Authorization value SHA1 -> SHA256 change after 2024-11-30 (IYZWSv2)

[taylankasap]

https://docs.iyzico.com/en/getting-started/preliminaries/authentication

Please be informed that SHA1 Authentication will no longer be supported after November 30th, 2024. Our esteemed merchants need to enhance their codebases to use HMACSHA256 Authentication.

Please prioritize this update to ensure your systems remain secure and compliant.

The collection is going to need to be updated accordingly.

I use this Pre-request script but you will need to modify to be able to use it because I use environment variables instead of globals.

var iyzicoApiPublicKey = pm.environment.get('iyzicoApiPublicKey')
var iyzicoApiSecretKey = pm.environment.get('iyzicoApiSecretKey')

// Generate iyzicoAuthorization string
function generateAuthorizationString() {
    var hashSha256 = CryptoJS.HmacSHA256(request.headers["x-iyzi-rnd"] + pm.request.url.getPath() + request.data, iyzicoApiSecretKey);
    var signature = "apiKey:" + iyzicoApiPublicKey + "&randomKey:" + request.headers["x-iyzi-rnd"] + "&signature:" + hashSha256;
    var parsedSignature = CryptoJS.enc.Utf8.parse(signature);
    var base64EncodedAuthorization = CryptoJS.enc.Base64.stringify(parsedSignature);
    var iyzicoAuthorization = "IYZWSv2" + " " + base64EncodedAuthorization;
    return iyzicoAuthorization;
}

var iyzicoAuthorization = generateAuthorizationString();
pm.environment.set("iyzicoAuthorization", iyzicoAuthorization);