auth

认证请求相关参数

名称	类型	是否必选	描述
accessKeyId	String	必选	用户的访问密钥ID 获取方式
accessTimestamp	String	必选	13位当前Unix时间戳，值为请求发出前15分钟内的时间戳。
accessNonce	String	必选	签名唯一随机数，用于防止网络重放攻击，建议每次请求使用不同随机数
accessVersion	String	必选	认证算法版本，当前只支持传V2
accessSign	String	必选	通过用户的AccessKey Secret计算出的签名

签名参数生成规则

1

步骤1：组织认证参数

• accessKeyId

• accessTimestamp

• accessNonce

• accessVersion

2

步骤2：按key升序排列

将 key（转换为小写） 按字符代码顺序升序排列。

示例排序结果：

[('accesskeyid', '64ca6a118372e71928b5e87d'), 
 ('accessnonce', 'c5dcafda-b7ed-488d-afcb-7d2a2e276187'), 
 ('accesstimestamp', '1745850607140'), 
 ('accessversion', 'V2'),
 ]

3

步骤3：拼接key=value

将排序后的 key=value 通过 & 符号连接，生成待签名字符串。

示例待签名字符串：

accesskeyid=64ca6a118372e71928b5e87d
&accessnonce=c5dcafda-b7ed-488d-afcb-7d2a2e276187
&accesstimestamp=1745850607140
&accessversion=V2

4

步骤4：计算HmacMD5签名

使用 AccessKey Secret 获取方式 对拼接后的字符串进行 HmacMD5签名，结果用16进制表示，得到 accessSign。

示例签名结果：

081c0c05f1e0e8bcb547171d5ea597e9

5

步骤5：完整认证相关参数

示例最终的认证相关参数列表：

[('accessVersion', 'V2'), 
 ('accessTimestamp', '1745850607140'), 
 ('accessNonce', 'c5dcafda-b7ed-488d-afcb-7d2a2e276187'), 
 ('accessKeyId', '64ca6a118372e71928b5e87d'), 
 ('accessSign', '081c0c05f1e0e8bcb547171d5ea597e9'),
]

PostMan签名生成脚本（Pre-request Script）

// 1. 参数准备阶段
const accessKeyId = "你的密钥Access Key";
const accessKeySecret = "你的密钥AccessKey Secret";
const accessVersion = "V2";

// 2. 生成动态参数
const accessTimestamp = Date.now().toString();
const accessNonce = Array.from(crypto.getRandomValues(new Uint8Array(16))).map(b => b.toString(16).padStart(2, '0')).join('');

// 3. 参数排序与拼接
const params = {
    accessKeyId: accessKeyId,
    accessTimestamp: accessTimestamp,
    accessNonce: accessNonce,
    accessVersion: accessVersion
};
const sortedEntries = Object.entries(params).sort(([k1], [k2]) => k1.localeCompare(k2));
const queryString = sortedEntries.map(([k, v]) => `${k.toLowerCase()}=${v}`).join('&');

// 4. HMAC-MD5签名计算
const CryptoJS = require('crypto-js');
const hexSignature = CryptoJS.HmacMD5(queryString, accessKeySecret).toString();

// 5. 将签名相关值放入环境变量，如果postman版本是v5.x及以下使用postman.setEnvironmentVariable替换pm.environment.set
pm.environment.set("accessSign", hexSignature);
pm.environment.set("accessTimestamp", accessTimestamp);
pm.environment.set("accessNonce", accessNonce);
pm.environment.set("accessKeyId", accessKeyId);
pm.environment.set("accessVersion", accessVersion);

Python示例

import time
import string
import uuid
from collections import OrderedDict
import hmac
import hashlib
import binascii

accessKeyId = '1'
accessKeySecret = '2'

params = {}
params["accessVersion"] = 'V2'
params["accessTimestamp"] = '1745896421221' # str(int(round(time.time() * 1000)))
params["accessNonce"] = 'fc35a8f1-e5c7-4102-82dd-6a11e06e136c' # str(uuid.uuid4())
params["accessKeyId"] = accessKeyId

# 将params的key转为小写并排序
lowerKeyParams = {k.lower(): params[k] for k in params}
sortedParams = sorted(lowerKeyParams.items(), key=lambda item: item[0])
print('2. 排序结果:', sortedParams)

