PHP集成AWS Signature V4：解决403认证错误的完整指南

<?php
require 'vendor/autoload.php';

use Aws\Signature\SignatureV4;
use Aws\Credentials\Credentials;
use GuzzleHttp\Client;
use GuzzleHttp\Psr7\Request;

// 您的API配置
$host = "api.shiplogic.com";
$accessKey = 'YOUR_AWS_ACCESS_KEY_ID'; // 替换为您的实际Access Key
$secretKey = 'YOUR_AWS_SECRET_ACCESS_KEY'; // 替换为您的实际Secret Key
$requestUrl = 'https://api.shiplogic.com';
$uri = '/rates';
$httpRequestMethod = 'POST';
$data = '{"collection_address": {"company": "Kenesis Test","street_address": " 32 Goud Street, Goedeburg, Benoni","local_area": "Benoni","city": "Johannesburg","country": "ZA","code": "1501"},"delivery_address": {"street_address": "17 bloomberg street","local_area": "minnebron","city": "brakpan","code": "1541"},"parcels": [{"submitted_length_cm": 1,"submitted_width_cm": 1,"submitted_height_cm": 1,"submitted_weight_kg": 0.1}],"declared_value": 99}';

// 初始化签名器和凭证
$signature = new SignatureV4('execute-api', 'af-south-1'); // 注意服务名称和区域
$credentials = new Credentials($accessKey, $secretKey);

// 构建PSR-7请求对象
$psr7Request = new Request($httpRequestMethod, $requestUrl . $uri, ["content-type" => "application/json"], $data);

// 签名请求
// $sr = $signature->signRequest($psr7Request, $credentials); // 这一步可能导致问题

// 发送请求
// $client = new Client(['base_uri' => $requestUrl, 'timeout' => 30]);
// $response = $client->send($sr);
// var_dump($response->getStatusCode()); // 预期此处会是403
?>

<?php
require 'vendor/autoload.php';

use Aws\Signature\SignatureV4;
use Aws\Credentials\Credentials;
use GuzzleHttp\Client;
use GuzzleHttp\Psr7\Request;

// 您的API配置
$host = "api.shiplogic.com";
$accessKey = 'YOUR_AWS_ACCESS_KEY_ID'; // 替换为您的实际Access Key
$secretKey = 'YOUR_AWS_SECRET_ACCESS_KEY'; // 替换为您的实际Secret Key
$requestUrl = 'https://api.shiplogic.com';
$uri = '/rates';
$httpRequestMethod = 'POST';
$data = '{"collection_address": {"company": "Kenesis Test","street_address": " 32 Goud Street, Goedeburg, Benoni","local_area": "Benoni","city": "Johannesburg","country": "ZA","code": "1501"},"delivery_address": {"street_address": "17 bloomberg street","local_area": "minnebron","city": "brakpan","code": "1541"},"parcels": [{"submitted_length_cm": 1,"submitted_width_cm": 1,"submitted_height_cm": 1,"submitted_weight_kg": 0.1}],"declared_value": 99}';

// 1. 生成 X-Amz-Date 头部
// 注意：日期必须是UTC时间，并以 'Z' 结尾
$amzDate = gmdate('Ymd\THis\Z');

// 2. 定义所有必要的HTTP头部
$headers = [
    'Host'         => $host, // 某些服务可能需要明确指定Host头部
    'X-Amz-Date'   => $amzDate,
    'Content-Type' => 'application/json',
    // 'Cookie' => 'XDEBUG_SESSION=PHPSTORM', // 调试时可能需要，生产环境通常不需要
];

// 初始化签名器和凭证
// 注意：'execute-api' 是服务名称，'af-south-1' 是区域。
// 这些参数必须与您实际调用的API服务和区域匹配。
$signature = new SignatureV4('execute-api', 'af-south-1');
$credentials = new Credentials($accessKey, $secretKey);

// 3. 构建PSR-7请求对象，将所有头部传递进去
$psr7Request = new Request($httpRequestMethod, $requestUrl . $uri, $headers, $data);

// 4. 签名请求
// signRequest 方法会修改 $psr7Request 对象，添加 Authorization 头部
$signedRequest = $signature->signRequest($psr7Request, $credentials);

// 5. 发送请求
$client = new Client(['base_uri' => $requestUrl, 'timeout' => 30]);
try {
    $response = $client->send($signedRequest);
    echo "Status Code: " . $response->getStatusCode() . "\n";
    echo "Response Body: " . $response->getBody()->getContents() . "\n";
} catch (\GuzzleHttp\Exception\ClientException $e) {
    echo "Client Error: " . $e->getMessage() . "\n";
    echo "Response Body: " . $e->getResponse()->getBody()->getContents() . "\n";
} catch (\GuzzleHttp\Exception\ServerException $e) {
    echo "Server Error: " . $e->getMessage() . "\n";
    echo "Response Body: " . $e->getResponse()->getBody()->getContents() . "\n";
} catch (\Exception $e) {
    echo "An unexpected error occurred: " . $e->getMessage() . "\n";
}

?>