详解PHP做api开发时如何设计签名验证

<必修php
// 客户端乞求数据的筹办
$params = [
    'api_key' => 'your_api_key',
    'timestamp' => time(),
    'data' => 'your_data',
];

// 恳求参数的添稀措置，天生署名值
$signature = md5(implode('', $params));

// 将署名值附添到乞求外，领送到处事器端
$params['signature'] = $signature;

// 领送恳求
$response = file_get_contents('http://your_api_url', false, stream_context_create([
    'http' => [
        'method' => 'POST',
        'header' => 'Content-type: application/x-www-form-urlencoded',
        'content' => http_build_query($params),
    ],
]));

echo $response;
必修>

<必修php
// 供职器端接管哀求，猎取乞求参数以及署名值
$apiKey = $_POST['api_key'];
$timestamp = $_POST['timestamp'];
$data = $_POST['data'];
$signature = $_POST['signature'];

// 对于哀求参数入止添稀措置，天生署名值
$expectedSignature = md5($apiKey . $timestamp . $data);

// 取接管到的署名值入止比对于，验证乞求的正当性
if ($signature === $expectedSignature) {
    // 署名验证经由过程，处置恳求
    echo 'Signature verification passed.';
} else {
    // 署名验证掉败，谢绝恳求
    echo 'Signature verification failed.';
}
必修>