Computing the Signature Hash (Security)

Work in Progress.

This page explains the details of the procedure for computing the signatur hash, if the user doesn't use a helper library.

To ensure the integrity of any contents you send to the FabEngine API, each HTTP request contains the signature. It ensures that nobody tampers with your call en-route and helps as a sanity check against accidentally passing unwanted parameters. It contains a hash computed from the URL you call, all parameters, and your secret token.

Read that last paragraph again! It explains why it is critical that you keep your secret token secret.

When using one of our helper libraries for calling the FabEngine API, you don't need to read any of the following. If you are, for whatever reason, rolling your own code for calling the FabEngine API, you should read the following.

Assembling the string to be hashed

To be written.

The Hash function

To be written.