API Documentation

API_KEY="YOUR_API_KEY"
API_SECRET="YOUR_API_SECRET"
TS=$(date +%s)
NONCE=$(head -c16 /dev/urandom | xxd -p)
BODY='{"amount":"500.00"}'
BODY_HASH=$(printf '%s' "$BODY" | sha256sum | cut -d' ' -f1)
SIG=$(printf 'API_KEY
%s
%s
%s
%s
%s' "$TS" "$NONCE" "POST" "/api/v1/deposits" "$BODY_HASH" | openssl dgst -sha256 -hmac "$API_SECRET" -hex | sed 's/^.* //')
curl -X POST https://wallet.growzylabs.in/api/v1/deposits \
  -H "Content-Type: application/json" \
  -H "X-GROWZY-KEY: $API_KEY" \
  -H "X-GROWZY-TIMESTAMP: $TS" \
  -H "X-GROWZY-NONCE: $NONCE" \
  -H "X-GROWZY-SIGNATURE: $SIG" \
  -H "Idempotency-Key: order-1234" \
  -d "$BODY"

<?php
$apiKey = 'YOUR_API_KEY';
$secret  = 'YOUR_API_SECRET';
$ts      = time();
$nonce   = bin2hex(random_bytes(16));
$body    = json_encode(['amount' => '500.00']);
$method  = 'POST';
$path    = '/api/v1/deposits';
$canonical = $apiKey."\n".$ts."\n".$nonce."\n".$method."\n".$path."\n".hash('sha256', $body);
$sig = hash_hmac('sha256', $canonical, $secret);
$ch = curl_init('https://wallet.growzylabs.in'.$path);
curl_setopt_array($ch, [
  CURLOPT_POST => true,
  CURLOPT_POSTFIELDS => $body,
  CURLOPT_HTTPHEADER => [
    'Content-Type: application/json',
    'X-GROWZY-KEY: '.$apiKey,
    'X-GROWZY-TIMESTAMP: '.$ts,
    'X-GROWZY-NONCE: '.$nonce,
    'X-GROWZY-SIGNATURE: '.$sig,
    'Idempotency-Key: order-1234',
  ],
  CURLOPT_RETURNTRANSFER => true,
]);
print_r(json_decode(curl_exec($ch), true));

import hashlib, hmac, json, os, time, requests

api_key = 'YOUR_API_KEY'
secret  = 'YOUR_API_SECRET'
ts      = str(int(time.time()))
nonce   = os.urandom(16).hex()
body    = json.dumps({'amount': '500.00'})
path    = '/api/v1/deposits'
canonical = '\n'.join([api_key, ts, nonce, 'POST', path, hashlib.sha256(body.encode()).hexdigest()])
sig = hmac.new(secret.encode(), canonical.encode(), hashlib.sha256).hexdigest()
r = requests.post('https://wallet.growzylabs.in' + path, data=body, headers={
    'Content-Type': 'application/json',
    'X-GROWZY-KEY': api_key,
    'X-GROWZY-TIMESTAMP': ts,
    'X-GROWZY-NONCE': nonce,
    'X-GROWZY-SIGNATURE': sig,
    'Idempotency-Key': 'order-1234',
})
print(r.json())

const crypto = require('crypto');
const apiKey = 'YOUR_API_KEY';
const secret  = 'YOUR_API_SECRET';
const ts = Math.floor(Date.now() / 1000).toString();
const nonce = crypto.randomBytes(16).toString('hex');
const body = JSON.stringify({ amount: '500.00' });
const path = '/api/v1/deposits';
const canonical = [apiKey, ts, nonce, 'POST', path,
  crypto.createHash('sha256').update(body).digest('hex')].join('\n');
const sig = crypto.createHmac('sha256', secret).update(canonical).digest('hex');
fetch('https://wallet.growzylabs.in' + path, {
  method: 'POST', body,
  headers: {
    'Content-Type': 'application/json',
    'X-GROWZY-KEY': apiKey, 'X-GROWZY-TIMESTAMP': ts,
    'X-GROWZY-NONCE': nonce, 'X-GROWZY-SIGNATURE': sig,
    'Idempotency-Key': 'order-1234',
  },
}).then(r => r.json()).then(console.log);

<?php
$payload = file_get_contents('php://input');
$header  = $_SERVER['HTTP_X_GROWZY_SIGNATURE'] ?? '';
[$t, $v1] = [null, null];
foreach (explode(',', $header) as $part) {
    [$k, $v] = array_pad(explode('=', trim($part), 2), 2, null);
    if ($k === 't') $t = $v; if ($k === 'v1') $v1 = $v;
}
$expected = hash_hmac('sha256', $t.'.'.$payload, 'YOUR_WEBHOOK_SECRET');
if (!hash_equals($expected, $v1 ?? '') || abs(time() - (int)$t) > 300) {
    http_response_code(400); exit;
}
$event = json_decode($payload, true);
// de-duplicate on $event['event_id'], then fulfill order