Demo
Java
186
import cn.hutool.http.HttpRequest;
import cn.hutool.http.HttpResponse;
import com.alibaba.fastjson.JSON;
import com.alibaba.fastjson.JSONObject;
import lombok.Data;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.codec.binary.Base64;

import java.security.KeyFactory;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.Signature;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.X509EncodedKeySpec;

/**
 * Created by wujie
 */
@Slf4j
public class RSASignUtil {

    /**
     * RSA 算法
     **/
    private static final String ALGORITHM_RSA = "RSA";

    /**
     * 签名算法
     **/
    private static final String ALGORITHM_SIGNATURE = "SHA256withRSA";


    @Data
    public static class SignContentDTO {

        /**
         * 授权应用id
         */
        private String appId;

        /**
         * sign生成时间戳
         */
        private Long timestamp;

    }

    public static void main(String[] args) throws Exception {
        String appId = "wja0q53lmql4cm2yd1";
        String privatekey = "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\";
        String publicKey = "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrmkXAGJJg8Sjm3QuWDRpZbDAnZzTSxO9cxJr0nKgHTQgW394GsrXeQbTfb/mHWWKl0qvFpMoX0URxj2fzu80P+CNTCiu8DU3slZmq8DHwpEsSGuXKKiU1evHalmsiOvab0C2AasHyqojG7w2P1q76QPLkkT0jH4ibbcq+xIv61QIDAQAB";

        Long timestamp = System.currentTimeMillis() / 1000;
        SignContentDTO original = new SignContentDTO();
        original.setAppId(appId);
        original.setTimestamp(timestamp);

        // {"secretKeyVersion":1, "appId":wja0q53lmql4cm2yd1, "original": {"appId":"wja0q53lmql4cm2yd1", "timestamp": 1675404556}, "sign":"JupizeQgE+HZTXS2Spe81gW2sgdar4GPQz9vEo3yV8xzxSnRskN/Mv/SssME1VuWLNYVesCD3L5nDyTYA+azL3bL/Bfn+b1Mx7e/D+EURlfLyESZAWDYEDzqcC/bnUqeGp/uG9nDqugkscJ6pW595DSqnTyQ53oJBo2HmJPQOo0="}
        String data = JSON.toJSONString(original);
        System.out.println("data " + data);
        String sign = signByPrivateKey(privatekey, data);
        System.out.println("sign " + sign);

        boolean verify = verifyByPublicKeyStr(publicKey, data, sign);
        System.out.println(verify);

        JSONObject authorization = new JSONObject();
        authorization.put("sign", sign);
        authorization.put("secretKeyVersion", "1");
        authorization.put("appId", appId);
        authorization.put("original", data);
        String url = "https://gate.wujiebantu.com/wj-open/v1/ai/model_base_infos";
        try {
            String auth = authorization.toJSONString();
            System.out.println("Authorization " + auth);
            HttpResponse response = HttpRequest.get(url).header("Authorization", auth).execute();
            String result = response.body();
            System.out.println("trace_id " + response.header("trace_id"));
            System.out.println(result);
        } catch (Exception e) {
            e.printStackTrace();
        }
    }

    /**
     * 对数据使用私钥签名
     *
     * @param privateKeyStr BASE64编码格式的私钥
     * @param data          待签名数据
     * @throws Exception
     */
    public static String signByPrivateKey(String privateKeyStr, String data) throws Exception {
        PrivateKey privateKey = generatePrivateByString(privateKeyStr);
        byte[] bytes = sign(privateKey, data.getBytes());
        return Base64.encodeBase64String(bytes);
    }

    /**
     * 对数据使用私钥签名
     *
     * @param privateKey
     * @param data
     * @return
     * @throws Exception
     */
    private static byte[] sign(PrivateKey privateKey, byte[] data) throws Exception {
        Signature signature = Signature.getInstance(ALGORITHM_SIGNATURE);
        signature.initSign(privateKey);
        signature.update(data);
        return signature.sign();
    }

    /**
     * 对数据使用公钥验签
     *
     * @param publicKeyStr BASE64编码格式的私钥
     * @param data         待验签数据
     * @param sign         签名数据，进行BASE64解码后验证签名
     * @return
     */
    public static boolean verifyByPublicKeyStr(String publicKeyStr, String data, String sign) {
        try {
            PublicKey publicKey = generatePublicByString(publicKeyStr);
            return verify(publicKey, data.getBytes(), Base64.decodeBase64(sign));
        } catch (Exception e) {
            log.error("verifyByPublicKeyStr error", e);
            return false;
        }
    }

