通知签名说明

通知签名

签名字段

• 时间戳（timstamp）: 从异步通知请求头（header）中获取
• 请求方式（requestMethod）： 固定值 POST
• 请求路径（requestPath）： 商户下单时上传的 callbackUrl ，只需要路径，去掉域名
• 请求参数（requestBody）: 请求参数

（1）请求参数排序：依据参数名使⽤字典顺序排序，去掉空值，去掉 signature、newSignature

（2）生成待签名字符串，固定顺序：timstamp+requestMethod+requestPath+requestBody

生成签名

Java

public class SignCheck {

    public static String signCheck(String content, String secretkey) throws NoSuchAlgorithmException, InvalidKeyException {
        Base64.Encoder base = Base64.getEncoder();
        String signVal = base.encodeToString(sha256(content.getBytes(StandardCharsets.UTF_8), secretkey.getBytes(StandardCharsets.UTF_8)));
        return signVal;
    }

    public static byte[] sha256(byte[] message, byte[] secret) throws NoSuchAlgorithmException, InvalidKeyException {
        Mac sha256_HMAC = Mac.getInstance("HmacSha256");
        SecretKeySpec secretKey = new SecretKeySpec(secret, "HmacSha256");
        sha256_HMAC.init(secretKey);
        return sha256_HMAC.doFinal(message);
    }

    public static void main(String[] args) throws Exception {
        String content = "1700549311596POST/onRamp/callback{"amount":"112.00000000","orderNo":"10000000000000006","address":"0xdc8123456780b8c55be419675c2eec5","crypto":"USDC","network":"MATIC","payType":"CREDIT_CARD","cryptoQuantity":"123","appId":"jcudotl1hwyvxhdp","fiat":"EUR","email":"[email protected]","signature":"ffaa29ee7f75cb52598fe460295caafa3ebcb549","status":"PAY_SUCCESS"}";
        String secretkey = "XXXXX";
        String sign = signCheck(content, secretkey);
        System.out.println(sign);
    }
}

生成待签名字符串“示例”

1. 获取通知参数：

JSON

{
	"amount": "15.00000000",
	"orderNo": "***",
	"address": "***",
	"payTime": "2024-09-27 17:59:27",
	"signature": "f13fb8137f2c999c5932261de9bc8668b0a7b014",
	"rawRampFee": "0.998500",
	"merchantOrderNo": "***",
	"crypto": "USDT",
	"network": "TRX",
	"rampFeeUnit": "USD",
	"cryptoPrice": "0.00000000",
	"payType": "CREDIT_CARD",
	"rampFee": "0.99000000",
	"cryptoQuantity": "12.93",
	"appId": "f83Is2y7L425rxl8",
	"fiat": "USD",
	"newSignature": "+T2BJ1S2X+ffRXoF+q5c/aqgZSyjGXt7Oh073UXLti0=",
	"email": "***@gmail.com",
	"status": "PAY_SUCCESS",
	"rampFeeInUSD": "0.99"
}

2. 去掉空值、signature、newSignature，然后参数排序：

JSON

{
	"address": "***",
	"amount": "15.00000000",
	"appId": "f83Is2y7L425rxl8",
	"crypto": "USDT",
	"cryptoPrice": "0.00000000",
	"cryptoQuantity": "12.93",
	"email": "***@gmail.com",
	"fiat": "USD",
	"merchantOrderNo": "***",
	"network": "TRX",
	"orderNo": "***",
	"payTime": "2024-09-27 17:59:27",
	"payType": "CREDIT_CARD",
	"rampFee": "0.99000000",
	"rampFeeInUSD": "0.99",
	"rampFeeUnit": "USD",
	"rawRampFee": "0.998500",
	"status": "PAY_SUCCESS"
}

3. 获取请求Header中的timestamp参数和callbackUrl路径：

• timestamp：1727431167633
• requestPath：/alchemypay-on-ramp

4. 拼接待签名字符串：

1727431167633POST/alchemypay-on-ramp{"address":"***","amount":"15.00000000","appId":"f83Is2y7L425rxl8","crypto":"USDT","cryptoPrice":"0.00000000","cryptoQuantity":"12.93","email":"***@gmail.com","fiat":"USD","merchantOrderNo":"***","network":"TRX","orderNo":"***","payTime":"2024-09-27 17:59:27","payType":"CREDIT_CARD","rampFee":"0.99000000","rampFeeInUSD":"0.99","rampFeeUnit":"USD","rawRampFee":"0.998500","status":"PAY_SUCCESS"}