Node.js encryption and signature example

Dependencies

Uses the Node.js standard library (crypto), no additional dependencies required.

Generate Signature: Use the generateSignature() method and pass in HTTP method, path, timestamp, nonce, and raw JSON body

Encrypt Request Body: Use the encryptBody() method and pass in raw JSON, App ID, and apiDataKey

Sort Query String: Use the sortQueryString() method to sort query parameters

Generate Nonce: Use the generateNonce() method to generate a random string

The body used in the signature must always be the original JSON string before encryption (even when X-Enc = aes-gcm-v1 is set)

apiDataKey must be a Base64-encoded 32-byte key

The timestamp must be a Unix timestamp in milliseconds (13-digit number)

Content-Type: use application/octet-stream for encrypted requests, and application/json for plaintext

In Node.js, cipher.getAuthTag() can only be retrieved after calling final()