eTowerB2B provides each API client with an API Token and a corresponding Secret Key. The Key is used exclusively for MAC SHA-1 signing and is not transmitted in the request. Every request must include authentication information to verify the sender's identity and permissions.T
Token and Key Format
Token: test5AdbzO5OEeOpvgAVXUFE0A
Key: 79db9e5OEeOpvgAVXUFWSD
Step 1: Obtain Token and Key
Please contact your integrator (the party using eTowerB2B integrator account) to obtain a a production/test environment account, then log in eTowerB2B and acquire the Token and Secret Key in the API Tokens module :
Test Environment:：https://cfs-qa.etowertech.com
Production Environment：https://b2b.etowertech.com
Step 2: Add Request Headers
sample:
Host: cfs-qa.etowertech.com
X-WallTech-Date: Thu, 06 Aug 2020 06:01:26 GMT
Authorization: WallTech testLvs2jdug2qIoRsJyuxs:2THPh5_j4OTYUGdinstTC4nYqDE=
Content-Type: application/json
Accept: application/json
Generation Method:
- It is recommended to refer to the attachment file API Signature Demo.rar which contains sample code in multiple languages:
- .netsample.cs
- c#_demo.cs
- java_project_demo.zip
- java_demo.java
- js_demo.js
- php_demo.txt
- python_demo.py
1. X-WallTech-Date：Request Sent Time
RFC1123 Format
Format: EEE, DD MM YYYY HH:MM:SS ZZZ
Example:Thu, 04 Nov 2021 03:39:28 GMT
Note: Use Greenwich Mean Time (GMT). For Beijing Time (GMT+8), subtract 8 hours.
Important: The server will reject requests if the time difference between server receipt and sending time exceeds 15 minutes.
2. Authorization：Signature Authentication
Format: WallTech <Token>:<Base64 Encoded HMAC SHA-1 Hash>
<Token>：API Token
<Base64 Encoded HMAC SHA-1 Hash> Java code description:
Encrypt the API Token's Secret Key (e.g., Key=79db9e5OEeOpvgAVXUFWSD) using the SecretKeySpec class with the HmacSHA1 algorithm. Initialize a Mac object with the HmacSHA1 algorithm, then initialize this Mac object with the key. Finally, process the Mac object into bytes and perform Base64 encoding.
Example: WallTech testLvs2jdug2qIoRsJyuxs:2THPh5_j4OTYUGdinstTC4nYqDE=
Content-Type：application/json
Accept：application/json