Citron
Home
  • 🍋General Description
  • Integration Guide
    • How to integrate with us?
    • Deposits
    • Withdrawals
    • Exchanges
    • Callbacks
    • What is Crypto payment form?
  • API Documentation
    • Authorization
    • Environments
    • Payment flows
    • Transaction types and statuses
    • API Endpoints
    • Callback Examples
  • How to use Citron
    • Balances
    • Transactions
    • Reports
    • Addresses and Bank Accounts
    • Fees
    • Profile
  • Confirmations and limits
  • FAQ
Powered by GitBook
On this page

Was this helpful?

  1. API Documentation

Authorization

Authorization is performed by sending two headers:

  1. X-Process-Key – The public key, that can be obtained from the user's account

  2. X-Process-Signature – POST body, signed by the secret key HMAC-SHA512, the secret key is also obtained from the user's account

See the example below:

$paramsArray = ['key' => 'value'];
$requestBody = json_encode($paramsArray);
$signature   = hash_hmac('sha512', $requestBody, $apiSecret);

All the requests need to use the following format in the header:

"Content-Type": "application/json"

If you need to compare the validity of the signature that you have generated, please check it with our example.

Enter the data below:

Secret key: AbCdEfG123456
Request body in JSON format:
{"currency":"BTC","foreign_id":"123456"}

And check if your result is the same as our outcome:

03c25fcf7cd35e7d995e402cd5d51edd72d48e1471e865907967809a0c189ba55b90815f20e2bb10f82c7a9e9d865546fda58989c2ae9e8e2ff7bc29195fa1ec
PreviousAPI DocumentationNextEnvironments

Last updated 10 days ago

Was this helpful?

Page cover image