开放数据接口

import time, hmac, hashlib, secrets, requests

SID, KEY = "你的SecretId", "你的SecretKey"

def call(path, params=None):
    params = dict(params or {})
    ts, nonce = str(int(time.time())), secrets.token_hex(8)
    signed = dict(params, timestamp=ts, nonce=nonce)
    s = "&".join(f"{k}={signed[k]}" for k in sorted(signed))
    sig = hmac.new(KEY.encode(), s.encode(), hashlib.sha256).hexdigest()
    r = requests.get("https://api.xzphotos.cn/api/v1" + path, params=params,
                     headers={"X-SECRET-ID": SID, "X-TIMESTAMP": ts, "X-NONCE": nonce, "X-SIGNATURE": sig})
    print(r.status_code, r.headers.get("X-Request-Cost"), r.headers.get("X-Account-Balance"))
    return r.json()

print(call("/aircraft/B-2001"))
print(call("/airports", {"q": "上海", "limit": 5}))

const crypto = require("crypto");
const SID = "你的SecretId", KEY = "你的SecretKey";

async function call(path, params = {}) {
  const ts = String(Math.floor(Date.now() / 1000));
  const nonce = crypto.randomBytes(8).toString("hex");
  const signed = { ...params, timestamp: ts, nonce };
  const s = Object.keys(signed).sort().map(k => `${k}=${signed[k]}`).join("&");
  const sig = crypto.createHmac("sha256", KEY).update(s).digest("hex");
  const url = "https://api.xzphotos.cn/api/v1" + path + (Object.keys(params).length ? "?" + new URLSearchParams(params) : "");
  const r = await fetch(url, { headers: { "X-SECRET-ID": SID, "X-TIMESTAMP": ts, "X-NONCE": nonce, "X-SIGNATURE": sig } });
  console.log(r.status, r.headers.get("x-request-cost"), r.headers.get("x-account-balance"));
  return r.json();
}
call("/aircraft/B-2001").then(console.log);