Important Notes

  • Empty bodies: For requests with no body, use an empty string "" for signature generation

  • Key ordering: The canonical JSON ensures consistent signatures regardless of object key order

  • Environment variables: When using Postman, environment variables in the format {{variable_name}} are automatically resolved

  • Replay protection: Timestamps prevent replay attacks; ensure your system clock is synchronized

  • Secret security: Keep your client secret secure and never expose it in client-side code

Last updated