cjsaylor/Boxmeup — Issue #89: Separate and retool App API
Author: cjsaylor
Created: 2011-12-29 15:06:19+00:00
State: open

The API is currently implemented as a plugin. From this point forward, the API should be it's own application, and it should be accessed via api.boxmeupapp.com.

Security:

* HMAC - public and secret keys with sha1 hashing.
* All request require api key, dynamic key, and hash key (plus whatever parameters are required).
* API key is public, dynamic key can be anything, and hash key is as follows: sha1(dynamic key + secret key).