使用HMAC SHA512從API獲取數據 - Swift

Question

我正在嘗試使用描述爲here的API。它使用基於密鑰的HMAC SHA512授權。

有實現的PHP的例子：

function bitmarket_api($method, $params = array()) 
{ 
    $key = "klucz_jawny"; 
    $secret = "klucz_tajny"; 

    $params["method"] = $method; 
    $params["tonce"] = time(); 

    $post = http_build_query($params, "", "&"); 
    $sign = hash_hmac("sha512", $post, $secret); 
    $headers = array(
     "API-Key: " . $key, 
     "API-Hash: " . $sign, 
); 

    $curl = curl_init(); 
    curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); 
    curl_setopt($curl, CURLOPT_URL, "https://www.bitmarket.pl/api2/"); 
    curl_setopt($curl, CURLOPT_POST, true); 
    curl_setopt($curl, CURLOPT_POSTFIELDS, $post); 
    curl_setopt($curl, CURLOPT_HTTPHEADER, $headers); 
    $ret = curl_exec($curl); 

    return json_decode($ret); 
} 

然後我試圖實現它在斯威夫特：

import Alamofire 
import CryptoSwift 

func getRawJSON(method: String, params: [String]) -> String { 
    let publicKey = "publicKeyHere" 
    let secretKey = "secretKeyHere" 
    let APIURL = "https://www.bitmarket.pl/api2/" 

    var params = [ 
     "method": method, 
     "tonce:": NSDate().timeIntervalSince1970 
     ] as [String : Any] 

    let hmac: Array<UInt8> = try! HMAC(key: secretKey.utf8.map({$0}), variant: .sha512).authenticate(params) 

    var headers = [ 
     "API-Key": publicKey, 
     "API-Hash": hmac 
    ] as [String : Any] 
} 

你可能注意到了，有沒有Alamofire使用情況獲取數據但是因爲我在準備發送數據時遇到了問題。我的意思是我已經搞砸了CryptoSwift的東西，因爲我得到這個錯誤：Cannot convert value of type '[String : Any]' to expected argument type 'Array<UInt8>'當我試圖聲明hmac變量。

如何解決？ 我可能必須以某種方式將params數組轉換爲Array<UInt8，但我不知道該怎麼做。我不確定是否一切正確。

編輯： 感謝Martin R，實際的代碼是：

func getRawJSON(method: String, paramether: String) { 
    let publicKey = "publicKeyHere" 
    let secretKey = "secretKeyHere" 
    let APIURL = "https://www.bitmarket.pl/api2/" 

    let query = NSURLComponents() 
    query.queryItems = [NSURLQueryItem(name: "method", value: method) as URLQueryItem, 
         NSURLQueryItem(name: "tonce", value: String(Int(NSDate().timeIntervalSince1970))) as URLQueryItem] 

    let requestString = query.query! 
    let requestData = Array(requestString.utf8) 

    let params = [ 
     "method": method, 
     "tonce:": String(Int(NSDate().timeIntervalSince1970)) 
     ] as [String : Any] 

    let hmac: Array<UInt8> = try! HMAC(key: secretKey.utf8.map({$0}), variant: .sha512).authenticate(requestData) 

    let hmacData = Data(bytes: hmac) 
    let hmacString = hmacData.base64EncodedString() 

    let headers = [ 
     "API-Key": publicKey, 
     "API-Hash": hmacString 
    ] as [String : String] 

    Alamofire.request(APIURL, withMethod: .post, parameters: params, encoding: .url, headers: headers) 
     .responseJSON { response in 
     print(response) 
    } 
} 

不幸的是，調用函數（getRawJSON(method: "info", paramether: "")）後，我獲取一個錯誤一個JSON：

{ 
error = 502; 
errorMsg = "Invalid message hash"; 
time = 1472910139; 
} 

我的散列有什麼問題？

Answer 1

您的銀行代碼缺什麼

$post = http_build_query($params, "", "&"); 

確實在PHP版本：使用給定參數的查詢字符串。 您可以「手動」建立一個字符串，或使用NSURLComponents：

let comps = NSURLComponents() 
comps.queryItems = [ NSURLQueryItem(name: "method", 
            value: "YOUR_METHOD"), 
        NSURLQueryItem(name: "tonce", 
            value: String(Int(NSDate().timeIntervalSince1970))) ] 
let requestString = comps.query! 
print(requestString) // method=YOUR_METHOD&tonce=1472893376 

最後這個字符串轉換爲[UInt8]陣列的HMAC 功能：

let requestData = Array(requestString.utf8) 
print(requestData) // [109, 101, 116, ..., 54]