Authentication

The Lesspay API uses a digital signature mechanism to ensure that the request has not been tampered with during transmission and to verify the identity of the requester.

Overview

Every API request must include specific authentication headers. The signature is generated by signing the request content using your AppID and appSecret.

Request Headers

Header Name	Required	Description	Example
`x-auth-appid`	Yes	Your App ID	`690b2b46e4b09c73147db688`
`X-Auth-Timestamp`	Yes	Request timestamp (milliseconds)	`1630000000000`
`x-auth-signature`	Yes	The generated signature string	`CFCC2A...`

2. Signature Algorithm (SHA256)

Step 1: Prepare Parameters

Collect all top-level parameters from your JSON request body.

Note: Recursively handle nested JSON objects if they differ from the standard flat structure, but for the signature string preparation, we generally flatten the structure or follow the specific rule: key={json_value} for nested objects.

Exclude keys with empty values (null or "").

Step 2: Sort and Concatenate

Sort: Sort the parameters by key name in ASCII (lexicographical) order.

Concatenate: Join the parameters in the format key1=value1&key2=value2.

Append Key: Append your appSecret to the end of the string using the format &key=YOUR_SECRET_KEY.

Example:
Assume your appSecret is Wy31kFZf4jkE+Y2XZhmFuQ and request parameters are:

{
    "target_currency": "USDT",
    "target_amount": 100,
    "transaction_type": "PAY_IN"
}

Sorted String:
target_amount=100&target_currency=USDT&transaction_type=PAY_IN

Final String to Sign:
target_amount=100&target_currency=USDT&transaction_type=PAY_IN&key=Wy31kFZf4jkE+Y2XZhmFuQ

Step 3: Hash and Uppercase

Hash: Calculate the SHA256 hash of the Final String.

Uppercase: Convert the resulting hash string to hexadecimal uppercase.

Signature = Uppercase(SHA256(FinalString))

Overview

Request Headers

2. Signature Algorithm (SHA256)

Step 1: Prepare Parameters

Step 2: Sort and Concatenate

Step 3: Hash and Uppercase

3. Code Examples

Java

Authentication

Overview#

Request Headers#

2. Signature Algorithm (SHA256)#

Step 1: Prepare Parameters#

Step 2: Sort and Concatenate#

Step 3: Hash and Uppercase#

3. Code Examples#

Java#

Overview

Request Headers

2. Signature Algorithm (SHA256)

Step 1: Prepare Parameters

Step 2: Sort and Concatenate

Step 3: Hash and Uppercase

3. Code Examples

Java