如何在调用2 calls时使用C#进行身份验证

Question

我正在尝试调用2。根据他们的文件，首先我需要认证。他们网站上的所有示例代码都是用PHP编写的。当我尝试使用同样的C#时，我从服务器获得了"Hash签名无法被验证“的消息。下面是从我的代码中截取的代码：

Encoding encoding = Encoding.UTF8;
string vendorCode = //My vendor code
string secretKey = //My secret key
byte[] secretBytes = encoding.GetBytes(secretKey);
date = DateTime.Now.ToString("yyyy-MM-dd HH:mm:ss");
string input = vendorCode.Length.ToString() + vendorCode + date.Length.ToString() + date;

using (HMACMD5 keyedHash = new HMACMD5(secretBytes))
{
    byte[] hashedBytes = keyedHash.ComputeHash(encoding.GetBytes(input));
    string hash = Convert.ToBase64String(hashedBytes);
    
    using (HttpRequestMessage request = new HttpRequestMessage(HttpMethod.Get, apiUrl + 
requestString))
    {
        request.Headers.Add("accept", "application/json");
        string headerValue = "code=\"" + vendorCode + "\" date=\"" + date + "\" hash=\"" + hash + "\"";
        request.Headers.Add("X-Avangate-Authentication", headerValue);
        HttpResponseMessage httpResponse = await httpClient.SendAsync(request);
    }
}

我不知道我做错了什么。是我使用的哈希算法还是文本编码？我尝试了几种变体，但都没有成功。如果有人在这方面帮助我，我将非常感激。

Answer 1

下面的代码块适用于我。根据文档https://verifone.cloud/docs/2checkout/API-Integration/Webhooks/06Instant_Payment_Notification_%2528IPN%2529/IPN-code-samples#c__0023__00a0的需要稍微修改代码

string secretKey = "MYSECRETKEY";
string VendorCode = "MYVENDORCODE";
string requestDateTime = DateTime.UtcNow.ToString("yyyy-MM-dd HH:mm:ss");
string plaintext = VendorCode.Length + VendorCode + requestDateTime.Length + requestDateTime;

using(HMACMD5 hmac = new HMACMD5(Encoding.ASCII.GetBytes(secretKey)))
{
    byte[] hashBytes = hmac.ComputeHash(Encoding.ASCII.GetBytes(plaintext));        
    string signatureHash = BitConverter.ToString(hashBytes).Replace("-", "").ToLower();
    
    using (var httpClient = new HttpClient { BaseAddress = new Uri("https://api.avangate.com/rest/6.0/") })                
    {
        httpClient.DefaultRequestHeaders.TryAddWithoutValidation("accept", "application/json");
        httpClient.DefaultRequestHeaders.TryAddWithoutValidation("X-Avangate-Authentication", $"code='{VendorCode}' date='{requestDateTime}' hash='{signatureHash}'");
        // Make your requests to desired Api
    }
}