如果你用的 php，并且是 laravel 框架，可以尝试一下下边的代码： public function test_receipt_query() { $res = $this->getApi()->receiptQuery('xxx4d0fb9fd745de8d1dff937755x xx', 'xxxf925a72b740e5ba943e7f40efdxxx'); if ($res->isSuccess()) { // 商户号 $merchantId = 'xxx27xxxxx'; // 商户序列号 $serialNo = 'xxxxxBA3B465F51D1F5B4CF825580F1409xxxxxx'; $nonceStr = unsigned_uuid(); $time = time(); // 下载地址拆分，取路径和参数去签名 $url_parts = parse_url($res->getDownloadUrl()); $canonical_url = ($url_parts['path'] . (!empty($url_parts['query']) ? "?${url_parts['query']}" : "")); $sign = $this->sign($canonical_url, $nonceStr, $time); $res = Http::withHeaders([ 'Authorization' => 'WECHATPAY2-SHA256-RSA2048 mchid="' . $merchantId . '",serial_no="' . $serialNo . '",nonce_str="' . $nonceStr . '",timestamp="' . $time . '",signature="' . $sign . '"' ])->get($res->getDownloadUrl()); if (!is_dir(storage_path('app/public/test'))) { Storage::makeDirectory('public/test'); } file_put_contents(storage_path('app/public/test/' . $time . '.pdf'), $res->body()); } } public function sign($url, $nonceStr, $time) { $str = "GET" . "\n" . $url . "\n" . $time . "\n" . $nonceStr . "\n"; if (!openssl_sign($str, $signature, $this->merchantPrivateKeyInstance, OPENSSL_ALGO_SHA256)) { throw new \Exception('Signing the input $message failed, please checking your $privateKey whether or nor correct.'); } } 写的时候折腾了半天，不想吐槽了，👋