API Management

Verify HMAC Code

To verify the HMAC code generated using the HMAC code policy.

image-20250403-043558.png

Configuration

Property

Description

Key Source

The key to decode and compare messages.

Configure the Message Part Identifier with the source as Header/Query Parameter/Context Variable/Constant.

Algorithm

The function used to identify an HMAC policy.

The same algorithm used to compute the HMAC hash can be used here.

Algorith can be configured unlike in the HMAC Code policy where the hash function is selected from the options available in the drop-down.

Example

  • Key Source:

    • Type: Header

    • Name: secret1

    • Default Value: example_secret_key

  • Algorithm:

    • Type: Header

    • Name: algo

    • Default Value: HmacSHA256

Refer to the Configuring an HMAC policy to understand how to use the policy.