解决 Cloudinary REST API 删除失败问题：正确生成认证签名

$timestamp = time();
$signature = sha1("timestamp=".$timestamp.$api_secret); // 错误：只包含了 timestamp

$api_secret = "YOUR_API_SECRET"; // 请替换为您的 Cloudinary API Secret
$timestamp = time();
$public_id = "folder/sample_public_id"; // 待删除资源的 public_id
$invalidate = true; // 是否从 CDN 缓存中删除

// 按照参数名的字母顺序排列并组合参数
// 注意：布尔值 true 在字符串中通常表示为 "true"
$signature_string = "invalidate=" . ($invalidate ? "true" : "false") . 
                    "&public_id=" . $public_id . 
                    "&timestamp=" . $timestamp;

$signature = sha1($signature_string . $api_secret);

<?php

// 您的 Cloudinary 凭据
$cloud_name = "YOUR_CLOUD_NAME"; // 替换为您的 Cloudinary Cloud Name
$api_key = "YOUR_API_KEY";       // 替换为您的 Cloudinary API Key
$api_secret = "YOUR_API_SECRET"; // 替换为您的 Cloudinary API Secret

// 请求参数
$public_id = "folder/sample_public_id"; // 待删除资源的 public_id
$timestamp = time();
$invalidate = true; // 是否从 CDN 缓存中删除

// 1. 构建签名字符串：按照参数名的字母顺序排列并组合
// 参数包括：invalidate, public_id, timestamp
$signature_params = [
    'invalidate' => ($invalidate ? "true" : "false"), // 布尔值转换为字符串
    'public_id' => $public_id,
    'timestamp' => $timestamp
];
ksort($signature_params); // 确保参数按键名字母顺序排序

$signature_string_parts = [];
foreach ($signature_params as $key => $value) {
    $signature_string_parts[] = "{$key}={$value}";
}
$signature_string = implode("&", $signature_string_parts);

// 2. 生成 SHA1 签名
$signature = sha1($signature_string . $api_secret);

// 3. 构建 POST 请求数据
$postRequest = array(
    'public_id' => $public_id,
    'timestamp' => $timestamp,
    'api_key' => $api_key,
    'signature' => $signature,
    'resource_type' => 'image', // 根据您要删除的资源类型设置，例如 'image', 'video', 'raw'
    'invalidate' => $invalidate
);

// 4. 发送 cURL 请求
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://api.cloudinary.com/v1_1/{$cloud_name}/image/destroy");
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($postRequest));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); // 返回响应内容
curl_setopt($ch, CURLOPT_FAILONERROR, false);  // 不在 HTTP 错误时终止，以便检查响应体
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);   // 建议开启 SSL 验证
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true); // 建议开启 SSL 验证
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);
curl_setopt($ch, CURLOPT_TIMEOUT, 30);
// curl_setopt($ch, CURLOPT_VERBOSE, true); // 调试时可以开启，查看详细 cURL 过程

$response = curl_exec($ch);
$http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
$curl_error = curl_error($ch);

if ($curl_error) {
    echo "cURL 错误: " . $curl_error . "\n";
} else {
    echo "HTTP 状态码: " . $http_code . "\n";
    echo "Cloudinary 响应: " . $response . "\n";
    // 解析 JSON 响应
    $responseData = json_decode($response, true);
    if ($responseData && isset($responseData['result']) && $responseData['result'] === 'ok') {
        echo "资源删除成功！\n";
    } elseif ($responseData && isset($responseData['error'])) {
        echo "删除失败: " . $responseData['error']['message'] . "\n";
    } else {
        echo "未知错误或非预期响应。\n";
    }
}

curl_close($ch);

?>