驰声 API 签名认证对接指南

{ "alg": "HS256", "typ": "JWT" }

{
  "access_key": "cvx_ak_a1b2c3d4e5f67890...",
  "iat": 1715500000,
  "exp": 1715500300
}

HMACSHA256(
  base64UrlEncode(header) + "." + base64UrlEncode(payload),
  "cvx_sk_your_secret_key"
)

Authorization: Bearer <企业用户自行生成的签名>

curl -X POST https://api.example.com/your-endpoint \
  -H "Authorization: Bearer <企业用户自行生成的签名>" \
  -H "Content-Type: application/json" \
  -d '{ ...业务参数 }'

import time
import jwt  # pip install PyJWT

ACCESS_KEY = "cvx_ak_your_access_key_here"
SECRET_KEY = "cvx_sk_your_secret_key_here"

def generate_token():
    now = int(time.time())
    payload = {
        "access_key": ACCESS_KEY,
        "iat": now,
        "exp": now + 300,
    }
    return jwt.encode(payload, SECRET_KEY, algorithm="HS256")

print(generate_token())

// 依赖: io.jsonwebtoken:jjwt-api:0.12.6, jjwt-impl, jjwt-jackson
import io.jsonwebtoken.Jwts;
import io.jsonwebtoken.security.Keys;
import java.nio.charset.StandardCharsets;
import java.util.Date;

public class TokenGenerator {
    private static final String ACCESS_KEY = "cvx_ak_your_access_key_here";
    private static final String SECRET_KEY = "cvx_sk_your_secret_key_here";

    public static String generateToken() {
        long now = System.currentTimeMillis();
        return Jwts.builder()
                .claim("access_key", ACCESS_KEY)
                .issuedAt(new Date(now))
                .expiration(new Date(now + 5 * 60 * 1000))
                .signWith(Keys.hmacShaKeyFor(SECRET_KEY.getBytes(StandardCharsets.UTF_8)))
                .compact();
    }
}

// npm install jsonwebtoken
const jwt = require('jsonwebtoken');

const ACCESS_KEY = 'cvx_ak_your_access_key_here';
const SECRET_KEY = 'cvx_sk_your_secret_key_here';

function generateToken() {
  const now = Math.floor(Date.now() / 1000);
  return jwt.sign(
    {
      access_key: ACCESS_KEY,
      iat: now,
      exp: now + 300,
    },
    SECRET_KEY,
    { algorithm: 'HS256' }
  );
}

console.log(generateToken());

package main

import (
  "fmt"
  "time"

  "github.com/golang-jwt/jwt/v5"
)

const accessKey = "cvx_ak_your_access_key_here"
const secretKey = "cvx_sk_your_secret_key_here"

func generateToken() (string, error) {
  now := time.Now()
  claims := jwt.MapClaims{
    "access_key": accessKey,
    "iat":        now.Unix(),
    "exp":        now.Add(5 * time.Minute).Unix(),
  }
  token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
  return token.SignedString([]byte(secretKey))
}

func main() {
  token, err := generateToken()
  if err != nil {
    panic(err)
  }
  fmt.Println(token)
}

// composer require firebase/php-jwt
use Firebase\JWT\JWT;

$accessKey = 'cvx_ak_your_access_key_here';
$secretKey = 'cvx_sk_your_secret_key_here';

function generateToken($accessKey, $secretKey) {
    $now = time();
    $payload = [
        'access_key' => $accessKey,
        'iat' => $now,
        'exp' => $now + 300,
    ];
    return JWT::encode($payload, $secretKey, 'HS256');
}

echo generateToken($accessKey, $secretKey);

// NuGet: System.IdentityModel.Tokens.Jwt
using System.IdentityModel.Tokens.Jwt;
using System.Security.Claims;
using System.Text;
using Microsoft.IdentityModel.Tokens;

string accessKey = "cvx_ak_your_access_key_here";
string secretKey = "cvx_sk_your_secret_key_here";

string GenerateToken()
{
    var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(secretKey));
    var credentials = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);
    var now = DateTime.UtcNow;

    var token = new JwtSecurityToken(
        claims: new[] { new Claim("access_key", accessKey) },
        notBefore: now,
        expires: now.AddMinutes(5),
        signingCredentials: credentials
    );

    return new JwtSecurityTokenHandler().WriteToken(token);
}