Authentication
Paynetics API uses HMAC authentication methodology.
To authenticate your API request to Paynetics you need to provide the following elements in the header of your request:
Key provided by Paynetics.
Current UNIX timestamp.
HMAC SHA-256. Use your secret key as the hash vector. The signed body is formed by concatenating: API key + timestamp + operation + content body (required for POST and PUT requests).
Body content whitespaces are omitted when comparing hashes.
{ " name ": " Paynetics " } is normalised to {"name":"Paynetics"} before signing.
Requests are valid for 15 seconds after hash generation.
If your request timestamp is 1591096701 and the server's clock reads 1591096720, the request will not be authorised.
To exchange API key and secret, Paynetics requires your public PGP key.