API 接入指引

package ims

import (
    "bytes"
    "crypto/hmac"
    "crypto/sha256"
    "encoding/hex"
    "encoding/json"
    "fmt"
    "log"
    "net/http"
    "strconv"
    "strings"
    "time"
)

// 定义请求参数的结构体
type Payload struct {
    BizType string `json:"BizType"`
    FileUrl string `json:"FileUrl"`
}

func sha256hex(s string) string {
    b := sha256.Sum256([]byte(s))
    return hex.EncodeToString(b[:])
}

func hmacsha256(s, key string) string {
    hashed := hmac.New(sha256.New, []byte(key))
    hashed.Write([]byte(s))
    return string(hashed.Sum(nil))
}

func main() {
    service := "ims"
    version := "2020-12-29"
    action := "ImageModeration"
    region := "ap-guangzhou"
    // 实例化一个认证对象，入参需要传入腾讯云账户 SecretId 和 SecretKey，此处还需注意密钥对的保密
    // 代码泄露可能会导致 SecretId 和 SecretKey 泄露，并威胁账号下所有资源的安全性。以下代码示例仅供参考，建议采用更安全的方式来使用密钥，请参见：https://cloud.tencent.com/document/product/1278/85305
    // 密钥可前往官网控制台 https://console.cloud.tencent.com/cam/capi 进行获取
    secretId := "SecretId"
    secretKey := "SecretKey"
    host := "ims.tencentcloudapi.com"
    algorithm := "TC3-HMAC-SHA256"
    var timestamp = time.Now().Unix()

    // ************* 步骤 1：拼接规范请求串 *************
    httpRequestMethod := "POST"
    canonicalURI := "/"
    canonicalQueryString := ""
    contentType := "application/json; charset=utf-8"
    canonicalHeaders := fmt.Sprintf("content-type:%s\\nhost:%s\\nx-tc-action:%s\\n",
        contentType, host, strings.ToLower(action))
    signedHeaders := "content-type;host;x-tc-action"

    // 创建请求参数
    payloadData := Payload{
        BizType: "default",
        FileUrl: "http://example.com/image.jpg", // 这里替换为实际的文件 URL
    }

    // 将payload编码为 JSON
    payloadBytes, err := json.Marshal(payloadData)
    if err != nil {
        log.Fatalf("Error marshaling payload: %v", err)
    }
    payload := string(payloadBytes)

    hashedRequestPayload := sha256hex(payload)
    canonicalRequest := fmt.Sprintf("%s\\n%s\\n%s\\n%s\\n%s\\n%s",
        httpRequestMethod,
        canonicalURI,
        canonicalQueryString,
        canonicalHeaders,
        signedHeaders,
        hashedRequestPayload)
    // log.Println(canonicalRequest)

    // ************* 步骤 2：拼接待签名字符串 *************
    date := time.Unix(timestamp, 0).UTC().Format("2006-01-02")
    credentialScope := fmt.Sprintf("%s/%s/tc3_request", date, service)
    hashedCanonicalRequest := sha256hex(canonicalRequest)
    string2sign := fmt.Sprintf("%s\\n%d\\n%s\\n%s",
        algorithm,
        timestamp,
        credentialScope,
        hashedCanonicalRequest)
    // log.Println(string2sign)

    // ************* 步骤 3：计算签名 *************
    secretDate := hmacsha256(date, "TC3"+secretKey)
    secretService := hmacsha256(service, secretDate)
    secretSigning := hmacsha256("tc3_request", secretService)
    signature := hex.EncodeToString([]byte(hmacsha256(string2sign, secretSigning)))
    // log.Println(signature)

    // ************* 步骤 4：拼接 Authorization *************
    authorization := fmt.Sprintf("%s Credential=%s/%s, SignedHeaders=%s, Signature=%s",
        algorithm,
        secretId,
        credentialScope,
        signedHeaders,
        signature)
    // log.Println(authorization)

