HTTP Signature Authentication (Personal Token)

HTTP Signature Authentication is a method of signing HTTP requests to authenticate requests without sending the API key in the request.

Rampable uses asymmetric key encryption to sign requests. The client will generate a signature using their private key and Rampable will use the client's public key to validate the signature.

You need to generate the keys directly from Rampable Dashboard under API keys section

const sdk = new XellarSDK({
  clientSecret: 'your-client-secret',
  env: 'sandbox | production',
  rampable: {
    clientId: 'your-client-id',
    privateKey: 'your-private-key',
  },
});

Learn more about HTTP Signature Authentication (Personal Token) (opens in a new tab)