在 Ruby 中生成 Paypal 签名“X-PAYPAL-AUTHORIZATION”

Ruby 中是否有任何库可以生成签名，'X-PAYPAL-AUTHORIZATION'代表通过 paypal Permissions API 授权我们的账户持有人进行调用时需要的标头。 我完成了权限流程并获取了所需的访问令牌 tokenSecret。我觉得我生成的签名不正确，因为我使用生成的“X-PAYPAL-AUTHORIZATION”进行的所有调用都失败了。他们给出以下错误：

对于 NVP 通话，我得到：
You do not have permissions to make this API call

对于 GetBasicPersonalData 调用，我得到：
Authentication failed. API credentials are incorrect.

有人在 Ruby 中经历过这个吗？生成签名的最佳方式是什么。 Paypal刚刚在Paypal、Java中提供了一些SDK，但没有提供生成签名的算法。

Thanks,
Nilesh

看一下 PayPal Permissions gem。

https://github.com/moshbit/paypal_permissions https://github.com/moshbit/paypal_permissions

具体是 lib/paypal_permissions/x_pp_authorization.rb 需要“cgi” 需要“openssl” 需要“base64”

class Hash
  def to_paypal_permissions_query
    collect do |key, value|
      "#{key}=#{value}"
    end.sort * '&'
  end
end

module ActiveMerchant #:nodoc:
  module Billing #:nodoc:
    module XPPAuthorization
      public
      def x_pp_authorization_header url, api_user_id, api_password, access_token, access_token_verifier
        timestamp = Time.now.to_i.to_s
        signature = x_pp_authorization_signature url, api_user_id, api_password, timestamp, access_token, access_token_verifier
        { 'X-PAYPAL-AUTHORIZATION' => "token=#{access_token},signature=#{signature},timestamp=#{timestamp}" }
      end

      public
      def x_pp_authorization_signature url, api_user_id, api_password, timestamp, access_token, access_token_verifier
        # no query params, but if there were, this is where they'd go
        query_params = {}
        key = [
          paypal_encode(api_password),
          paypal_encode(access_token_verifier),
        ].join("&")

        params = query_params.dup.merge({
          "oauth_consumer_key" => api_user_id,
          "oauth_version" => "1.0",
          "oauth_signature_method" => "HMAC-SHA1",
          "oauth_token" => access_token,
          "oauth_timestamp" => timestamp,
        })
        sorted_query_string = params.to_paypal_permissions_query

        base = [
          "POST",
          paypal_encode(url),
          paypal_encode(sorted_query_string)
        ].join("&")
        base = base.gsub /%([0-9A-F])([0-9A-F])/ do
          "%#{$1.downcase}#{$2.downcase}"  # hack to match PayPal Java SDK bit for bit
        end

        digest = OpenSSL::HMAC.digest('sha1', key, base)
        Base64.encode64(digest).chomp
      end

      # The PayPalURLEncoder java class percent encodes everything other than 'a-zA-Z0-9 _'.
      # Then it converts ' ' to '+'.
      # Ruby's CGI.encode takes care of the ' ' and '*' to satisfy PayPal
      # (but beware, URI.encode percent encodes spaces, and does nothing with '*').
      # Finally, CGI.encode does not encode '.-', which we need to do here.
      def paypal_encode str
        s = str.dup
        CGI.escape(s).gsub('.', '%2E').gsub('-', '%2D')
      end
    end
  end
end

样品参数：

url = 'https://svcs.sandbox.paypal.com/Permissions/GetBasicPersonalData'
api_user_id = 'caller_1234567890_biz_api1.yourdomain.com'
api_password = '1234567890'
access_token = 'YJGjMOmTUqVPlKOd1234567890-jdQV3eWCOLuCQOyDK1234567890'
access_token_verifier = 'PgUjnwsMhuuUuZlPU1234567890'