Authentication

note: Examples of signatures in different languages：

Refer to the signature implementation logic in the demo code：demo

1 The process description of API request

• The client generates a key based on the content of the API request, including the HTTP headers and bodies.
• The client uses MD5 to sign on the key that generated in the first step.
• The client sends the API request content along with the signed key to the server.
• After receiving the request, the server repeats the above first and second steps and calculates the expected signature at the server.
• The server compares the expected signature with the signed key that sent by the client.If they are entirely consistent with eachother, the request can pass the security verification.Otherwise, it will be rejected.

2 Header general request params

3.3 Params to create signature

3.4 Create signature

Create signature string：

SignString = HTTPMethod + "\n" 
                        \+ Content-MD5 + "\n" 
                        \+ Content-Type + "\n"  
                        \+ Headers + "\n"
                        \+ Resource 

MD5Result = MD5(SignString)

X-Up-Signature = ToUpper(MD5Result)

Resource:

URL Path and query params

Headers：

// X-Up-Key + X-Up-Timestamp (sort by first letter)
// except X-Up-Signature 
Headers = Key1 + ":" + Value1 + '\n' + Key2 + ":" + Value2   

Server will create sign and campare the sign with X-Up-Signature