Python实现接口签名调用的示例详解

import json
import requests
import hashlib
import time
import hmac
access_key = 'xxxxxxxxxxxxxxx'
secret_key = 'xxxxxxxxxxxxxxx'
# 应用信息
def _wps4_sig(method, url, date, body):    
    print(body)
    if body is None:
        bodySha = ""
    else:
        bodySha = hashlib.sha256(body.encode('utf-8')).hexdigest()

    content = "xxx-4" + method + url + "application/json" + date + bodySha
    print(content)
    signature = hmac.new(secret_key.encode('utf-8'), content.encode('utf-8'), hashlib.sha256).hexdigest()

    return "xxx-4 %s:%s" % (access_key, signature)


def wps4_request(method, host, uri, body=None, cookie=None, headers=None):
    requests.packages.urllib3.disable_warnings()

    if body is not None and not isinstance(body, str):
        body = json.dumps(body)

    date = time.strftime("%a, %d %b %Y %H:%M:%S GMT", time.gmtime())
    # date = "Fri, 03 Jan 2025 07:44:40 GMT"

    # print date
    header = {"Content-type": "application/json"}
    header['xxx-Docs-Date'] = date
    header['xxx-Docs-Authorization'] = _wps4_sig(method, uri, date, body)
    # header['xxx-Docs-Authorization'] ='xxx-4 LSURICXMDHRWXHKR:c7451af3b5318781ab323817d2411a8e40d6d5ae86a06b86676b0e6b7928579e'

    if headers != None:
        # header = {}
        for key, value in headers.items():
            header[key] = value

    url = "%s%s" % (host, uri)
    r = requests.request(method, url, data=body,
                         headers=header, cookies=cookie, verify=False)
    return r.status_code, r.text
def edit(file_id=1):
    url = '/api/edit/v1/files/{0}/link?type=w'.format(file_id)
    #result = wps4_request('post', 'https://core.equiclouds.com', '/www/dd/test/req_raw', '''{"a":1}''')
    #print(result[1])
    result = wps4_request('GET', 'http://xx.xx.xx.xxx:xxxx/open', url)
    print(result[0])
    print(result[1])
edit()

import requests
def get_oauth_token(client_id, client_secret, token_url):
    data = {
        'grant_type': 'client_credentials',
        'client_id': client_id,
        'client_secret': client_secret,
    }
    resp = requests.post(token_url, data=data)
    return resp.json()['access_token']
# 获取 token
token = get_oauth_token('your_client_id', 'your_secret', 'https://auth.example.com/token')
# 使用 token 调用 API
headers = {'Authorization': f'Bearer {token}'}
resp = requests.get('https://api.example.com/data', headers=headers)

import jwt
import time
SECRET_KEY = "your_secret_key"   # 或使用 RSA 私钥
payload = {
    'user_id': 123,
    'exp': int(time.time()) + 3600   # 1小时后过期
}
token = jwt.encode(payload, SECRET_KEY, algorithm='HS256')
headers = {'Authorization': f'Bearer {token}'}
resp = requests.get('https://api.example.com/protected', headers=headers)

from cryptography.hazmat.primitives import hashes, serialization
from cryptography.hazmat.primitives.asymmetric import padding
import base64
import requests
def sign_with_rsa(private_key_pem, message):
    # 加载私钥
    private_key = serialization.load_pem_private_key(private_key_pem, password=None)
    # 签名
    signature = private_key.sign(
        message.encode('utf-8'),
        padding.PKCS1v15(),
        hashes.SHA256()
    )
    return base64.b64encode(signature).decode('utf-8')
# 读取私钥（通常为 PEM 格式）
private_key = open('private_key.pem', 'rb').read()
message = "GET /api/v1/resource"   # 实际为请求行或参数组合
signature = sign_with_rsa(private_key, message)
headers = {'X-Signature': signature, 'X-User': 'client_id'}
resp = requests.get('https://api.example.com/resource', headers=headers)

import hashlib
import requests
def md5_sign(params, salt):
    # 按固定顺序拼接（通常文档指定）
    raw = f"key1={params['key1']}&key2={params['key2']}&salt={salt}"
    return hashlib.md5(raw.encode('utf-8')).hexdigest()
params = {'amount': 100, 'order_id': '123'}
params['sign'] = md5_sign(params, 'your_salt')
response = requests.post('https://api.example.com/pay', data=params)