97 lines
		
	
	
		
			3.2 KiB
		
	
	
	
		
			PHP
		
	
	
			
		
		
	
	
			97 lines
		
	
	
		
			3.2 KiB
		
	
	
	
		
			PHP
		
	
	
<?php
 | 
						||
 | 
						||
namespace app\service\sms;
 | 
						||
 | 
						||
/**
 | 
						||
 * 签名助手 2017/11/19
 | 
						||
 *
 | 
						||
 * Class SignatureHelper
 | 
						||
 */
 | 
						||
class SignatureHelper {
 | 
						||
 | 
						||
    /**
 | 
						||
     * 生成签名并发起请求
 | 
						||
     *
 | 
						||
     * @param $accessKeyId string AccessKeyId (https://ak-console.aliyun.com/)
 | 
						||
     * @param $accessKeySecret string AccessKeySecret
 | 
						||
     * @param $domain string API接口所在域名
 | 
						||
     * @param $params array API具体参数
 | 
						||
     * @param $security boolean 使用https
 | 
						||
     * @param $method boolean 使用GET或POST方法请求,VPC仅支持POST
 | 
						||
     * @return bool|\stdClass 返回API接口调用结果,当发生错误时返回false
 | 
						||
     */
 | 
						||
    public function request($accessKeyId, $accessKeySecret, $domain, $params, $security=false, $method='POST') {
 | 
						||
        $apiParams = array_merge(array (
 | 
						||
            "SignatureMethod" => "HMAC-SHA1",
 | 
						||
            "SignatureNonce" => uniqid(mt_rand(0,0xffff), true),
 | 
						||
            "SignatureVersion" => "1.0",
 | 
						||
            "AccessKeyId" => $accessKeyId,
 | 
						||
            "Timestamp" => gmdate("Y-m-d\TH:i:s\Z"),
 | 
						||
            "Format" => "JSON",
 | 
						||
        ), $params);
 | 
						||
        ksort($apiParams);
 | 
						||
 | 
						||
        $sortedQueryStringTmp = "";
 | 
						||
        foreach ($apiParams as $key => $value) {
 | 
						||
            $sortedQueryStringTmp .= "&" . $this->encode($key) . "=" . $this->encode($value);
 | 
						||
        }
 | 
						||
 | 
						||
        $stringToSign = "${method}&%2F&" . $this->encode(substr($sortedQueryStringTmp, 1));
 | 
						||
 | 
						||
        $sign = base64_encode(hash_hmac("sha1", $stringToSign, $accessKeySecret . "&",true));
 | 
						||
 | 
						||
        $signature = $this->encode($sign);
 | 
						||
 | 
						||
        $url = ($security ? 'https' : 'http')."://{$domain}/";
 | 
						||
 | 
						||
        try {
 | 
						||
            $content = $this->fetchContent($url, $method, "Signature={$signature}{$sortedQueryStringTmp}");
 | 
						||
            return json_decode($content);
 | 
						||
        } catch( \Exception $e) {
 | 
						||
            return false;
 | 
						||
        }
 | 
						||
    }
 | 
						||
 | 
						||
    private function encode($str)
 | 
						||
    {
 | 
						||
        $res = urlencode($str);
 | 
						||
        $res = preg_replace("/\+/", "%20", $res);
 | 
						||
        $res = preg_replace("/\*/", "%2A", $res);
 | 
						||
        $res = preg_replace("/%7E/", "~", $res);
 | 
						||
        return $res;
 | 
						||
    }
 | 
						||
 | 
						||
    private function fetchContent($url, $method, $body) {
 | 
						||
        $ch = curl_init();
 | 
						||
 | 
						||
        if($method == 'POST') {
 | 
						||
            curl_setopt($ch, CURLOPT_POST, 1);//post提交方式
 | 
						||
            curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
 | 
						||
        } else {
 | 
						||
            $url .= '?'.$body;
 | 
						||
        }
 | 
						||
 | 
						||
        curl_setopt($ch, CURLOPT_URL, $url);
 | 
						||
        curl_setopt($ch, CURLOPT_TIMEOUT, 5);
 | 
						||
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
 | 
						||
        curl_setopt($ch, CURLOPT_HTTPHEADER, array(
 | 
						||
            "x-sdk-client" => "php/2.0.0"
 | 
						||
        ));
 | 
						||
 | 
						||
        if(substr($url, 0,5) == 'https') {
 | 
						||
            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 | 
						||
            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
 | 
						||
        }
 | 
						||
 | 
						||
        $rtn = curl_exec($ch);
 | 
						||
 | 
						||
        if($rtn === false) {
 | 
						||
            // 大多由设置等原因引起,一般无法保障后续逻辑正常执行,
 | 
						||
            // 所以这里触发的是E_USER_ERROR,会终止脚本执行,无法被try...catch捕获,需要用户排查环境、网络等故障
 | 
						||
            trigger_error("[CURL_" . curl_errno($ch) . "]: " . curl_error($ch), E_USER_ERROR);
 | 
						||
        }
 | 
						||
        curl_close($ch);
 | 
						||
 | 
						||
        return $rtn;
 | 
						||
    }
 | 
						||
} |