某宝sign签名不全面解析

【推荐】2019 Java 开发者跳槽指南.pdf(吐血整理) >>>

近期发现有的数据需要从某宝上获取，为了便捷拿到特此记录一下，以备不时之需

接口地址 https://h5api.m.taobao.com/h5/mtop.taobao.wsearch.appsearch/1.0/

下面

jsv: 2.4.2
appKey: 12574478
t: 1576047339765
sign: 66ee8d31ad928cf47f18efbdad6eaf47
api: mtop.taobao.wsearch.appSearch
v: 1.0
H5Request: true
AntiCreep: true
type: jsonp
timeout: 3000
dataType: jsonp
callback: mtopjsonp1
data: {"m":"shopitemsearch","vm":"nw","sversion":"4.6","shopId":"110765025","sellerId":"2051441715","style":"wf","page":"1","sort":"_coefp","catmap":"","wirelessShopCategoryList":""}

其中sign参数有验参，并有时效性 算法参考

j = h(d.token + “&” + i + “&” + g + “&” + c.data)
// h函数为md5算法并转小写

sign算法：Cookie的_m_h5_tk值的'_'前部分+时间戳+appkey+data 中间用&分隔

更多参考： https://blog.csdn.net/fu254983303/article/details/100832272

来源：oschina

链接：https://my.oschina.net/u/574928/blog/3141790