Skip to main content
jaij
February 13, 2023
Question

Integration with a system using HMAC SHA 256 Algorithm via Authorization Header

  • February 13, 2023
  • 5 replies
  • 0 views

I have an integration requirement where the system to which I want to connect Appian with needs an Authorization Header which is in the format as:

Signature keyId="<8>-<4>-<4>-<4>-<12>",algorithm="hmac-sha256",headers="(request-target) host date",signature=”**”

Has anyone done this kind of integration?

Note: The swagger provided doesnt have any authentication details in it.

5 replies

stefanhelzle0001
February 13, 2023

We did something similar already a few times. You need the below plugin to create the signature. Then you will get into a longer trial-and-error period trying to figure out how exactly to build the signature and encrypt it. Our two main issues where: format of the timestamp, format/encoding of the provided key.

It helps a lot to get some working example code, including a working example key and expected outcome and all intermediary steps.

community.appian.com/.../cryptography-hash-functions

jaij
jaijAuthor
February 13, 2023

Thanks Stefan for the response. I did download the plugin and was struggling to use the correct function. Is there any implementation which I can have a look at? Sample code may be. Is this the function: hmacsha256hash() and if yes, what should be the Key and Data parameters to be passed.

Note: I do have the API Key and API Secret being given to me. Also I am able to hit the API using Postman

stefanhelzle0001
February 13, 2023

This is what I cannot really help you as is depends on all the gory details. Try to understand the configuration in Postman and reverse engineer it. We had to do this as well.