Skip to main content

JWT Requirements

Your JWT must meet the following specifications:
  • Algorithm: HS256 (HMAC SHA-256)
  • Signature: Created using SHA-256 hash
  • Expiration: Short-lived token (60 seconds)

Creating the Signature

Before generating the JWT, you need to create a signature:

JWT Payload Structure

Your JWT payload must include:
Important Notes:
  • All datetime values must be in GMT format
  • The expiration time (exp) must be set to current time + 60 seconds (in milliseconds)

Generating the JWT

Use your Enc Key to sign the JWT:

Using the JWT in Requests

Include the JWT in your API requests:

Troubleshooting

If you encounter authentication errors:
  • Verify your Auth Key and Enc Key are correct and active
  • Check that your system clock is synchronized (JWT validation is time-sensitive)
  • Ensure all required payload fields are present and correctly formatted
  • Verify that your signature is being generated correctly