Request validation
Each request is escorted with a query param "key" with a value of a sha1 cached query string and a salt key. Salt key should be generated on your side and provided at the start of integration. Valid characters are A-z, 0-9. Hashing should be done without any sorting of parameters.
The query param "key" value must match sha1([SALT KEY]+[QUERY STRING])
QUERY STRING does not need to be sorted before hashing.
$data = array( 'callerId' => "danitestdev_s", 'callerPassword' => "hidden", .... whole query string ); $hash = sha1($salt.http_build_query($data)); $data['key'] = $hash; |