Tools
Signature Debug Tool

Signature Debug Tool

API Signature Debug Tool

Test and verify API signatures for debugging integration issues

Configuration

Request Details

Note: Query strings are NOT included in HMAC signature generation

Generated Request Headers

Signature Format (Per YGG Redeem Documentation)

Payload to sign: method + path + X-API-REQUEST + stringify(body)

  • method: HTTP method (GET, POST, etc.)
  • path: Request path (e.g., /api/v1/points)
  • X-API-REQUEST: UUIDv7 from header
  • body: JSON stringified with sorted keys (empty string for GET requests)
  • ⚠️ Query strings are NOT included in signature
X-API-KEY:Not set
X-API-REQUEST:
X-API-SIGNATURE:
Click 'Generate Signature' to create

How to Use

  1. Configure your credentials: Enter your API key and shared secret key
  2. Set request details: Choose HTTP method, path, and add query parameters
  3. Add request body: Include any JSON payload if needed
  4. Generate signature: The tool will automatically generate the required headers
  5. Make the request: Test your API call and verify the response signature

Signature Generation

The tool generates signatures using the following algorithm:

  • Combines method, path, query string, request body, and timestamp
  • Creates a HMAC-SHA256 hash using your shared secret
  • Includes the signature in the X-API-SIGNATURE header

Response Verification

For successful responses (status 200), the API will return an X-API-SIGNATURE header that you can verify against your own signature generation to ensure consistency.