Skip to main content
To ensure secure communication, every request sent by the Integrator must include two specific authentication headers. These headers verify your identity and ensure the integrity of the transaction data.

​
Prerequisites

Before you begin, ensure you have the following resources:
  • A valid Sign Key (shared by Nayax, typically 16 characters)
  • The associated Sign Key ID
Your request body must contain the SparkTransactionId field.

​
Authenticate Requests

Once you have the required resources, you can start authenticating your API requests to Spark by following the steps below:
  1. Combine the static string IntegratorId with your ID in the following format IntegratorId: {SignKeyID}. See the example below:
  2. Join the SparkTransactionId from your request body with your Sign Key, separated by a semicolon (;), in the following format: SparkTransactionId;SignKey
  3. Perform a SHA-256 hash on the resulting string using UTF-8 encoding. Resulting hash:
  4. The final header should look like the following:

​
Request Example (cURL)

See an example request for the /StartAuthentication endpoint:
Base URL and DomainThe Spark API base URL is https://{domain}/api, where {domain} is your Nayax-assigned hostname. Nayax provides a QA domain during sandbox setup and a production domain after certification. Contact your Nayax integration engineer if you have not received your domain.

​
See Also

Interactive Authentication Tool

Build and inspect ciphers and signature headers in your browser, no code required.

Payment Flows

How authentication fits into the full Spark transaction sequence.