nl_tokens: 验证 Hmac
pl_tokens: function ( queryObj ) { if ( arguments . length < 1 ) { throw paramError ; } var hmac = queryObj . hmac ; delete queryObj . hmac ; return ( Date . now ( ) - new <mask> ( queryObj . time_stamp ) . getTime ( ) < timeOffset ) && ( hmac === crypto . createHmac ( 'sha256' , this . app_secret ) . update ( decodeURIComponent ( querystring . stringify ( queryObj ) ) , 'utf8' ) . digest ( 'hex' ) ) ; }