sign = hmac_sha1(data, "Your_Secret_Key")
encodedSign = urlsafe_base64_encode(sign)

package main

import (
	"crypto/hmac"
	"crypto/sha1"
	"encoding/base64"
	"fmt"
	"io"
	"net/http"
	"net/url"
	"os"
	"strings"
	"time"
)

func main() {
	// 从环境变量获取Access Key和Secret Key
	ak := os.Getenv("Access_key")
	sk := os.Getenv("Secret_key")

	// 请求体
	body := `{"data":{"uri":"http://oayjpradp.bkt.clouddn.com/Audrey_Hepburn.jpg"},"params":{"scenes":["pulp","terror","politician","ads"]}}`

	// 构建HTTP请求
	targetURL := "http://ai.qiniuapi.com/v3/image/censor"

	// 生成签名并发送请求
	signature := generateSignature("POST", targetURL, body, ak, sk)
	fmt.Printf("生成的签名: %s\n", signature)

	response, err := sendHttpRequest(targetURL, "POST", body, signature, 2)
	if err != nil {
		fmt.Printf("请求失败: %v\n", err)
		return
	}
	fmt.Printf("响应内容: %s\n", response)
}

// generateSignature 生成七牛签名
func generateSignature(method, urlStr, body, ak, sk string) string {
	parsedURL, err := url.Parse(urlStr)
	if err != nil {
		panic(err)
	}

	// 构建签名数据
	var data strings.Builder
	data.WriteString(method)
	data.WriteString(" ")
	data.WriteString(parsedURL.Path)

	if parsedURL.RawQuery != "" {
		data.WriteString("?")
		data.WriteString(parsedURL.RawQuery)
	}

	data.WriteString("\nHost: ")
	data.WriteString(parsedURL.Host)
	data.WriteString("\nContent-Type: application/json")
	data.WriteString("\n\n")

	if body != "" {
		data.WriteString(body)
	}

	// 使用HMAC-SHA1进行签名
	hmacSha1 := hmac.New(sha1.New, []byte(sk))
	hmacSha1.Write([]byte(data.String()))
	hmacResult := hmacSha1.Sum(nil)

	sign := "Qiniu " + ak + ":" + base64UrlSafeEncode(hmacResult)
	return sign
}

// sendHttpRequest 发送HTTP请求
func sendHttpRequest(urlStr, method, data, signature string, timeout int) (string, error) {
	client := &http.Client{
		Timeout: time.Duration(timeout) * time.Second,
	}

	var bodyReader io.Reader
	if data != "" {
		bodyReader = strings.NewReader(data)
	}

	req, err := http.NewRequest(method, urlStr, bodyReader)
	if err != nil {
		return "", err
	}

	req.Header.Set("Content-Type", "application/json")
	req.Header.Set("Authorization", signature)

	resp, err := client.Do(req)
	if err != nil {
		return "", err
	}
	defer resp.Body.Close()

	bodyBytes, err := io.ReadAll(resp.Body)
	if err != nil {
		return "", err
	}

	return fmt.Sprintf("HTTP %d: %s", resp.StatusCode, string(bodyBytes)), nil
}

// base64UrlSafeEncode URL安全的base64编码
func base64UrlSafeEncode(data []byte) string {
	encoded := base64.StdEncoding.EncodeToString(data)
	encoded = strings.ReplaceAll(encoded, "+", "-")
	encoded = strings.ReplaceAll(encoded, "/", "_")
	return encoded
}