X-Tl-Signatureheaders have been deprecated in favour of "v2"Tl-Signaturefull request signature headers.Go to https://github.com/TrueLayer/truelayer-signing for multi-language signing libraries & examples.
This repository provides a collection of code samples illustrating how to perform request signing for Payouts API using different programming languages.
Instructions on how to run each code sample are provided in the respective README.md files.
These code samples are provided as examples for you to understand how to perform request signing. They are not meant to be used to sign a request and then submit it with a different tool like Postman or cURL. The code or tool used to sign the request should also be used to POST the request, otherwise the encoding of the payload will no longer match the signature and your request will fail.
All examples require an EC key pair to work correctly. You can generate one using
./generate_key_pair.shThe script requires openssl.
An alternative script is included which will run openssl in Docker. This can mitigate some openssl bug(s) which cause issues with the generated private key in some languages crypto libs.
./docker_generate_key_pair.shWhen run, a pair of certificates will appear in ./out
The payload parsed for signing must be bytewise equivialent to the payload sent to our API's. The most common cause of issues are errant control characters (often seen in cli implementations where a trailing newline '\n' is inserted/removed).