Errors and Best Practices

Common error codes

• 400: invalid parameters
• 401: missing or invalid authentication
• 404: resource not found
• 500: server-side failure

Troubleshooting checklist

1. Verify that the signing parameters are complete.
2. Verify that the private key matches the current user.
3. Verify that the timestamp is within the allowed time window.
4. Verify that JSON body hashing uses the exact payload sent.
5. Verify that referenced IDs actually exist.

Integration recommendations

• Keep private keys only on the server side.
• Add timeout, retry, and structured logging around API requests.
• Record request body digests for POST and PUT to simplify signature debugging.
• Centralize signing logic in production instead of implementing it in multiple services.