#!/usr/bin/python# -*- coding: utf-8 -*-""" Signs a URL using a URL signing secret """importhashlibimporthmacimportbase64importurllib.parseasurlparsedefsign_url(input_url=None,secret=None):""" Sign a request URL with a URL signing secret.      Usage:      from urlsigner import sign_url      signed_url = sign_url(input_url=my_url, secret=SECRET)      Args:      input_url - The URL to sign      secret    - Your URL signing secret      Returns:      The signed request URL  """ifnotinput_urlornotsecret:raiseException("Both input_url and secret are required")url=urlparse.urlparse(input_url)# We only need to sign the path+query part of the stringurl_to_sign=url.path+"?"+url.query# Decode the private key into its binary format# We need to decode the URL-encoded private keydecoded_key=base64.urlsafe_b64decode(secret)# Create a signature using the private key and the URL-encoded# string using HMAC SHA1. This signature will be binary.signature=hmac.new(decoded_key,str.encode(url_to_sign),hashlib.sha1)# Encode the binary signature into base64 for use within a URLencoded_signature=base64.urlsafe_b64encode(signature.digest())original_url=url.scheme+"://"+url.netloc+url.path+"?"+url.query# Return signed URLreturnoriginal_url+"&signature="+encoded_signature.decode()if__name__=="__main__":input_url=input("URL to Sign: ")secret=input("URL signing secret: ")print("Signed URL: "+sign_url(input_url,secret))

importjava.io.IOException;importjava.io.UnsupportedEncodingException;importjava.net.URI;importjava.net.URISyntaxException;importjava.security.InvalidKeyException;importjava.security.NoSuchAlgorithmException;importjava.util.Base64;// JDK 1.8 only - older versions may need to use Apache Commons or similar.importjavax.crypto.Mac;importjavax.crypto.spec.SecretKeySpec;importjava.net.URL;importjava.io.BufferedReader;importjava.io.InputStreamReader;publicclassUrlSigner{// Note: Generally, you should store your private key someplace safe// and read them into your codeprivatestaticStringkeyString="YOUR_PRIVATE_KEY";// The URL shown in these examples is a static URL which should already// be URL-encoded. In practice, you will likely have code// which assembles your URL from user or web service input// and plugs those values into its parameters.privatestaticStringurlString="YOUR_URL_TO_SIGN";// This variable stores the binary key, which is computed from the string (Base64) keyprivatestaticbyte[]key;publicstaticvoidmain(String[]args)throwsIOException,InvalidKeyException,NoSuchAlgorithmException,URISyntaxException{BufferedReaderinput=newBufferedReader(newInputStreamReader(System.in));StringinputUrl,inputKey=null;// For testing purposes, allow user input for the URL.// If no input is entered, use the static URL defined above.System.out.println("Enter the URL (must be URL-encoded) to sign: ");inputUrl=input.readLine();if(inputUrl.equals("")){inputUrl=urlString;}// Convert the string to a URL so we can parse itURLurl=newURL(inputUrl);// For testing purposes, allow user input for the private key.// If no input is entered, use the static key defined above.System.out.println("Enter the Private key to sign the URL: ");inputKey=input.readLine();if(inputKey.equals("")){inputKey=keyString;}UrlSignersigner=newUrlSigner(inputKey);Stringrequest=signer.signRequest(url.getPath(),url.getQuery());System.out.println("Signed URL :"+url.getProtocol()+"://"+url.getHost()+request);}publicUrlSigner(StringkeyString)throwsIOException{// Convert the key from 'web safe' base 64 to binarykeyString=keyString.replace('-','+');keyString=keyString.replace('_','/');System.out.println("Key: "+keyString);// Base64 is JDK 1.8 only - older versions may need to use Apache Commons or similar.this.key=Base64.getDecoder().decode(keyString);}publicStringsignRequest(Stringpath,Stringquery)throwsNoSuchAlgorithmException,InvalidKeyException,UnsupportedEncodingException,URISyntaxException{// Retrieve the proper URL components to signStringresource=path+'?'+query;// Get an HMAC-SHA1 signing key from the raw key bytesSecretKeySpecsha1Key=newSecretKeySpec(key,"HmacSHA1");// Get an HMAC-SHA1 Mac instance and initialize it with the HMAC-SHA1 keyMacmac=Mac.getInstance("HmacSHA1");mac.init(sha1Key);// compute the binary signature for the requestbyte[]sigBytes=mac.doFinal(resource.getBytes());// base 64 encode the binary signature// Base64 is JDK 1.8 only - older versions may need to use Apache Commons or similar.Stringsignature=Base64.getEncoder().encodeToString(sigBytes);// convert the signature to 'web safe' base 64signature=signature.replace('+','-');signature=signature.replace('/','_');returnresource+"&signature="+signature;}}

usingSystem;usingSystem.Collections.Generic;usingSystem.Security.Cryptography;usingSystem.Text;usingSystem.Text.RegularExpressions;usingSystem.Web;namespaceSignUrl{publicstructGoogleSignedUrl{publicstaticstringSign(stringurl,stringkeyString){ASCIIEncodingencoding=newASCIIEncoding();// converting key to bytes will throw an exception, need to replace '-' and '_' characters first.stringusablePrivateKey=keyString.Replace("-","+").Replace("_","/");byte[]privateKeyBytes=Convert.FromBase64String(usablePrivateKey);Uriuri=newUri(url);byte[]encodedPathAndQueryBytes=encoding.GetBytes(uri.LocalPath+uri.Query);// compute the hashHMACSHA1algorithm=newHMACSHA1(privateKeyBytes);byte[]hash=algorithm.ComputeHash(encodedPathAndQueryBytes);// convert the bytes to string and make url-safe by replacing '+' and '/' charactersstringsignature=Convert.ToBase64String(hash).Replace("+","-").Replace("/","_");// Add the signature to the existing URI.returnuri.Scheme+"://"+uri.Host+uri.LocalPath+uri.Query+"&signature="+signature;}}classProgram{staticvoidMain(){// Note: Generally, you should store your private key someplace safe// and read them into your codeconststringkeyString="YOUR_PRIVATE_KEY";// The URL shown in these examples is a static URL which should already// be URL-encoded. In practice, you will likely have code// which assembles your URL from user or web service input// and plugs those values into its parameters.conststringurlString="YOUR_URL_TO_SIGN";stringinputUrl=null;stringinputKey=null;Console.WriteLine("Enter the URL (must be URL-encoded) to sign: ");inputUrl=Console.ReadLine();if(inputUrl.Length==0){inputUrl=urlString;}Console.WriteLine("Enter the Private key to sign the URL: ");inputKey=Console.ReadLine();if(inputKey.Length==0){inputKey=keyString;}Console.WriteLine(GoogleSignedUrl.Sign(inputUrl,inputKey));}}}