1688 接口逆向

一个阿里接口
https://h5api.m.1688.com/h5/mtop.1688.trade.service.mtoprateservice.querydsrratedatav2/1.0/?jsv=2.7.0&appKey=12574478&t=1679886447770&sign=ba8560802560f1f852825eb99246206b&api=mtop.1688.trade.service.MtopRateService.queryDsrRateDataV2&v=1.0&type=jsonp&isSec=0&timeout=20000&dataType=jsonp&callback=mtopjsonp6&data={"offerId":123456789,"scene":"item"}

除去非必要的参数
https://h5api.m.1688.com/h5/mtop.1688.trade.service.mtoprateservice.querydsrratedatav2/1.0/?appKey=12574478&t=1679886447770&sign=ba8560802560f1f852825eb99246206b&api=mtop.1688.trade.service.MtopRateService.queryDsrRateDataV2&data={"offerId":123456789,"scene":"item"}

其他参数都容易获得，就是sign的计算方法
token的获取方法
var token = getCookie("_m_h5_tk").split("_")[0];
var t = new Date().getTime();
var key = 12574478;// key固定

var data = '{"offerId":123456789,"scene":"item"}';
var sign = md5Hex(token + ‘&’ + t + ‘&’ + appKey + ‘&’ + data)



如果使用jquery ajax 需要加上额外的配置 
$.ajax({
    type:"GET",
    xhrFields: {
        withCredentials: true // 跨域带上cookies
    },
    url: url2,
    dataType: "json",
    success: function (res) {
    }
});