在服务器端实现,不泄露凭据,并保留数据来源与观测时间。
要点
仅在服务器保存 API 密钥。
验证货币代码和金额。
缓存成功响应。
显示来源和观测时间。
步骤 1
代码示例copy
require "net/http" require "json" class ExchangeRateClient Error = Class.new(StandardError) def convert(from:, to:, amount:) from = from.to_s.upcase to = to.to_s.upcase raise Error, "invalid currency code" unless [from, to].all? { |code| code.match?(/A[A-Z]{3}z/) } key = ["fx-convert", from, to, amount.to_d.to_s("F")] Rails.cache.fetch(key, expires_in: 60.seconds) do uri = URI("https://api.exchangerate.dev/v1/convert/#{from}/#{to}/#{amount}") request = Net::HTTP::Get.new(uri) request["Authorization"] = "Bearer #{ENV.fetch("EXCHANGERATE_API_KEY")}" response = Net::HTTP.start(uri.host, uri.port, use_ssl: true, open_timeout: 2, read_timeout: 5) { |http| http.request(request) } raise Error, "exchange-rate API returned #{response.code}" unless response.is_a?(Net::HTTPSuccess) JSON.parse(response.body) end rescue Net::OpenTimeout, Net::ReadTimeout => error raise Error, "exchange-rate API timed out: #{error.class}" end end
步骤 2
代码示例copy
class ConversionsController < ApplicationController def show amount = BigDecimal(params.require(:amount)) result = ExchangeRateClient.new.convert( from: params.require(:from).upcase, to: params.require(:to).upcase, amount: amount ) render json: result.slice("from", "to", "amount", "rate", "converted", "source", "market_session", "data_updated_at") rescue ExchangeRateClient::Error, ArgumentError => error render json: { error: error.message }, status: :bad_gateway end end
步骤 3
请在服务器端执行,验证输入,并保留响应元数据。
步骤 4
请在服务器端执行,验证输入,并保留响应元数据。
指南
这些汇率仅供参考,并非结算价格。
ER
exchangerate.dev
面向货币数据开发者的实用指南。
