AI盒绘开放平台开发者中心

const axios = require('axios');
const crypto = require('crypto');
const express = require('express');
const multer  = require('multer');
const upload = multer({ dest: '/data/designs/' });

// 1. 服务端 HMAC-SHA256 安全签名并申请免登 Ticket
async function getOpenEditorTicket(externalUserId, nickname = '设计体验官') {
  // 【环境配置】测试沙箱环境配置（上线生产只需替换为生产 Base URL 与正式凭据）
  const API_BASE_URL = 'https://test-open.1packify.com/api';
  const APP_KEY = 'partner_demo_key';
  const APP_SECRET = 'partner_demo_secret_2026'; // 离线绝密存储

  const timestamp = Math.floor(Date.now() / 1000);
  const nonce = crypto.randomBytes(8).toString('hex');

  // 参数字典序待签名串
  const params = { appKey: APP_KEY, timestamp, nonce, externalUserId, nickname };
  const stringToSign = Object.keys(params)
    .sort()
    .filter(k => params[k] !== undefined && params[k] !== '')
    .map(k => `${k}=${params[k]}`)
    .join('&');

  const signature = crypto.createHmac('sha256', APP_SECRET)
    .update(stringToSign, 'utf8')
    .digest('hex');

  const resp = await axios.post(`${API_BASE_URL}/open/auth/ticket`, {
    externalUserId,
    nickname
  }, {
    headers: {
      'X-Open-App-Key': APP_KEY,
      'X-Open-Timestamp': timestamp,
      'X-Open-Nonce': nonce,
      'X-Open-Signature': signature
    }
  });
  return resp.data.data.ticket;
}

// 2. 接收 Webhook 文件流
const app = express();
app.post('/api/webhook/aidesign/handleSave', upload.single('file'), (req, res) => {
  const { externalProjectId, externalUserId, extra, title } = req.body;
  console.log(`[Webhook] 项目 ${externalProjectId} (自定义透传: ${extra}) 完成编辑，文件保存于: ${req.file.path}`);
  res.json({ code: 200, message: 'success' });
});
app.listen(3000);

import time
import uuid
import hmac
import hashlib
import requests
from fastapi import FastAPI, UploadFile, File, Form

# 1. 服务端 HMAC-SHA256 安全加签并申请 Ticket
def get_open_editor_ticket(external_user_id: str, nickname: str = "设计体验官") -> str:
    # 【环境配置】测试沙箱环境配置
    API_BASE_URL = "https://test-open.1packify.com/api"
    APP_KEY = "partner_demo_key"
    APP_SECRET = "partner_demo_secret_2026" # 绝密保存
    
    timestamp = int(time.time())
    nonce = uuid.uuid4().hex[:16]

    params = {
        "appKey": APP_KEY,
        "timestamp": str(timestamp),
        "nonce": nonce,
        "externalUserId": external_user_id,
        "nickname": nickname
    }
    # 参数字典序升序组装
    string_to_sign = "&".join(f"{k}={v}" for k, v in sorted(params.items()) if v)
    signature = hmac.new(
        APP_SECRET.encode("utf-8"),
        string_to_sign.encode("utf-8"),
        hashlib.sha256
    ).hexdigest()

    headers = {
        "X-Open-App-Key": APP_KEY,
        "X-Open-Timestamp": str(timestamp),
        "X-Open-Nonce": nonce,
        "X-Open-Signature": signature
    }
    payload = {"externalUserId": external_user_id, "nickname": nickname}
    resp = requests.post(f"{API_BASE_URL}/open/auth/ticket", json=payload, headers=headers)
    return resp.json()["data"]["ticket"]

# 2. 接收 Webhook 文件流
app = FastAPI()
@app.post("/api/webhook/aidesign/handleSave")
async def handle_save(
    file: UploadFile = File(...),
    externalProjectId: str = Form(...),
    externalUserId: str = Form(None),
    extra: str = Form(None),
    title: str = Form(None)
):
    content = await file.read()
    with open(f"/data/designs/{externalProjectId}_{file.filename}", "wb") as f:
        f.write(content)
    return {"code": 200, "message": "success"}

// 1. 服务端 HMAC-SHA256 安全签名申请 Ticket
func GetOpenEditorTicket(externalUserId string) (string, error) {
    // 【环境配置】测试沙箱环境配置
    const apiBaseUrl = "https://test-open.1packify.com/api"
    const appKey = "partner_demo_key"
    const appSecret = "partner_demo_secret_2026"

    timestamp := time.Now().Unix()
    nonce := fmt.Sprintf("%x", time.Now().UnixNano())[:16]
    nickname := "设计体验官"

    params := map[string]string{
        "appKey":         appKey,
        "timestamp":      strconv.FormatInt(timestamp, 10),
        "nonce":          nonce,
        "externalUserId": externalUserId,
        "nickname":       nickname,
    }

    var keys []string
    for k := range params {
        keys = append(keys, k)
    }
    sort.Strings(keys)

    var parts []string
    for _, k := range keys {
        if params[k] != "" {
            parts = append(parts, fmt.Sprintf("%s=%s", k, params[k]))
        }
    }
    stringToSign := strings.Join(parts, "&")

    mac := hmac.New(sha256.New, []byte(appSecret))
    mac.Write([]byte(stringToSign))
    signature := hex.EncodeToString(mac.Sum(nil))

    reqBody, _ := json.Marshal(map[string]string{
        "externalUserId": externalUserId,
        "nickname":       nickname,
    })
    req, _ := http.NewRequest("POST", apiBaseUrl+"/open/auth/ticket", bytes.NewBuffer(reqBody))
    req.Header.Set("Content-Type", "application/json")
    req.Header.Set("X-Open-App-Key", appKey)
    req.Header.Set("X-Open-Timestamp", strconv.FormatInt(timestamp, 10))
    req.Header.Set("X-Open-Nonce", nonce)
    req.Header.Set("X-Open-Signature", signature)

    resp, err := http.DefaultClient.Do(req)
    if err != nil {
        return "", err
    }
    defer resp.Body.Close()
    // 解析返回 JSON 中的 data.ticket 即可
    return "8c3b7f1e...", nil
}

// 2. 接收 Webhook 文件流 (Gin 框架)
r.POST("/api/webhook/aidesign/handleSave", func(c *gin.Context) {
    file, _ := c.FormFile("file")
    externalProjectId := c.PostForm("externalProjectId")
    extra := c.PostForm("extra")
    _ = extra // 自定义透传业务数据
    c.SaveUploadedFile(file, "/data/designs/"+externalProjectId+"_"+file.Filename)
    c.JSON(http.StatusOK, gin.H{"code": 200, "message": "success"})
})