Authentication

#!/bin/bash -ex
API_KEY='ksgJrNOT1...i02V1hLfZs1I'
SECRET='W02cN5UDsF...SJtTyjDtq5SN'

TIMESTAMP="$(($(date +%s) * 1000))"
METHOD="GET"
URL_PATH="/platform/portfolios"
BODY=""

SIGNATURE="$(echo -n "${TIMESTAMP}${METHOD}${URL_PATH}${BODY}" | openssl dgst -sha256 -hmac ${SECRET})"

curl -v "https://api.copper.co${URL_PATH}" \
-H "Authorization: ApiKey ${API_KEY}" \
-H "Content-Type: application/json" \
-H "X-Signature: ${SIGNATURE#*= }" \
-H "X-Timestamp: ${TIMESTAMP}"

import hashlib
import hmac
import requests
import time

ApiKey = 'ksgJrNOT1X...i02V1hLfZs1I'
Secret = 'W02cN5UDsF...SJtTyjDtq5SN'

timestamp = str(round(time.time() * 1000))
method = "GET"
path = "/platform/portfolios"
body = ""

signature = hmac.new(
    key=bytes(Secret, 'utf-8'),
    msg=bytes(timestamp + method + path + body, 'utf-8'),
    digestmod=hashlib.sha256
).hexdigest()

print(signature) # example: 1b6064ca0d052d1a08d831c915ead54e6c5ff17237c845dab8b8c1cb8439a9c1

url = 'https://api.copper.co' + path

resp = requests.get(url, headers={
    'Authorization': 'ApiKey ' + ApiKey,
    'X-Signature': signature,
    'X-Timestamp': timestamp
})

import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import java.nio.charset.StandardCharsets;
import java.util.HexFormat;
import java.net.HttpURLConnection;
import java.net.URL;
import java.io.OutputStream;

public class CopperApiExample {
    public static void main(String[] args) throws Exception {
        String apiKey = "ksgJrNOT1X...i02V1hLfZs1I";
        String secret = "W02cN5UDsF...SJtTyjDtq5SN";
        long timestamp = System.currentTimeMillis();
        String method = "GET";
        String path = "/platform/portfolios";
        String body = "";

        String message = timestamp + method + path + body;
        Mac sha256Hmac = Mac.getInstance("HmacSHA256");
        SecretKeySpec secretKey = new SecretKeySpec(secret.getBytes(StandardCharsets.UTF_8), "HmacSHA256");
        sha256Hmac.init(secretKey);
        String signature = HexFormat.of().formatHex(sha256Hmac.doFinal(message.getBytes(StandardCharsets.UTF_8)));

        URL url = new URL("https://api.copper.co" + path);
        HttpURLConnection connection = (HttpURLConnection) url.openConnection();
        connection.setRequestMethod(method);
        connection.setRequestProperty("Authorization", "ApiKey " + apiKey);
        connection.setRequestProperty("X-Signature", signature);
        connection.setRequestProperty("X-Timestamp", String.valueOf(timestamp));
        connection.setRequestProperty("Content-Type", "application/json");

        int responseCode = connection.getResponseCode();
        System.out.println("Response Code: " + responseCode);
    }
}

import javax.crypto.Mac
import javax.crypto.spec.SecretKeySpec
import java.nio.charset.StandardCharsets
import java.util.HexFormat;
import scalaj.http._

object CopperApiExample extends App {
    val apiKey = "ksgJrNOT1X...i02V1hLfZs1I"
    val secret = "W02cN5UDsF...SJtTyjDtq5SN"
    val timestamp = System.currentTimeMillis().toString
    val method = "GET"
    val path = "/platform/portfolios"
    val body = ""

    val message = timestamp + method + path + body
    val sha256Hmac = Mac.getInstance("HmacSHA256")
    val secretKey = new SecretKeySpec(secret.getBytes(StandardCharsets.UTF_8), "HmacSHA256")
    sha256Hmac.init(secretKey)
    val signature = HexFormat.of().formatHex(sha256Hmac.doFinal(message.getBytes(StandardCharsets.UTF_8)))

    val response = Http("https://api.copper.co" + path)
        .header("Authorization", "ApiKey " + apiKey)
        .header("X-Signature", signature)
        .header("X-Timestamp", timestamp)
        .asString

    println("Response Code: " + response.code)
}

package main

import (
    "crypto/hmac"
    "crypto/sha256"
    "encoding/hex"
    "fmt"
    "net/http"
    "strconv"
    "time"
)

func main() {
    apiKey := "ksgJrNOT1X...i02V1hLfZs1I"
    secret := "W02cN5UDsF...SJtTyjDtq5SN"
    timestamp := strconv.FormatInt(time.Now().UnixNano()/int64(time.Millisecond), 10)
    method := "GET"
    path := "/platform/portfolios"
    body := ""

    message := timestamp + method + path + body
    mac := hmac.New(sha256.New, []byte(secret))
    mac.Write([]byte(message))
    signature := hex.EncodeToString(mac.Sum(nil))

    client := &http.Client{}
    req, _ := http.NewRequest(method, "https://api.copper.co"+path, nil)
    req.Header.Add("Authorization", "ApiKey "+apiKey)
    req.Header.Add("X-Signature", signature)
    req.Header.Add("X-Timestamp", timestamp)
    req.Header.Add("Content-Type", "application/json")

    resp, _ := client.Do(req)
    fmt.Println("Response Code:", resp.StatusCode)
}