开放 API 调用说明文档

import time
import hmac
import hashlib
import requests

# 开发者密钥配置
APPID = "13999999999"  # 你的手机号
SECRET = "your_allocated_secret_key"  # 你的 32 位 Secret 密钥

def get_api_headers(path):
    timestamp = str(int(time.time()))
    # 拼接签名串: Timestamp + Path
    message = timestamp + path
    
    # HMAC-SHA256 签名计算
    sig = hmac.new(
        SECRET.encode('utf-8'),
        message.encode('utf-8'),
        hashlib.sha256
    ).hexdigest()
    
    return {
        "X-Api-Appid": APPID,
        "X-Api-Timestamp": timestamp,
        "X-Api-Sign": sig,
        "Content-Type": "application/json"
    }

# 示例：请求小红书签名服务
url = "https://js.newso.top/api/sign/xhs"
path = "/api/sign/xhs"

headers = get_api_headers(path)
data = {
    "method": "GET",
    "uri": "/api/sns/v6/homefeed?category=homefeed_recommend",
    "cookie": "a1=18f8d9bxxxxxx;",
    "payload": None
}

try:
    resp = requests.post(url, headers=headers, json=data)
    print("状态码:", resp.status_code)
    print("签名头响应:", resp.json())
except Exception as e:
    print("请求异常:", e)

package main

import (
	"bytes"
	"crypto/hmac"
	"crypto/sha256"
	"encoding/hex"
	"encoding/json"
	"fmt"
	"io"
	"net/http"
	"strconv"
	"time"
)

const (
	AppID  = "13999999999"
	Secret = "your_allocated_secret_key"
)

func main() {
	url := "https://js.newso.top/api/sign/xhs"
	path := "/api/sign/xhs"
	timestamp := time.Now().Unix()

	// 1. 签名串: Timestamp + Path
	rawMessage := fmt.Sprintf("%d%s", timestamp, path)
	mac := hmac.New(sha256.New, []byte(Secret))
	mac.Write([]byte(rawMessage))
	sign := hex.EncodeToString(mac.Sum(nil))

	// 2. 构造请求体
	reqBody, _ := json.Marshal(map[string]interface{}{
		"method":  "GET",
		"uri":     "/api/sns/v6/homefeed?category=homefeed_recommend",
		"cookie":  "a1=18f8d9bxxxxxx;",
		"payload": nil,
	})

	req, _ := http.NewRequest("POST", url, bytes.NewBuffer(reqBody))
	
	// 3. 设定 Header
	req.Header.Set("Content-Type", "application/json")
	req.Header.Set("X-Api-Appid", AppID)
	req.Header.Set("X-Api-Timestamp", strconv.FormatInt(timestamp, 10))
	req.Header.Set("X-Api-Sign", sign)

	// 4. 发送请求
	client := &http.Client{Timeout: 5 * time.Second}
	resp, err := client.Do(req)
	if err != nil {
		fmt.Println("请求出错:", err)
		return
	}
	defer resp.Body.Close()

	body, _ := io.ReadAll(resp.Body)
	fmt.Println("状态码:", resp.StatusCode)
	fmt.Println("返回数据:", string(body))
}