Profiles API and HMAC authorization¶

Based on Personalization account configuration, API calls may require HMAC authentication as a header within the request. HMAC is a keyed-hash authentication code that calculates a message authentication code (MAC) involving a cryptographic hash function in combination with a secret cryptographic key.

This authentication scheme protects your data and ensures that your secret keys stay secure, and utilizes the Access Key ID and secret access key associated with your Personalization subscription.

Acquia has HMAC implementation scripts in several languages, including the following:

• HTTP HMAC Signer for Ember

• HTTP HMAC Signer for Go

• HTTP HMAC Signer for JavaScript

• HTTP HMAC Signer for PHP

• HTTP HMAC Signer for Ruby

Profiles API calls support authentication with both HMAC v2 and HMAC v1.

• Personalization HMAC v2 authorization (recommended)

• Personalization HMAC v1 authorization