Signature

package main

import (
	"crypto/md5"
	"encoding/hex"
	"fmt"
	"net/url"
)

// GenerateSign Sorts by key and URL-encodes (url.Values.Encode), appends the API key, then hashes with MD5
func GenerateSign(params url.Values, apiKey string) string {
	sum := md5.Sum([]byte(params.Encode() + apiKey))
	return hex.EncodeToString(sum[:])
}

func main() {
	params := url.Values{}
	params.Set("transactionID", "deposit-20250101000001")
	params.Set("channelID", "1")
	params.Set("account", "player001")
	params.Set("currency", "CNY")
	params.Set("amount", "10.00")
	// For array parameters, call Add for each value, e.g. params.Add("gameIDList", "102")
	fmt.Println(GenerateSign(params, "a188va")) // 4899d19dd28e49b04e1656afb1f7dc4f
}

<?php
// $params: the parameters marked Signed; $apiKey: the API key we provide
function generateSign($params, $apiKey)
{
    ksort($params, SORT_STRING);
    $pairs = array();
    foreach ($params as $key => $value) {
        // Array parameters repeat the same key, in the order they are sent
        foreach ((array) $value as $v) {
            $pairs[] = urlencode($key) . '=' . urlencode($v);
        }
    }
    // urlencode turns ~ into %7E, but ~ must stay unencoded
    $query = str_replace('%7E', '~', implode('&', $pairs));
    return md5($query . $apiKey);
}

echo generateSign(array(
    "transactionID" => "deposit-20250101000001",
    "channelID" => 1,
    "account" => "player001",
    "currency" => "CNY",
    "amount" => "10.00"
), "a188va"); // 4899d19dd28e49b04e1656afb1f7dc4f

import hashlib
from urllib.parse import urlencode, quote_plus


def generate_sign(params: dict, api_key: str) -> str:
    # Sorts by key; array parameters repeat the same key (doseq=True), in the order they are sent
    query = urlencode(sorted(params.items()), doseq=True, quote_via=quote_plus)
    return hashlib.md5((query + api_key).encode("utf-8")).hexdigest()


print(generate_sign({
    "transactionID": "deposit-20250101000001",
    "channelID": 1,
    "account": "player001",
    "currency": "CNY",
    "amount": "10.00",
}, "a188va"))  # 4899d19dd28e49b04e1656afb1f7dc4f

const crypto = require("crypto");

// Matches our encoding: space becomes +, ~ stays as is, everything else is uppercase percent-encoded
function encode(value) {
  return encodeURIComponent(value)
    .replace(/[!'()*]/g, (c) => "%" + c.charCodeAt(0).toString(16).toUpperCase())
    .replace(/%20/g, "+");
}

function generateSign(params, apiKey) {
  const query = Object.keys(params)
    .sort()
    // Array parameters repeat the same key, in the order they are sent
    .flatMap((key) => [].concat(params[key]).map((v) => encode(key) + "=" + encode(String(v))))
    .join("&");
  return crypto.createHash("md5").update(query + apiKey, "utf8").digest("hex");
}

console.log(generateSign({
  transactionID: "deposit-20250101000001",
  channelID: 1,
  account: "player001",
  currency: "CNY",
  amount: "10.00",
}, "a188va")); // 4899d19dd28e49b04e1656afb1f7dc4f