    /**
     * 对数据使用公钥验签
     *
     * @param publicKey
     * @param data
     * @param sign
     * @return
     * @throws Exception
     */
    private static boolean verify(PublicKey publicKey, byte[] data, byte[] sign) throws Exception {
        Signature signature = Signature.getInstance(ALGORITHM_SIGNATURE);
        signature.initVerify(publicKey);
        signature.update(data);
        return signature.verify(sign);
    }

    /**
     * 获取PrivateKey
     *
     * @param privateKeyStr
     * @return
     * @throws Exception
     */
    private static PublicKey generatePublicByString(String privateKeyStr) throws Exception {
        byte[] encodedKey = Base64.decodeBase64(privateKeyStr);
        return generatePublic(encodedKey);
    }

    /**
     * 获取PrivateKey
     *
     * @param privateKeyStr
     * @return
     * @throws Exception
     */
    private static PrivateKey generatePrivateByString(String privateKeyStr) throws Exception {
        byte[] encodedKey = Base64.decodeBase64(privateKeyStr);
        return generatePrivate(encodedKey);
    }

    private static PublicKey generatePublic(byte[] encodedKey) throws Exception {
        X509EncodedKeySpec keySpec = new X509EncodedKeySpec(encodedKey);
        KeyFactory keyFactory = KeyFactory.getInstance(ALGORITHM_RSA);
        PublicKey publicKey = keyFactory.generatePublic(keySpec);
        return publicKey;
    }

    private static PrivateKey generatePrivate(byte[] encodedKey) throws Exception {
        PKCS8EncodedKeySpec keySpec = new PKCS8EncodedKeySpec(encodedKey);
        KeyFactory keyFactory = KeyFactory.getInstance(ALGORITHM_RSA);
        PrivateKey privateKey = keyFactory.generatePrivate(keySpec);
        return privateKey;
    }
}

﻿
Python
67
from Crypto.PublicKey import RSA
from Crypto.Hash import SHA256
from Crypto.Signature import pkcs1_15
import requests
import time
import json
import base64


# RSA签名
def rsa_sign(data, rsa_key):
    h = SHA256.new(data.encode('utf-8'))
    signature = pkcs1_15.new(rsa_key).sign(h)
    return str(base64.b64encode(signature), encoding = "utf-8")


# RSA签名验证
def rsa_sign_verify(data, sig, rsa_key):
    try:
        h = SHA256.new(data.encode('utf-8'))
        pkcs1_15.new(rsa_key).verify(h, base64.b64decode(sig))
        ret = True
    except (ValueError, TypeError):
        ret = False
    return ret


def test(appid):
    now = int(time.time())
    # 构造鉴权信息
    plain_text = {
        "appId": appid,
        "timestamp": now
    }
    original = json.dumps(plain_text, separators=(',', ':'))
    print(f"original {original}")
    auth = {
        "appId": appid,
        "secretKeyVersion": "1",
        "sign": sign(original),
        "original": plain_text
    }
    headers = {"Authorization": json.dumps(auth, separators=(',', ':'))}
    print(f"headers {headers}")
    # 调用API进行测试
    response = requests.get(f"https://gate.wujiebantu.com/wj-open/v1/ai/model_base_infos", headers=headers)
    response.encoding = "utf-8"
    print(f"{response.status_code} trace_id:{response.headers.get('TRACE_ID')} 响应内容 {response.text}")

def sign(text):
    private_key_base64_str = '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'
    public_key_base64_str = 'MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrmkXAGJJg8Sjm3QuWDRpZbDAnZzTSxO9cxJr0nKgHTQgW394GsrXeQbTfb/mHWWKl0qvFpMoX0URxj2fzu80P+CNTCiu8DU3slZmq8DHwpEsSGuXKKiU1evHalmsiOvab0C2AasHyqojG7w2P1q76QPLkkT0jH4ibbcq+xIv61QIDAQAB'
    private_key=base64.b64decode(private_key_base64_str)
    public_key=base64.b64decode(public_key_base64_str)

    sign = rsa_sign(text, RSA.importKey(private_key))
    print(f"sign:{sign}")
    sign_result = rsa_sign_verify(text, sign, RSA.importKey(public_key))
    print(f"sign_result:{sign_result}")
    return sign


if __name__ == "__main__":
    appid = 'wja0q53lmql4cm2yd1'
    test(appid)

