broker-openapi

Authentication

Api key auth (http_api_key)

Keyed BLAKE2b-256 authentication. Required headers:

  • PRE-ACCESS-KEY: broker access key identifier (unique API key)
  • PRE-ACCESS-SIGNATURE: Keyed BLAKE2b-256 hex (lowercase, 64 chars)
  • PRE-ACCESS-TIMESTAMP: RFC3339 timestamp with milliseconds (e.g., 2025-10-30T06:00:34.075Z)

Signature is computed over (each line ends with \n):

  1. upper(request_method) + \n
  2. request_uri (path + query) + \n
  3. timestamp (from PRE-ACCESS-TIMESTAMP) + \n
  4. idempotency_key (from Idempotency-Key header) + \n
  5. broker_id + \n
  6. access_key (from PRE-ACCESS-KEY) + \n
  7. body_digest (BLAKE2b-256 hex lowercase of request body bytes, 64 chars)

Keyed BLAKE2b-256 is computed using secret_key associated with the access_key.