OpenAPI 与 Postman 调试

// openapi-call.mjs — 计算签名并调用一个 Open API（Node.js 18+，使用内置 fetch）
// 运行前变量：APP_KEY / APP_SECRET（控制台创建应用后获得）、IM_HOST（默认本地）。
import { createHash, randomBytes } from 'node:crypto';

const HOST = process.env.IM_HOST || 'http://127.0.0.1:8080';
const APP_KEY = process.env.APP_KEY || 'demo';              // 变量：AppKey
const APP_SECRET = process.env.APP_SECRET || 'YOUR_APP_SECRET'; // 变量：AppSecret

function sign(secret, nonce, timestamp) {
  return createHash('sha1').update(secret + nonce + timestamp).digest('hex');
}

async function call(path, body) {
  const nonce = randomBytes(8).toString('hex');   // 8-64 字符，5 分钟内不可重复
  const timestamp = String(Date.now());          // epoch 毫秒，±300000ms
  const signature = sign(APP_SECRET, nonce, timestamp);

  const res = await fetch(HOST + '/im/v2' + path, {
    method: 'POST',
    headers: {
      'content-type': 'application/json',
      'App-Key': APP_KEY,
      Nonce: nonce,
      Timestamp: timestamp,
      Signature: signature,
    },
    body: JSON.stringify(body),
  });
  const json = await res.json();
  console.log(res.status, JSON.stringify(json));
  return json;
}

// 1) 注册用户（幂等：已存在则更新资料）
await call('/user/register', { userId: 'alice', name: 'Alice' });

// 2) 查询用户
await call('/user/get', { userId: 'alice' });

{
  "name": "NI PaaS IM Local",
  "values": [
    {
      "key": "host",
      "value": "http://127.0.0.1:8080",
      "enabled": true
    },
    {
      "key": "appKey",
      "value": "demo",
      "enabled": true
    },
    {
      "key": "appSecret",
      "value": "YOUR_APP_SECRET",
      "enabled": true
    }
  ],
  "_postman_variable_scope": "environment"
}

// 由 generate.mjs 生成的集合级前置脚本：自动计算 App-Key 签名。
// Signature = hex(sha1(AppSecret + Nonce + Timestamp))，与服务端实现一致。
const CryptoJS = require('crypto-js');

const appSecret = pm.collectionVariables.get('appSecret') || '';
const nonce = CryptoJS.lib.WordArray.random(8).toString(); // 16 位 hex，满足 8-64 字符
const timestamp = String(Date.now());

pm.collectionVariables.set('nonce', nonce);
pm.collectionVariables.set('timestamp', timestamp);
pm.collectionVariables.set('signature', CryptoJS.SHA1(appSecret + nonce + timestamp).toString());

# 下载导出物后校验操作数与分组
curl -sS -o openapi-v1.json http://127.0.0.1:8080/docs/assets/openapi-v1.json
node -e "const o=require('./openapi-v1.json');console.log(o['x-idl-operation-count'], Object.keys(o.paths).length, o.tags.length)"

curl -sS -o postman-collection.json http://127.0.0.1:8080/docs/assets/postman-collection.json
node -e "const c=require('./postman-collection.json');console.log(c.info.schema, c.item.length, c.item.reduce((n,f)=>n+f.item.length,0))"