    // ************* 步骤 5：构造并发起请求 *************
    url := "https://" + host
    httpRequest, _ := http.NewRequest("POST", url, bytes.NewReader(payloadBytes))
    httpRequest.Header = map[string][]string{
        "Host":           {host},
        "X-TC-Action":    {action},
        "X-TC-Version":   {version},
        "X-TC-Timestamp": {strconv.FormatInt(timestamp, 10)},
        "Content-Type":   {contentType},
        "Authorization":  {authorization},
    }
    if region != "" {
        httpRequest.Header["X-TC-Region"] = []string{region}
    }
    httpClient := http.Client{}
    resp, err := httpClient.Do(httpRequest)
    if err != nil {
        log.Println(err)
        return
    }
    defer resp.Body.Close()
    body := &bytes.Buffer{}
    _, err = body.ReadFrom(resp.Body)
    if err != nil {
        log.Println(err)
        return
    }
    log.Println(body.String())
}


#!/usr/bin/env python3
# -*- coding:utf-8 -*-
import hashlib
import hmac
import json
import time
import datetime
import requests

# 实例化一个认证对象，入参需要传入腾讯云账户 SecretId 和 SecretKey，此处还需注意密钥对的保密
# 代码泄露可能会导致 SecretId 和 SecretKey 泄露，并威胁账号下所有资源的安全性。以下代码示例仅供参考，建议采用更安全的方式来使用密钥，请参见：https://cloud.tencent.com/document/product/1278/85305
# 密钥可前往官网控制台 https://console.cloud.tencent.com/cam/capi 进行获取
secret_id = "SecretId" 
secret_key = "SecretKey" 


service = "ims"
host = "ims.tencentcloudapi.com"  # 接口域名
action = "ImageModeration"  # 接口名
endpoint = "https://" + host
region = "ap-guangzhou"  # 地域
version = "2020-12-29"  # 版本为固定值
algorithm = "TC3-HMAC-SHA256"


def do_action(params):
    timestamp = int(time.time())
    day = datetime.datetime.fromtimestamp(timestamp, datetime.timezone.utc).strftime(
        "%Y-%m-%d"
    )

    # ************* 步骤 1：拼接规范请求串 *************
    http_request_method = "POST"
    canonical_url = "/"
    canonical_querystring = ""
    ct = "application/json; charset=utf-8"
    payload = json.dumps(params)
    canonical_headers = "content-type:%s\\nhost:%s\\n" % (ct, host)
    signed_headers = "content-type;host"
    hashed_request_payload = hashlib.sha256(payload.encode("utf-8")).hexdigest()
    canonical_request = (
        http_request_method
        + "\\n"
        + canonical_url
        + "\\n"
        + canonical_querystring
        + "\\n"
        + canonical_headers
        + "\\n"
        + signed_headers
        + "\\n"
        + hashed_request_payload
    )
    # print(canonical_request)

    # ************* 步骤 2：拼接待签名字符串 *************
    credential_scope = day + "/" + service + "/" + "tc3_request"
    hashed_canonical_request = hashlib.sha256(
        canonical_request.encode("utf-8")
    ).hexdigest()
    string_to_sign = (
        algorithm
        + "\\n"
        + str(timestamp)
        + "\\n"
        + credential_scope
        + "\\n"
        + hashed_canonical_request
    )

    # print(string_to_sign)

    secret_date = sign(("TC3" + secret_key).encode("utf-8"), day)
    secret_service = sign(secret_date, service)
    secret_signing = sign(secret_service, "tc3_request")
    signature = hmac.new(
        secret_signing, string_to_sign.encode("utf-8"), hashlib.sha256
    ).hexdigest()
    # print(signature)

    # ************* 步骤 4：拼接 Authorization *************
    authorization = (
        algorithm
        + " "
        + "Credential="
        + secret_id
        + "/"
        + credential_scope
        + ", "
        + "SignedHeaders="
        + signed_headers
        + ", "
        + "Signature="
        + signature
    )
    # print(authorization)

    headers = {
        "Authorization": authorization,
        "Content-Type": "application/json; charset=utf-8",
        "Host": host,
        "X-TC-Action": action,
        "X-TC-Timestamp": str(timestamp),
        "X-TC-Version": version,
        "X-TC-Region": region,
    }

    # 发送请求
    resp = requests.post(url=endpoint, data=payload, headers=headers)
    return resp.text


# 计算签名摘要函数
def sign(key, msg):
    return hmac.new(key, msg.encode("utf-8"), hashlib.sha256).digest()


if __name__ == "__main__":
    file_url = "http://example.com/image.jpg" # 这里替换为实际的文件 URL
    params = {"BizType": "default", "FileUrl": file_url}
    resp = do_action(params)
    print(resp)


