开放 API · 开发者文档

curl -X POST https://vip.wscmall.com/api.php \
  -H "Content-Type: application/json" \
  -H "X-Api-Key: YOUR_API_KEY" \
  -H "X-Api-Secret: YOUR_API_SECRET" \
  -d '{"action":"open.products","page":1,"pageSize":20,"sort":"sales"}'

$ts    = (string)time();
$nonce = bin2hex(random_bytes(16));
$method = 'POST';
$path   = '/api.php';
$base = $ts . "\n" . $nonce . "\n" . $method . "\n" . $path;
$sign = hash_hmac('sha256', $base, $apiSecret);

$headers = [
  'Content-Type: application/json',
  'X-Api-Key: ' . $apiKey,
  'X-Api-Secret: ' . $apiSecret,
  'X-Timestamp: ' . $ts,
  'X-Nonce: ' . $nonce,
  'X-Signature: ' . $sign,
];
$body = json_encode(['action' => 'open.merchant_ship', 'order_id' => 123,
                     'express_company' => '顺丰速运', 'express_no' => 'SF1234567890']);
$ch = curl_init('https://vip.wscmall.com/api.php');
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
echo curl_exec($ch);

import hmac, hashlib, time, secrets, requests

ts = str(int(time.time()))
nonce = secrets.token_hex(16)
base = f"{ts}\n{nonce}\nPOST\n/api.php"
sign = hmac.new(api_secret.encode(), base.encode(), hashlib.sha256).hexdigest()

headers = {
    "Content-Type": "application/json",
    "X-Api-Key": api_key,
    "X-Api-Secret": api_secret,
    "X-Timestamp": ts,
    "X-Nonce": nonce,
    "X-Signature": sign,
}
resp = requests.post("https://vip.wscmall.com/api.php",
    json={"action": "open.merchant_ship", "order_id": 123,
          "express_company": "顺丰速运", "express_no": "SF1234567890"},
    headers=headers)
print(resp.json())

const crypto = require('crypto');
const ts = String(Math.floor(Date.now() / 1000));
const nonce = crypto.randomBytes(16).toString('hex');
const base = `${ts}\n${nonce}\nPOST\n/api.php`;
const sign = crypto.createHmac('sha256', apiSecret).update(base).digest('hex');

const resp = await fetch('https://vip.wscmall.com/api.php', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-Api-Key': apiKey,
    'X-Api-Secret': apiSecret,
    'X-Timestamp': ts,
    'X-Nonce': nonce,
    'X-Signature': sign,
  },
  body: JSON.stringify({ action: 'open.merchant_ship', order_id: 123,
    express_company: '顺丰速运', express_no: 'SF1234567890' })
});
console.log(await resp.json());