Overview
HMAC (Hash-based Message Authentication Code) authentication is a powerful method to secure your API endpoints. It ensures that data integrity is maintained and that only authorized clients can access your resources. With HMAC authentication, you can enhance the security of your API and confidently share your services with the world, keeping malicious agents at bay.
Register HMAC
To register the HMAC, the client should follow the steps:
1. Access the site bellow (or similar) and Generate the key:
https://www.geradordesenha.com.br/
Best practices: It is recommended that this key be 256 characters long and include numbers, uppercase, and lowercase letters. This key will be used to sign the messages sent to E2. Keep the key secure and do not share it with anyone.
2. Send the HMAC Key to the team via email
The HMAC key will be mandatory for sensitive transactions, such as Pix cash out and Pix cash in (Pix copy and paste), providing an additional layer of protection.