生成认证字符串需要用到的工具类

namespace App\Service;

class HttpUtil

{

// 根据RFC 3986，除了：

// 1.大小写英文字符

// 2.阿拉伯数字

// 3.点'.'、波浪线'~'、减号'-'以及下划线'_'

// 以外都要编码

public static $PERCENT_ENCODED_STRINGS;

//填充编码数组

public static function __init()

{

HttpUtil::$PERCENT_ENCODED_STRINGS = array();

for ($i = 0; $i < 256; ++$i) {

HttpUtil::$PERCENT_ENCODED_STRINGS[$i] = sprintf("%%%02X", $i);

}

//a-z不编码

foreach (range('a', 'z') as $ch) {

HttpUtil::$PERCENT_ENCODED_STRINGS[ord($ch)] = $ch;

}

//A-Z不编码

foreach (range('A', 'Z') as $ch) {

HttpUtil::$PERCENT_ENCODED_STRINGS[ord($ch)] = $ch;

}

//0-9不编码

foreach (range('0', '9') as $ch) {

HttpUtil::$PERCENT_ENCODED_STRINGS[ord($ch)] = $ch;

}

//以下4个字符不编码

HttpUtil::$PERCENT_ENCODED_STRINGS[ord('-')] = '-';

HttpUtil::$PERCENT_ENCODED_STRINGS[ord('.')] = '.';

HttpUtil::$PERCENT_ENCODED_STRINGS[ord('_')] = '_';

HttpUtil::$PERCENT_ENCODED_STRINGS[ord('~')] = '~';

}

//在uri编码中不能对'/'编码

public static function urlEncodeExceptSlash($path)

{

return str_replace("%2F", "/", HttpUtil::urlEncode($path));

}

//使用编码数组编码

public static function urlEncode($value)

{

$result = '';

for ($i = 0; $i < strlen($value); ++$i) {

$result .= HttpUtil::$PERCENT_ENCODED_STRINGS[ord($value[$i])];

}

return $result;

}

//生成标准化QueryString

public static function getCanonicalQueryString(array $parameters)

{

//没有参数，直接返回空串

if (count($parameters) == 0) {

return '';

}

$parameterStrings = array();

foreach ($parameters as $k => $v) {

//跳过Authorization字段

if (strcasecmp('Authorization', $k) == 0) {

continue;

}

if (!isset($k)) {

throw new \InvalidArgumentException(

"parameter key should not be null"

);

}

if (isset($v)) {

//对于有值的，编码后放在=号两边

$parameterStrings[] = HttpUtil::urlEncode($k)

. '=' . HttpUtil::urlEncode((string) $v);

} else {

//对于没有值的，只将key编码后放在=号的左边，右边留空

$parameterStrings[] = HttpUtil::urlEncode($k) . '=';

}

}

//按照字典序排序

sort($parameterStrings);

//使用'&'符号连接它们

return implode('&', $parameterStrings);

}

//生成标准化uri

public static function getCanonicalURIPath($path)

{

//空路径设置为'/'

if (empty($path)) {

return '/';

} else {

//所有的uri必须以'/'开头

if ($path[0] == '/') {

return HttpUtil::urlEncodeExceptSlash($path);

} else {

return '/' . HttpUtil::urlEncodeExceptSlash($path);

}

}

}

//生成标准化http请求头串

public static function getCanonicalHeaders($headers)

{

//如果没有headers，则返回空串

if (count($headers) == 0) {

return '';

}

$headerStrings = array();

foreach ($headers as $k => $v) {

//跳过key为null的

if ($k === null) {

continue;

}

//如果value为null，则赋值为空串

if ($v === null) {

$v = '';

}

//trim后再encode，之后使用':'号连接起来

$headerStrings[] = HttpUtil::urlEncode(strtolower(trim($k))) . ':' . HttpUtil::urlEncode(trim($v));

}

//字典序排序

sort($headerStrings);

//用'\n'把它们连接起来

return implode("\n", $headerStrings);

}

}

对接百度文档服务接口, 这里写了注册文档和阅读文档两个例子

namespace App\Service;

use GuzzleHttp\Client;

class BaiduDoc

{

protected $credentials = ['ak' => '', 'sk' => ''];

protected $host = 'doc.bj.baidubce.com';

protected $timestamp;

protected $expirationInSeconds = 60;

public function __construct()

{

HttpUtil::__init();

date_default_timezone_get('UTC');

$this->timestamp = new \DateTime();

}

/**

* 注册文档

* @return array|\Psr\Http\Message\StreamInterface

*/

public function register()

{

// >> first: get authorization

$method = 'POST';

$uri = '/v2/document' ;

$params = ['register' => ''];

$authorization = $this->getAuthorization($method, $this->host, $uri, $params, $this->timestamp, $this->expirationInSeconds);

// >> second: create header and body information for http request

$url = "https://{$this->host}{$uri}?register";

$timeStr = $this->timestamp->format("Y-m-d\TH:i:s\Z");

$head = [

"Content-Type" => "application/json",

"Authorization" => $authorization,

"x-bce-date" => $timeStr,

];

$body = [

'title' => '123',

'format' => 'doc',

];

$client = new Client();

$response = $client->request($method, $url, [

'body' => json_encode($body),

'headers' => $head

]);

$body = $response->getBody();

return $body;

}

/**

* 阅读文档

* @return array|\Psr\Http\Message\StreamInterface

*/

public function read()

{

// >> first: get authorization

$method = 'GET';

$documentId = 'doc-icukvvnfq6ixnat';

$uri = '/v2/document/'. $documentId;

$params = ['read' => ''];

$this->expirationInSeconds = 3600;

$authorization = $this->getAuthorization($method, $this->host, $uri, $params, $this->timestamp, $this->expirationInSeconds);

// >> second: create header and body information for http request

$url = "http://{$this->host}{$uri}?read";

$timeStr = $this->timestamp->format("Y-m-d\TH:i:s\Z");

$head = [

"Content-Type" => "application/json",

"Authorization" => $authorization,

"x-bce-date" => $timeStr,

];

$client = new Client();

$response = $client->request($method, $url, [

'headers' => $head

]);

$body = $response->getBody();

return $body;

}

// 获取认证字符串

protected function getAuthorization($method, $host, $uri, $params, $timestamp, $expirationInSeconds)

{

$timeStr = $timestamp->format("Y-m-d\TH:i:s\Z");

$authStringPrefix = "bce-auth-v1/{$this->credentials['ak']}/{$timeStr}/{$expirationInSeconds}";

$signingKey = hash_hmac('SHA256', $authStringPrefix, $this->credentials['sk']);

$canonicalHeader1 = "host;x-bce-date";

$canonicalHeader2 = "host:{$host}\n" . "x-bce-date:" . urlencode($timeStr);

$httpUtil = new HttpUtil();

$canonicalString = $httpUtil->getCanonicalQueryString($params);

$canonicalUri = $httpUtil->getCanonicalURIPath($uri);

$method = strtoupper($method);

$canonicalRequest = "{$method}\n{$canonicalUri}\n{$canonicalString}\n{$canonicalHeader2}";

$signature = hash_hmac('SHA256', $canonicalRequest, $signingKey);

$authorization = "bce-auth-v1/{$this->credentials['ak']}/{$timeStr}/{$expirationInSeconds}/{$canonicalHeader1}/{$signature}";

return $authorization;

}

}