Ping He mrpinghe

mrpinghe / auth.js

Last active August 23, 2023 21:17

Veracode custom HMAC request signing algorithm (used for API authorization)

	var crypto = require('crypto');

	const id = process.env.API_ID; // your API ID, reading from environment variable
	const key = process.env.KEY; // your API key, reading from environment variable

	const preFix = "VERACODE-HMAC-SHA-256";
	const verStr = "vcode_request_version_1";

	var resthost = "api.veracode.com"; // rest host
	var xmlhost = "analysiscenter.veracode.com"; // xml host