宝塔域名 API 概览与签名认证

https://dmp.bt.cn/

account_id = "acct_abc123def456"
access_key = "ak_789ghi012jkl345mno678pqr901stu"
secret_key = "sk_234vwx567yza890bcd123efg456hij"
timestamp = str(int(time.time()))
method = "POST"
path = "/api/v1/dns/record/create"
body = '{"domain_id":123,"record":"www","type":"A","value":"192.168.1.1"}'

signing_string = f"{account_id}\n{timestamp}\n{method}\n{path}\n{body}"

import hmac
import hashlib

signature = hmac.new(
    secret_key.encode(), 
    signing_string.encode(), 
    hashlib.sha256
).hexdigest()

headers = {
    "Content-Type": "application/json",
    "X-Account-ID": account_id,
    "X-Access-Key": access_key,
    "X-Timestamp": timestamp,
    "X-Signature": signature
}

#!/usr/bin/env python3
import requests
import hmac
import hashlib
import time
import json

class DNSApiClient:
    def __init__(self, account_id, access_key, secret_key, base_url):
        self.account_id = account_id
        self.access_key = access_key
        self.secret_key = secret_key
        self.base_url = base_url.rstrip('/')
    
    def _generate_signature(self, method, path, body=""):
        """生成 API 签名"""
        timestamp = str(int(time.time()))
        
        # 构建签名字符串
        signing_string = f"{self.account_id}\n{timestamp}\n{method.upper()}\n{path}\n{body}"
        
        # 计算 HMAC-SHA256 签名
        signature = hmac.new(
            self.secret_key.encode(),
            signing_string.encode(),
            hashlib.sha256
        ).hexdigest()
        
        return timestamp, signature
    
    def _make_request(self, method, path, data=None):
        """发起 API 请求"""
        url = f"{self.base_url}{path}"
        body = json.dumps(data) if data else ""
        
        # 生成签名
        timestamp, signature = self._generate_signature(method, path, body)
        
        # 构建请求头
        headers = {
            "Content-Type": "application/json",
            "X-Account-ID": self.account_id,
            "X-Access-Key": self.access_key,
            "X-Timestamp": timestamp,
            "X-Signature": signature
        }
        
        # 发送请求
        response = requests.request(
            method=method,
            url=url,
            headers=headers,
            data=body if body else None
        )
        
        return response.json()
    
    def create_dns_record(self, domain_id, record, record_type, value, ttl=600):
        """创建 DNS 记录"""
        data = {
            "domain_id": domain_id,
            "record": record,
            "type": record_type,
            "value": value,
            "ttl": ttl
        }
        return self._make_request("POST", "/api/v1/dns/record/create", data)
    
    def list_dns_records(self, domain_id):
        """获取 DNS 记录列表"""
        data = {"domain_id": domain_id}
        return self._make_request("POST", "/api/v1/dns/record/list", data)
    
    def create_domain(self, domain_id):
        """初始化域名 DNS"""
        data = {"domain_id": domain_id}
        return self._make_request("POST", "/api/v1/dns/domain/create", data)

# 使用示例
if __name__ == "__main__":
    # 初始化客户端
    client = DNSApiClient(
        account_id="acct_abc123def456",
        access_key="ak_789ghi012jkl345mno678pqr901stu", 
        secret_key="sk_234vwx567yza890bcd123efg456hij",
        base_url="https://your-domain.com"
    )
    
    # 创建 DNS 记录
    result = client.create_dns_record(
        domain_id=123,
        record="www",
        record_type="A", 
        value="192.168.1.1"
    )
    print("创建 DNS 记录结果:", result)
    
    # 获取 DNS 记录列表
    records = client.list_dns_records(domain_id=123)
    print("DNS 记录列表:", records)

<?php
class DNSApiClient {
    private $accountId;
    private $accessKey;
    private $secretKey;
    private $baseUrl;
    
    public function __construct($accountId, $accessKey, $secretKey, $baseUrl) {
        $this->accountId = $accountId;
        $this->accessKey = $accessKey;
        $this->secretKey = $secretKey;
        $this->baseUrl = rtrim($baseUrl, '/');
    }
    
    private function generateSignature($method, $path, $body = '') {
        $timestamp = (string)time();
        
        // 构建签名字符串
        $signingString = implode("\n", [
            $this->accountId,
            $timestamp,
            strtoupper($method),
            $path,
            $body
        ]);
        
        // 计算 HMAC-SHA256 签名
        $signature = hash_hmac('sha256', $signingString, $this->secretKey);
        
        return [$timestamp, $signature];
    }
    
    private function makeRequest($method, $path, $data = null) {
        $body = $data ? json_encode($data) : '';
        list($timestamp, $signature) = $this->generateSignature($method, $path, $body);
        
        $headers = [
            'Content-Type: application/json',
            'X-Account-ID: ' . $this->accountId,
            'X-Access-Key: ' . $this->accessKey,
            'X-Timestamp: ' . $timestamp,
            'X-Signature: ' . $signature
        ];
        
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $this->baseUrl . $path);
        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
        curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        
        if ($body) {
            curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
        }
        
        $response = curl_exec($ch);
        curl_close($ch);
        
        return json_decode($response, true);
    }
    
    public function createDnsRecord($domainId, $record, $type, $value, $ttl = 600) {
        $data = [
            'domain_id' => $domainId,
            'record' => $record,
            'type' => $type,
            'value' => $value,
            'ttl' => $ttl
        ];
        return $this->makeRequest('POST', '/api/v1/dns/record/create', $data);
    }
}

// 使用示例
$client = new DNSApiClient(
    'acct_abc123def456',
    'ak_789ghi012jkl345mno678pqr901stu',
    'sk_234vwx567yza890bcd123efg456hij',
    'https://your-domain.com'
);

$result = $client->createDnsRecord(123, 'www', 'A', '192.168.1.1');
echo json_encode($result, JSON_PRETTY_PRINT);
?>