truelayer-signing

Produce & verify TrueLayer API requests signatures


Keywords
truelayer
Licenses
MIT/Apache-2.0

Documentation

truelayer-signing

Convenient libraries to produce TrueLayer API requests signatures.

Request signatures are created using a private key and included with certain API requests. They can then be verified using the associated public key.

Request signing specification

See request-signing-v2.md for an explanation of how request signing is implemented.

Webhook signature verification

TrueLayer webhooks include a Tl-Signature header similar to request signatures but signed by a TrueLayer private key. See per-language examples on how to properly verify webhooks.

Contributing

Contributions are always welcome!

See our contributing guide and our wiki.

Please adhere to this project's code of conduct.

License

Licensed under either of Apache License, Version 2.0 or MIT license at your option.
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.