Coinbase API - Cannot POST

Question

这是怎么回事?为什么我不能发布购买信息?我一直得到401未经授权。API有正确的权限(wallet:buys:create)

我应该指出，我的get工作，我可以读取帐户中的所有信息。

$time = 'https://api.coinbase.com/v2/time'
$epochtime = [string]((Invoke-WebRequest $time | ConvertFrom-Json).data).epoch
$method = 'POST'
$requestpath = '/v2/accounts/xxxxxxxx-3ecb-xxxxxxxx-xxxxxxxx/buys'
$endpoint = "https://api.coinbase.com/$($requestpath)"
$secret_key = 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'
$sign = $epochtime + $method + $requestpath
$hmacsha = New-Object System.Security.Cryptography.HMACSHA256
$hmacsha.key = [Text.Encoding]::UTF8.GetBytes($secret_key)
$computeSha = $hmacsha.ComputeHash([Text.Encoding]::UTF8.GetBytes($sign))
$signature = ([System.BitConverter]::ToString($computeSha) -replace "-").ToLower()
$header = @{
"CB-ACCESS-SIGN"=$signature
"CB-ACCESS-TIMESTAMP"=$epochtime
"CB-ACCESS-KEY"='xxxxxxxxxxxxxxxxxxxx'
}
$body = '{"amount": "10", "currency": "XLM", "payment_method": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx", "commit": "true", "quote":"false"}'
function Get-CoinBase($method, $endpoint, $header, $body)
{
$result = Invoke-WebRequest $endpoint -Headers $header -Method $method -body $body -ContentType "application/json" -UseBasicParsing
write-host $APImethod -f yellow
return $result
}
$AccountBAL = Get-CoinBase -method "POST" -endpoint $endpoint -header $header -body $body

Answer 1

我之前漏掉了，您没有在散列中包含body。当你签名时，你需要包括正文选项。

$sign = $epochtime + $method + $requestpath

应该

$sign = $epochtime + $method + $requestpath + $body

这是他们的例子

var message = timestamp + req.method + req.path + req.body;
//create a hexedecimal encoded SHA256 signature of the message
var signature = crypto.createHmac("sha256", apiSecret).update(message).digest("hex");