HMAC Authentication

Every request to TNS Gateway API is to be authenticated by HMAC by creating a signature of the request payload using API Key and Secret provided by TNS.

How to generate hmac

1. APIKey (Provided by TNS)
2. Secret (Provided by TNS)
3. Take the timestamp at the time of signing
4. Get data/payload (which will be sent as request body) as string
5. Concatenate APIKey “:” timestamp “:” payload
6. Generate HMAC by using Secret provided by TNS

HMAC should be generated by using SHA512 algorithm.

Here's a simple example of HMAC calculation using JavaScript:

To use CryptoJS.HmacSHA512, you need to ensure that you have the necessary prerequisites set up, including the proper installation and importation of the crypto-js library. Include the CryptoJS library in your HTML file: Add the following  tag to your HTML file to load CryptoJS from a CDN.

<script src="https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js"></script>

function generateHMAC(apiKey, secret, requestBody)
{
    var time = new Date().getTime();
    var rawSignature = apiKey + ":" + time + ":" + requestBody;
    var signature = signHMAC(rawSignature, secret);
    return signature;
}
function signHMAC(rawSignature, secret) {
    const signature = CryptoJS.HmacSHA512(rawSignature, secret);
    const hexSignature = CryptoJS.enc.Hex.stringify(signature);
    return hexSignature;
}

After generating the HMAC hash, the following headers need to be included in the REST API Request.

Important: The User-Agent header is mandatory for all API requests. Requests without a valid User-Agent will be rejected. This header helps TNS identify your integration for support and troubleshooting purposes.