Quickstart

import hashlib
import hmac
import json
import os
import secrets
import time
import urllib.request

key = os.environ["VANTAGE_API_KEY"]
origin = os.environ["VANTAGE_API_ORIGIN"].rstrip("/")
method = "POST"
path = "/api/v1/loans/quotes"
body = json.dumps({
    "amount_ngn": "100.00",
    "tenor_days": 1,
    "collateral_asset": "USDC",
    "loan_asset": "cNGN",
    "external_id": "loan-test-001",
}, separators=(",", ":")).encode()

timestamp = str(int(time.time()))
nonce = secrets.token_urlsafe(24)
body_hash = hashlib.sha256(body).hexdigest()
canonical = "\n".join([method, path, timestamp, nonce, body_hash]).encode()
signature = hmac.new(key.encode(), canonical, hashlib.sha256).hexdigest()

request = urllib.request.Request(origin + path, data=body, method=method, headers={
    "Content-Type": "application/json",
    "Idempotency-Key": "quote-test-001",
    "X-API-Key": key,
    "X-Timestamp": timestamp,
    "X-Nonce": nonce,
    "X-Signature": signature,
})

with urllib.request.urlopen(request, timeout=30) as response:
    print(json.load(response))

import crypto from "node:crypto";

const key = process.env.VANTAGE_API_KEY!;
const origin = process.env.VANTAGE_API_ORIGIN!.replace(/\/$/, "");
const method = "POST";
const path = "/api/v1/loans/quotes";
const body = JSON.stringify({
  amount_ngn: "100.00",
  tenor_days: 1,
  collateral_asset: "USDC",
  loan_asset: "cNGN",
  external_id: "loan-test-001",
});

const timestamp = Math.floor(Date.now() / 1000).toString();
const nonce = crypto.randomBytes(18).toString("base64url");
const bodyHash = crypto.createHash("sha256").update(body).digest("hex");
const canonical = [method, path, timestamp, nonce, bodyHash].join("\n");
const signature = crypto.createHmac("sha256", key).update(canonical).digest("hex");

const response = await fetch(origin + path, {
  method,
  headers: {
    "Content-Type": "application/json",
    "Idempotency-Key": "quote-test-001",
    "X-API-Key": key,
    "X-Timestamp": timestamp,
    "X-Nonce": nonce,
    "X-Signature": signature,
  },
  body,
});

console.log(response.status, await response.json());

method='POST'
path='/api/v1/loans/quotes'
body='{"amount_ngn":"100.00","tenor_days":1,"collateral_asset":"USDC","loan_asset":"cNGN","external_id":"loan-test-001"}'
timestamp="$(date +%s)"
nonce="$(openssl rand -hex 18)"
body_hash="$(printf '%s' "$body" | openssl dgst -sha256 -binary | xxd -p -c 256)"
canonical="$(printf '%s\n%s\n%s\n%s\n%s' "$method" "$path" "$timestamp" "$nonce" "$body_hash")"
signature="$(printf '%s' "$canonical" | openssl dgst -sha256 -hmac "$VANTAGE_API_KEY" -binary | xxd -p -c 256)"

curl --request "$method" "$VANTAGE_API_ORIGIN$path" \
  --header 'Content-Type: application/json' \
  --header 'Idempotency-Key: quote-test-001' \
  --header "X-API-Key: $VANTAGE_API_KEY" \
  --header "X-Timestamp: $timestamp" \
  --header "X-Nonce: $nonce" \
  --header "X-Signature: $signature" \
  --data "$body"