On This Page
REST API

Updating Header Fields

When the signature is generated, you can populate the
signature
 header field. The
signature
 header field includes these parameters:
kid
The shared secret key used to encrypt the signature.
algorithm
The HMAC SHA256 algorithm used to encrypt the signature. It should be formatted:
HmacSHA256
.
headers
This ordered list of the fields included in the signature:
  • host
  • date
  • request-target
  • digest
  • v-c-merchant-id
signature
The signature hash.

Signature Header Field Format

Signature:"keyid:"[shared secret key]",algorithm="[encryption algoritm]",headers="field1" "field2" "field3" "etc.", signature="[signature hash]"

Signature Header Example

Signature:"kid="123abcki-key1-key2-key3-keyid1234567", 
algorithm="HmacSHA256", headers="host date request-target digest v-c-merchant-id", 
signature="hrptKYTtn/VfwAdUqkrQ0HT7jqAbagAbFC6nRGXrNzE="