AWS Signature V4认证与403错误排查指南

<?php
require 'vendor/autoload.php';

use Aws\Signature\SignatureV4;
use Aws\Credentials\Credentials;
use GuzzleHttp\Client;
use GuzzleHttp\Psr7\Request;

// API配置信息
$host = "api.shiplogic.com";
$accessKeyId = 'YOUR_ACCESS_KEY_ID'; // 替换为你的Access Key ID
$secretAccessKey = 'YOUR_SECRET_ACCESS_KEY'; // 替换为你的Secret Access Key
$requestUrl = 'https://api.shiplogic.com';
$uri = '/rates';
$httpRequestMethod = 'POST';

// 请求体数据 (JSON格式)
$data = '{"collection_address": {"company": "Kenesis Test","street_address": " 32 Goud Street, Goedeburg, Benoni","local_area": "Benoni","city": "Johannesburg","country": "ZA","code": "1501"},"delivery_address": {"street_address": "17 bloomberg street","local_area": "minnebron","city": "brakpan","code": "1541"},"parcels": [{"submitted_length_cm": 1,"submitted_width_cm": 1,"submitted_height_cm": 1,"submitted_weight_kg": 0.1}],"declared_value": 99}';

// 1. 获取当前UTC时间戳，用于X-Amz-Date头
// 确保时间格式为 YYYYMMDDTHHMMSSZ
$amzDate = gmdate('Ymd\THis\Z');

// 2. 定义请求头
$headers = [
    'X-Amz-Date'   => $amzDate,
    'Content-Type' => 'application/json',
    // 额外的头信息，如Cookie，如果API需要，也可以包含
    // 'Cookie'       => 'XDEBUG_SESSION=PHPSTORM',
];

// 3. 初始化SignatureV4和Credentials
// 'execute-api' 是服务名称，'af-south-1' 是区域。
// 请根据你的API实际服务和区域进行调整。
$signature = new SignatureV4('execute-api', 'af-south-1');
$credentials = new Credentials($accessKeyId, $secretAccessKey);

// 4. 创建PSR-7请求对象，并传入所有必要的头信息
$psr7Request = new Request($httpRequestMethod, $requestUrl . $uri, $headers, $data);

// 5. 使用SignatureV4对请求进行签名
// signRequest方法会自动添加Authorization头
$signedRequest = $signature->signRequest($psr7Request, $credentials);

// 6. 初始化Guzzle HTTP客户端
$client = new Client([
    'base_uri' => $requestUrl, // 设置 base_uri
    'timeout'  => 30,
]);

// 7. 发送签名后的请求
try {
    $response = $client->send($signedRequest);

    // 处理响应
    echo "请求成功！\n";
    echo "状态码: " . $response->getStatusCode() . "\n";
    echo "响应体:\n" . $response->getBody()->getContents() . "\n";
} catch (\GuzzleHttp\Exception\ClientException $e) {
    // 捕获客户端错误，例如4xx错误
    echo "请求失败: " . $e->getMessage() . "\n";
    if ($e->hasResponse()) {
        echo "响应体:\n" . $e->getResponse()->getBody()->getContents() . "\n";
    }
} catch (\Exception $e) {
    // 捕获其他异常
    echo "发生未知错误: " . $e->getMessage() . "\n";
}
?>