API Specification - Cards API

To ensure security and verify the sender's identity, all open API requests are authenticated using SHA256WithRSA.Both the requester and the receiver must whitelist each other's IP addresses to prevent unauthorized access.

Lowercase Parameters and URLs: All parameter names and URLs should be in lowercase.

Time Zone: All date and time used in the API must be in UTC. Requesters need to convert their date and time to UTC when using the API.

Unix Timestamp: All time and date-related data in the API use Unix timestamps (in seconds).

JSON Format: The request body must be in JSON format unless specified otherwise. Use Content-Type: application/json.

Parameter Name	Type	Required	Description
timestamp	long	true	Unix timestamp (in second)
nonce	string	true	Random 10 characters string
customerToken	string	true	The customer token is generated by the Arth Merchant Platform for merchant identification.
signature	string	true	Signature of request body + header request