Reference Guide

Example
When sending the following API request:
POST /ZendServer/Api/findTheFish HTTP/1.1
Host: zscm.local:10081
User-agent: Zend_Http_Client/1.10
Accept: application/vnd.zend.serverapi+xml;version=1.0
Date: Sun, 11 Jul 2010 13:16:10 GMT
Content-type: application/x-www-form-urlencoded
Content-length: 19
lookInCupboard=TRUE
Using a key named “angel.eyes” with the following value:
Web API Reference Guide
9dc7f8c5ac43bb2ab36120861b4aeda8f9bb6c521e124360fd5821ef279fd9c7
The request parameters to be signed, concatenated into a string is:
zscm.local:10081:/ZendServer/Api/findTheFish:Zend_Http_Client/1.10
: Sun, 11 Jul 2010 13:16:10 GMT
From this value, an HMAC/SHA-256 signature will be calculated using the API
key. For example using the hash_hmac() PHP function:
785be59b7728b1bfd6495d610271c5d47ff0737775b09191daeb5a728c2d97c0
The final request, including the added X-Zend-Signature header, is (lines are
broken for readability):
POST /ZendServer/Api/findTheFish HTTP/1.1
Host: zscm.local:10081
User-agent: Zend_Http_Client/1.10
Accept: application/vnd.zend.serverapi+xml;version=1.0
Date: Sun, 11 Jul 2010 13:16:10 GMT
Content-type: application/x-www-form-urlencoded
Content-length: 19
X-Zend-Signature: angel.eyes;
785be59b7728b1bfd6495d610271c5d47ff0737775b09191daeb5a728c2d97c0
lookInCupboard=TRUE
The server then proceeds to generate the same signature, based on the same data and same secret key.
If the two signatures match, the request will be accepted.
341