truelayer-signing

Convenient libraries to produce TrueLayer API requests signatures.

Request signatures are created using a private key and included with certain API requests. They can then be verified using the associated public key.

• C#
• Go
• Java
• Java 7
• Node.js
• PHP
• Python
• Ruby
• Rust

Request signing specification

See request-signing-v2.md for an explanation of how request signing is implemented.

Webhook signature verification

TrueLayer webhooks include a Tl-Signature header similar to request signatures but signed by a TrueLayer private key. See per-language examples on how to properly verify webhooks.

Contributing

Contributions are always welcome!

See our contributing guide and our wiki.

Please adhere to this project's code of conduct.

License

^{Licensed under either of Apache License, Version 2.0 or MIT license at your option.}
_{Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.}