喵玩星球 API 参考文档

<!-- 在你的 game.html 中引入 -->
<script src="https://你的控制台域名/sdk/meowplay-sdk.js"></script>

// 保存玩家存档
MeowPlaySDK.save('slot1', { level: 5, score: 1200, gold: 99 })
  .then(res => console.log('保存成功', res))

// 加载玩家存档
MeowPlaySDK.load('slot1')
  .then(data => {
    // 恢复你的游戏状态
    console.log('读取到的数据', data.save.payload)
  })

// 上报自定义事件 (埋点)
MeowPlaySDK.track('level_complete', { level: 3, timeSpent: 45 })

防作弊签名支持

如果你的游戏含有排行榜，可以在管理员后台获取「SDK Secret」，并在游戏中执行 MeowPlaySDK.setSecret('your-secret')， SDK 将自动给所有请求携带 HMAC-SHA256 签名，防御分数篡改。

// Request Body
{
  "username": "developer_studio",
  "password": "your_password"
}

// Response (200 OK)
{
  "token": "eyJhbGciOiJIUzI1...",
  "user": {
    "role": "PLAYER", // 权限满足发布游戏
    "username": "developer_studio"
  }
}

Token 使用说明

每个 Token 的有效期通常为 7 天。在所有涉及游戏管理和云存档的操作中，将 Token 附加于 Authorization: Bearer [token] 标头。

# CURL Example (Multipart Form)
curl -X POST https://api.meowplay.com/api/games/upload \
  -H "Authorization: Bearer {token}" \
  -F "title=Super Mario" \
  -F "description=Classic jump adventure" \
  -F "file=@/path/to/game.zip"

// Request Body
{
  "title": "喵喵大作战",
  "description": "即点即玩的射击网页游戏",
  "gameUrl": "https://my-cdn.com/game/index.html",
  "coverImageUrl": "https://my-cdn.com/game/cover.png" // Optional
}

// Request Body
{
  "gameId": "YOUR_GAME_ID",
  "slotKey": "slot1", // 存档槽位名称 (开发自定义)
  "payload": { "level": 5, "score": 1200 } // 自定义JSON
}

// Response (200 OK)
{
  "message": "Save successful",
  "signed": false,
  "save": { "id": "...", "slotKey": "slot1", "updatedAt": "..." }
}

// Response (200 OK)
{
  "save": {
    "slotKey": "slot1",
    "payload": { "level": 5, "score": 1200 },
    "updatedAt": "2026-04-03T10:00:00Z"
  }
}

// Request Body
{
  "gameId": "YOUR_GAME_ID",
  "eventName": "level_complete", // 推荐: game_start, game_over, level_complete 等
  "eventData": { "level": 3, "time_sec": 42 } // 可选附带参数
}

// Response
{ "message": "Event tracked", "eventId": "uuid" }

// Node.js 签名计算示例
const crypto = require('crypto');

function signRequest(gameId, slotKey, payload, timestamp, nonce, secret) {
  // 1. 先对 payload 进行 SHA256 哈希
  const payloadHash = crypto.createHash('sha256').update(JSON.stringify(payload)).digest('hex');
  
  // 2. 组合签名体: 游戏ID:槽位:数据哈希:时间戳:随机数
  const msg = `${gameId}:${slotKey}:${payloadHash}:${timestamp}:${nonce}`;
  
  // 3. HMAC-SHA256 计算
  return crypto.createHmac('sha256', secret).update(msg).digest('hex'); 
}

// 在发出的请求头中必须包含:
// X-GC-Signature: 签名结果
// X-GC-Timestamp: 时间戳 (毫秒)
// X-GC-Nonce: 32位随机字符串