Security & Authentication

To ensure the security and integrity of every transaction, the Spark API requires a two-part authentication process. All requests must identify the sender and include a digital signature to verify that the request body has not been altered.

Authentication Versions

Choose the integration path that matches your project status:

Authentication Version 2.0 (Recommended)

The current standard for all new integrations. This version uses a simplified header-based signature.

Authentication Version 1.0 (Legacy)

Deprecated and intended only for existing integrations. This version involves minifying the JSON body and generating an HMAC signature.