API Key限额管理

const hmac = crypto.createHmac('sha1', secretKey);
hmac.update(signingStr);
const sign = hmac.digest();

function urlSafeBase64Encode(buffer) {
  return buffer.toString('base64').replace(/\+/g, '-').replace(/\//g, '_');
}
const encodedSign = urlSafeBase64Encode(sign);

const crypto = require('crypto');

/**
 * URL 安全的 Base64 编码
 */
function urlSafeBase64Encode(buffer) {
  return buffer.toString('base64').replace(/\+/g, '-').replace(/\//g, '_');
}

/**
 * 生成待签名的原始字符串
 */
function generateSigningString(options) {
  const { method, path, query, host, contentType, headers, body } = options;

  let signingStr = method.toUpperCase();
  signingStr += ' ' + path;
  if (query) {
    signingStr += '?' + query;
  }
  signingStr += '\nHost: ' + host;

  if (contentType) {
    signingStr += '\nContent-Type: ' + contentType;
  }

  if (headers) {
    const sortedKeys = Object.keys(headers).sort();
    sortedKeys.forEach((key) => {
      if (key.toLowerCase().startsWith('x-qiniu-')) {
        const formattedKey = key
          .split('-')
          .map((part) => part.charAt(0).toUpperCase() + part.slice(1).toLowerCase())
          .join('-');
        signingStr += '\n' + formattedKey + ': ' + headers[key];
      }
    });
  }

  signingStr += '\n\n';

  if (body && contentType && contentType !== 'application/octet-stream') {
    signingStr += body;
  }

  return signingStr;
}

/**
 * 生成七牛云管理凭证（Access Token）
 */
function generateAccessToken(accessKey, secretKey, requestOptions) {
  const signingStr = generateSigningString(requestOptions);
  const hmac = crypto.createHmac('sha1', secretKey);
  hmac.update(signingStr);
  const sign = hmac.digest();
  const encodedSign = urlSafeBase64Encode(sign);
  return accessKey + ':' + encodedSign;
}

async function demo() {
  const accessKey = '你的 AccessKey';
  const secretKey = '你的 SecretKey';
  const host = 'api.qnaigc.com';

  // 1) GET 查询限额
  const getPath = '/v1/apikey/quota/sk-xx';
  const getToken = generateAccessToken(accessKey, secretKey, {
    method: 'GET',
    path: getPath,
    host,
  });

  const getResp = await fetch('https://' + host + getPath, {
    headers: { Authorization: 'Qiniu ' + getToken },
  });
  console.log('GET status:', getResp.status);
  console.log(await getResp.text());

  // 2) PUT 设置限额
  const putPath = '/v1/apikey/quota/sk-xx';
  const putBodyObj = {
    daily_quota: { enabled: true, limit: 10, alert_threshold: 80 },
    monthly_quota: { enabled: true, limit: 200, alert_threshold: 80 },
    total_quota: { enabled: false, limit: 1000, alert_threshold: 80 },
  };
  const putBody = JSON.stringify(putBodyObj);
  const putContentType = 'application/json';
  const putToken = generateAccessToken(accessKey, secretKey, {
    method: 'PUT',
    path: putPath,
    host,
    contentType: putContentType,
    body: putBody,
  });

  const putResp = await fetch('https://' + host + putPath, {
    method: 'PUT',
    headers: {
      Authorization: 'Qiniu ' + putToken,
      'Content-Type': putContentType,
    },
    body: putBody,
  });
  console.log('PUT status:', putResp.status);
  console.log(await putResp.text());
}

demo().catch(console.error);