簽章規則

package main

import (
	"crypto/md5"
	"encoding/hex"
	"fmt"
	"net/url"
)

// GenerateSign 依 key 排序並 URL-encode（url.Values.Encode），接上 API Key 後計算 MD5
func GenerateSign(params url.Values, apiKey string) string {
	sum := md5.Sum([]byte(params.Encode() + apiKey))
	return hex.EncodeToString(sum[:])
}

func main() {
	params := url.Values{}
	params.Set("transactionID", "deposit-20250101000001")
	params.Set("channelID", "1")
	params.Set("account", "player001")
	params.Set("currency", "CNY")
	params.Set("amount", "10.00")
	// 陣列參數請用 Add 依序加入，例如 params.Add("gameIDList", "102")
	fmt.Println(GenerateSign(params, "a188va")) // 4899d19dd28e49b04e1656afb1f7dc4f
}

<?php
// $params: 標示「參與簽章」的參數；$apiKey: 我方提供的 API Key
function generateSign($params, $apiKey)
{
    ksort($params, SORT_STRING);
    $pairs = array();
    foreach ($params as $key => $value) {
        // 陣列參數以同名 key 重複出現，順序與送出時相同
        foreach ((array) $value as $v) {
            $pairs[] = urlencode($key) . '=' . urlencode($v);
        }
    }
    // urlencode 會把 ~ 編成 %7E，我方不編碼 ~，需還原
    $query = str_replace('%7E', '~', implode('&', $pairs));
    return md5($query . $apiKey);
}

echo generateSign(array(
    "transactionID" => "deposit-20250101000001",
    "channelID" => 1,
    "account" => "player001",
    "currency" => "CNY",
    "amount" => "10.00"
), "a188va"); // 4899d19dd28e49b04e1656afb1f7dc4f

import hashlib
from urllib.parse import urlencode, quote_plus


def generate_sign(params: dict, api_key: str) -> str:
    # 依 key 排序；陣列參數以同名 key 重複出現（doseq=True），順序與送出時相同
    query = urlencode(sorted(params.items()), doseq=True, quote_via=quote_plus)
    return hashlib.md5((query + api_key).encode("utf-8")).hexdigest()


print(generate_sign({
    "transactionID": "deposit-20250101000001",
    "channelID": 1,
    "account": "player001",
    "currency": "CNY",
    "amount": "10.00",
}, "a188va"))  # 4899d19dd28e49b04e1656afb1f7dc4f

const crypto = require("crypto");

// 與我方相同的編碼：空白編成 +、~ 不編碼，其餘以大寫十六進位編碼
function encode(value) {
  return encodeURIComponent(value)
    .replace(/[!'()*]/g, (c) => "%" + c.charCodeAt(0).toString(16).toUpperCase())
    .replace(/%20/g, "+");
}

function generateSign(params, apiKey) {
  const query = Object.keys(params)
    .sort()
    // 陣列參數以同名 key 重複出現，順序與送出時相同
    .flatMap((key) => [].concat(params[key]).map((v) => encode(key) + "=" + encode(String(v))))
    .join("&");
  return crypto.createHash("md5").update(query + apiKey, "utf8").digest("hex");
}

console.log(generateSign({
  transactionID: "deposit-20250101000001",
  channelID: 1,
  account: "player001",
  currency: "CNY",
  amount: "10.00",
}, "a188va")); // 4899d19dd28e49b04e1656afb1f7dc4f