Access Guide

Common Request Headers

GET/POST request to the filled-in server address URL. The GET/POST request must carries common header parameters as shown in the following table:

Parameter	type	Description
timestamp	string	Timestamp
nonce	string	Random number
appKey	string	App key, Provided by the system provider
signature	string	The signature combines the signToken parameters filled in by the developer with the timestamp,appKey and nonce parameters in the request.

Parameter	type	Description
StatusCode	string	Status Code , Ref: Return Code Description
Info	string	Information message
Data	string	Response object data / object data list
Total	int	Total count of the object data list

Developers validate requests by verifying the signature (verification methods are provided below).
Step-by-Step Guide:

Get signToken by appKey parameter

Get GET/POST string data

Converts the GET/POST to string.

Concatenate parameters

Concatenates all the input parameters into a single string: timestamp,nonce, appKey, signToken and get/post string data.

Sort the Concatenated String

Sorts the characters in the concatenated string in ascending order.

Compute the MD5 Hash

Converts the sorted string into a byte array using UTF-8 encoding.

Convert the Hash to a Hexadecimal String

Converts each byte in the hash to a two-character hexadecimal string and appends it to a StringBuilder.

Get the Signature in Uppercase

Obtain the encrypted string in Uppercase as the signature parameter.

Obtain GET/POST string data for signature verification

Detail in Github