AI盒绘开放平台开发者中心

const axios = require('axios');
const crypto = require('crypto');
const express = require('express');
const multer  = require('multer');
const upload = multer({ dest: '/data/designs/' });

// 1. 服务端 HMAC-SHA256 安全签名并申请免登 Ticket
async function getOpenEditorTicket(externalUserId) {
  const appKey = 'test_partner_key';
  const appSecret = 'test_partner_secret'; // 离线绝密存储
  const timestamp = Math.floor(Date.now() / 1000);
  const nonce = crypto.randomBytes(8).toString('hex');
  const nickname = '张经理';

  // 参数字典序待签名串
  const params = { appKey, timestamp, nonce, externalUserId, nickname };
  const stringToSign = Object.keys(params)
    .sort()
    .filter(k => params[k] !== undefined && params[k] !== '')
    .map(k => `${k}=${params[k]}`)
    .join('&');

  const signature = crypto.createHmac('sha256', appSecret)
    .update(stringToSign, 'utf8')
    .digest('hex');

  const resp = await axios.post('https://open.1packify.com/api/open/auth/ticket', {
    externalUserId,
    nickname
  }, {
    headers: {
      'X-Open-App-Key': appKey,
      'X-Open-Timestamp': timestamp,
      'X-Open-Nonce': nonce,
      'X-Open-Signature': signature
    }
  });
  return resp.data.data.ticket;
}

// 2. 接收 Webhook 文件流
const app = express();
app.post('/api/webhook/aidesign/handleSave', upload.single('file'), (req, res) => {
  console.log(`[Webhook] 用户 ${req.body.userId} 完成编辑，文件保存于: ${req.file.path}`);
  res.json({ code: 200, message: 'success' });
});
app.listen(3000);

import time
import uuid
import hmac
import hashlib
import requests
from fastapi import FastAPI, UploadFile, File, Form

# 1. 服务端 HMAC-SHA256 安全加签并申请 Ticket
def get_open_editor_ticket(external_user_id: str) -> str:
    app_key = "test_partner_key"
    app_secret = "test_partner_secret" # 绝密保存
    timestamp = int(time.time())
    nonce = uuid.uuid4().hex[:16]
    nickname = "张经理"

    params = {
        "appKey": app_key,
        "timestamp": str(timestamp),
        "nonce": nonce,
        "externalUserId": external_user_id,
        "nickname": nickname
    }
    # 参数字典序升序组装
    string_to_sign = "&".join(f"{k}={v}" for k, v in sorted(params.items()) if v)
    signature = hmac.new(
        app_secret.encode("utf-8"),
        string_to_sign.encode("utf-8"),
        hashlib.sha256
    ).hexdigest()

    headers = {
        "X-Open-App-Key": app_key,
        "X-Open-Timestamp": str(timestamp),
        "X-Open-Nonce": nonce,
        "X-Open-Signature": signature
    }
    payload = {"externalUserId": external_user_id, "nickname": nickname}
    resp = requests.post("https://open.1packify.com/api/open/auth/ticket", json=payload, headers=headers)
    return resp.json()["data"]["ticket"]

# 2. 接收 Webhook 文件流
app = FastAPI()
@app.post("/api/webhook/aidesign/handleSave")
async def handle_save(file: UploadFile = File(...), userId: str = Form(...)):
    content = await file.read()
    with open(f"/data/designs/{userId}_{file.filename}", "wb") as f:
        f.write(content)
    return {"code": 200, "message": "success"}

// 1. 服务端 HMAC-SHA256 安全签名申请 Ticket
func GetOpenEditorTicket(externalUserId string) (string, error) {
    appKey := "test_partner_key"
    appSecret := "test_partner_secret"
    timestamp := time.Now().Unix()
    nonce := fmt.Sprintf("%x", time.Now().UnixNano())[:16]
    nickname := "张经理"

    params := map[string]string{
        "appKey":         appKey,
        "timestamp":      strconv.FormatInt(timestamp, 10),
        "nonce":          nonce,
        "externalUserId": externalUserId,
        "nickname":       nickname,
    }

    var keys []string
    for k := range params {
        keys = append(keys, k)
    }
    sort.Strings(keys)

    var parts []string
    for _, k := range keys {
        if params[k] != "" {
            parts = append(parts, fmt.Sprintf("%s=%s", k, params[k]))
        }
    }
    stringToSign := strings.Join(parts, "&")

    mac := hmac.New(sha256.New, []byte(appSecret))
    mac.Write([]byte(stringToSign))
    signature := hex.EncodeToString(mac.Sum(nil))

    reqBody, _ := json.Marshal(map[string]string{
        "externalUserId": externalUserId,
        "nickname":       nickname,
    })
    req, _ := http.NewRequest("POST", "https://open.1packify.com/api/open/auth/ticket", bytes.NewBuffer(reqBody))
    req.Header.Set("Content-Type", "application/json")
    req.Header.Set("X-Open-App-Key", appKey)
    req.Header.Set("X-Open-Timestamp", strconv.FormatInt(timestamp, 10))
    req.Header.Set("X-Open-Nonce", nonce)
    req.Header.Set("X-Open-Signature", signature)

    resp, err := http.DefaultClient.Do(req)
    // 解析 resp 返回中的 data.ticket 即可
    return "8c3b7f1e...", err
}

// 2. 接收 Webhook 文件流 (Gin 框架)
r.POST("/api/webhook/aidesign/handleSave", func(c *gin.Context) {
    file, _ := c.FormFile("file")
    userId := c.PostForm("userId")
    c.SaveUploadedFile(file, "/data/designs/"+userId+"_"+file.Filename)
    c.JSON(http.StatusOK, gin.H{"code": 200, "message": "success"})
})