christopherobin/gist:2396722 Secret

## gistfile1.java
package com.mtgox.api;

import java.net.HttpURLConnection;
import java.net.URL;
import java.net.URLEncoder;
import java.util.HashMap;
import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import sun.misc.BASE64Decoder;
import sun.misc.BASE64Encoder;

public class Client {
    protected final int BUFFER_SIZE = 8192;

    protected String key;
    protected String secret;

    public Client(String key, String secret) {
        this.key = key;
        this.secret = secret;
    }

    public String query(String path, HashMap<String, String> args) throws Exception {
        // small sanity check
        if (args == null) {
            args = new HashMap<>();
        }

        // build URL, actually we may want to fallback to mtgox.com directly for
        // private calls, but that should be fine for now
        URL queryUrl = new URL("https://data.mtgox.com/api/" + path);

        // create connection
        HttpURLConnection connection = (HttpURLConnection)queryUrl.openConnection();
        // set user agent
        connection.setRequestProperty("User-Agent", "Mozilla/4.0 (compatible; Java Test client)");

        if (this.secret != null && this.key != null) {
            // add nonce and build arg list, nonce is now converted to nanoseconds
            // as some implementations uses that, allowing you to use the same value
            // across languages. If you use any other library to call the API, make
            // sure that you are using the same kind of nonce, or you will encounter
            // issues
            args.put("nonce", String.valueOf(System.currentTimeMillis() * 1000000));
            String sign_data = this.buildQueryString(args);

            // api v2 now adds the path followed by a 0 byte in the signature
            if (path.startsWith("2/")) {
                sign_data = path.substring(2) + "\0" + sign_data;
            }

            // args signature
            Mac mac = Mac.getInstance("HmacSHA512");
            SecretKeySpec secret_spec = new SecretKeySpec((new BASE64Decoder()).decodeBuffer(this.secret), "HmacSHA512");
            mac.init(secret_spec);
            String signature = (new BASE64Encoder()).encode(mac.doFinal(sign_data.getBytes()));

            // add signature headers
            connection.setRequestProperty("Rest-Key", this.key);
            connection.setRequestProperty("Rest-Sign", signature.replaceAll("\n", ""));
        }

        // write post
        if (!args.isEmpty()) {
            connection.setDoOutput(true);
            connection.getOutputStream().write(this.buildQueryString(args).getBytes());
        }

        // read info
        String result = new String();
        byte buffer[] = new byte[this.BUFFER_SIZE];
        int len = 0;
        // read until eof, no need to increment buffer size too much as the answer will
        // most likely arrive in smaller chunks
        while ((len = connection.getInputStream().read(buffer, 0, this.BUFFER_SIZE)) > 0) {
            result += new String(buffer, 0, len, "UTF-8");
        }

        return result;
    }

    protected String buildQueryString(HashMap<String, String> args) throws Exception {
        String result = new String();
        for (String hashkey : args.keySet()) {
            if (result.length() > 0) result += '&';
            result += URLEncoder.encode(hashkey, "UTF-8") + "="
                    + URLEncoder.encode(args.get(hashkey), "UTF-8");
        }
        return result;
    }
}
	package com.mtgox.api;

	import java.net.HttpURLConnection;
	import java.net.URL;
	import java.net.URLEncoder;
	import java.util.HashMap;
	import javax.crypto.Mac;
	import javax.crypto.spec.SecretKeySpec;
	import sun.misc.BASE64Decoder;
	import sun.misc.BASE64Encoder;

	public class Client {
	protected final int BUFFER_SIZE = 8192;

	protected String key;
	protected String secret;

	public Client(String key, String secret) {
	this.key = key;
	this.secret = secret;
	}

	public String query(String path, HashMap<String, String> args) throws Exception {
	// small sanity check
	if (args == null) {
	args = new HashMap<>();
	}

	// build URL, actually we may want to fallback to mtgox.com directly for
	// private calls, but that should be fine for now
	URL queryUrl = new URL("https://data.mtgox.com/api/" + path);

	// create connection
	HttpURLConnection connection = (HttpURLConnection)queryUrl.openConnection();
	// set user agent
	connection.setRequestProperty("User-Agent", "Mozilla/4.0 (compatible; Java Test client)");

	if (this.secret != null && this.key != null) {
	// add nonce and build arg list, nonce is now converted to nanoseconds
	// as some implementations uses that, allowing you to use the same value
	// across languages. If you use any other library to call the API, make
	// sure that you are using the same kind of nonce, or you will encounter
	// issues
	args.put("nonce", String.valueOf(System.currentTimeMillis() * 1000000));
	String sign_data = this.buildQueryString(args);

	// api v2 now adds the path followed by a 0 byte in the signature
	if (path.startsWith("2/")) {
	sign_data = path.substring(2) + "\0" + sign_data;
	}

	// args signature
	Mac mac = Mac.getInstance("HmacSHA512");
	SecretKeySpec secret_spec = new SecretKeySpec((new BASE64Decoder()).decodeBuffer(this.secret), "HmacSHA512");
	mac.init(secret_spec);
	String signature = (new BASE64Encoder()).encode(mac.doFinal(sign_data.getBytes()));

	// add signature headers
	connection.setRequestProperty("Rest-Key", this.key);
	connection.setRequestProperty("Rest-Sign", signature.replaceAll("\n", ""));
	}

	// write post
	if (!args.isEmpty()) {
	connection.setDoOutput(true);
	connection.getOutputStream().write(this.buildQueryString(args).getBytes());
	}

	// read info
	String result = new String();
	byte buffer[] = new byte[this.BUFFER_SIZE];
	int len = 0;
	// read until eof, no need to increment buffer size too much as the answer will
	// most likely arrive in smaller chunks
	while ((len = connection.getInputStream().read(buffer, 0, this.BUFFER_SIZE)) > 0) {
	result += new String(buffer, 0, len, "UTF-8");
	}

	return result;
	}

	protected String buildQueryString(HashMap<String, String> args) throws Exception {
	String result = new String();
	for (String hashkey : args.keySet()) {
	if (result.length() > 0) result += '&';
	result += URLEncoder.encode(hashkey, "UTF-8") + "="
	+ URLEncoder.encode(args.get(hashkey), "UTF-8");
	}
	return result;
	}
	}