auth

Overview ¶

Package auth implements the PMOCK open API request signature.

The scheme is documented in the integration guide:

timestamp    = current unix seconds floored to a whole minute
stringToSign = accessKey + ":" + timestamp
token        = base64(hmac-sha256(secretKey, stringToSign))

The timestamp is not transmitted separately: the server derives it from the token, which is why a signature is reusable only within the same minute.