javascript - 海妖网站 API : Generate the message signature in Google App Script

Question

我想从 Kraken.com API 检索数据。我正在尝试调用“私有(private)”方法。 (那些需要进行身份验证)

如此处所述:https://www.kraken.com/help/api

预期的签名是:

API-Sign = Message signature using HMAC-SHA512 of (URI path + SHA256(nonce + POST data)) and base64 decoded secret API key

我在这里找到了他们的 node.js 库中的一个函数应该可以完成这项工作，但我似乎无法得到它。

/**
* This method returns a signature for a request as a Base64-encoded string
* @param  {String}  path    The relative URL path for the request
* @param  {Object}  request The POST body
* @param  {Integer} nonce   A unique, incrementing integer
* @return {String}          The request signature
*/
function getMessageSignature(path, request, nonce) {
    var message = querystring.stringify(request);
    var secret = new Buffer(config.secret, 'base64');
    var hash = new crypto.createHash('sha256');
    var hmac = new crypto.createHmac('sha512', secret);

    var hash_digest = hash.update(nonce + message).digest('binary');
    var hmac_digest = hmac.update(path + hash_digest, 'binary').digest('base64');

    return hmac_digest;
}

这是我的完整代码

function main() {
  var apiKey = "API-KEY";
  var apiSecret = "API-SECRET";

  var url = "https://api.kraken.com/0/private/Balance";
  var path = "/0/private/Balance";

  const nonce = new Date() * 1000;

  const payload = {
    'nonce': nonce
  };
  const postData = 'nonce=' + nonce;

  const signature = getMessageSignature(path, apiSecret, postData, nonce);

  var httpOptions = {
   'method': 'post',
    'headers': {
      "API-Key": apiKey,
      "API-Sign": signature
    },
   'payload': postData
 };

 var response = UrlFetchApp.fetch(url, httpOptions);
 Logger.log(response.getContentText());
}


function getMessageSignature(url, secret, data, nonce) {
  const hash = Utilities.computeDigest(Utilities.DigestAlgorithm.SHA_256, nonce + data);
  const hmac_digest = Utilities.computeHmacSignature(Utilities.MacAlgorithm.HMAC_SHA_512, url + hash, Utilities.base64Decode(secret));
  return Utilities.base64Encode(hmac_digest);
}

但我最终得到了错误

{"error":["EAPI:Invalid key"]}

感谢期待。

Answer 1

我终于得到了使用 jsSHA 的代码

function getKrakenSignature (path, postdata, nonce) {
    var sha256obj = new jsSHA ("SHA-256", "BYTES");
    sha256obj.update (nonce + postdata);
    var hash_digest = sha256obj.getHash ("BYTES");

    var sha512obj = new jsSHA ("SHA-512", "BYTES");
    sha512obj.setHMACKey ("HMACKEY", "B64");
    sha512obj.update (path);
    sha512obj.update (hash_digest);
    return sha512obj.getHMAC ("B64");
}

function getKrakenBalance () {
    var path = "/0/private/Balance";
    var nonce = new Date () * 1000;
    var postdata = "nonce=" + nonce;

    var signature = getKrakenSignature (path, postdata, nonce);

    var url = "https://api.kraken.com" + path;
    var options = {
    method: 'post',
    headers: {
        'API-Key': "<API-KEY>",
        'API-Sign': signature
    },
    payload: postdata
    };

    var response = UrlFetchApp.fetch (url, options);


    return response.getContentText ();
}

function main() {
    Logger.log(getKrakenBalance());
}