base.js

  3. /**
  4. * Generate signature for ZoomMtg WebSDK. {@link https://github.com/danharper/hmac-examples|hmac-examples}
  5. * @param string $api_key You REST API Key
  6. * @param string $api_secret You REST API Secret
  7. * @param int $meeting_number The meeting number you are creating the signature for
  8. * @param int $role Role that this signature is for; 0 for participant, 1 for host
  9. * @return {string} Returns the signature string
  10. * @method generate_signature
  11. * @example
  12. //======================================================================================================
  13. //PHP example code
  14. function generate_signature ( $api_key, $api_sercet, $meeting_number, $role){
  16.     $time = time() * 1000 - 30000; //time in milliseconds (or close enough)
  18.     $data = base64_encode($api_key . $meeting_number . $time . $role);
  20.     $hash = hash_hmac('sha256', $data, $api_sercet, true);
  22.     $_sig = $api_key . "." . $meeting_number . "." . $time . "." . $role . "." . base64_encode($hash);
  24.     //return signature, url safe base64 encoded
  25.     return rtrim(strtr(base64_encode($_sig), '+/', '-_'), '=');
  26. }
  28. //======================================================================================================
  29. //Java example code
  30. import javax.crypto.Mac;
  31. import javax.crypto.spec.SecretKeySpec;
  32. import java.security.NoSuchAlgorithmException;
  33. import java.util.Base64;
  34. import java.security.InvalidKeyException;
  35. import javax.xml.bind.DatatypeConverter;
  37. public class test {
  38.     public static String generateSignature(String apiKey, String apiSecret, String meetingNumber, Integer role) {
  39.         try {
  40.             Mac hasher = Mac.getInstance("HmacSHA256");
  41.             String ts = Long.toString(System.currentTimeMillis() - 30000);
  42.             String msg = String.format("%s%s%s%d", apiKey, meetingNumber, ts, role);
  44.             hasher.init(new SecretKeySpec(apiSecret.getBytes(), "HmacSHA256"));
  46.             String message = Base64.getEncoder().encodeToString(msg.getBytes());
  47.             byte[] hash = hasher.doFinal(message.getBytes());
  49.             String hashBase64Str = DatatypeConverter.printBase64Binary(hash);
  50.             String tmpString = String.format("%s.%s.%s.%d.%s", apiKey, meetingNumber, ts, role, hashBase64Str);
  51.             String encodedString = Base64.getEncoder().encodeToString(tmpString.getBytes());
  53.             return encodedString.replaceAll("\\=+$", "");
  55.           }
  56.           catch (NoSuchAlgorithmException e) {}
  57.           catch (InvalidKeyException e) {}
  58.         return "";
  59.     }
  60.     public static void main(String[] args) {
  61.         String signature = test.generateSignature("apiKey", "apiSecret", "meetingNumber", 0);
  62.         System.out.println(signature);
  63.     }
  64. }
  66. //======================================================================================================
  67. //Python2 example code
  68. import hashlib
  69. import hmac
  70. import base64
  71. import time
  73. def generateSignature(data):
  74.     ts = (int(round(time.time() * 1000)) - 30000);  #ts; // 1544683367752
  75.     print (ts)
  76.     msg = data['apiKey'] + str(data['meetingNumber']) + str(ts) + str(data['role']);
  77.     message = base64.b64encode(bytes(msg).encode('utf-8'));
  78.     secret = bytes(data['apiSecret']).encode('utf-8')
  79.     hash = hmac.new(secret, message, hashlib.sha256);
  80.     hash =  base64.b64encode(hash.digest());
  81.     hash = hash.decode("utf-8");
  82.     tmpString = "%s.%s.%s.%s.%s" % (data['apiKey'], str(data['meetingNumber']), str(ts), str(data['role']), hash);
  83.     signature = base64.b64encode(bytes(tmpString).encode("utf-8"));
  84.     signature = signature.decode("utf-8");
  85.     return signature.rstrip("=");
  87. if __name__ == '__main__':
  88.     data = {'apiKey': "" ,
  89.                 'apiSecret': "",
  90.                 'meetingNumber': 8998,
  91.                 'role': 0}
  92.     print (generateSignature(data))
  94. //======================================================================================================
  95. //Python3 example code
  96. import hashlib
  97. import hmac
  98. import base64
  99. import datetime
  101. def generateSignature(data):
  102.     ts = int(round(datetime.datetime.utcnow().timestamp() * 1000)) - 30000;
  103.     msg = data['apiKey'] + str(data['meetingNumber']) + str(ts) + str(data['role']);
  104.     message = base64.b64encode(bytes(msg, 'utf-8'));
  105.     # message = message.decode("utf-8");
  106.     secret = bytes(data['apiSecret'], 'utf-8')
  107.     hash = hmac.new(secret, message, hashlib.sha256);
  108.     hash =  base64.b64encode(hash.digest());
  109.     hash = hash.decode("utf-8");
  110.     tmpString = "%s.%s.%s.%s.%s" % (data['apiKey'], str(data['meetingNumber']), str(ts), str(data['role']), hash);
  111.     signature = base64.b64encode(bytes(tmpString, "utf-8"));
  112.     signature = signature.decode("utf-8");
  113.     return signature.rstrip("=");
  115. if __name__ == '__main__':
  116.     data = {'apiKey': "" ,
