Quickstart

#!/usr/bin/env bash
set -euo pipefail

BASE_URL="https://api.stablemint.net"
METHOD="GET"
PATH_ONLY="/v1/accounts"

TIMESTAMP=$(date +%s)
NONCE=$(uuidgen | tr '[:upper:]' '[:lower:]')
# SHA-256 of an empty body.
BODY_HASH="e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"

# Seven fields, LF-joined. printf gives us real newlines, not literal \n.
CANONICAL=$(printf '%s\n%s\n%s\n%s\n%s\n%s\n%s' \
  "$METHOD" "$PATH_ONLY" "" "$TIMESTAMP" "$NONCE" "$STABLEMINT_API_SECRET" "$BODY_HASH")

SIGNATURE=$(printf '%s' "$CANONICAL" \
  | openssl dgst -sha256 -sign <(printf '%s' "$STABLEMINT_PRIVATE_KEY") \
  | openssl base64 -A)

curl -sS "${BASE_URL}${PATH_ONLY}" \
  -H "ApiKey: ${STABLEMINT_API_KEY}" \
  -H "Timestamp: ${TIMESTAMP}" \
  -H "Nonce: ${NONCE}" \
  -H "Signature: ${SIGNATURE}"

import crypto from 'node:crypto';

const BASE_URL = 'https://api.stablemint.net';
const path = '/v1/accounts';

const timestamp = Math.floor(Date.now() / 1000).toString();
const nonce = crypto.randomUUID();
const bodyHash = crypto.createHash('sha256').update('', 'utf8').digest('hex');

const canonical = [
  'GET',
  path,
  '', // no query string
  timestamp,
  nonce,
  process.env.STABLEMINT_API_SECRET,
  bodyHash,
].join('\n');

const signature = crypto
  .sign('sha256', Buffer.from(canonical, 'utf8'), {
    key: process.env.STABLEMINT_PRIVATE_KEY,
    padding: crypto.constants.RSA_PKCS1_PADDING,
  })
  .toString('base64');

const response = await fetch(BASE_URL + path, {
  headers: {
    ApiKey: process.env.STABLEMINT_API_KEY,
    Timestamp: timestamp,
    Nonce: nonce,
    Signature: signature,
  },
});

console.log(response.status, await response.json());