Undefined index: apikey

🙋 Help
1

Hello, I’m trying to send a POST request and I receive following error:

{
“status”: “error”,
“timestamp”: 1566398098,
“error”: {
“code”: 0,
“message”: “Undefined index: apikey”
}
}

I tried to put my apikey like headers and also directly in the URL adding it like parameter but the error is still the same, where I’m wrong?

2

Hi @William_88,

Welcome to the Postman community! Have you navigated to the Authorization tab as shown in the below screenshot and selecting the Type as API Key and entered the apikey values?

addAPIKey
addAPIKey2880Ă—1800 357 KB

3

Hey @William_88,

Without knowing more about the API you’re using, it’s just going to be a guessing game as to where that api key needs to be placed.

Is this a public API that has some documentation that you can share?

4

Hello, thank you for the answer.
See below what say the documentation about the authentication:

Example of request authentication:

apikey=c3KJ7M5jw8SKSrq3QnKA8D7DHZCpwSlx&nonce=1455036025843&apisignature=9a6729684c40a7c66892782cc3b0426833e699a1b77e1a5b44d63d82ba83667

Where parameters are:

apikey - Your key generated in your account
nonce - current unix timestamp
apisignature - signature (digest) of the request params passed through HMAC-SHA256

To generate the apisignature, you have to pass the request payload (i.e. apikey, nonce + request parameters) through hash method using the secret key provided from the UI

And below an example in Javascript:

<script src="https://cdnjs.cloudflare.com/ajax/libs/crypto-js/3.1.2/rollups/hmac-sha256.js"></script>
<script>
    var xhr = new XMLHttpRequest(),
        secret = 'aefij3ldaase_ase23fdAdwjnA2123fFa',
        body = 'apikey=' + 'dgsdrij234fsdfgkhr' + '&nonce=' + Date.now();

    var signature = CryptoJS.HmacSHA256(body, secret);

    xhr.open('POST', 'https://www.account.com/api/offer/list');
    xhr.setRequestHeader('Content-Type', 'text/plain');
    xhr.setRequestHeader('Accept', 'application/json');  
    xhr.send(body + '&apisignature=' + signature);    
</script>

I already tried something that not require authentication and it worked but no result when is required the authentication.