SDKs and snippets

const enc = new TextEncoder();
const hex = (b: ArrayBuffer) =>
  [...new Uint8Array(b)].map((x) => x.toString(16).padStart(2, "0")).join("");

export async function signRequest(
  keyHex: string,
  req: { timestamp: number; deliveryId: string; method: string; path: string;
         siteCode?: string; input?: string; body: Uint8Array }
): Promise<string> {
  const keyBytes = new Uint8Array(keyHex.match(/../g)?.map((h) => Number.parseInt(h, 16)) ?? []);
  const key = await crypto.subtle.importKey("raw", keyBytes, { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
  const bodyHash = hex(await crypto.subtle.digest("SHA-256", req.body));
  const payload = `v2.${req.timestamp}.${req.deliveryId}.${req.method} ${req.path}.${req.siteCode ?? "-"}.${req.input ?? "-"}.${bodyHash}`;
  return `v2=${hex(await crypto.subtle.sign("HMAC", key, enc.encode(payload)))}`;
}

import hashlib, hmac

def sign_request(key_hex: str, timestamp: int, delivery_id: str, method: str, path: str,
                 body: bytes, site_code: str | None = None, input_kind: str | None = None) -> str:
    body_hash = hashlib.sha256(body).hexdigest()
    payload = f"v2.{timestamp}.{delivery_id}.{method} {path}.{site_code or '-'}.{input_kind or '-'}.{body_hash}"
    return "v2=" + hmac.new(bytes.fromhex(key_hex), payload.encode(), hashlib.sha256).hexdigest()

BODY_HASH=$(printf '%s' "$BODY" | openssl dgst -sha256 -r | cut -d' ' -f1)
PAYLOAD="v2.$TS.$DELIVERY_ID.POST /ehr/v1/events.-.-.$BODY_HASH"
SIG=$(printf '%s' "$PAYLOAD" | openssl dgst -sha256 -mac HMAC -macopt hexkey:"$SOURCE_KEY_HEX" -r | cut -d' ' -f1)
curl -sS "$INGEST_URL/ehr/v1/events" -H "Content-Type: application/json" \
  -H "EDFlow-Source: $SOURCE_ID" -H "EDFlow-Delivery-Id: $DELIVERY_ID" \
  -H "EDFlow-Timestamp: $TS" -H "EDFlow-Signature: v2=$SIG" --data-binary "$BODY"