Java对接百度AI接口的安全性与数据保护解决方案

import org.apache.http.HttpEntity;
import org.apache.http.HttpResponse;
import org.apache.http.NameValuePair;
import org.apache.http.client.HttpClient;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.client.utils.URLEncodedUtils;
import org.apache.http.entity.StringEntity;
import org.apache.http.impl.client.HttpClientBuilder;
import org.apache.http.message.BasicNameValuePair;
import org.apache.http.util.EntityUtils;

import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import java.nio.charset.StandardCharsets;
import java.security.InvalidKeyException;
import java.security.NoSuchAlgorithmException;
import java.util.ArrayList;
import java.util.Collections;
import java.util.List;

public class BaiduAIClient {
    private static final String API_KEY = "your_api_key";
    private static final String SECRET_KEY = "your_secret_key";

    public static void main(String[] args) {
        String url = "https://aip.baidubce.com/rest/2.0/ocr/v1/general_basic";
        String image = "your_image_base64_string";
        String result = performRequest(url, image);
        System.out.println(result);
    }

    private static String performRequest(String url, String image) {
        try {
            HttpClient client = HttpClientBuilder.create().build();
            HttpPost postRequest = new HttpPost(url);

            // 构建请求参数
            List<NameValuePair> params = new ArrayList<>();
            params.add(new BasicNameValuePair("image", image));
            String paramStr = URLEncodedUtils.format(params, StandardCharsets.UTF_8);

            // 构建签名
            String sign = generateSign(url, paramStr);

            // 构建请求头
            postRequest.addHeader("Content-Type", "application/x-www-form-urlencoded");
            postRequest.addHeader("Accept", "application/json");

            // 构建请求体
            StringEntity entity = new StringEntity(paramStr);
            postRequest.setEntity(entity);

            // 发送请求
            HttpResponse response = client.execute(postRequest);
            HttpEntity responseEntity = response.getEntity();
            String responseBody = EntityUtils.toString(responseEntity);
            return responseBody;
        } catch (Exception e) {
            e.printStackTrace();
        }
        return null;
    }

    private static String generateSign(String url, String paramStr) throws NoSuchAlgorithmException, InvalidKeyException {
        String sign = "";
        String method = "POST";
        String wholeUrl = url + '?' + paramStr;
        String signKey = SECRET_KEY;
        Mac mac = Mac.getInstance("HmacSHA256");
        SecretKeySpec secretKey = new SecretKeySpec(signKey.getBytes(StandardCharsets.UTF_8), mac.getAlgorithm());
        mac.init(secretKey);
        byte[] signData = mac.doFinal(wholeUrl.getBytes(StandardCharsets.UTF_8));
        sign = Base64.getEncoder().encodeToString(signData);
        return sign;
    }
}