erp/core/CoreApp/models/Model_apittv1.php

<?php
class Model_apittv1 extends Lin_Model {
    function __construct(){
            parent::__construct();
            $this->load->_model("Model_logic_ding","logic_ding");
    }

    private function sign($url,$appSecret,$body='') 
	{
		// 解析URL获取查询参数
		$queryParams = array();
		parse_str(parse_url($url, PHP_URL_QUERY), $queryParams);
		// 排除'sign'和'access_token'
		unset($queryParams['sign'], $queryParams['access_token']);
		// 按字典顺序排序查询参数
		ksort($queryParams);
		// 拼接参数为{key}{value}格式
		$input = '';
		foreach ($queryParams as $key => $value)
		{
    		$input .= $key . $value;
		}
		// 追加请求路径
		$path = parse_url($url, PHP_URL_PATH);
		$input = $path . $input;
		if ($body) 
		{
			$input .= json_encode($body);
	    }
		// 使用app_secret包裹生成的字符串
		$input = $appSecret . $input . $appSecret;
		// 生成签名
		$sign = hash_hmac('sha256', $input,$appSecret);
        return $sign;
	}

    // private function sign($url,$header,$body,$secret){
    //     //解析URL
    //     $urlParts = parse_url($url);

    //     //获取路径
    //     $path = $urlParts['path']??'';

    //     //解析查询参数
    //     $queryParams = [];
    //     if(isset($urlParts['query'])){
    //         parse_str($urlParts['query'],$queryParams);
    //     }
    //     // 移除sign和access_token参数
    //     unset($queryParams['sign']);
    //     unset($queryParams['access_token']);
        
    //     // 按参数名排序
    //     ksort($queryParams);

    //     // 构建参数字符串
    //     $parameterStr = $path;
    //     foreach ($queryParams as $key => $value) {
    //         $parameterStr .= $key . $value;
    //     }

    //     // 检查Content-Type，如果不是multipart/form-data，则追加body
    //     $contentType = $this->getHeader($header, 'Content-Type');
    //     if (stripos($contentType, 'multipart/form-data') === false && !empty($body)) {
    //         $parameterStr .= $body;
    //     }
        
    //     // 用secret包裹参数字符串
    //     $signatureParams = $secret . $parameterStr . $secret;
        
    //     // 使用HMAC-SHA256生成签名
    //     return $this->generateSHA256($signatureParams, $secret);
    // }

    // private function getHeader($header,$name){
    //     $lowerName = strtolower($name);
    //     foreach ($header as $key => $value) {
    //         if (strtolower($key) === $lowerName) {
    //             return $value;
    //         }
    //     }
    //     return '';
    // }

    // private function generateSHA256($signatureParams, $secret){
    //     return hash_hmac('sha256', $signatureParams, $secret);
    // }

    private function reqGet($url,$headers){
       
        // 初始化cURL
        $ch = curl_init();
        
        // 设置cURL选项
        curl_setopt_array($ch, [
            CURLOPT_URL => $url,
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_HTTPGET => true, // 明确设置为GET请求
            CURLOPT_HTTPHEADER => $headers,
            
            // SSL设置 - 禁用验证（仅测试环境）
            CURLOPT_SSL_VERIFYPEER => false,
            CURLOPT_SSL_VERIFYHOST => false,
            
            // 其他设置
            CURLOPT_TIMEOUT => 300,
            CURLOPT_FOLLOWLOCATION => true,
        ]);
        
        // 执行请求
        $response = curl_exec($ch);
        
        // 检查错误
        $error_msg = "";
        if (curl_errno($ch)) {
            $error_msg = $ch;
        }
        
        // 获取HTTP状态码
        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
        
        return [
            'httpCode'=>$httpCode,
            'response'=>$response,
            'errorMsg'=>$error_msg
        ];
       
    }

    private function reqPost($url,$headers,$data){
        // 初始化cURL
        $ch = curl_init();

        // 设置cURL选项
        curl_setopt_array($ch, [
            CURLOPT_URL => $url,
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_POST => true,
            CURLOPT_HTTPHEADER => $headers,
            CURLOPT_POSTFIELDS => json_encode($data),
            CURLOPT_SSL_VERIFYPEER => false, // 根据实际情况调整，生产环境建议设为true
            CURLOPT_TIMEOUT => 300,
        ]);

        // 执行请求
        $response = curl_exec($ch);

        // 检查错误
        $error_msg = "";
        if (curl_errno($ch)) {
            $error_msg = curl_error($ch);
        }

        // 获取HTTP状态码
        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);

        // 关闭cURL资源
        curl_close($ch);

        return [
            'httpCode'=>$httpCode,
            'response'=>$response,
            'errorMsg'=>$error_msg
        ];
    }

    public function downloadLabel($package_id,$shop,$info){
        $url = 'https://open-api.tiktokglobalshop.com';
		$link = '/fulfillment/202309/packages/'.$package_id.'/shipping_documents';
		$time = time();
		$link .= '?shop_cipher='.$shop['shop_cipher'].'&app_key='.$shop['app_key'].'&timestamp='.$time."&document_type=SHIPPING_LABEL";
        $url = $url.$link;
        $headers = array('Content-Type: application/json','x-tts-access-token:'.$shop['token']);
		$sign = $this->sign($url,$headers,[],$shop['app_key']);
		$url .= $link.'&sign='.$sign;
		$res = $this->reqGet($url,$headers);
        if($res['httpCode'] != 200){
            echo "<pre>";
            print_r($res);
        }else{
            echo "<pre>";
            print_r($res);
        }
		 
    }
   
}