HMAC-SHA1算法签名及Authorization头认证

使用PHP进行HMAC-SHA1签名，并通过Authorization头认证Deom

 

$app_id = 'id';
$host = "test.abc.com";
$port = "80";
$app_Key = "key";
$app_timestamp = time();
$app_nonce = "8FINtYTUsKbSZGfl".time().rand(10,1000);
$uri = "/account/ass/verify.do";


//build string
$arr = array($app_timestamp, $app_nonce, "POST", $uri, $host, $port);
$text = join("\n", $arr) . "\n\n";
var_dump($text);
$sig = get_signature($text, $app_Key);
var_dump($sig);

$headers=array();
$headers[] = "Authorization: MAC id=\"$app_id\",ts=\"$app_timestamp\",nonce=\"$app_nonce\",mac=\"$sig\"";
$headers[]="Content-Type: application/json";


$data='{"h":"2D4D9BE245FC4172989BC5FAD7EC8784","n":"97C5237B","t":"1428462620","v":"8F2ACF569FCBFDA9081248486240170B325AFF6D"}';

$result = curlPost('http://t-id.gionee.com'.$uri,  $headers, $data);

/**
 * @使用HMAC-SHA1算法生成oauth_signature签名值
 *
 * @param $key  密钥
 * @param $str  源串
 *
 * @return 签名值
 */

function get_signature($str, $key) {
    $signature = "";
    if (function_exists('hash_hmac')) {
        $signature = base64_encode(hash_hmac("sha1", $str, $key, true));
    } else {
        $blocksize = 64;
        $hashfunc = 'sha1';
        if (strlen($key) > $blocksize) {
            $key = pack('H*', $hashfunc($key));
        }
        $key = str_pad($key, $blocksize, chr(0x00));
        $ipad = str_repeat(chr(0x36), $blocksize);
        $opad = str_repeat(chr(0x5c), $blocksize);
        $hmac = pack(
            'H*', $hashfunc(
                ($key ^ $opad) . pack(
                    'H*', $hashfunc(
                        ($key ^ $ipad) . $str
                    )
                )
            )
        );
        $signature = base64_encode($hmac);
    }
    return $signature;
}

function curlPost($url, $headers = array(), $data = array()) {
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); //设置不验证ssl， 发送https接口请求时需要加此行
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false); //设置不验证ssl， 发送https接口请求时需要加此行
    if (!empty($data)) {
        curl_setopt($ch, CURLOPT_POST, 1);
        curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
    }
    if (!empty($headers)) {
        curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
        var_dump('set header');
        var_dump($headers);
    }
    $output = curl_exec($ch);
    curl_close($ch);
    return $output;
}

 

附：java算法示例：

package net.svr.cas.test.demo;
import java.io.UnsupportedEncodingException;
import java.security.InvalidKeyException;
import java.security.NoSuchAlgorithmException;
import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import net.iharder.Base64;

public class sig_demo_app {
    private static final String MAC_NAME = "HmacSHA1";
    private static final String UTF8 = "UTF-8";
    private static final byte[] BYTEARRAY = new byte[0];

    public static void main(String[] args) {    
        String host = "id.test.cn"; 
        String port = "443"; 
        String app_Key = "请填写你的AppKey";
        String app_timestamp = "1369732102";
        String app_nonce = "8FINtYTUsKbSZGfl";
        String uri = "/account/verify.do";

        String sig = macSig(host, port, app_Key, app_timestamp, app_nonce, "POST", uri);
        System.out.println(sig);
    }

    public static String macSig(String host, String port, String macKey, String timestamp, String nonce, String method, String uri) {
        // 1. build mac string
        // 2. hmac-sha1
        // 3. base64-encoded

        StringBuffer buffer = new StringBuffer();
        buffer.append(timestamp).append("\n");
        buffer.append(nonce).append("\n");
        buffer.append(method.toUpperCase()).append("\n");
        buffer.append(uri).append("\n");
        buffer.append(host.toLowerCase()).append("\n");
        buffer.append(port).append("\n");
        buffer.append("\n");
        String text = buffer.toString();
        
        System.out.println(text);

        byte[] ciphertext = null;
        try {
            ciphertext = hmacSHA1Encrypt(macKey, text);
        } catch (Throwable e) {
            return null;
        }

        String sigString = Base64.encodeBytes(ciphertext);
        return sigString;
    }

    public static byte[] hmacSHA1Encrypt(String encryptKey, String encryptText) throws InvalidKeyException, NoSuchAlgorithmException {
        Mac mac = Mac.getInstance(MAC_NAME);
        mac.init(new SecretKeySpec(getBytes(encryptKey), MAC_NAME));
        return mac.doFinal(getBytes(encryptText));
    }
    
    public static byte[] getBytes(String value) {
        return getBytes(value, UTF8);
    }

    public static byte[] getBytes(String value, String charset) {
        if (isNullOrEmpty(value))
            return BYTEARRAY;
        if (isNullOrEmpty(charset))
            charset = UTF8;
        try {
            return value.getBytes(charset);
        } catch (UnsupportedEncodingException e) {
            return BYTEARRAY;
        }
    }
    
    public static boolean isNullOrEmpty(String s) {
        if (s == null || s.isEmpty() || s.trim().isEmpty())
            return true;
        return false;
    }
}