Gate io api V4 INVALID_SIGNATURE

Question

我正在尝试向 Gate.io 加密货币市场发出请求并收到此错误。 {"label":"INVALID_SIGNATURE","message":"签名不匹配"}

C++代码：

std::string hmac_sha512(const std::string& key, const std::string& data) {
    unsigned char* digest = HMAC(EVP_sha512(), key.c_str(), key.length(),
        reinterpret_cast<const unsigned char*>(data.c_str()), data.length(), nullptr, nullptr);
    std::stringstream ss;
    for (int i = 0; i < SHA512_DIGEST_LENGTH; i++) {
        ss << std::hex << std::setw(2) << std::setfill('0') << (int)digest[i];
    }
    return ss.str();
}
CreateOrder(){
std::string host = "api.gateio.ws";
std::string prefix = "/api/v4";
std::string path = "/spot/orders";
std::string method = "POST";


//https://api.gateio.ws/api/v4/spot/orders
std::string payload = "{\"text\":\"t-123456\",\"currency_pair\":\"ETH_BTC\",\"type\":\"limit\",\"account\":\"spot\",\"side\":\"buy\",\"iceberg\":\"0\",\"amount\":\"1\",\"price\":\"5.00032\",\"time_in_force\":\"gtc\",\"auto_borrow\":false,\"stp_act\":\"cn\"}";
std::string hashJsonPayload = hmac_sha512(secretKey, payload);
std::string timestamp_seconds= std::to_string(std::chrono::duration_cast<std::chrono::seconds>(std::chrono::system_clock::now().time_since_epoch()).count());
std::string queryParam = "";
std::string sign_string = method + "\n" + "/api/v4/spot/orders"  + "\n" + queryParam + "\n" + hashJsonPayload + "\n" + timestamp_seconds;

std::string signHash = hmac_sha512(secretKey, sign_string);

req_.method(boost::beast::http::verb::post);
req_.target(r.target);
req_.version(11);
req_.set(boost::beast::http::field::host, r.host);
req_.set(boost::beast::http::field::accept, "application/json");
req_.set(boost::beast::http::field::content_type, "application/json");
req_.set(boost::beast::http::field::user_agent, BOOST_BEAST_VERSION_STRING);
req_.set("KEY", api_key); // API anahtarı ekleniyor
req_.set("Timestamp", timestamp_seconds);
req_.set("SIGN", signHash);
..
}
    

我正在尝试更改有效负载但不起作用 std::string Payload1 = "{"text":"t-123456","currency_pair":"ETH_BTC","type":"limit","account":"spot","side":"buy", "iceberg":"0","金额":"1","价格":"5.00032","time_in_force":"gtc","auto_borrow":false,"stp_act":"cn"}";

std::string payload2 = R"(
{
    "text": "t-123456",
    "currency_pair": "ETH_BTC",
    "type": "limit",
    "account": "spot",
    "side": "buy",
    "iceberg": "0",
    "amount": "1",
    "price": "5.00032",
    "time_in_force": "gtc",
    "auto_borrow": false,
    "stp_act": "cn"
}
)";

std::string Payload3= "{"account":"spot","currency_pair":"" +currencyPair + "","type":"market","side":"" + side + "","金额":"" + 金额 + ""}";

Answer 1

文档这里：

在 APIv4 中，签名字符串按以下方式连接：

Request Method + "\n" + Request URL + "\n" + Query String + "\n" + HexEncode(SHA512(Request Payload)) + "\n" + Timestamp

请求方式

大写的请求方法，例如

POST

，

GET

请求网址

请求网址。不包括协议、主机和端口，例如

/api/v4/futures/orders

查询字符串

不带 URL 编码的请求查询字符串。查询参数的顺序应该与它们的连接方式相同 请求 URL，例如

status=finished&limit=50

。使用空字符串("") 如果没有查询参数。

HexEncode（SHA512（请求负载））

使用 SHA512 对请求正文进行哈希处理并输出其十六进制编码形式。如果没有请求体，则使用空 字符串的哈希结果，即

cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

时间戳

时间戳请求标头值。

注意，你需要

HexEncode(SHA512(Request Payload))

，你使用了hmac_sha512，它是基于SHA512的基于密钥的加密，但不一样。

演示

尝试修复：

住在Coliru

#include <chrono>
#include <iostream>
#include <openssl/hmac.h>
#include <openssl/sha.h>
#include <span>

using namespace std::chrono_literals;
static constexpr auto now = std::chrono::system_clock::now;

using Bytes = std::span<unsigned char>;

static std::string hex_digest(Bytes hash) {
    std::string result(hash.size() * 2, '0');

    for (auto out = result.begin(); int b : hash) {
        static constexpr char digits[] = "0123456789abcdef";
        *out++ = digits[b >> 4];
        *out++ = digits[b & 0xF];
    }
    return result;
}

static std::string sha512(std::string const& data) {
    std::array<unsigned char, SHA512_DIGEST_LENGTH> md;
    unsigned                                        n = md.size();
    if (!EVP_Digest(reinterpret_cast<unsigned char const*>(data.data()), data.length(), //
                    md.data(), &n, EVP_sha512(), nullptr))
        throw std::runtime_error(__FUNCTION__);
    return hex_digest(md);
}
static std::string hmac_sha512(std::string const& key, std::string const& data) {
    unsigned char* digest =
        HMAC(EVP_sha512(), key.c_str(), key.length(), reinterpret_cast<unsigned char const*>(data.c_str()),
             data.length(), nullptr, nullptr);

    return hex_digest(Bytes(digest, SHA512_DIGEST_LENGTH));
}

int main() {
    struct {
        std::string target = "/", host = "host";
    } r;

    std::string host = "api.gateio.ws", prefix = "/api/v4", path = "/spot/orders", method = "POST";
    r = {prefix + path, host};
    std::string payload =
        "{\"text\":\"t-123456\",\"currency_pair\":\"ETH_BTC\",\"type\":\"limit\",\"account\":\"spot\","
        "\"side\":\"buy\",\"iceberg\":\"0\",\"amount\":\"1\",\"price\":\"5.00032\",\"time_in_force\":"
        "\"gtc\",\"auto_borrow\":false,\"stp_act\":\"cn\"}";
    std::string timestamp_seconds = std::to_string(now().time_since_epoch() / 1s);
    std::string queryParam        = "";
    std::string sign_string =
        method + "\n" + r.target + "\n" + queryParam + "\n" + sha512(payload) + "\n" + timestamp_seconds;
    std::cout << sign_string << "\n\n" << hmac_sha512("secret", sign_string) << "\n";
}

演示：