homail
Sign inCreate account

Request signing HMAC

Build the request signature correctly.

You only need this page if you are not using the SDK. Request signing uses HMAC (Hash-based Message Authentication Code). In practice, you build a standard text string from the request and sign it with your secret.

Canonical string

text
POST
/api/v1/emails
<unix-seconds>
<nonce>
<sha256-hex-of-raw-body>

Checks homail performs

  • The signature format is valid
  • The timestamp is still fresh
  • The nonce has not already been used
  • The signature matches the exact request body

Previous

Authentication model

Next

Send email endpoint