1

keyBoard/Class/Network/KBNetworkManager.m

@@ -11,6 +11,7 @@
 // 仅在主 App 内需要的会话管理与 HUD 组件
 #import "KBUserSessionManager.h"
 #import "KBHUD.h"
+#import "KBSignUtils.h"
 
 NSErrorDomain const KBNetworkErrorDomain = @"com.company.keyboard.network";
 
@@ -44,10 +45,45 @@ NSErrorDomain const KBNetworkErrorDomain = @"com.company.keyboard.network";
         // 默认请求头：Accept 任意类型 + 使用项目多语言管理器设置 Accept-Language
         NSString *lang = [KBLocalizationManager shared].currentLanguageCode ?: KBLanguageCodeEnglish;
         NSString *token = [KBUserSessionManager shared].accessToken ? [KBUserSessionManager shared].accessToken : @"";
+        NSString *appId    = @"loveKeyboard";
+        NSString *secret   = @"kZJM39HYvhxwbJkG1fmquQRVkQiLAh2H"; // 和服务端保持一致
+        NSString *timestamp = [KBSignUtils currentTimestamp];
+        NSString *nonce     = [KBSignUtils generateNonceWithLength:16];
+
+        // 业务参数（body 或 query）
+        NSDictionary *bodyParams = @{
+           
+        };
+
+        // 1. 组装参与签名的所有参数
+        NSMutableDictionary<NSString *, NSString *> *signParams = [NSMutableDictionary dictionary];
+        signParams[@"appId"]     = appId;
+        signParams[@"timestamp"] = timestamp;
+        signParams[@"nonce"]     = nonce;
+
+        // 如果还有 query 参数也塞进来
+        // signParams[@"lang"] = @"zh";
+
+        // 把 body 里的字段也加入签名参数
+        [bodyParams enumerateKeysAndObjectsUsingBlock:^(id key, id obj, BOOL *stop) {
+            if ([obj isKindOfClass:[NSString class]]) {
+                signParams[key] = obj;
+            } else {
+                signParams[key] = [obj description];
+            }
+        }];
+
+        // 2. 计算签名
+        NSString *sign = [KBSignUtils signWithParams:signParams secret:secret];
         _defaultHeaders = @{
             @"Accept": @"*/*",
             @"Accept-Language": lang,
-            @"auth-token" : token
+            @"auth-token" : token,
+            @"X-Sign" : sign,
+            @"X-Timestamp" : timestamp,
+            @"X-Nonce" : nonce,
+            @"X-App-Id" : appId
+
         };
         // 设置基础域名，路径可相对该地址拼接
         _baseURL = [NSURL URLWithString:KB_BASE_URL];

keyBoard/Class/Utils/KBSignUtils.h

@@ -0,0 +1,32 @@
+//
+//  KBSignUtils.h
+//  keyBoard
+//
+//  Created by Mac on 2025/12/4.
+//
+#import <Foundation/Foundation.h>
+
+NS_ASSUME_NONNULL_BEGIN
+
+@interface KBSignUtils : NSObject
+
+/// URL 编码（与后端保持一致）
++ (NSString *)urlEncode:(NSString *)value;
+
+/// HMAC-SHA256，返回十六进制小写字符串
++ (NSString *)hmacSHA256:(NSString *)data secret:(NSString *)secret;
+
+/// 生成签名：传入参与签名的所有参数（不含 sign 自身）
++ (NSString *)signWithParams:(NSDictionary<NSString *, NSString *> *)params
+                      secret:(NSString *)secret;
+
+/// 秒级时间戳（字符串）
++ (NSString *)currentTimestamp;
+
+/// 简单 nonce 生成（默认 16 位）
++ (NSString *)generateNonceWithLength:(NSUInteger)length;
+
+@end
+
+NS_ASSUME_NONNULL_END
+

