处理网络

Shared/KBSignUtils.h

@@ -20,6 +20,10 @@ NS_ASSUME_NONNULL_BEGIN
 + (NSString *)signWithParams:(NSDictionary<NSString *, NSString *> *)params
                       secret:(NSString *)secret;
 
+/// 获取签名原始拼接字符串（HMAC 前的明文）
++ (NSString *)signSourceStringWithParams:(NSDictionary<NSString *, NSString *> *)params
+                                  secret:(NSString *)secret;
+
 /// 秒级时间戳（字符串）
 + (NSString *)currentTimestamp;
 
@@ -29,4 +33,3 @@ NS_ASSUME_NONNULL_BEGIN
 @end
 
 NS_ASSUME_NONNULL_END
-

Shared/KBSignUtils.m

@@ -12,10 +12,16 @@
 
 + (NSString *)urlEncode:(NSString *)value {
     if (!value) return @"";
-    // 和 Swift 里的 .urlQueryAllowed 类似
-    NSCharacterSet *allowed = [NSCharacterSet URLQueryAllowedCharacterSet];
+    // 按 application/x-www-form-urlencoded 规则编码（更贴近后端常见实现）
+    NSMutableCharacterSet *allowed = [NSMutableCharacterSet alphanumericCharacterSet];
+    [allowed addCharactersInString:@"-._*"];
     NSString *encoded = [value stringByAddingPercentEncodingWithAllowedCharacters:allowed];
-    return encoded ?: value;
+    if (!encoded) {
+        return value;
+    }
+    // 空格改为 +（URLEncoder 风格）
+    encoded = [encoded stringByReplacingOccurrencesOfString:@"%20" withString:@"+"];
+    return encoded;
 }
 
 + (NSString *)hmacSHA256:(NSString *)data secret:(NSString *)secret {
@@ -41,6 +47,12 @@
 
 + (NSString *)signWithParams:(NSDictionary<NSString *, NSString *> *)params
                       secret:(NSString *)secret {
+    NSString *dataString = [self signSourceStringWithParams:params secret:secret];
+    return [self hmacSHA256:dataString secret:secret];
+}
+
++ (NSString *)signSourceStringWithParams:(NSDictionary<NSString *, NSString *> *)params
+                                  secret:(NSString *)secret {
 
     // 1. 过滤空值 & sign 自身
     NSMutableDictionary<NSString *, NSString *> *filtered = [NSMutableDictionary dictionary];
@@ -62,15 +74,11 @@
         [components addObject:part];
     }
 
-    NSString *encodedSecret = [self urlEncode:secret];
+    NSString *encodedSecret = [self urlEncode:secret ?: @""];
     NSString *secretPart = [NSString stringWithFormat:@"secret=%@", encodedSecret];
     [components addObject:secretPart];
 
-    NSString *dataString = [components componentsJoinedByString:@"&"];
-
-    // 4. HMAC-SHA256
-    NSString *sign = [self hmacSHA256:dataString secret:secret];
-    return sign;
+    return [components componentsJoinedByString:@"&"];
 }
 
 + (NSString *)currentTimestamp {
@@ -89,4 +97,3 @@
 }
 
 @end
-