华商城开放 API · 接入指南 & SDK

// 保存为 HuashangApi.php
class HuashangApi {
    private $base = 'https://vip.wscmall.com', $key, $secret;
    function __construct($key, $secret) { $this->key=$key; $this->secret=$secret; }
    function call($action, $params=[], $sign=false) {
        $body = json_encode(array_merge(['action'=>$action], $params), JSON_UNESCAPED_UNICODE);
        $h = ['Content-Type: application/json', 'X-Api-Key: '.$this->key, 'X-Api-Secret: '.$this->secret];
        if ($sign) {
            $ts=(string)time(); $nonce=bin2hex(random_bytes(8)); $path='/api.php';
            $h[]='X-Timestamp: '.$ts; $h[]='X-Nonce: '.$nonce;
            $h[]='X-Signature: '.hash_hmac('sha256', $ts."\n".$nonce."\nPOST\n".$path, $this->secret);
        }
        $ch=curl_init($this->base.'/api.php');
        curl_setopt_array($ch,[CURLOPT_POST=>true,CURLOPT_POSTFIELDS=>$body,CURLOPT_HTTPHEADER=>$h,CURLOPT_RETURNTRANSFER=>true]);
        $r=curl_exec($ch); curl_close($ch); return json_decode($r,true);
    }
}
// 用法
$api = new HuashangApi($key, $secret);
$cats = $api->call('open.categories');            // 读
$ship = $api->call('open.merchant_ship', ['order_id'=>123, 'express_company'=>'顺丰', 'express_no'=>'SF123'], true); // 写（带签名）

// Node.js 18+（crypto 内置）
const crypto = require('crypto');
class HuashangApi {
  constructor(key, secret) { this.key=key; this.secret=secret; }
  async call(action, params={}, sign=false) {
    const headers = {'Content-Type':'application/json','X-Api-Key':this.key,'X-Api-Secret':this.secret};
    if (sign) {
      const ts=String(Math.floor(Date.now()/1000)), nonce=crypto.randomBytes(8).toString('hex'), path='/api.php';
      headers['X-Timestamp']=ts; headers['X-Nonce']=nonce;
      headers['X-Signature']=crypto.createHmac('sha256',this.secret).update(`${ts}\n${nonce}\nPOST\n${path}`).digest('hex');
    }
    const r = await fetch('https://vip.wscmall.com/api.php',{method:'POST',headers,body:JSON.stringify({action,...params})});
    return r.json();
  }
}
const api = new HuashangApi(KEY, SECRET);
await api.call('open.products', {page:1, pageSize:20});

# 保存为 huashang_api.py（依赖 requests）
import time, hmac, hashlib, json, secrets, requests

class HuashangApi:
    def __init__(self, key, secret):
        self.base = 'https://vip.wscmall.com'; self.key=key; self.secret=secret
    def call(self, action, params=None, sign=False):
        params = params or {}; params['action'] = action
        headers = {'Content-Type':'application/json','X-Api-Key':self.key,'X-Api-Secret':self.secret}
        if sign:
            ts = str(int(time.time())); nonce = secrets.token_hex(8); path='/api.php'
            base = f'{ts}\n{nonce}\nPOST\n{path}'
            headers['X-Timestamp']=ts; headers['X-Nonce']=nonce
            headers['X-Signature']=hmac.new(self.secret.encode(), base.encode(), hashlib.sha256).hexdigest()
        r = requests.post(self.base+'/api.php', json=params, headers=headers)
        return r.json()

api = HuashangApi(KEY, SECRET)
api.call('open.search', {'keyword':'珍珠'})