Security
Signature Authentication and Encrypted Transmission
Get API Key via aio-dashborad
Required Request Headers
| Header Name | Description | Example |
|---|---|---|
algorithm | The hashing algorithm used for signing. Supported: HMAC-SHA256 | HMAC-SHA256 |
date | The timestamp of the request (recommended in ISO-8601 UTC format) | 2025-05-12T00:00:00Z |
body-md5 | The MD5 hash of the request body (use an empty string if there is no body) | a4e00bea676896c4524f112fd0e2f6b6 |
aio-sign | The Base64-encoded signature generated using your Secret Key | QmFzZTY0RW5jb2RlZFNpZ25hdHVyZVN0cmluZw== |
aio-aes | (Optional) AES IV used to encrypt response data, for decrypting responses | pS1k2dfGjI9klq3j |
aio-api-key | Your API Key created in the AIO dashboard | viQblWoiMslwpVgHtNBfLstt |
Signature Construction
HMAC-SHA256 | 2025-05-27T08:00:00Z | GET /v2/tx?page=1&size=10Signature Components
| Field | Description |
|---|---|
algorithm | The algorithm used for signing HMAC-SHA256 |
date | The UTC timestamp of the request in ISO-8601 format |
method | HTTP method (uppercase), e.g., GET, POST |
uri | Full request path including query string, e.g., /v2/tx?page=1&size=10 |
body_md5 | The MD5 hash of the request body (only for POST/PUT/PATCH methods) |
Example: GET /tx
Python
Golang
Java
TypeScript
Example: POST /tx/pay-in
Python
Golang
Java
TypeScript
Encrypted Transmission
aio-aes header containing the Base64-encoded IV (initialization vector). The server will return AES-encrypted content.Example: GET /tx
Python
Golang
Java
TypeScript
Example: POST /tx/pay-in
Python
Golang
Java
TypeScript
Response Decryption
Python
Golang
Java
TypeScript