How to Integrate Replit with AliExpress API

1// Verify AliExpress secrets are present at startup
2const required = ['ALIEXPRESS_APP_KEY', 'ALIEXPRESS_APP_SECRET'];
3for (const key of required) {
4  if (!process.env[key]) {
5    throw new Error(`Missing secret: ${key}. Add it in Replit Secrets (lock icon 🔒).`);
6  }
7}
8console.log('AliExpress credentials loaded. App Key:', process.env.ALIEXPRESS_APP_KEY);

1// aliexpress.js — AliExpress API client with HMAC-MD5 signing for Replit
2const axios = require('axios');
3const crypto = require('crypto');
4const express = require('express');
5
6const APP_KEY = process.env.ALIEXPRESS_APP_KEY;
7const APP_SECRET = process.env.ALIEXPRESS_APP_SECRET;
8const API_URL = 'https://api-sg.aliexpress.com/sync';
9
10/**
11 * Compute AliExpress HMAC-MD5 signature.
12 * @param {Object} params - All request parameters (including method, app_key, timestamp)
13 * @param {string} secret - App Secret
14 */
15function computeSignature(params, secret) {
16  // Sort parameters alphabetically by key
17  const sortedKeys = Object.keys(params).sort();
18  // Concatenate key+value pairs (no separator between key/value or pairs)
19  const paramString = sortedKeys.map(k => `${k}${params[k]}`).join('');
20  // Wrap with secret on both sides
21  const stringToSign = `${secret}${paramString}${secret}`;
22  // HMAC-MD5, uppercase hex
23  return crypto.createHmac('md5', secret)
24    .update(stringToSign)
25    .digest('hex')
26    .toUpperCase();
27}
28
29/**
30 * Call any AliExpress Open Platform API method.
31 */
32async function callAliexpressAPI(method, extraParams = {}) {
33  const timestamp = new Date().toISOString().replace('T', ' ').slice(0, 19);
34  
35  const params = {
36    method,
37    app_key: APP_KEY,
38    timestamp,
39    sign_method: 'md5',
40    ...extraParams
41  };
42  
43  params.sign = computeSignature(params, APP_SECRET);
44  
45  const response = await axios.post(API_URL, null, { params });
46  return response.data;
47}
48
49// Express server
50const app = express();
51app.use(express.json());
52
53// Search AliExpress products
54app.get('/api/products/search', async (req, res) => {
55  const { keyword, page = 1 } = req.query;
56  if (!keyword) return res.status(400).json({ error: 'keyword is required' });
57  
58  try {
59    const data = await callAliexpressAPI('aliexpress.affiliate.product.query', {
60      keywords: keyword,
61      page_no: page,
62      page_size: 20,
63      target_currency: 'USD',
64      target_language: 'EN',
65      tracking_id: process.env.ALIEXPRESS_TRACKING_ID || ''
66    });
67    res.json(data);
68  } catch (err) {
69    res.status(500).json({ error: err.message });
70  }
71});
72
73// Get product details
74app.get('/api/products/:productId', async (req, res) => {
75  try {
76    const data = await callAliexpressAPI('aliexpress.affiliate.productdetail.get', {
77      product_ids: req.params.productId,
78      target_currency: 'USD',
79      target_language: 'EN',
80      tracking_id: process.env.ALIEXPRESS_TRACKING_ID || ''
81    });
82    res.json(data);
83  } catch (err) {
84    res.status(500).json({ error: err.message });
85  }
86});
87
88app.listen(3000, '0.0.0.0', () => console.log('AliExpress API server running on port 3000'));

1# aliexpress.py — AliExpress API client with HMAC-MD5 signing for Replit
2import os
3import hmac
4import hashlib
5import time
6from datetime import datetime, timezone
7from flask import Flask, request, jsonify
8import requests
9
10APP_KEY = os.environ['ALIEXPRESS_APP_KEY']
11APP_SECRET = os.environ['ALIEXPRESS_APP_SECRET']
12TRACKING_ID = os.environ.get('ALIEXPRESS_TRACKING_ID', '')
13API_URL = 'https://api-sg.aliexpress.com/sync'
14
15def compute_signature(params: dict, secret: str) -> str:
16    """Compute AliExpress HMAC-MD5 signature."""
17    sorted_keys = sorted(params.keys())
18    param_string = ''.join(f'{k}{params[k]}' for k in sorted_keys)
19    string_to_sign = f'{secret}{param_string}{secret}'
20    return hmac.new(
21        secret.encode('utf-8'),
22        string_to_sign.encode('utf-8'),
23        digestmod=hashlib.md5
24    ).hexdigest().upper()
25
26def call_aliexpress_api(method: str, extra_params: dict = {}) -> dict:
27    """Call any AliExpress Open Platform API method."""
28    timestamp = datetime.now(timezone.utc).strftime('%Y-%m-%d %H:%M:%S')
29    
30    params = {
31        'method': method,
32        'app_key': APP_KEY,
33        'timestamp': timestamp,
34        'sign_method': 'md5',
35        **extra_params
36    }
37    
38    params['sign'] = compute_signature(params, APP_SECRET)
39    
40    response = requests.post(API_URL, params=params)
41    response.raise_for_status()
42    return response.json()
43
44app = Flask(__name__)
45
46@app.route('/api/products/search')
47def search_products():
48    keyword = request.args.get('keyword')
49    if not keyword:
50        return jsonify({'error': 'keyword is required'}), 400
51    
52    page = request.args.get('page', 1)
53    
54    try:
55        data = call_aliexpress_api('aliexpress.affiliate.product.query', {
56            'keywords': keyword,
57            'page_no': page,
58            'page_size': 20,
59            'target_currency': 'USD',
60            'target_language': 'EN',
61            'tracking_id': TRACKING_ID
62        })
63        return jsonify(data)
64    except Exception as e:
65        return jsonify({'error': str(e)}), 500
66
67@app.route('/api/products/<product_id>')
68def get_product(product_id):
69    try:
70        data = call_aliexpress_api('aliexpress.affiliate.productdetail.get', {
71            'product_ids': product_id,
72            'target_currency': 'USD',
73            'target_language': 'EN',
74            'tracking_id': TRACKING_ID
75        })
76        return jsonify(data)
77    except Exception as e:
78        return jsonify({'error': str(e)}), 500
79
80if __name__ == '__main__':
81    app.run(host='0.0.0.0', port=3000)