Aster Spot API Authentication (v1)
Base: https://sapi.asterdex.com. Path prefix: /api/v1/. API key + secret case sensitive. Signed: send timestamp, signature; optional recvWindow (default 5000 ms, keep ≤ 5000).
| Param | Description |
|---|---|
| X-MBX-APIKEY | API key (header) |
| timestamp | Current time, ms |
| recvWindow | Request valid this long after timestamp |
| signature | HMAC SHA256(totalParams, secretKey), hex |
Signature: Same as aster-api-auth-v1: totalParams = query + body; HMAC SHA256(secretKey, totalParams) → hex; add signature to query or body; header X-MBX-APIKEY.
Timing: Server accepts if timestamp < serverTime+1000 and serverTime - timestamp <= recvWindow. Use GET /api/v1/time if clock skew.
Payload shapes: reference.md.