Signature Authentication Mechanism
API Keys
| Name | Description |
|---|---|
| apiKey | The API key assigned to the merchant |
| apiSecret | The API secret assigned to the merchant. The API key and secret are confidential. Please keep them safe and do not disclose them. They are only used for generating signatures and should not be passed as parameters. |
Request Headers
| Name | Required | Description |
|---|---|---|
| API-KEY | Y | The API key assigned to the merchant |
| API-SIGNATURE | Y | Signature generated using the signature algorithm below |
| API-TIMESTAMP | Y | UNIX millisecond timestamp when the request is made |
| Content-Type | N | Mandatory for all POST requests, value must be application/json |
Signature Algorithm
request_content + "&" + timestamp using the apiSecret key.Where:
All non-empty request parameters are sorted in alphabetical order by parameter name. The sorted parameters are
concatenated into a string
request_content in the format of parameter name and parameter value.For example:
request_content = "param1=value1¶m2=value2¶m3=value3"Convert the request body into a JSON string to get
request_content.For example:
request_content = "{"fiatAmt":20,"fiatCurrency":"USD"}"timestamp is the same as the API-TIMESTAMP request header, which is a millisecond-level timestamp.source = request_content + "&" + timestampCode Example
Example of Generating Signature for GET Request:
Example of Generating Signature for POST Request:
Signature Algorithm Utility Class: