X-API-Key: mk_your_api_key_here
X-API-Secret: your_api_secret_here

X-API-Key: mk_your_api_key_here
X-Timestamp: 1704067200000
X-Signature: 签名值

// 签名字符串格式
signString = METHOD + "\n" + PATH + "\n" + TIMESTAMP + "\n" + API_KEY

// 示例
method = "POST"
path = "/api/v1/videos"
timestamp = "1704067200000"  // 毫秒级时间戳
apiKey = "mk_your_api_key_here"

signString = "POST\n/api/v1/videos\n1704067200000\nmk_your_api_key_here"
signature = HMAC-SHA256(apiSecret, signString)

// 注意：时间戳有效期为 5 分钟

const crypto = require('crypto');

function generateSignature(method, path, apiKey, apiSecret) {
  const timestamp = Date.now().toString();
  const signString = `${method}\n${path}\n${timestamp}\n${apiKey}`;
  const signature = crypto
    .createHmac('sha256', apiSecret)
    .update(signString)
    .digest('hex');
  
  return { timestamp, signature };
}

// 使用示例
const { timestamp, signature } = generateSignature(
  'POST',
  '/api/v1/videos',
  'mk_your_api_key',
  'your_api_secret'
);

POST your_callback_url
Content-Type: application/json
X-Webhook-Signature: HMAC-SHA256签名
X-Webhook-Event: 事件类型
X-Webhook-Timestamp: 时间戳

{
  "event": "video.completed",
  "timestamp": 1704067200,
  "data": {
    "taskId": "task_abc123",
    "status": "completed",
    "videoUrl": "https://cdn.example.com/video.mp4",
    "thumbnailUrl": "https://cdn.example.com/thumb.jpg",
    "duration": 15
  }
}

{
  "event": "account.low_balance",
  "timestamp": 1704067200,
  "data": {
    "userId": "user_xyz",
    "currentBalance": 800,
    "threshold": 1000,
    "message": "关联账号算力余额不足，当前余额: 800，预警阈值: 1000"
  }
}

const crypto = require('crypto');

function verifyWebhookSignature(body, signature, apiSecret) {
  const expectedSignature = crypto
    .createHmac('sha256', apiSecret)
    .update(JSON.stringify(body))
    .digest('hex');
  
  return signature === expectedSignature;
}

// Express 示例
app.post('/webhook', express.json(), (req, res) => {
  const signature = req.headers['x-webhook-signature'];
  
  if (!verifyWebhookSignature(req.body, signature, API_SECRET)) {
    return res.status(401).json({ error: '签名验证失败' });
  }
  
  // 处理事件
  const { event, data } = req.body;
  console.log('收到事件:', event, data);
  
  res.json({ success: true });
});

const crypto = require('crypto');

const API_KEY = 'mk_your_api_key';
const API_SECRET = 'your_api_secret';
const BASE_URL = 'https://aifroi.com/api/v1';

// 生成签名
function generateSignature(method, path) {
  const timestamp = Date.now().toString();
  const signString = `${method}\n${path}\n${timestamp}\n${API_KEY}`;
  const signature = crypto
    .createHmac('sha256', API_SECRET)
    .update(signString)
    .digest('hex');
  return { timestamp, signature };
}

// 创建视频任务
async function createVideoTask(data) {
  const path = '/api/v1/videos';
  const { timestamp, signature } = generateSignature('POST', path);
  
  const response = await fetch(BASE_URL + '/videos', {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json',
      'X-API-Key': API_KEY,
      'X-Timestamp': timestamp,
      'X-Signature': signature,
    },
    body: JSON.stringify(data),
  });
  
  return response.json();
}

// 查询任务状态
async function getVideoTask(taskId) {
  const path = `/api/v1/videos/${taskId}`;
  const { timestamp, signature } = generateSignature('GET', path);
  
  const response = await fetch(BASE_URL + `/videos/${taskId}`, {
    headers: {
      'X-API-Key': API_KEY,
      'X-Timestamp': timestamp,
      'X-Signature': signature,
    },
  });
  
  return response.json();
}

// 使用示例
async function main() {
  // 创建任务
  const result = await createVideoTask({
    title: '产品宣传视频',
    imageUrl: 'https://example.com/product.jpg',
    duration: 15,
    aspectRatio: '9:16',
  });
  
  console.log('任务创建成功:', result.data.id);
  
  // 轮询查询状态
  let status = 'pending';
  while (status === 'pending' || status === 'processing') {
    await new Promise(resolve => setTimeout(resolve, 5000));
    const task = await getVideoTask(result.data.id);
    status = task.data.status;
    console.log('当前状态:', status);
  }
}

main();

# 使用 Header 直接认证（测试用）
curl -X POST "https://aifroi.com/api/v1/videos" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: mk_your_api_key" \
  -H "X-API-Secret: your_api_secret" \
  -d '{
    "title": "测试视频",
    "imageUrl": "https://example.com/image.jpg",
    "duration": 10
  }'

# 查询任务详情
curl "https://aifroi.com/api/v1/videos/task_abc123" \
  -H "X-API-Key: mk_your_api_key" \
  -H "X-API-Secret: your_api_secret"