Sites GET submitted need additional protocol header, but the head of X - auth - sign agreement generated way I look a little confused,,, with or without bosses to see

X - auth - key: beb48d9dasdas221112d8f213eeb9
X - auth - nonce: 1615
X - auth - sign: bBmXsiyfVw1%2 fd7on10pyn6czpqy % 3 d
X - auth - timestamp: 1608964691077

This is additional agreement head,,,

Js file download: https://cloud.189.cn/t/JBbE7zIV7bY3