Python Demo 如下：

import hashlib
import base64

def callback():
    url = request.url
    content = str(base64.b64encode(request.data), 'utf-8')
    # header 大小写不敏感，需要用get获取
    timestamp = request.headers.get('X-VOD-TIMESTAMP')
    # 可以校验 X-VOD-TIMESTAMP 与当前时间，不能超过某个范围
    # todo
    # 验签规则，竖线分割，规则为回调 URL|X-VOD-TIMESTAMP|PrivateKey|CallbackContent
    # 因为修改 key 后配置生效有延迟，因此修改 key 时建议兼容两种 key 的配置，这里只给出一个 key 的计算结果
    private_key = 'privateKey'
    signature = hashlib.md5("{}|{}|{}|{}".format(url, timestamp, private_key, content).encode("utf-8")).hexdigest()
    if signature == request.headers.get('X-VOD-SIGNATURE'):
        # 鉴权通过
    else:
        # 鉴权失败
    json_data = {"code": 0, "message": "success"}
    return jsonify(json_data)

Java Demo 如下：

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.ByteArrayOutputStream;
import java.io.IOException;
import java.io.InputStream;
import java.nio.charset.StandardCharsets;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.util.Base64;

public class MyCallbackHandler {

    public String callback(HttpServletRequest request, HttpServletResponse response) {
        String url = request.getRequestURL().toString();
        String content = new String(Base64.getEncoder().encode(getRequestBody(request)), StandardCharsets.UTF_8);
        // header 大小写不敏感，需要用 getHeader 获取
        String timestamp = request.getHeader("X-VOD-TIMESTAMP");

        // 可以校验 X-VOD-TIMESTAMP 与当前时间，不能超过某个范围
        // todo

        // 验签规则，竖线分割，规则为回调 URL|X-VOD-TIMESTAMP|PrivateKey|CallbackContent
        // 因为修改 key 后配置生效有延迟，因此修改 key 时建议兼容两种 key 的配置，这里只给出一个 key 的计算结果
        String privateKey = "privateKey";
        String signature = calculateSignature(url, timestamp, privateKey, content);

        if (signature.equals(request.getHeader("X-VOD-SIGNATURE"))) {
            // 鉴权通过
        } else {
            //鉴权失败
        }

        String jsonResponse = "{"code": 0, "message": "success"}";
        return jsonResponse;
    }

    private byte[] getRequestBody(HttpServletRequest request) {
        // 获取请求体内容并转为字节数组
        try (InputStream inputStream = request.getInputStream();
             ByteArrayOutputStream outputStream = new ByteArrayOutputStream()) {
            byte[] buffer = new byte[4096];
            int bytesRead;
            while ((bytesRead = inputStream.read(buffer)) != -1) {
                outputStream.write(buffer, 0, bytesRead);
            }
            return outputStream.toByteArray();
        } catch (IOException e) {
            e.printStackTrace();
            return new byte[0];
        }
    }

    private String calculateSignature(String url, String timestamp, String privateKey, String content) {
        String message = url + "|" + timestamp + "|" + privateKey + "|" + content;
        try {
            MessageDigest md = MessageDigest.getInstance("MD5");
            byte[] digest = md.digest(message.getBytes(StandardCharsets.UTF_8));
            StringBuilder sb = new StringBuilder();
            for (byte b : digest) {
                sb.append(String.format("%02x", b));
            }
            return sb.toString();
        } catch (NoSuchAlgorithmException e) {
            e.printStackTrace();
            return null;
        }
    }

}

PHP Demo 如下：

<?php

function callback() {
    $protocol = isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on' ? 'https://' : 'http://';
    $url = $protocol . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
    $content = base64_encode(file_get_contents('php://input'));
    // header 大小写不敏感，需要用 get 获取
    $timestamp = $_SERVER['HTTP_X_VOD_TIMESTAMP'];
  
    // 可以校验 X-VOD-TIMESTAMP 与当前时间，不能超过某个范围
    // todo
  
    // 验签规则，竖线分割，规则为回调 URL|X-VOD-TIMESTAMP|PrivateKey|CallbackContent
    // 因为修改 key 后配置生效有延迟，因此修改 key 时建议兼容两种 key 的配置，这里只给出一个 key 的计算结果
    $private_key = 'privateKey';
    $signature = md5($url . '|' . $timestamp . '|' . $private_key . '|' . $content);
  
    if ($signature == $_SERVER['HTTP_X_VOD_SIGNATURE']) {
        // 鉴权通过
    } else {
        // 鉴权失败
    }
  
    $json_data = array("code" => 0, "message" => "success");
    return json_encode($json_data);
}

?>