﻿
Postman(JS)
可将其贴到pre-script中，方便在postman内调试
41
let jsUrl = "https://gitee.com/lzq1357/various/raw/master/forge_min.js"
//1. 去浏览器里把这个库全量复制一下，然后贴到Global变量里，命名为forge
//2. 在Postman环境变量中配置自己的appId、privateKey
//3. 即可发起请求
eval(pm.globals.get('forge'));

//签名流程
let timestamp = parseInt(Date.now()/1000).toString();
let appId = pm.environment.get('appId');
let plaintText = JSON.stringify({
  appId: appId,//用于指定客户appID
  timestamp: timestamp
})

var auth = JSON.stringify({
    appId:appId,
    secretKeyVersion: "1",
    sign: sign(plaintText),
    original:plaintText
})

pm.request.headers['Authorization'] = auth
//动态修改请求头，postman7.0.9之后的版本支持，详情见https://github.com/postmanlabs/postman-app-support/issues/4631 
pm.request.headers.add({
  key: 'Authorization',
  value: auth
})

function sign(plaintText) {
    let key = "-----BEGIN PRIVATE KEY-----\n" +
        pm.environment.get("privateKey") +
        "-----END PRIVATE KEY-----\n";
    var prk = forge.pki.privateKeyFromPem(key);
    const md = forge.md.sha256.create();
    md.update(plaintText, "utf8");
    var sign64 = prk.sign(md);
    var sign = forge.util.encode64(sign64)
    console.log(sign);
    return sign;
}
﻿
PHP
46
$privateKey = "-----BEGIN RSA PRIVATE KEY---
MIICd333qhkiG9w0BAQEFAASCAmEwggJdAgEAAoGBAILXvZ+ftZh1NXJjvPnHZqGbw+ZBoJIHS21N+EsExzwHwdf8nlzfg4bn6rtwSPa/d8Z1NupMUIUZlDONqPdwVqH0QMSkrSE1nA9iRaToW58NZvzEVz1+1NnH0KBwjxRR+pnod3oFEzS7XlJlC3F370nW1LCB9SG06ciU/A2dEDn3AgMBAAECgYB0FLEvz8KNatcrEB+VPnnoQMhRHMI3K++YHsd8ztVvhbZNR9q7rLUE1/ZhquGgwAekc1NwFJqPKz1Xa4OPWwQPygtNfQC0Uqfcy/1OgT7rfBsfm6TUHAb8mC+XnyK6BVA87xXAwciprNoU27d7KR4zTuTxUlwQs//9ISf+uVA66QJBAN7yvmychW5ODxxjbb7disqGMIsbhW9wZAhTbxy97duGPNfioZKwLtA0cltV12zkksJ42tOmk8uOpTR22/FVu3MCQQCWPXDDrCCs2v1syHyn1lrV+AHDqgN/DO1D1gt43t59+4B2hQWj/0yI+Yg8RW7bQnRYAj4l5vLTm1q+SyMt7G5tAkEAtOlNVFz+eS+mW2bjWwny4bxaD8dZU8Bjq83oT+5e4M/g913TtnB4zEKCuVLC6H3iCSSAjVaSf49Ux2nbt83VuQJBAI2IhfGf9wxAJRvU5zIJynrl72uPf0myONZ+D0Kn2jwesQ92EzFCsawcPw5gbqWZvhamzjtQjRNxuBOqnxKFOCUCQDu+oLP8NFpEvWs+o+2RMiuyO9VyLGG4gPnam27YdPgAPhC6SwIok+mcHzqCllHkCFk//3wugMagQOF6eATlaYo=
-----END RSA PRIVATE KEY-----";
        $publicKey  = "-----BEGIN RSA PUBLIC KEY---
MIGfMA0GCSqGSIb3443UAA4GNADCBiQKBgQCC172fn7WYdTVyY7z5x2ahm8PmQaCSB0ttTfhLBMc8B8HX/J5c34OG5+q7cEj2v3fGdTbqTFCFGZQzjaj3cFah9EDEpK0hNZwPYkWk6FufDWb8xFc9ftTZx9CgcI8UUfqZ6Hd6BRM0u15SZQtxd+9J1tSwgfUhtOnIlPwNnRA59wIDAQAB
-----END RSA PUBLIC KEY-----";

// 生成签名原文
$appid        = 'wjmpv3333mxzqqrb8di';
$timestamp    = time();  // 当前时间戳
$originalData = array(
  "appId"     => $appid,
  "timestamp" => $timestamp
);
ksort($originalData);  // 按照字母顺序排序
$originalText = json_encode($originalData);

