truelayer-signing
Convenient libraries to produce TrueLayer API requests signatures.
Request signatures are created using a private key and included with certain API requests. They can then be verified using the associated public key.
Request signing specification
See request-signing-v2.md for an explanation of how request signing is implemented.
Webhook signature verification
TrueLayer webhooks include a Tl-Signature
header similar to request signatures but signed by a TrueLayer private key.
See per-language examples on how to properly verify webhooks.
Contributing
Contributions are always welcome!
See our contributing guide and our wiki.
Please adhere to this project's code of conduct.
License
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.