API详解：如何调用个人信用分接口（JRZQ0L85）进行风险评估

# 请将 YOUR_ACCESS_ID 替换为您的 Access-Id
# 请将 YOUR_BASE64_ENCRYPTED_DATA 替换为您生成的加密数据
# 请将 13_DIGIT_TIMESTAMP 替换为当前的13位毫秒时间戳

curl -X POST "https://api.tianyuanapi.com/api/v1/JRZQ0L85?t=13_DIGIT_TIMESTAMP" \
-H "Content-Type: application/json" \
-H "Access-Id: YOUR_ACCESS_ID" \
-d '{
    "data": "YOUR_BASE64_ENCRYPTED_DATA"
}'

import requests
import json
import time
import base64
# 实际开发中需要安装 pycryptodome 库
# pip install pycryptodome
from Crypto.Cipher import AES
from Crypto.Util.Padding import pad, unpad
from Crypto.Random import get_random_bytes

# --- 1. 配置您的API凭证 ---
ACCESS_ID = "YOUR_ACCESS_ID"
# 密钥 (Access Key) 是16进制字符串，需转换为16字节的bytes
ACCESS_KEY_HEX = "YOUR_16_BYTE_ACCESS_KEY_HEX"
ACCESS_KEY = bytes.fromhex(ACCESS_KEY_HEX)

# API端点
API_ENDPOINT = "https://api.tianyuanapi.com/api/v1/JRZQ0L85"

# --- 2. 加密辅助函数 (AES-128-CBC) ---
def encrypt_data(plain_text, key):
    """
    加密业务数据
    """
    try:
        # 1. 将明文JSON转为bytes
        plain_bytes = plain_text.encode('utf-8')
        
        # 2. 生成16字节的随机IV
        iv = get_random_bytes(16)
        
        # 3. 创建AES-CBC加密器
        cipher = AES.new(key, AES.MODE_CBC, iv)
        
        # 4. 对明文进行PKCS7填充并加密
        padded_data = pad(plain_bytes, AES.block_size, style='pkcs7')
        cipher_text = cipher.encrypt(padded_data)
        
        # 5. 拼接 IV 和 密文
        encrypted_data_with_iv = iv + cipher_text
        
        # 6. Base64编码
        return base64.b64encode(encrypted_data_with_iv).decode('utf-8')
        
    except Exception as e:
        print(f"加密失败: {e}")
        return None

# --- 3. 解密辅助函数 (AES-128-CBC) ---
def decrypt_data(base64_data, key):
    """
    解密响应数据
    """
    try:
        # 1. Base64解码
        encrypted_data_with_iv = base64.b64decode(base64_data)
        
        # 2. 提取 IV (前16字节)
        iv = encrypted_data_with_iv[:16]
        
        # 3. 提取密文 (16字节之后)
        cipher_text = encrypted_data_with_iv[16:]
        
        # 4. 创建AES-CBC解密器
        cipher = AES.new(key, AES.MODE_CBC, iv)
        
        # 5. 解密并去除填充
        decrypted_padded_data = cipher.decrypt(cipher_text)
        original_data = unpad(decrypted_padded_data, AES.block_size, style='pkcs7')
        
        # 6. 转为JSON对象
        return json.loads(original_data.decode('utf-8'))
        
    except Exception as e:
        print(f"解密失败: {e}")
        return None

# --- 4. 主调用逻辑 ---
def get_credit_score(name, id_card, mobile_no):
    
    # 构造13位时间戳
    timestamp = str(int(time.time() * 1000))
    url = f"{API_ENDPOINT}?t={timestamp}"
    
    headers = {
        "Content-Type": "application/json",
        "Access-Id": ACCESS_ID
    }
    
    # 构造请求明文
    request_payload = {
        "name": name,
        "id_card": id_card,
        "mobile_no": mobile_no
    }
    
    # 加密
    encrypted_str = encrypt_data(json.dumps(request_payload), ACCESS_KEY)
    if not encrypted_str:
        print("加密请求数据时出错")
        return

    # 构造最终请求体
    final_request_body = {
        "data": encrypted_str
    }
    
    try:
        # 发送POST请求
        response = requests.post(url, headers=headers, data=json.dumps(final_request_body))
        response.raise_for_status() # 如果HTTP状态码不是200，则引发异常
        
        # 解析公共响应
        common_response = response.json()
        transaction_id = common_response.get("transaction_id", "N/A")
        print(f"请求流水号: {transaction_id}")

        # 检查业务状态码
        if common_response.get("code") == 0:
            print("业务成功 (code: 0)")
            # 解密业务数据
            encrypted_biz_data = common_response.get("data")
            if encrypted_biz_data:
                decrypted_result = decrypt_data(encrypted_biz_data, ACCESS_KEY)
                print("--- 解密后的业务数据 ---")
                print(json.dumps(decrypted_result, indent=4, ensure_ascii=False))
            else:
                print("业务成功，但未返回加密数据。")
        else:
            # 处理业务失败或错误码
            print(f"业务失败 (code: {common_response.get('code')})")
            print(f"错误信息: {common_response.get('message')}")

    except requests.exceptions.RequestException as e:
        print(f"HTTP请求失败: {e}")
    except json.JSONDecodeError:
        print("解析响应失败，非JSON格式")
    except Exception as e:
        print(f"发生未知错误: {e}")

# --- 5. 执行调用 ---
if __name__ == "__main__":
    # 使用示例数据调用 (请替换为真实数据进行测试)
    get_credit_score("张三", "110101199003071234", "13800138000")

[步骤1: 业务明文]
{
    "mobile_no": "string",
    "id_card": "string",
    "name": "string"
}
   |
   V
[步骤2: AES-128-CBC 加密 (IV + 密文)]
   |
   V
[步骤3: Base64 编码]
"xxxx(base64)"
   |
   V
[步骤4: 最终请求体]
{
    "data": "xxxx(base64)"
}

[步骤1: 原始响应 (服务器返回)]
{
    "code": 0,
    "message": "业务成功",
    "transaction_id": "fl1234567890abcdef",
    "data": "yyyy(base64)" // 加密的业务数据
}
   |
   V
[步骤2: 提取 "data" 字段, Base64 解码]
   |
   V
[步骤3: AES-128-CBC 解密 (使用相同的Key)]
   |
   V
[步骤4: 业务明文 (JSON)]
{
    "score_120_General": "480"
}