Herald API Documentation

import hmac
import hashlib
import time
import json
import requests

API_KEY = 'your_api_key'
API_SECRET = 'your_api_secret'
BASE_URL = 'https://mykxtqnal.herald.exchange'

def generate_signature(method, path, timestamp, body):
    payload = f"{method}\n{path}\n{timestamp}\n{body}"
    signature = hmac.new(
        API_SECRET.encode('utf-8'),
        payload.encode('utf-8'),
        hashlib.sha256
    ).hexdigest()
    return signature

def create_wallet(user_id, networks):
    method = 'POST'
    path = '/api/v1/wallets/generate'
    timestamp = str(int(time.time()))

    body_dict = {
        'user_id': user_id,
        'network_type': ','.join(networks)
    }
    body = json.dumps(body_dict, separators=(',', ':'))

    signature = generate_signature(method, path, timestamp, body)

    headers = {
        'X-API-Key': API_KEY,
        'X-API-Secret': API_SECRET,
        'X-API-Timestamp': timestamp,
        'X-API-Signature': signature,
        'Content-Type': 'application/json'
    }

    response = requests.post(
        f'{BASE_URL}{path}',
        json=body_dict,
        headers=headers
    )

    return response.json()

# Usage
result = create_wallet('user_123', ['ETH', 'BNB'])
print(result)

# Generate signature using bash
TIMESTAMP=$(date +%s)
METHOD="POST"
PATH="/api/v1/wallets/generate"
BODY='{"user_id":"user_123","network_type":"ETH,BNB"}'
API_SECRET="your_api_secret"

PAYLOAD="${METHOD}\n${PATH}\n${TIMESTAMP}\n${BODY}"
SIGNATURE=$(echo -n -e "$PAYLOAD" | openssl dgst -sha256 -hmac "$API_SECRET" | cut -d' ' -f2)

# Make the API request
curl -X POST "https://mykxtqnal.herald.exchange/api/v1/wallets/generate" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: your_api_key" \
  -H "X-API-Secret: your_api_secret" \
  -H "X-API-Timestamp: $TIMESTAMP" \
  -H "X-API-Signature: $SIGNATURE" \
  -d '{"user_id":"user_123","network_type":"ETH,BNB"}'

import hmac
import hashlib
import time
from flask import Flask, request, jsonify

WEBHOOK_SECRET = 'your_webhook_secret'

def verify_webhook_signature(payload, signature, timestamp, secret_key):
    # Build the signature payload
    signature_payload = f"{timestamp}.{payload}"

    # Calculate expected signature
    expected_signature = hmac.new(
        secret_key.encode('utf-8'),
        signature_payload.encode('utf-8'),
        hashlib.sha256
    ).hexdigest()

    # Compare with received signature (remove 'v1=' prefix)
    received_sig = signature.replace('v1=', '')

    # Use constant-time comparison
    return hmac.compare_digest(expected_signature, received_sig)

app = Flask(__name__)

@app.route('/webhook', methods=['POST'])
def webhook_handler():
    signature = request.headers.get('X-Webhook-Signature')
    timestamp = request.headers.get('X-Webhook-Timestamp')
    payload = request.get_data(as_text=True)

    # Verify timestamp is within 5 minutes
    now = int(time.time())
    if abs(now - int(timestamp)) > 300:
        return jsonify({'error': 'Timestamp expired'}), 401

    if not verify_webhook_signature(payload, signature, timestamp, WEBHOOK_SECRET):
        return jsonify({'error': 'Invalid signature'}), 401

    # Process the webhook event
    event = request.json
    print(f"Received event: {event['event_type']}")

    return jsonify({'received': True}), 200