '/xxx';
const contentType = 'application/json';
const requestTime = Date.now();
const headers: Record<string, string | number> = {
'x-ty-timestamp': requestTime,
'x-ty-accesskey': accessKey,
'x-ty-signature-version': signatureVersion,
'content-type': contentType,
};
const customHeaders: Record<string, string | number> = {};
for (const headerKey of Object.keys(headers)) {
if (headerKey.startsWith('x-ty-')) {
customHeaders[headerKey] = headers[headerKey];
}
}
const query = {};
const orderedCustomHeaderString = keyPairsToOrderedString(customHeaders);
const orderedQueryString = keyPairsToOrderedString(query);
let body_hash = '';
if (contentType === 'application/json') {
if (Object.keys(body ?? {}).length) {
// 这里直接使用 JSON.stringify 是因为 got 在发送 json 时采用同样的参数
body_hash = createHash('sha256')
.update(JSON.stringify(body ?? {}))
.digest('hex');
}
}
const signaturedString = [
fixedEncodeURIComponent(pathname),
fixedEncodeURIComponent(method.toUpperCase()),
fixedEncodeURIComponent(contentType),
orderedCustomHeaderString,
orderedQueryString,
body_hash,
requestTime,
accessKey,
signatureVersion,
].join('\n');
const targetSignature = createHmac('sha256', accessSecret).update(signaturedString).digest('hex');
console.log(signaturedString);
const ret = await got(`${endpoint}${pathname}`, {
method,
headers: {
...headers,
Authorization: targetSignature,
},
throwHttpErrors: false,
});
console.log(ret.body);
}
function keyPairsToOrderedString(keyPairs: Record<string, any>) {
return Object.keys(keyPairs)
.sort()
.map((key) => `${fixedEncodeURIComponent(key)}=${fixedEncodeURIComponent(String(keyPairs[key] || ''))}`)
.join('&');
}
function fixedEncodeURIComponent(str: string) {
return encodeURIComponent(str).replace(/[!'()*]/g, function (c) {
return '%' + c.charCodeAt(0).toString(16);
});
}
void call('post', {
foo: 'bar',
});

复制代码

<火山程序类型 = "通常" 版本 = 1 />
方法请求 <公开静态>
{
变量 apiUrl <类型 = 文本型>
apiUrl = "https://xxxx.com"
变量 accessKey <类型 = 文本型>
accessKey = "123123123"
变量 accessSecret <类型 = 文本型>
accessSecret = "123123123"
变量 signatureVersion <类型 = 文本型>
signatureVersion = "2.0"
变量 pathname <类型 = 文本型>
pathname = "/xxxxx"
变量 contentType <类型 = 文本型>
contentType = "application/json"
变量 requestTime <类型 = 长整数>
requestTime = 取毫秒时间戳 (取现行时间 ())
变量 headers <类型 = Headers类Ex>
headers.添加 ("x-ty-timestamp", 到文本 (requestTime))
headers.添加 ("x-ty-accesskey", accessKey)
headers.添加 ("x-ty-signature-version", signatureVersion)
headers.添加 ("content-type", contentType)
变量 orderedCustomHeaderString <类型 = 文本型>
// orderedCustomHeaderString = URL编码Ex ("x-ty-accesskey=" + accessKey + "&" + "x-ty-signature-version=" + signatureVersion + "&" + "x-ty-timestamp=" + 到文本 (requestTime))
orderedCustomHeaderString = URL编解码类.编码文本 ("x-ty-accesskey=" + accessKey + "&" + "x-ty-signature-version=" + signatureVersion + "&" + "x-ty-timestamp=" + 到文本 (requestTime))
变量 orderedQueryString <类型 = JSON对象类Ex>
变量 signatured <类型 = JSON数组类Ex>
signatured.置入文本值 (URL编码Ex (pathname), 0)
signatured.置入文本值 (URL编码Ex ("GET"), 1)
signatured.置入文本值 (URL编码Ex (contentType), 2)
signatured.置入文本值 (orderedCustomHeaderString, 3)
signatured.置入对象值 (orderedQueryString, 4)
signatured.置入长整数值 (requestTime, 5)
signatured.置入文本值 (accessKey, 6)
signatured.置入文本值 (signatureVersion, 7)
// 调试输出 (signatured.到可读文本 ())
变量 signaturedString <类型 = 文本型>
计次循环 (signatured.取成员数 ())
{
signaturedString = signaturedString + signatured.取文本值 (取循环索引 ()) + "\n"
}
// 调试输出 (signaturedString)
变量 targetSignature <类型 = 文本型>
targetSignature = 加解密类.取数据HMAC_SHA256 (到字节集 (signaturedString), accessSecret)
headers.添加 ("Authorization", targetSignature)
// 网页访问Ex_T (apiUrl + pathname, E_请求类型.GET, , , headers, , , , , , , , , , , , , , , , , )
调试输出 (网页访问Ex_T (apiUrl + pathname, E_请求类型.GET, , , headers, , , , , , , , , , , , , , , , , ))
}

复制代码