基于Spring Boot的信用分API接入方法与安全调用流程

curl -X POST "https://api.tianyuanapi.com/api/v1/JRZQ0L85?t=1730457600000" \
-H "Access-Id: your_access_id_here" \
-H "Content-Type: application/json" \
-d '{"data":"Base64EncodedEncryptedDataHere"}'

import javax.crypto.Cipher;
import javax.crypto.spec.IvParameterSpec;
import javax.crypto.spec.SecretKeySpec;
import org.apache.commons.codec.binary.Base64;
import org.springframework.web.client.RestTemplate;
import org.springframework.http.*;

public class CreditScoreApi {

    // AES 加密
    public static String encrypt(String data, String key) throws Exception {
        byte[] iv = new byte[16];
        IvParameterSpec ivSpec = new IvParameterSpec(iv);
        SecretKeySpec secretKey = new SecretKeySpec(key.getBytes("UTF-8"), "AES");
        Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
        cipher.init(Cipher.ENCRYPT_MODE, secretKey, ivSpec);
        byte[] encrypted = cipher.doFinal(data.getBytes("UTF-8"));
        return Base64.encodeBase64String(encrypted);
    }

    // AES 解密
    public static String decrypt(String encryptedData, String key) throws Exception {
        byte[] iv = new byte[16];
        IvParameterSpec ivSpec = new IvParameterSpec(iv);
        SecretKeySpec secretKey = new SecretKeySpec(key.getBytes("UTF-8"), "AES");
        Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
        cipher.init(Cipher.DECRYPT_MODE, secretKey, ivSpec);
        byte[] decoded = Base64.decodeBase64(encryptedData);
        byte[] decrypted = cipher.doFinal(decoded);
        return new String(decrypted, "UTF-8");
    }

    // 调用API
    public static void main(String[] args) {
        try {
            String accessId = "your_access_id_here";
            String accessKey = "your_16byte_key";
            String url = "https://api.tianyuanapi.com/api/v1/JRZQ0L85?t=" + System.currentTimeMillis();

            String payload = "{\"mobile_no\":\"13800001111\",\"id_card\":\"110101199001012345\",\"name\":\"张三\"}";
            String encryptedData = encrypt(payload, accessKey);

            RestTemplate restTemplate = new RestTemplate();
            HttpHeaders headers = new HttpHeaders();
            headers.setContentType(MediaType.APPLICATION_JSON);
            headers.set("Access-Id", accessId);

            String body = "{\"data\":\"" + encryptedData + "\"}";
            HttpEntity<String> entity = new HttpEntity<>(body, headers);

            ResponseEntity<String> response = restTemplate.exchange(url, HttpMethod.POST, entity, String.class);

            System.out.println("接口响应：" + response.getBody());

        } catch (Exception e) {
            System.err.println("调用异常：" + e.getMessage());
        }
    }
}

{
  "code": 0,
  "message": "业务成功",
  "transaction_id": "20251102123456789",
  "data": {
    "score_120_General": "480"
  }
}