// 使用私钥进行签名
$signer = new \phpseclib\Crypt\RSA();
$signer->loadKey($privateKey);
$signer->setHash('sha256');
$signer->setSignatureMode(RSA::SIGNATURE_PKCS1);
$sign = $signer->sign($originalText);
$sign = base64_encode($sign);

// 添加签名到请求头部中
$headers = array(
  "Authorization: " . json_encode(array(
    "secretKeyVersion" => "1",
    "appId"            => $appid,
    "sign"             => $sign,
    "original"         => $originalText
  ))
);

// 发起 API 请求
$url = "https://gate.wujiebantu.com/wj-open/v1/ai/model_base_infos";
$ch  = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
$response = curl_exec($ch);
curl_close($ch);

// 处理响应数据
$data = json_decode($response, true);
﻿
﻿
Golang
109
package main

import (
	"crypto"
	"crypto/rand"
	"crypto/rsa"
	"crypto/sha256"
	"crypto/x509"
	"encoding/base64"
	"encoding/json"
	"fmt"
	"net/http"
	"time"
)

var (
	appId      = "wja0q53lmql4cm2yd1"
	privatekey = "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\""
	publicKey  = "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrmkXAGJJg8Sjm3QuWDRpZbDAnZzTSxO9cxJr0nKgHTQgW394GsrXeQbTfb/mHWWKl0qvFpMoX0URxj2fzu80P+CNTCiu8DU3slZmq8DHwpEsSGuXKKiU1evHalmsiOvab0C2AasHyqojG7w2P1q76QPLkkT0jH4ibbcq+xIv61QIDAQAB"
	url        = "https://gate.wujiebantu.com/wj-open/v1/ai/model_base_infos"
)

func main() {
	timestamp := time.Now().UnixMilli() / 1000
	original := &SignContent{
		AppId:     appId,
		Timestamp: timestamp,
	}
	dataByte, _ := json.Marshal(original)
	data := string(dataByte)
	fmt.Println("data ", data)
	signedStr, err := signByPrivateKey(privatekey, data)
	if err != nil {
		panic(err)
	}
	fmt.Println("sign ", signedStr)
	verify, err := verifyByPublicKey(publicKey, data, signedStr)
	if err != nil {
		panic(err)
	}
	fmt.Println("versify ", verify)

	authorization := map[string]string{
		"sign":             signedStr,
		"secretKeyVersion": "1",
		"appId":            appId,
		"original":         data,
	}
	auth, _ := json.Marshal(authorization)
	authStr := string(auth)
	fmt.Println("Authorization", authStr)
	req, _ := http.NewRequest("GET", url, nil)
	req.Header.Set("Authorization", authStr)

	client := &http.Client{}
	resp, err := client.Do(req)
	if err != nil {
		panic(err)
	}
	defer resp.Body.Close()
	fmt.Println("trace_id", resp.Header.Get("trace_id"))
	res := make([]byte, 1000)
	n, _ := resp.Body.Read(res)
	fmt.Println(string(res[:n]))
}

type SignContent struct {
	AppId     string `json:"appId"`
	Timestamp int64  `json:"timestamp"`
}

// 使用私钥对数据签名
func signByPrivateKey(privateKeyBase64, data string) (string, error) {
	pkBytes, _ := base64.StdEncoding.DecodeString(privateKeyBase64)
	RsaPtr, err := x509.ParsePKCS8PrivateKey(pkBytes)
	RsaPk := RsaPtr.(*rsa.PrivateKey)
	if err != nil {
		return "", err
	}
	hash := sha256.New()
	hash.Write([]byte(data))
	digest := hash.Sum(nil)
	signBytes, err := rsa.SignPKCS1v15(rand.Reader, RsaPk, crypto.SHA256, digest)
	if err != nil {
		return "", err
	}
	return base64.StdEncoding.EncodeToString(signBytes), nil
}

// 使用公钥验签
func verifyByPublicKey(publicKeyBase64, data, signBase64 string) (bool, error) {
	pkBytes, _ := base64.StdEncoding.DecodeString(publicKeyBase64)
	sign, _ := base64.StdEncoding.DecodeString(signBase64)
	RsaPtr, err := x509.ParsePKIXPublicKey(pkBytes)
	if err != nil {
		return false, err
	}
	RsaPublicKey := RsaPtr.(*rsa.PublicKey)
	hash := sha256.New()
	hash.Write([]byte(data))
	digest := hash.Sum(nil)
	err = rsa.VerifyPKCS1v15(RsaPublicKey, crypto.SHA256, digest, sign)
	if err != nil {
		return false, err
	}
	return true, nil
}

﻿