Help Center/ KooDrive/ API Reference/ Appendixes/ App-based Authentication Generation Rule/ Step 4: Add the Signature to the Request Header
Updated on 2025-10-16 GMT+08:00
View PDF
Share

Step 4: Add the Signature to the Request Header

Add the signature to the Authorization HTTP header. The Authorization header is used for identity authentication and not included in the SignedHeaders. The format is as follows:

Authorization:<Algorithm> AppId=<appId>,SignedHeaders=<SignedHeaders>,Signature=<Signature>

Description:

  • Algorithm: signature algorithm. For SHA-256, the algorithm is HMAC-SHA256.
  • There is a space between Algorithm and AppId. AppId and SignedHeaders are separated by a comma (,).
  • SignedHeaders indicates the request headers to be signed. Each header is separated by a semicolon (;). SignedHeaders and Signature are separated by a comma (,).
  • Signature: signature calculated in step 3.