# 拼接key=value
jointParams = '&'.join([f'{k}={str(v)}' for k, v in sortedParams])
print('3. 拼接结果:', jointParams)

# 计算签名
h = hmac.new(accessKeySecret.encode('utf-8'), jointParams.encode('utf-8'), digestmod=hashlib.md5)
sign = binascii.hexlify(h.digest()).decode('utf-8')
print('4. 签名参数accessSign结果:', sign)

Java示例

import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import java.nio.charset.StandardCharsets;
import java.security.InvalidKeyException;
import java.security.NoSuchAlgorithmException;
import java.util.Map;
import java.util.TreeMap;

public class AuthHelper {

    // 生成签名的方法
    public static String generateSignature(String accessKeyId, String accessTimestamp, String accessNonce, String accessVersion, String accessKeySecret) throws NoSuchAlgorithmException, InvalidKeyException {
        // 步骤 1：组织认证参数
        Map<String, String> params = new TreeMap<>();
        params.put("accessKeyId", accessKeyId);
        params.put("accessTimestamp", accessTimestamp);
        params.put("accessNonce", accessNonce);
        params.put("accessVersion", accessVersion);

        // 步骤 2：按 key 升序排列，TreeMap 会自动按 key 排序
        StringBuilder joinedParams = new StringBuilder();
        for (Map.Entry<String, String> entry : params.entrySet()) {
            if (joinedParams.length() > 0) {
                joinedParams.append("&");
            }
            joinedParams.append(entry.getKey().toLowerCase()).append("=").append(entry.getValue());
        }

        // 步骤 3：拼接 key=value，TreeMap 已经排序好，直接拼接即可
        String dataToSign = joinedParams.toString();

        // 步骤 4：计算 HmacMD5 签名
        Mac hmac = Mac.getInstance("HmacMD5");
        SecretKeySpec secretKeySpec = new SecretKeySpec(accessKeySecret.getBytes(StandardCharsets.UTF_8), "HmacMD5");
        hmac.init(secretKeySpec);
        byte[] digest = hmac.doFinal(dataToSign.getBytes(StandardCharsets.UTF_8));

        StringBuilder sb = new StringBuilder();
        for (byte b : digest) {
            sb.append(String.format("%02x", b & 0xff));
        }
        return sb.toString();
    }
    
}

C++示例

#include <iostream>
#include <map>
#include <string>
#include <sstream>
#include <iomanip>
#include <algorithm>
#include <openssl/hmac.h>
#include <openssl/md5.h>

int main() {
    std::string accessKeyId = "1";
    std::string accessKeySecret = "1";

    // 参数
    std::map<std::string, std::string> params;
    params["accessVersion"] = "V2";
    params["accessTimestamp"] = "1745896421221";
    params["accessNonce"] = "fc35a8f1-e5c7-4102-82dd-6a11e06e136c";
    params["accessKeyId"] = accessKeyId;

    // 1. key转小写并排序
    std::map<std::string, std::string> lowerKeyParams;
    for (const auto& kv : params) {
        std::string lowerKey = kv.first;
        std::transform(lowerKey.begin(), lowerKey.end(), lowerKey.begin(), ::tolower);
        lowerKeyParams[lowerKey] = kv.second;
    }

    // 2. 排序结果
    std::cout << "2. 排序结果:" << std::endl;
    for (const auto& kv : lowerKeyParams) {
        std::cout << kv.first << ": " << kv.second << std::endl;
    }

    // 3. 拼接key=value
    std::ostringstream oss;
    for (auto it = lowerKeyParams.begin(); it != lowerKeyParams.end(); ++it) {
        if (it != lowerKeyParams.begin()) oss << "&";
        oss << it->first << "=" << it->second;
    }
    std::string jointParams = oss.str();
    std::cout << "3. 拼接结果: " << jointParams << std::endl;

    // 4. 计算签名
    unsigned char* result;
    unsigned int len = MD5_DIGEST_LENGTH;
    result = HMAC(EVP_md5(),
                  accessKeySecret.c_str(), accessKeySecret.length(),
                  (unsigned char*)jointParams.c_str(), jointParams.length(),
                  NULL, NULL);

    // 转为16进制字符串
    std::ostringstream signoss;
    for (unsigned int i = 0; i < len; i++)
        signoss << std::hex << std::setw(2) << std::setfill('0') << (int)result[i];

    std::cout << "4. 签名参数accessSign结果: " << signoss.str() << std::endl;

    return 0;
}