SignatureCheck: API-Zugangsdaten prüfen

curl --request GET \
  --url "https://api.pay.flowalp.com/v1.16/SignatureCheck/?instance=<instance>" \
  --header "x-api-key: <api-secret>"

API_SECRET="<api-secret>"

# HMAC-SHA256 of the empty parameter string, Base64-encoded
SIGNATURE=$(printf '' \
  | openssl dgst -sha256 -hmac "$API_SECRET" -binary \
  | openssl enc -base64)

curl --get \
  --url "https://api.pay.flowalp.com/v1.16/SignatureCheck/" \
  --data-urlencode "instance=<instance>" \
  --data-urlencode "ApiSignature=$SIGNATURE"

<?php
$instance  = getenv('FLOWALP_PAY_INSTANCE');
$apiSecret = getenv('FLOWALP_PAY_API_SECRET');

$ch = curl_init(
    'https://api.pay.flowalp.com/v1.16/SignatureCheck/?instance=' . urlencode($instance)
);
curl_setopt($ch, CURLOPT_HTTPHEADER, ['x-api-key: ' . $apiSecret]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

$body   = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
curl_close($ch);

$result = json_decode($body, true);

if ($status === 200 && ($result['status'] ?? null) === 'success') {
    echo "Credentials OK\n";
} else {
    echo "Check failed: HTTP {$status} - {$body}\n";
}

{
  "status": "success",
  "data": [
    {
      "id": 1
    }
  ]
}