微赞js接口安全接口

// 示例代码：生成签名
function generateSignature(params, secretKey) {
    const sortedParams = Object.keys(params).sort().reduce((acc, key) => {
        acc[key] = params[key];
        return acc;
    }, {});
    const stringToSign = Object.entries(sortedParams).map(([key, value]) => `${key}=${value}`).join('&');
    const signature = CryptoJS.HmacSHA256(stringToSign, secretKey).toString(CryptoJS.enc.Hex);
    return signature;
}

// 示例代码：验证签名
function verifySignature(params, secretKey, receivedSignature) {
    const generatedSignature = generateSignature(params, secretKey);
    return generatedSignature === receivedSignature;
}

const MAX_TIMESTAMP_DIFFERENCE = 5 * 60 * 1000; // 5分钟

function verifyTimestamp(timestamp) {
    const currentTime = Date.now();
    const timeDifference = Math.abs(currentTime - timestamp);
    return timeDifference <= MAX_TIMESTAMP_DIFFERENCE;
}

const ALLOWED_IPS = ['192.168.1.1', '192.168.1.2'];

function verifyIP(ip) {
    return ALLOWED_IPS.includes(ip);
}