signature - coinbase 的 API 密钥认证

Question

我正在尝试为 API coinbase.com 编写请求，但无法正确生成签名。两天来我一直试图找出我的错误，但我做不到。我分析了页面上其他语言的代码：https ://developers.coinbase.com/docs/wallet/api-key-autumnicathion ，但我看不出在实现上有任何差异。

请帮帮我。

<?php
$g_coinbase_key = 'KcxisxqmWRVgtwsj';
$g_coinbase_secret = 'isOLGBLaEkCy3ROQMvmjonGmXK0KRmUS';

$time = time();
$method = "GET";
$path = '/v2/accounts/';
$sign = base64_encode(hash_hmac("sha256", $time.$method.$path, $g_coinbase_secret));
$ch = curl_init('https://api.coinbase.com'.$path);
$headers = array(
    "CB-VERSION: 2017-10-26",
    "CB-ACCESS-SIGN: ".$sign,
    "CB-ACCESS-TIMESTAMP: ".$time,
    "CB-ACCESS-KEY: ".$g_coinbase_key,
    "Content-Type: application/json"
);
curl_setopt($ch, CURLOPT_HTTPGET, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$result = curl_exec($ch);
var_dump($result);
?>

结果：

{"errors":[{"id":"authentication_error","message":"invalid signature"}]}

Answer 1

代替

$sign = base64_encode(hash_hmac("sha256", $time.$method.$path, $g_coinbase_secret));

和

$sign = hash_hmac("sha256", $time.$method.$path, $g_coinbase_secret);

Coibase Api 使用 hash_mac

Answer 2

要正确创建签名，Coinbase Pro 将接受使用其 API 文档中的以下代码：

class CoinbaseExchange {
    public function __construct($key, $secret, $passphrase) {
        $this->key = $key;
        $this->secret = $secret;
        $this->passphrase = $passphrase;
    }

    public function signature($request_path='', $body='', $timestamp=false, $method='GET') {
        $body = is_array($body) ? json_encode($body) : $body;
        $timestamp = $timestamp ? $timestamp : time();

        $what = $timestamp.$method.$request_path.$body;

        return base64_encode(hash_hmac("sha256", $what, base64_decode($this->secret), true));
    }
}

Answer 3

像这样创建签名：

$time = time();
$method = "GET";
$path = 'accounts';
$sign = base64_encode(hash_hmac("sha256", $time.$method.$path, base64_decode($g_coinbase_secret), true));

并更换

$ch = curl_init('https://api.coinbase.com'.$path);

和

$ch = curl_init('https://api.coinbase.com/v2/');