快速开始

curl -X POST "https://test.speedpay.hk/mc-platformapi/v1/open/et/vs/card/info/query" \
  -H "Content-Type: application/json" \
  -H "Authorization: BASE64_SIGNATURE" \
  -d '{
    "app_id": "app_123456",
    "timestamp": 1784880000,
    "card_no": "493875******0990"
  }'

package signature

import (
	"crypto"
	"crypto/rand"
	"crypto/rsa"
	"crypto/sha256"
	"crypto/x509"
	"encoding/base64"
	"encoding/pem"
	"fmt"
)

func SignSHA256RSA(body, privateKeyPEM []byte) (string, error) {
	block, _ := pem.Decode(privateKeyPEM)
	if block == nil {
		return "", fmt.Errorf("decode private key PEM")
	}

	parsedKey, err := x509.ParsePKCS8PrivateKey(block.Bytes)
	if err != nil {
		return "", fmt.Errorf("parse PKCS#8 private key: %w", err)
	}
	privateKey, ok := parsedKey.(*rsa.PrivateKey)
	if !ok {
		return "", fmt.Errorf("private key is not RSA")
	}
	if err := privateKey.Validate(); err != nil {
		return "", fmt.Errorf("validate RSA private key: %w", err)
	}

	digest := sha256.Sum256(body)
	signature, err := rsa.SignPKCS1v15(rand.Reader, privateKey, crypto.SHA256, digest[:])
	if err != nil {
		return "", fmt.Errorf("sign request body: %w", err)
	}
	return base64.StdEncoding.EncodeToString(signature), nil
}

body := []byte(`{"app_id":"app_123456","timestamp":1784880000,"card_no":"493875******0990"}`)

authorization, err := signature.SignSHA256RSA(body, merchantPrivateKeyPEM)
if err != nil {
	return fmt.Errorf("sign Open API request: %w", err)
}

req, err := http.NewRequestWithContext(ctx, http.MethodPost, endpoint, bytes.NewReader(body))
if err != nil {
	return fmt.Errorf("create Open API request: %w", err)
}
req.Header.Set("Content-Type", "application/json")
req.Header.Set("Authorization", authorization)