103 lines
2.7 KiB
TypeScript
103 lines
2.7 KiB
TypeScript
import { sign, hash as getHash, hex } from "./hmac";
|
||
|
||
// 使用 SHA-256 和 secret 进行 HMAC 加密
|
||
function sha256(message: any, secret: any, encoding?: string) {
|
||
const result = sign(secret, message);
|
||
return encoding == "hex" ? hex(result).toString() : result;
|
||
}
|
||
|
||
function getDate(timestamp: number) {
|
||
const date = new Date(timestamp * 1000);
|
||
const year = date.getUTCFullYear();
|
||
const month = ("0" + (date.getUTCMonth() + 1)).slice(-2);
|
||
const day = ("0" + date.getUTCDate()).slice(-2);
|
||
return `${year}-${month}-${day}`;
|
||
}
|
||
|
||
export async function getHeader(
|
||
payload: any,
|
||
SECRET_ID: string,
|
||
SECRET_KEY: string,
|
||
) {
|
||
// https://cloud.tencent.com/document/api/1729/105701
|
||
|
||
const endpoint = "hunyuan.tencentcloudapi.com";
|
||
const service = "hunyuan";
|
||
const region = ""; // optional
|
||
const action = "ChatCompletions";
|
||
const version = "2023-09-01";
|
||
const timestamp = Math.floor(Date.now() / 1000);
|
||
//时间处理, 获取世界时间日期
|
||
const date = getDate(timestamp);
|
||
|
||
// ************* 步骤 1：拼接规范请求串 *************
|
||
|
||
const hashedRequestPayload = getHash(payload);
|
||
const httpRequestMethod = "POST";
|
||
const contentType = "application/json";
|
||
const canonicalUri = "/";
|
||
const canonicalQueryString = "";
|
||
const canonicalHeaders =
|
||
`content-type:${contentType}\n` +
|
||
"host:" +
|
||
endpoint +
|
||
"\n" +
|
||
"x-tc-action:" +
|
||
action.toLowerCase() +
|
||
"\n";
|
||
const signedHeaders = "content-type;host;x-tc-action";
|
||
|
||
const canonicalRequest = [
|
||
httpRequestMethod,
|
||
canonicalUri,
|
||
canonicalQueryString,
|
||
canonicalHeaders,
|
||
signedHeaders,
|
||
hashedRequestPayload,
|
||
].join("\n");
|
||
|
||
// ************* 步骤 2：拼接待签名字符串 *************
|
||
const algorithm = "TC3-HMAC-SHA256";
|
||
const hashedCanonicalRequest = getHash(canonicalRequest);
|
||
const credentialScope = date + "/" + service + "/" + "tc3_request";
|
||
const stringToSign =
|
||
algorithm +
|
||
"\n" +
|
||
timestamp +
|
||
"\n" +
|
||
credentialScope +
|
||
"\n" +
|
||
hashedCanonicalRequest;
|
||
|
||
// ************* 步骤 3：计算签名 *************
|
||
const kDate = sha256(date, "TC3" + SECRET_KEY);
|
||
const kService = sha256(service, kDate);
|
||
const kSigning = sha256("tc3_request", kService);
|
||
const signature = sha256(stringToSign, kSigning, "hex");
|
||
|
||
// ************* 步骤 4：拼接 Authorization *************
|
||
const authorization =
|
||
algorithm +
|
||
" " +
|
||
"Credential=" +
|
||
SECRET_ID +
|
||
"/" +
|
||
credentialScope +
|
||
", " +
|
||
"SignedHeaders=" +
|
||
signedHeaders +
|
||
", " +
|
||
"Signature=" +
|
||
signature;
|
||
|
||
return {
|
||
Authorization: authorization,
|
||
"Content-Type": contentType,
|
||
Host: endpoint,
|
||
"X-TC-Action": action,
|
||
"X-TC-Timestamp": timestamp.toString(),
|
||
"X-TC-Version": version,
|
||
"X-TC-Region": region,
|
||
};
|
||
}
|