Signature Debug Tool
API Signature Debug Tool
Test and verify API signatures for debugging integration issues
Configuration
Request Details
Note: Query strings are NOT included in HMAC signature generation
Generated Request Headers
Signature Format (Per YGG Redeem Documentation)
Payload to sign: method + path + X-API-REQUEST + stringify(body)
- method: HTTP method (GET, POST, etc.)
- path: Request path (e.g., /api/v1/points)
- X-API-REQUEST: UUIDv7 from header
- body: JSON stringified with sorted keys (empty string for GET requests)
- ⚠️ Query strings are NOT included in signature
X-API-KEY:Not set
X-API-REQUEST:
X-API-SIGNATURE:
How to Use
- Configure your credentials: Enter your API key and shared secret key
- Set request details: Choose HTTP method, path, and add query parameters
- Add request body: Include any JSON payload if needed
- Generate signature: The tool will automatically generate the required headers
- Make the request: Test your API call and verify the response signature
Signature Generation
The tool generates signatures using the following algorithm:
- Combines method, path, query string, request body, and timestamp
- Creates a HMAC-SHA256 hash using your shared secret
- Includes the signature in the
X-API-SIGNATUREheader
Response Verification
For successful responses (status 200), the API will return an X-API-SIGNATURE header that you can verify against your own signature generation to ensure consistency.