On This Page

Recent Revisions to This Document

25.03

Updated the link in step 6 and added steps about using the JSON Web Token. See Construct Messages Using JSON Web Tokens.

Updated the description of the signature keyid. See Update Header Fields.

Added testing information in an important note in the Secure Communication Requirements section. See Overview of Getting Started with REST.

Added information about the purposes of a sandbox account in the Sign Up for a Sandbox Account sections. See:

JSON web token messaging implementation: Sign Up for a Sandbox Account

HTTP signature messaging implementation: Sign Up for a Sandbox Account

This revision contains only editorial changes and no technical updates.

Fixed error in the JWE token for message level encryption (MLE). See Message-Level Encryption Using JSON Web Tokens.

Fixed signature header parameter "keyid" typo. See Update Header Fields.

Removed support for message level encryption (MLE) when setting up an HTTP signature message. See Set Up HTTP Signature Message.

This update contains editorial changes.

The guide has undergone a major reorganization.

Corrected typo.: Updated the creating validation string example for generating an HTTP signature hash using the
\n
newline switch. For more information, see Construct Messages Using HTTP Signature Security.

Updated JSON Web Token Construction: Updated the Constructing Messages Using JSON Web Tokens Section.
Minor update to Message Level Encryption: Added note to Enabling MLE Encryption about the P12 certificate.

Update token signature to use the Key ID (kid).: Replaced x5c signature with kid when creating a token signature.
Added Message Level Encryption: Message Level Encryption (MLE) was added to the guide. See Construct Messages Using HTTP Signature Security