查询授权用户稿件与投稿分区

import { createHash, createHmac, randomUUID } from 'node:crypto';
const required = (name) => {
  const value = process.env[name];
  if (!value || value.includes('replace_with_')) throw new Error(`请设置自己的 ${name}`);
  if (/[\r\n]/.test(value)) throw new Error(`${name} 不能包含换行`);
  return value;
};
const clientId = required('BILIBILI_CLIENT_ID');
const secret = required('BILIBILI_APP_SECRET');
const token = required('BILIBILI_ACCESS_TOKEN');
const url = 'https://member.bilibili.com/arcopen/fn/archive/viewlist?pn=1&ps=20&status=all';
// 本例为 GET，无 body。空字符串的 MD5 仍需发送，不能省略或改成 {} 的 MD5。
const signingHeaders = {
  'x-bili-accesskeyid': clientId,
  'x-bili-content-md5': createHash('md5').update('', 'utf8').digest('hex'),
  'x-bili-signature-method': 'HMAC-SHA256',
  'x-bili-signature-nonce': randomUUID(),
  'x-bili-signature-version': '2.0',
  'x-bili-timestamp': String(Math.floor(Date.now() / 1000)),
};
// 只对 x-bili- 请求头排序；每行 key:value，以 LF 分隔，最后一行不追加换行。
const canonical = Object.keys(signingHeaders).sort()
  .map((key) => `${key}:${signingHeaders[key]}`).join('\n');
const authorization = createHmac('sha256', Buffer.from(secret, 'utf8'))
  .update(canonical, 'utf8').digest('hex');
const response = await fetch(url, {
  method: 'GET', redirect: 'error', signal: AbortSignal.timeout(20000),
  headers: { ...signingHeaders, 'access-token': token, Authorization: authorization,
    Accept: 'application/json', 'Content-Type': 'application/json' },
});
if (!response.ok) throw new Error(`HTTP ${response.status}`);
let result;
try { result = JSON.parse(await response.text()); }
catch { throw new Error('平台未返回有效 JSON，检查服务状态及请求地址'); }
if (result.code !== 0) {
  throw new Error(`业务错误 ${result.code}: ${result.message || ''}; request_id=${result.request_id || ''}`);
}
if (!result.data || typeof result.data !== 'object') throw new Error('响应缺少预期 data');
console.log(JSON.stringify(result.data, null, 2));
// 输出只来自该授权用户；生产系统应限制访问并按用户同意范围保存。

import { createHash, createHmac, randomUUID } from 'node:crypto';
const required = (name) => {
  const value = process.env[name];
  if (!value || value.includes('replace_with_')) throw new Error(`请设置自己的 ${name}`);
  if (/[\r\n]/.test(value)) throw new Error(`${name} 不能包含换行`);
  return value;
};
const clientId = required('BILIBILI_CLIENT_ID');
const secret = required('BILIBILI_APP_SECRET');
const token = required('BILIBILI_ACCESS_TOKEN');
const url = 'https://member.bilibili.com/arcopen/fn/archive/type/list';
// 本例为 GET，无 body。空字符串的 MD5 仍需发送，不能省略或改成 {} 的 MD5。
const signingHeaders = {
  'x-bili-accesskeyid': clientId,
  'x-bili-content-md5': createHash('md5').update('', 'utf8').digest('hex'),
  'x-bili-signature-method': 'HMAC-SHA256',
  'x-bili-signature-nonce': randomUUID(),
  'x-bili-signature-version': '2.0',
  'x-bili-timestamp': String(Math.floor(Date.now() / 1000)),
};
// 只对 x-bili- 请求头排序；每行 key:value，以 LF 分隔，最后一行不追加换行。
const canonical = Object.keys(signingHeaders).sort()
  .map((key) => `${key}:${signingHeaders[key]}`).join('\n');
const authorization = createHmac('sha256', Buffer.from(secret, 'utf8'))
  .update(canonical, 'utf8').digest('hex');
const response = await fetch(url, {
  method: 'GET', redirect: 'error', signal: AbortSignal.timeout(20000),
  headers: { ...signingHeaders, 'access-token': token, Authorization: authorization,
    Accept: 'application/json', 'Content-Type': 'application/json' },
});
if (!response.ok) throw new Error(`HTTP ${response.status}`);
let result;
try { result = JSON.parse(await response.text()); }
catch { throw new Error('平台未返回有效 JSON，检查服务状态及请求地址'); }
if (result.code !== 0) {
  throw new Error(`业务错误 ${result.code}: ${result.message || ''}; request_id=${result.request_id || ''}`);
}
if (!result.data || typeof result.data !== 'object') throw new Error('响应缺少预期 data');
console.log(JSON.stringify(result.data, null, 2));
// 输出只来自该授权用户；生产系统应限制访问并按用户同意范围保存。