Signature from API Get Method

For API that uses GET method such as, Check Status API, merchant don't need to generate a Digest.

Arrange the signature components to one component and its value per line by adding escape character. Don't add at the end of the string. Sample of the raw format:

This is how merchant see it :

Calculate HMAC-SHA256 base64 from all the components above using the Secret Key from DOKU Back Office.

Put encoded value and prependHMACSHA256= to the Signature Sample:

Modified at 2026-02-02 04:41:55

Signature Component from Response Header

Sample Code