public static String getRequestQueryStr(HttpServletRequest request) {
        // 对 Query 参数按照字典对 Key 进行排序后,按照value1+value2方法拼接
        // 转换一下数据类型并排序
        List<String> reqList = new ArrayList<>();
        Enumeration<String> reqEnu = request.getParameterNames();
        while (reqEnu.hasMoreElements()) {
            reqList.add(reqEnu.nextElement());
        }
        Collections.sort(reqList);
        StringBuilder requestQuery = new StringBuilder();
        for (String key : reqList) {
            String value = request.getParameter(key);
            requestQuery.append(value == null ? "" : value);
        }
        return requestQuery.toString();
    }

    //获取请求体内容
    public static String readContent(HttpServletRequest request) {
        try {
            byte[] byteContent = IOUtils.toByteArray(request.getInputStream());
            if (byteContent != null) {
                return new String(byteContent, StandardCharsets.UTF_8);
            }
        } catch (IOException e) {
            logger.error("readcontent fail");
        }
        return "";
    }

    /***
     * 计算请求签名值
     *
     * @param message 待签名字符串
     * @param secret  密钥APP KEY
     * @return HmacSHA256计算后摘要值的16进制字符串
     * @throws Exception 加密过程中的异常信息
     */
    public static String getSignature(String message, String secret) throws Exception {
        String algorithm = "HmacSHA256";
        Mac hmacSha256;
        try {
            hmacSha256 = Mac.getInstance(algorithm);
            byte[] keyBytes = secret.getBytes("UTF-8");
            byte[] messageBytes = message.getBytes("UTF-8");
            hmacSha256.init(new SecretKeySpec(keyBytes, 0, keyBytes.length, algorithm));
            // 使用HmacSHA256对二进制数据消息Bytes计算摘要
            byte[] digestBytes = hmacSha256.doFinal(messageBytes);
            return byte2hex(digestBytes);
        } catch (NoSuchAlgorithmException e) {
            String msg = MessageFormat.format("不支持此算法: {0}", e.getMessage());
            Exception ex = new Exception(msg);
            ex.initCause(e);
            throw ex;
        } catch (UnsupportedEncodingException e) {
            String msg = MessageFormat.format("不支持的字符编码: {0}", e.getMessage());
            Exception ex = new Exception(msg);
            ex.initCause(e);
            throw ex;
        } catch (InvalidKeyException e) {
            String msg = MessageFormat.format("无效的密钥规范: {0}", e.getMessage());
            Exception ex = new Exception(msg);
            ex.initCause(e);
            throw ex;
        }
    }

    /***
     * 将byte[]转成16进制字符串
     *
     * @param data
     *
     * @return 16进制字符串
     */
    public static String byte2hex(byte[] data) {
        StringBuilder hash = new StringBuilder();
        String stmp;
        for (int n = 0; data != null && n < data.length; n++) {
            stmp = Integer.toHexString(data[n] & 0XFF);
            if (stmp.length() == 1)
                hash.append('0');
            hash.append(stmp);
        }
        return hash.toString();
    }
}

class WecallAuth(AuthBase):

    @classmethod
    def _get_request_query_str(cls, request):
        values = []
        query = urlparse(request.url).query
        query = urllib.parse.parse_qsl(query)
        for k, v in sorted(query):
            values.append(str(v))
        return ''.join(values)

    @classmethod
    def _get_request_body(cls, request):
        return request.body.decode() if request.body else ''

    @classmethod
    def _signature(cls, message, secret):
        signature = hmac.new(
            secret.encode('utf-8'), message.encode('utf8'), digestmod=hashlib.sha256
        ).hexdigest()
        return signature

    @classmethod
    def _get_signature(cls, request, ts):
        message = f'{ts}{cls._get_request_query_str(request)}{cls._get_request_body(request)}'
        return cls._signature(message, YS_APP_SECRET)

    def __call__(self, request):
        ts = timer.now_ts(unit='ms')
        request.headers.update({
            'X-YS-APIKEY': YS_APP_KEY,
            'X-YS-TIME': ts,
            'X-YS-SIGNATURE': self._get_signature(request, ts)
        })
        return request

<?php
$appSecret = "xxxxxxxx";
$timestamp = 毫秒时间戳;
//$timestamp = "123456789";
// 对Query参数按照字典对Key进行排序后,按照value1+value2方法拼接
$requestQuery = "value1value2value3";
// 请求体内容
$content = "payload";
// 得到签名值
$needSign = $timestamp. $requestQuery. $content;
$sign = hash_hmac('sha256', $needSign, $appSecret);
print $sign;
?>

<?php
function get_millisecond_timestamp() {
    $microtime = microtime(true);
    $timestamp = floor($microtime * 1000);
    return $timestamp;
}

// 示例用法
echo get_millisecond_timestamp(); // 输出毫秒时间戳
?>

    /**
     * 解密
     *
     * @param cipherData 密文
     * @param password 安全设置中的主密钥
     * @return
     * @throws Exception
     */
	public static String decrypt(String cipherData, String password) throws Exception {
      	byte[] decode = Base64.getDecoder().decode(cipherData.getBytes(StandardCharsets.UTF_8));
      	byte[] decrypted = decryptByAesKey(decode, password);
      	return new String(decrypted, StandardCharsets.UTF_8);
    }

	private static Key generateKey(String password) throws NoSuchAlgorithmException {
        KeyGenerator kgen = KeyGenerator.getInstance("AES");
        SecureRandom secureRandom = SecureRandom.getInstance("SHA1PRNG");
        secureRandom.setSeed(password.getBytes());
        kgen.init(128, secureRandom);
        SecretKey secretKey = kgen.generateKey();
        return new SecretKeySpec(secretKey.getEncoded(), "AES");
	}

	private static byte[] decryptByAesKey(byte[] encryptedData, String password)
            throws IllegalBlockSizeException, BadPaddingException, NoSuchAlgorithmException,
            NoSuchPaddingException, InvalidKeyException {
        Key key = generateKey(password);
        Cipher cipher = Cipher.getInstance("AES/ECB/PKCS5Padding");
        cipher.init(2, key);
        return cipher.doFinal(encryptedData);
    }