103 lines
2.7 KiB
TypeScript
103 lines
2.7 KiB
TypeScript
import { hash as getHash, hex, sign } from './hmac';
|
||
|
||
// 使用 SHA-256 和 secret 进行 HMAC 加密
|
||
function sha256(message: any, secret: any, encoding?: string) {
|
||
const result = sign(secret, message);
|
||
return encoding === 'hex' ? hex(result).toString() : result;
|
||
}
|
||
|
||
function getDate(timestamp: number) {
|
||
const date = new Date(timestamp * 1000);
|
||
const year = date.getUTCFullYear();
|
||
const month = (`0${date.getUTCMonth() + 1}`).slice(-2);
|
||
const day = (`0${date.getUTCDate()}`).slice(-2);
|
||
return `${year}-${month}-${day}`;
|
||
}
|
||
|
||
export async function getHeader(
|
||
payload: any,
|
||
SECRET_ID: string,
|
||
SECRET_KEY: string,
|
||
) {
|
||
// https://cloud.tencent.com/document/api/1729/105701
|
||
|
||
const endpoint = 'hunyuan.tencentcloudapi.com';
|
||
const service = 'hunyuan';
|
||
const region = ''; // optional
|
||
const action = 'ChatCompletions';
|
||
const version = '2023-09-01';
|
||
const timestamp = Math.floor(Date.now() / 1000);
|
||
// 时间处理, 获取世界时间日期
|
||
const date = getDate(timestamp);
|
||
|
||
// ************* 步骤 1：拼接规范请求串 *************
|
||
|
||
const hashedRequestPayload = getHash(payload);
|
||
const httpRequestMethod = 'POST';
|
||
const contentType = 'application/json';
|
||
const canonicalUri = '/';
|
||
const canonicalQueryString = '';
|
||
const canonicalHeaders
|
||
= `content-type:${contentType}\n`
|
||
+ `host:${
|
||
endpoint
|
||
}\n`
|
||
+ `x-tc-action:${
|
||
action.toLowerCase()
|
||
}\n`;
|
||
const signedHeaders = 'content-type;host;x-tc-action';
|
||
|
||
const canonicalRequest = [
|
||
httpRequestMethod,
|
||
canonicalUri,
|
||
canonicalQueryString,
|
||
canonicalHeaders,
|
||
signedHeaders,
|
||
hashedRequestPayload,
|
||
].join('\n');
|
||
|
||
// ************* 步骤 2：拼接待签名字符串 *************
|
||
const algorithm = 'TC3-HMAC-SHA256';
|
||
const hashedCanonicalRequest = getHash(canonicalRequest);
|
||
const credentialScope = `${date}/${service}/` + `tc3_request`;
|
||
const stringToSign
|
||
= `${algorithm
|
||
}\n${
|
||
timestamp
|
||
}\n${
|
||
credentialScope
|
||
}\n${
|
||
hashedCanonicalRequest}`;
|
||
|
||
// ************* 步骤 3：计算签名 *************
|
||
const kDate = sha256(date, `TC3${SECRET_KEY}`);
|
||
const kService = sha256(service, kDate);
|
||
const kSigning = sha256('tc3_request', kService);
|
||
const signature = sha256(stringToSign, kSigning, 'hex');
|
||
|
||
// ************* 步骤 4：拼接 Authorization *************
|
||
const authorization
|
||
= `${algorithm
|
||
} `
|
||
+ `Credential=${
|
||
SECRET_ID
|
||
}/${
|
||
credentialScope
|
||
}, `
|
||
+ `SignedHeaders=${
|
||
signedHeaders
|
||
}, `
|
||
+ `Signature=${
|
||
signature}`;
|
||
|
||
return {
|
||
'Authorization': authorization,
|
||
'Content-Type': contentType,
|
||
'Host': endpoint,
|
||
'X-TC-Action': action,
|
||
'X-TC-Timestamp': timestamp.toString(),
|
||
'X-TC-Version': version,
|
||
'X-TC-Region': region,
|
||
};
|
||
}
|