V3手动鉴权失败之Go篇

go run go_v3.go

package main

import (
	"bytes"
	"crypto/hmac"
	"crypto/sha256"
	"fmt"
	"io/ioutil"
	"net/http"
	"strconv"
	"time"
)

const SecretId = "xxx";//填入自己的secretId
const SecretKey = "xxx";//填入自己的secretKey

//算法
const Algo                  = "sha256"
const Url      				= "https://iai.tencentcloudapi.com"
//规范请求串
const HTTPRequestMethod     = "POST"
const CanonicalURI          = "/"
const CanonicalQueryString  = ""
const CanonicalHeaders      = "content-type:application/json; charset=utf-8\nhost:iai.tencentcloudapi.com\n"
const SignedHeaders         = "content-type;host"//参与签名的头部信息

//签名字符串
const Algorithm             = "TC3-HMAC-SHA256"
const Service               = "iai"
const Stop                  = "tc3_request"


func main()  {
	var face face
	d := face.Authentication("DetectFace",`{"Url":"http://www.people.com.cn/mediafile/pic/20150624/51/10411837753251226111.jpg"}`, "2018-03-01")
	println(d)
}

type face struct {

}

//鉴权提交
// action 访问方法
// param   json参数
// version 版本
func (f *face) Authentication(action string, param string, version string) string {
	//loc, _ := time.LoadLocation("")
	//fmt.Println(loc, err)
	//时间戳
	timeNow		:= time.Now()
	//本地时区秒数
	timeStampInt	:= timeNow.Unix()
	timeStamp	:= strconv.FormatInt(timeStampInt, 10)
	//UTC时区年月日
	nowDate		:= time.Unix(timeStampInt,0).UTC().Format("2006-01-02")
	//加密参数
	hashedRequestPayload := f.HashEncryption(param)
	//初次加密 规范请求串
	canonicalRequest       :=   HTTPRequestMethod + "\n" +
		CanonicalURI + "\n" +
		CanonicalQueryString + "\n" +
		CanonicalHeaders + "\n" +
		SignedHeaders + "\n" +
		hashedRequestPayload;

	fmt.Println(canonicalRequest)
	//第二次加密 签名字符串
	credentialScope        :=   nowDate + "/" + Service + "/" + Stop;
	hashedCanonicalRequest :=   f.HashEncryption(canonicalRequest);
	stringToSign           :=   Algorithm + "\n" +
								timeStamp + "\n" +
								credentialScope + "\n" +
								hashedCanonicalRequest

	fmt.Println(stringToSign)

	//计算签名
	secretDate             :=   f.HashHmacSha256Encryption(nowDate,  "TC3" + SecretKey, true)
	secretService          :=   f.HashHmacSha256Encryption(Service,   secretDate, true)
	secretSigning          :=   f.HashHmacSha256Encryption(Stop,  secretService, true)

	//签名
	signature              :=   f.HashHmacSha256Encryption(stringToSign,  secretSigning, false)
	authorization          :=   Algorithm + " " +
								"Credential=" + SecretId + "/" + credentialScope + ", " +
								"SignedHeaders=" + SignedHeaders + ", " +
								"Signature=" + signature
	fmt.Println(authorization)
	//申明header头部
	var header = map[string]string{
		"Content-Type" : "application/json; charset=utf-8",
		"Authorization" : authorization,
		"Host" : "iai.tencentcloudapi.com",
		"X-TC-Action" : action,
		"X-TC-Version" : version,
		"X-TC-Timestamp" : timeStamp,
	}
	return f.http_post_request(header, param)
}

//256 加密算法 转小写
func (f *face) HashEncryption(sign string) string{
	sha256Byte := sha256.Sum256([]byte(sign))
	tf16 := fmt.Sprintf("%x", sha256Byte)
	return tf16
}


//Hash_Hmac 加密算法
//sign 加密字符串
//key  加密key
//flag true 原始数据  false 小写16进制数据
func (f *face) HashHmacSha256Encryption(sign string, key string, flag bool) string {
	hash := hmac.New(sha256.New,[]byte(key)) // 创建对应的sha256哈希加密算法
	hash.Write([]byte(sign)) // 写入加密数据
	if flag {
		return string(hash.Sum(nil))
	}
	return fmt.Sprintf("%x",hash.Sum(nil))
}

func (f *face) http_post_request(header map[string]string, param string) string {
	client		:= &http.Client{}
	req_new := bytes.NewBuffer([]byte(param))
	req, err 	:= http.NewRequest("POST", Url, req_new)
	//设置header头部
	for k,v := range header{
		req.Header.Set(k, v)
	}
	//发送请求
	resp, err := client.Do(req)
	//延迟执行断开
	defer resp.Body.Close()
	body, err := ioutil.ReadAll(resp.Body)
	if err != nil {
		fmt.Println("post request error : ", err)
		return "error"
	}
	return string(body)
}