  117.                 'apiSecret': "",
  118.                 'meetingNumber': 888,
  119.                 'role': 0}
  120.     print (generateSignature(data))
  122. //======================================================================================================
  123. //Nodejs
  124. // npm install --save-dev js-base64 crypto-js
  126. const base64JS = require('js-base64');
  127. const hmacSha256 = require('crypto-js/hmac-sha256');
  128. const encBase64 = require('crypto-js/enc-base64');
  130. function generateSignature(data) {
  131.     let signature = '';
  132.     // Prevent time sync issue between client signature generation and zoom
  133.     const ts = new Date().getTime() - 30000;
  134.     const msg = base64JS.Base64.encode(data.apiKey + data.meetingNumber + ts + data.role);
  135.     const hash = hmacSha256(msg, data.apiSecret);
  136.     signature = base64JS.Base64.encodeURI(`${data.apiKey}.${data.meetingNumber}.${ts}.${data.role}.${encBase64.stringify(hash)}`);
  137.     return signature;
  138. }
  140. const data = {apiKey: "" ,
  141. apiSecret: "",
  142. meetingNumber: 888,
  143. role: 0}
  145. console.log(generateSignature(data));
  147. //======================================================================================================
  148. // WebSDK us this generateSignature
  149. // npm install --save-dev js-base64 crypto-js
  150. import * as base64JS from 'js-base64';
  151. import * as hmacSha256 from 'crypto-js/hmac-sha256';
  152. import * as encBase64 from 'crypto-js/enc-base64';
  154. function generateSignature(data) {
  155.     let signature = '';
  156.     const ts = new Date().getTime() - 30000;
  157.     try {
  158.         const msg = base64JS.Base64.encode(data.apiKey + data.meetingNumber + ts + data.role);
  159.         const hash = hmacSha256.default(msg, data.apiSecret);
  160.         signature = base64JS.Base64.encodeURI(`${data.apiKey}.${data.meetingNumber}.${ts}.${data.role}.${encBase64.stringify(hash)}`);
  161.     } catch (e) {
  162.         console.log('error');
  163.     }
  164.     return signature;
  165. }
  166. *
  169. //======================================================================================================
  170. // C#
  171. // this demo use vscode and .NET Core 2.2.5
  172. // https://docs.microsoft.com/en-us/dotnet/core/tutorials/with-visual-studio-code
  173. // https://dotnet.microsoft.com/download
  174. // https://www.red-gate.com/simple-talk/dotnet/net-development/jwt-authentication-microservices-net/
  175. // https://www.jokecamp.com/blog/examples-of-creating-base64-hashes-using-hmac-sha256-in-different-languages/#csharp
  176. // https://marketplace.zoom.us/docs/sdk/native-sdks/Web-Client-SDK/tutorial/generate-signature
  178. using System;
  179. using System.Security.Cryptography;
  180. using System.Text;
  182. namespace Zoom {
  183.     class Program {
  184.         static readonly char[] padding = { '=' };
  186.         static void Main (string[] args) {
  187.             Console.WriteLine ("Zoom copyright!");
  188.             Console.WriteLine ("generate websdk token!");
  189.             string apiKey = "apiKey";
  190.             string apiSecret = "apiSecret";
  191.             string meetingNumber = "";
  192.             String ts = (ToTimestamp(DateTime.UtcNow.ToUniversalTime()) - 30000).ToString();
  193.             string role = "1";
  194.             string token = GenerateToken (apiKey, apiSecret, meetingNumber, ts, role);
  195.             Console.WriteLine (token);
  196.         }
  198.         public static long ToTimestamp (DateTime value) {
  199.             long epoch = (value.Ticks - 621355968000000000) / 10000;
  200.             return epoch;
  201.         }
  203.         public static string GenerateToken (string apiKey, string apiSecret, string meetingNumber, string ts, string role) {
  205.             string message = String.Format ("{0}{1}{2}{3}", apiKey, meetingNumber, ts, role);
  206.             apiSecret = apiSecret ?? "";
  207.             // Console.WriteLine ("message: " + message + " secret: " + apiSecret);
  208.             var encoding = new System.Text.ASCIIEncoding ();
  209.             byte[] keyByte = encoding.GetBytes (apiSecret);
  210.             byte[] messageBytes = encoding.GetBytes (message);
  211.             // Console.WriteLine (System.Convert.ToBase64String (messageBytes));
  213.             using (var hmacsha256 = new HMACSHA256 (keyByte)) {
  214.                 byte[] key1 = Encoding.ASCII.GetBytes (apiSecret);
  215.                 byte[] hashmessage = hmacsha256.ComputeHash (messageBytes);
  216.                 string msgHash = System.Convert.ToBase64String (hashmessage);
  217.                 // Console.WriteLine ("msgHash: " + msgHash);
  219.                 string token = String.Format ("{0}.{1}.{2}.{3}.{4}", apiKey, meetingNumber, ts, role, msgHash);
  220.                 // Console.WriteLine("token", token, " ", Base64Encode(token));
  222.                 var tokenBytes = System.Text.Encoding.UTF8.GetBytes (token);
  223.                 return System.Convert.ToBase64String (tokenBytes).TrimEnd(padding);
  224.             }
  225.         }
  227.     }
  228. }
  230. */