return javascript 中的 hmac 密钥

return hmac key in javascript

从我的 api 供应商那里,我有一个代码应该生成一个 hmac 密钥。

<html>
<head>
</head>
<body>
<p id="demo"></p>
<script>var BuckarooHmac = (function () {
    var self = {};

    function getEncodedContent(content) {
        if (content) {
            var md5 = CryptoJS.MD5(content);
            var base64 = CryptoJS.enc.Base64.stringify(md5);
            return base64;
        }

        return content;
    }

    function getHash(websiteKey, secretKey, httpMethod, nonce, timeStamp, requestUri, content) {
        var encodedContent = getEncodedContent(content);

        var rawData = websiteKey + httpMethod + requestUri + timeStamp + nonce + encodedContent;
        var hash = CryptoJS.HmacSHA256(rawData, secretKey);
        var hashInBase64 = CryptoJS.enc.Base64.stringify(hash);

        return hashInBase64;
    }

    function getTimeStamp() {
        return Math.floor((new Date).getTime() / 1000);
    }

    function getNonce() {
        var text = "";
        var possible = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
        for (var i = 0; i < 16; i++) {
            text += possible.charAt(Math.floor(Math.random() * possible.length));
        }
        return text;
    }

    self.GetAuthHeader = function (requestUri, websiteKey, secretKey, content, httpMethod) {
        var nonce = getNonce();
        var timeStamp = getTimeStamp();
        content = content ? content : "";
        var url = encodeURIComponent(requestUri).toLowerCase();
        return "hmac " + websiteKey + ":" + getHash(websiteKey, secretKey, httpMethod, nonce, timeStamp, url, content) + ":" + nonce + ":" + timeStamp;
    }
    return self;
     document.getElementById("demo").innerHTML = self.GetAuthHeader();
}());

</script>
</body>
</html>

不习惯javascript。我想弄清楚如何在我的屏幕上打印生成的密钥。我试过了:

document.getElementById("demo").innerHTML = self.GetAuthHeader();

我知道我一定做错了。我现在只需要朝正确的方向推动。任何人都可以帮助我吗?

您正试图在 函数的 return 语句之后执行操作。永远无法访问该代码,因为该函数已 returned.

相反,先做:

document.getElementById("demo").innerHTML = self.GetAuthHeader();
return self;

或者,更好的是,如果此代码是由供应商提供的,那么您可能不应该对其进行编辑。更新会删除您的编辑,并且供应商支持会受到损害。相反,完全在代码之外执行您的操作:

var BuckarooHmac = (function () {
    // vendor code
}());

document.getElementById("demo").innerHTML = BuckarooHmac.GetAuthHeader();