import (
    "crypto/hmac"
    "crypto/sha256"
    "encoding/base64"
    "encoding/hex"
    "encoding/json"
    "net/http"
    "sort"
    "strconv"
    "strings"
    "time"
)

func sign() error {
    expiration := strconv.Itoa(int(time.Now().Unix()))
    params := map[string]string{
        "channel": "BOOL",
    }
    body, err := json.Marshal(params)
    if err != nil {
        return err
    }

    conn, err := http.NewRequest("POST", "<BoolApiURL string>", strings.NewReader(string(body)))
    if err != nil {
        return err
    }
    client := &http.Client{}
    // 设置请求头
    conn.Header.Set("X-APPID", <ApiKey string>)
    conn.Header.Set("X-Expiration", expiration)
    conn.Header.Set("X-Host", <ApiHost string>)
    conn.Header.Set("X-Source", <Source string>)

    // 拼接签名密钥
    secret := "<ApiSecret string>" + expiration

    var keys []string
    for k := range conn.Header {
        keys = append(keys, k)
    }
    sort.Strings(keys)

    var pList = make([]string, 0, 0)
    for _, key := range keys {
        pList = append(pList, key+"="+conn.Header.Get(key))
    }
    pList = append(pList, conn.Method)
    if conn.URL.RawQuery != "" {
        pList = append(pList, conn.URL.Path+"?"+conn.URL.RawQuery)
    } else {
        pList = append(pList, conn.URL.Path)
    }
    pList = append(pList, string(body))
    // 生成签名字符串
    var content = strings.Join(pList, "&")

    // 加签并发送请求
    h := hmac.New(sha256.New, []byte(secret))
    h.Write([]byte(content))
    sha := hex.EncodeToString(h.Sum(nil))
    
    conn.Header.Set("Content-Type", "application/json")
    conn.Header.Set("Authorization", base64.StdEncoding.EncodeToString([]byte(sha)))

    resp, err := client.Do(conn)
    if err != nil {
        return err
    }
    defer resp.Body.Close()
    return nil
}

#python 3.8
import time
import hmac
import hashlib
import base64
import httplib
import urllib

expiration = str(time.time())
params = '{"channel": "BOOL"}'
headers = { "X-APPID": "ApiKey", "X-Expiration": expiration, "X-Host": "API HOST", "X-Source": "Source" }

secret = "ApiSecret"+expiration
secret_enc = secret.encode('utf-8')

string_to_sign = ""
for key in sorted(headers):
    string_to_sign += "{}={}&".format(key, headers[key])

string_to_sign += "POST"
string_to_sign += "&"
string_to_sign += "/"
string_to_sign += "&"
string_to_sign += params
string_to_sign_enc = string_to_sign.encode("utf-8")

# 加签并发送请求
hmac_code = hmac.new(secret_enc, string_to_sign_enc, digestmod=hashlib.sha256).digest()
sign = base64.b64encode(hmac_code)

headers["Content-Type"] = "application/json"
headers["Authorization"] = sign
conn = httplib.HTTPConnection("BOOL API URL")
conn.request("POST", "/", params, headers)

response = conn.getresponse()
data = response.read()
conn.close()