<?php

function sign($key, $msg) {
    return hash_hmac("sha256", $msg, $key, true);
}

function sendRequest($secret_id, $secret_key, $biz_type, $file_url, $req_region = "ap-guangzhou") {
    // 定义服务信息
    $service = "ims";
    $host = "ims.tencentcloudapi.com";
    $version = "2020-12-29";
    $action = "ImageModeration";
    $endpoint = "https://ims.tencentcloudapi.com";
    $algorithm = "TC3-HMAC-SHA256";
    $timestamp = time();
    $date = gmdate("Y-m-d", $timestamp);

    // 构造 payload
    $payload_data = [
        "BizType" => $biz_type,
        "FileUrl" => $file_url
    ];
    $payload = json_encode($payload_data);

    // ************* 步骤 1：拼接规范请求串 *************
    $http_request_method = "POST";
    $canonical_uri = "/";
    $canonical_querystring = "";
    $ct = "application/json; charset=utf-8";
    $canonical_headers = "content-type:".$ct."\\nhost:".$host."\\nx-tc-action:".strtolower($action)."\\n";
    $signed_headers = "content-type;host;x-tc-action";
    $hashed_request_payload = hash("sha256", $payload);
    $canonical_request = "$http_request_method\\n$canonical_uri\\n$canonical_querystring\\n$canonical_headers\\n$signed_headers\\n$hashed_request_payload";

    // ************* 步骤 2：拼接待签名字符串 *************
    $credential_scope = "$date/$service/tc3_request";
    $hashed_canonical_request = hash("sha256", $canonical_request);
    $string_to_sign = "$algorithm\\n$timestamp\\n$credential_scope\\n$hashed_canonical_request";

    // ************* 步骤 3：计算签名 *************
    $secret_date = sign("TC3".$secret_key, $date);
    $secret_service = sign($secret_date, $service);
    $secret_signing = sign($secret_service, "tc3_request");
    $signature = hash_hmac("sha256", $string_to_sign, $secret_signing);

    // ************* 步骤 4：拼接 Authorization *************
    $authorization = "$algorithm Credential=$secret_id/$credential_scope, SignedHeaders=$signed_headers, Signature=$signature";

    // ************* 步骤 5：构造并发起请求 *************
    $headers = [
        "Authorization" => $authorization,
        "Content-Type" => "application/json; charset=utf-8",
        "Host" => $host,
        "X-TC-Action" => $action,
        "X-TC-Timestamp" => $timestamp,
        "X-TC-Version" => $version
    ];
    if ($req_region) {
        $headers["X-TC-Region"] = $req_region;
    }

    try {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $endpoint);
        curl_setopt($ch, CURLOPT_POST, true);
        curl_setopt($ch, CURLOPT_POSTFIELDS, $payload);
        curl_setopt($ch, CURLOPT_HTTPHEADER, array_map(function ($k, $v) { return "$k: $v"; }, array_keys($headers), $headers));
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        $response = curl_exec($ch);
        if ($response === FALSE) {
            throw new Exception(curl_error($ch), curl_errno($ch));
        }
        curl_close($ch);

        return $response;
    } catch (Exception $err) {
        echo 'Curl error: ' . $err->getMessage();
    }
}

// 使用示例
$biz_type = "default";
$file_url = "http://example.com/image.jpg"; // 这里替换为实际的文件 URL

try {
    // 实例化一个认证对象，入参需要传入腾讯云账户 SecretId 和 SecretKey，此处还需注意密钥对的保密
    // 代码泄露可能会导致 SecretId 和 SecretKey 泄露，并威胁账号下所有资源的安全性。以下代码示例仅供参考，建议采用更安全的方式来使用密钥，请参见：https://cloud.tencent.com/document/product/1278/85305
    // 密钥可前往官网控制台 https://console.cloud.tencent.com/cam/capi 进行获取
    $response = sendRequest("SecretId", "SecretKey", $biz_type, $file_url);
    echo $response;
} catch (Exception $err) {
    echo $err->getMessage();
}

?>