Authentication

const crypto = require("crypto");
const apiKey = "123456...";
const secret = "ABCDEF...";

// path = the request target EXACTLY as you send it, query string included.
// body = the raw request body bytes; "" for GET/DELETE.
module.exports = (method, path, body = "") => {
  const nonce = String(Date.now());
  const message = nonce + apiKey + method.toUpperCase() + path + body;
  const signature = crypto
    .createHmac("sha256", secret)
    .update(message)
    .digest("hex");

  return {
    "Content-Type": "application/json;charset=utf-8",
    "X-Auth-Apikey": apiKey,
    "X-Auth-Nonce": nonce,
    "X-Auth-Signature": signature,
  };
};

import hashlib, hmac, time

API_KEY = "123456..."
SECRET = "ABCDEF..."

def sign(method: str, path: str, body: str = "") -> dict:
    nonce = str(int(time.time() * 1000))
    message = nonce + API_KEY + method.upper() + path + body
    signature = hmac.new(
        SECRET.encode(), message.encode(), hashlib.sha256
    ).hexdigest()
    return {
        "Content-Type": "application/json;charset=utf-8",
        "X-Auth-Apikey": API_KEY,
        "X-Auth-Nonce": nonce,
        "X-Auth-Signature": signature,
    }

package main

import (
	"crypto/hmac"
	"crypto/sha256"
	"encoding/hex"
	"fmt"
	"strings"
	"time"
)

const apiKey, secret = "123456...", "ABCDEF..."

// path is the request target exactly as sent, query string included.
// body is "" for GET/DELETE.
func sign(method, path, body string) map[string]string {
	nonce := fmt.Sprintf("%d", time.Now().UnixMilli())
	message := nonce + apiKey + strings.ToUpper(method) + path + body

	mac := hmac.New(sha256.New, []byte(secret))
	mac.Write([]byte(message))

	return map[string]string{
		"Content-Type":     "application/json;charset=utf-8",
		"X-Auth-Apikey":    apiKey,
		"X-Auth-Nonce":     nonce,
		"X-Auth-Signature": hex.EncodeToString(mac.Sum(nil)),
	}
}