keyBoard/Class/Utils/KBSignUtils.m

@@ -0,0 +1,92 @@
+//
+//  KBSignUtils.m
+//  keyBoard
+//
+//  Created by Mac on 2025/12/4.
+//
+
+#import "KBSignUtils.h"
+#import <CommonCrypto/CommonCrypto.h>
+
+@implementation KBSignUtils
+
++ (NSString *)urlEncode:(NSString *)value {
+    if (!value) return @"";
+    // 和 Swift 里的 .urlQueryAllowed 类似
+    NSCharacterSet *allowed = [NSCharacterSet URLQueryAllowedCharacterSet];
+    NSString *encoded = [value stringByAddingPercentEncodingWithAllowedCharacters:allowed];
+    return encoded ?: value;
+}
+
++ (NSString *)hmacSHA256:(NSString *)data secret:(NSString *)secret {
+    const char *cKey  = [secret cStringUsingEncoding:NSUTF8StringEncoding];
+    const char *cData = [data cStringUsingEncoding:NSUTF8StringEncoding];
+
+    unsigned char cHMAC[CC_SHA256_DIGEST_LENGTH];
+
+    CCHmac(kCCHmacAlgSHA256,
+           cKey,
+           strlen(cKey),
+           cData,
+           strlen(cData),
+           cHMAC);
+
+    // 转十六进制小写字符串
+    NSMutableString *output = [NSMutableString stringWithCapacity:CC_SHA256_DIGEST_LENGTH * 2];
+    for (int i = 0; i < CC_SHA256_DIGEST_LENGTH; i++) {
+        [output appendFormat:@"%02x", cHMAC[i]];
+    }
+    return output;
+}
+
++ (NSString *)signWithParams:(NSDictionary<NSString *, NSString *> *)params
+                      secret:(NSString *)secret {
+
+    // 1. 过滤空值 & sign 自身
+    NSMutableDictionary<NSString *, NSString *> *filtered = [NSMutableDictionary dictionary];
+    [params enumerateKeysAndObjectsUsingBlock:^(NSString *key, NSString *obj, BOOL *stop) {
+        if (!obj || obj.length == 0) return;
+        if ([[key lowercaseString] isEqualToString:@"sign"]) return;
+        filtered[key] = obj;
+    }];
+
+    // 2. 按 key 字典序排序
+    NSArray<NSString *> *sortedKeys = [[filtered allKeys] sortedArrayUsingSelector:@selector(compare:)];
+
+    // 3. 拼接 key=value&key2=value2...&secret=xxx
+    NSMutableArray<NSString *> *components = [NSMutableArray array];
+    for (NSString *key in sortedKeys) {
+        NSString *value = filtered[key] ?: @"";
+        NSString *encodedValue = [self urlEncode:value];
+        NSString *part = [NSString stringWithFormat:@"%@=%@", key, encodedValue];
+        [components addObject:part];
+    }
+
+    NSString *encodedSecret = [self urlEncode:secret];
+    NSString *secretPart = [NSString stringWithFormat:@"secret=%@", encodedSecret];
+    [components addObject:secretPart];
+
+    NSString *dataString = [components componentsJoinedByString:@"&"];
+
+    // 4. HMAC-SHA256
+    NSString *sign = [self hmacSHA256:dataString secret:secret];
+    return sign;
+}
+
++ (NSString *)currentTimestamp {
+    NSTimeInterval ts = [[NSDate date] timeIntervalSince1970];
+    long long seconds = (long long)ts;
+    return [NSString stringWithFormat:@"%lld", seconds];
+}
+
++ (NSString *)generateNonceWithLength:(NSUInteger)length {
+    // 用 UUID 生成，去掉 - , 再截取前 length 位
+    NSString *uuid = [[NSUUID UUID].UUIDString stringByReplacingOccurrencesOfString:@"-" withString:@""];
+    if (length == 0 || length > uuid.length) {
+        return uuid;
+    }
+    return [uuid substringToIndex:length];
+}
+
+@end
+