import hashlib import json import time import urllib.parse import requests import struct class MtopSignatureGenerator: def __init__(self, token, app_key="12574478", # def __init__(self, token, app_key="24889839", api_name="mtop.relationrecommend.WirelessRecommend.recommend", api_version="2.0"): self.token = token self.app_key = app_key self.api_name = api_name self.api_version = api_version def _md5(self, input_string): """ MD5 implementation that matches the JavaScript version in the HTML """ # Convert string to UTF-8 bytes (equivalent to str2rstrUTF8 in JS) input_bytes = input_string.encode('utf-8') # Initialize variables (same as JavaScript) a = 1732584193 b = -271733879 c = -1732584194 d = 271733878 # Process the message in successive 512-bit chunks original_length = len(input_bytes) input_bytes += b'\x80' # Pad with zeros until message length in bits ≡ 448 (mod 512) while (len(input_bytes) * 8) % 512 != 448: input_bytes += b'\x00' # Append original length in bits mod 2^64 (little-endian) input_bytes += struct.pack('> (32 - cnt))) & 0xFFFFFFFF def _ff(self, a, b, c, d, x, s, t): """FF transformation function""" a = self._safe_add(a, self._safe_add(self._safe_add(self._f(b, c, d), x), t)) return self._safe_add(self._bit_rotate_left(a, s), b) def _gg(self, a, b, c, d, x, s, t): """GG transformation function""" a = self._safe_add(a, self._safe_add(self._safe_add(self._g(b, c, d), x), t)) return self._safe_add(self._bit_rotate_left(a, s), b) def _hh(self, a, b, c, d, x, s, t): """HH transformation function""" a = self._safe_add(a, self._safe_add(self._safe_add(self._h(b, c, d), x), t)) return self._safe_add(self._bit_rotate_left(a, s), b) def _ii(self, a, b, c, d, x, s, t): """II transformation function""" a = self._safe_add(a, self._safe_add(self._safe_add(self._i(b, c, d), x), t)) return self._safe_add(self._bit_rotate_left(a, s), b) def _f(self, x, y, z): """F auxiliary function""" return (x & y) | ((~x) & z) def _g(self, x, y, z): """G auxiliary function""" return (x & z) | (y & (~z)) def _h(self, x, y, z): """H auxiliary function""" return x ^ y ^ z def _i(self, x, y, z): """I auxiliary function""" return y ^ (x | (~z)) def generate_signature(self, data): """Generate MTOP signature""" timestamp = str(int(time.time() * 1000)) sign_content = f"{self.token}&{timestamp}&{self.app_key}&{json.dumps(data, ensure_ascii=False, separators=(',', ':'))}" return self._md5(sign_content), timestamp def generate_url(self, data): """Generate the full signed URL""" signature, timestamp = self.generate_signature(data) # Encode data for URL encoded_data = urllib.parse.quote(json.dumps(data, ensure_ascii=False, separators=(',', ':'))) # Construct the URL # url = f"https://h5api.m.1688.com/h5/{self.api_name}/{self.api_version}/" # url = f"https://h5api.m.alibaba.com/h5/{self.api_name}/{self.api_version}/" url = f"https://h5api.m.alibaba.com/h5/mtop.alibaba.goods.searchservice.getsearchresult/1.0/" # params = { # "jsv": "2.7.4", # "appKey": self.app_key, # "t": timestamp, # "sign": signature, # "api": self.api_name, # "v": self.api_version, # "dataType": "json", # "type": "originaljson", # "data": encoded_data # } # API parameters for Alibaba (different from 1688) params = { 'jsv': '2.5.1', 'appKey': '12574478', "t": timestamp, "sign": signature, 'api': 'mtop.alibaba.goods.searchservice.getsearchresult', 'v': '1.0', 'type': 'json', 'dataType': 'json', 'timeout': '20000', "data": encoded_data } # Build query string query_string = "&".join([f"{k}={v}" for k, v in params.items()]) return f"{url}?{query_string}", signature, timestamp # def make_request(self, data): # """Make the API request and return the response""" # url, signature, timestamp = self.generate_url(data) # headers = { # "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36", # "Accept": "application/json", # "Accept-Language": "en-US,en;q=0.9", # "Referer": "https://www.1688.com/", # "Origin": "https://www.1688.com" # } # try: # response = requests.get(url, headers=headers, timeout=30) # return response.json() # except requests.exceptions.RequestException as e: # return {"error": str(e)} # except json.JSONDecodeError as e: # return {"error": f"JSON decode error: {str(e)}"} def main(): # Your token from _m_h5_tk cookie (without the underscore and timestamp part) token = "2a7ed03ca270d30a90aeccfe8ee821ab" # Replace with your actual token # Request data (same as in the HTML example) request_data = { "appId": 32517, # "appId": 337938, "params": "{\"verticalProductFlag\":\"pcmarket\",\"searchScene\":\"pcOfferSearch\",\"charset\":\"GBK\",\"beginPage\":1, \"pageSize\":60,\"keywords\":\"iphone15\",\"spm\":\"a260k.home2025.searchbox.0\",\"method\":\"getOfferList\"}" } if not token or token == "YOUR_TOKEN_HERE": print("Error: Please provide a valid token") print("To get your token:") print("1. Visit 1688.com in your browser") print("2. Open Developer Tools (F12)") print("3. Go to Application/Storage tab → Cookies") print("4. Find the _m_h5_tk cookie and copy the part before the underscore") return # Initialize the generator generator = MtopSignatureGenerator(token) # Generate the URL url, signature, timestamp = generator.generate_url(request_data) print("Generated URL:") print(url) print("\nSignature:") print(signature) print("\nTimestamp:") print(timestamp) # Make the API request print("\nMaking API request...") # response = generator.make_request(request_data) print("\nAPI Response:") # print(json.dumps(response, indent=2, ensure_ascii=False)) # Debug: Show what was sent for signature generation debug_data = { "token": token, "timestamp": timestamp, "app_key": generator.app_key, "data": request_data, "sign_content": f"{token}&{timestamp}&{generator.app_key}&{json.dumps(request_data, ensure_ascii=False, separators=(',', ':'))}" } print("\nDebug Information:") print(json.dumps(debug_data, indent=2, ensure_ascii=False)) if __name__ == "__main__": main()