Quote from: starmyc on March 31, 2018, 08:06:47 AM

Quote from: w_t on March 31, 2018, 06:19:44 AM

Code:

$message = $timestamp . 'GET' . 'https://www.mysite.it' . $body;
$signature = hash_hmac('SHA256', $message, $API_SECRET);

I did only take a quick look, but this seems wrong to me. According to the documentation, the "message" string must contain the path + params (eg: "/v2/exchange-rates?currency=USD"), not the complete url. If your complete url is "http://www.mysite.it/", then the request path you need to use is only "/".

Excuse me if I do not understand,

my full URL what do you mean?
The redirect address that I put during the registration of my account?