1. 公共请求头参数 (Headers) 1. Common Request Headers

每次调用接口时，客户端必须在 Request Header 中包含以下字段： The client must include the following headers on every API invocation:

注意：Notice: 必须妥善保管与 App Key 对应的 App Secret，绝对不要将其放在请求中传输。App Secret 仅用于在本地计算签名。 Keep your App Secret confidential. Never transmit it over HTTP/HTTPS. It is used strictly for local signature generation.

2. 签名计算规则 2. Signature Calculation Process

签名的生成依赖于 HMAC-SHA256 算法，最终输出为 Base64 编码字符串，分为以下三个步骤： The signature is generated using HMAC-SHA256 and encoded in Base64, structured in three steps:

HTTP_METHOD + "
" +
REQUEST_PATH + "
" +
RAW_QUERY + "
" +
X_TIMESTAMP + "
" +
X_NONCE + "
" +
BODY_HASH

Signature = Base64(HMAC_SHA256(CanonicalRequest, AppSecret))

3. 代码示例 3. Code Samples

Java (Pure JDK javax.crypto)

import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import java.nio.charset.StandardCharsets;
import java.security.MessageDigest;
import java.util.Base64;

public class SignUtil {
    public static String sha256Hex(String data) {
        try {
            MessageDigest digest = MessageDigest.getInstance("SHA-256");
            byte[] hash = digest.digest((data == null ? "" : data).getBytes(StandardCharsets.UTF_8));
            StringBuilder hexString = new StringBuilder();
            for (byte b : hash) {
                String hex = Integer.toHexString(0xff & b);
                if (hex.length() == 1) hexString.append('0');
                hexString.append(hex);
            }
            return hexString.toString();
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }

    public static String hmacSha256Base64(String data, String secret) {
        try {
            Mac mac = Mac.getInstance("HmacSHA256");
            SecretKeySpec keySpec = new SecretKeySpec(secret.getBytes(StandardCharsets.UTF_8), "HmacSHA256");
            mac.init(keySpec);
            return Base64.getEncoder().encodeToString(mac.doFinal(data.getBytes(StandardCharsets.UTF_8)));
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }

    public static String generateSignature(String method, String path, String rawQuery,
                                           String timestamp, String nonce, String body, String secret) {
        String bodyHash = sha256Hex(body == null ? "" : body);
        String canonicalRequest = String.join("
",
                method.toUpperCase(), path, rawQuery == null ? "" : rawQuery,
                timestamp, nonce, bodyHash);
        return hmacSha256Base64(canonicalRequest, secret);
    }
}

JavaScript (CryptoJS / Node.js)

const CryptoJS = require("crypto-js");

function generateSignature({ method, path, rawQuery = "", timestamp, nonce, body = "", secret }) {
    const bodyHash = CryptoJS.SHA256(CryptoJS.enc.Utf8.parse(body)).toString(CryptoJS.enc.Hex);
    const canonicalRequest = [
        method.toUpperCase(), path, rawQuery, timestamp, nonce, bodyHash
    ].join("
");
    return CryptoJS.enc.Base64.stringify(CryptoJS.HmacSHA256(canonicalRequest, secret));
}

接口说明 Endpoint Overview

请求 Header 参数 Request Headers

请求 Body (application/json) Request Body (application/json)

{
  "clientRequestNo": "APIFOX-20260915-0005",
  "accountId": "333333",
  "amount": 27
}

返回响应 (202 Accepted) Response (202 Accepted)

{
    "success": true,
    "message": "充值请求已受理",
    "code": 202,
    "result": {
        "orderNo": "RC202609070001",
        "clientRequestNo": "APIFOX-20260907-0001",
        "status": "PROCESSING"
    },
    "timestamp": 1788786000000
}

接口说明 Endpoint Overview

请求 Header 参数 Request Headers

路径参数 (Path Parameters) Path Parameters

返回响应示例 (200 OK) Response Example (200 OK)

{
    "success": true,
    "code": 200,
    "message": "查询成功",
    "result": {
        "orderNo": "RC202609070001",
        "clientRequestNo": "APIFOX-20260915-0005",
        "accountId": "333333",
        "amount": 27,
        "status": "SUCCESS",
        "failReason": null,
        "finishTime": "2026-09-15 10:20:30"
    },
    "timestamp": 1788786050000
}

接口说明 Endpoint Overview

请求 Header 参数 Request Headers

路径参数 (Path Parameters) Path Parameters

返回响应示例 (200 OK) Response Example (200 OK)

{
    "success": true,
    "code": 200,
    "message": "查询成功",
    "result": {
        "orderNo": "RC202609070001",
        "clientRequestNo": "APIFOX-20260915-0005",
        "accountId": "333333",
        "amount": 27,
        "status": "SUCCESS",
        "finishTime": "2026-09-15 10:20:30"
    },
    "timestamp": 1788786050000
}

接口说明 Endpoint Overview

请求 Header 参数 Request Headers

请求 Body (application/json) Request Body (application/json)

{
  "batchNo": "BATCH-20260915-001",
  "items": [
    {
      "subRequestNo": "REQ-001",
      "accountId": "333333",
      "amount": 50
    },
    {
      "subRequestNo": "REQ-002",
      "accountId": "444444",
      "amount": 100
    }
  ]
}

返回响应 (202 Accepted) Response (202 Accepted)

{
    "success": true,
    "message": "批量充值已持久化受理",
    "code": 202,
    "result": {
        "platformBatchNo": "BAT20260915000001",
        "batchNo": "BATCH-20260915-001",
        "totalCount": 2,
        "status": "PROCESSING"
    },
    "timestamp": 1788786100000
}

接口说明 Endpoint Overview

请求 Header 参数 Request Headers

路径参数 (Path Parameters) Path Parameters

返回响应示例 (200 OK) Response Example (200 OK)

{
    "success": true,
    "code": 200,
    "message": "查询成功",
    "result": {
        "batchNo": "BATCH-20260915-001",
        "platformBatchNo": "BAT20260915000001",
        "totalCount": 2,
        "successCount": 2,
        "failCount": 0,
        "status": "COMPLETED",
        "details": [
            {
                "subRequestNo": "REQ-001",
                "orderNo": "RC202609150001",
                "accountId": "333333",
                "amount": 50,
                "status": "SUCCESS"
            },
            {
                "subRequestNo": "REQ-002",
                "orderNo": "RC202609150002",
                "accountId": "444444",
                "amount": 100,
                "status": "SUCCESS"
            }
        ]
    },
    "timestamp": 1788786200000
}

接口说明 Endpoint Overview

请求 Header 参数 Request Headers

请求 Body (application/json) Request Body (application/json)

Body JSON Sample:

{
  "eventId": "evt_2100831915776983042_SUCCESS",
  "eventType": "RECHARGE_STATUS_CHANGED",
  "appKey": "meta_E-HNGb7FfzM916trGCWiA9dB",
  "customerId": "93",
  "orderNo": "2100831915776983042",
  "clientRequestNo": "APIFOX-20260908-00874",
  "accountId": "c9dabd2aa2a311f1b5b60242c0a80002",
  "amount": 1,
  "status": "SUCCESS",
  "failureCode": null,
  "failureReason": null,
  "occurredAt": "2026-09-18T14:23:48.777+08:00"
}