​

Timestamp

​

What is X-TIMESTAMP?

• Validate request freshness
• Prevent replay attacks
• Verify request authenticity
• Improve API security

​

Example Header

X-TIMESTAMP: 1778659835

​

Generate Timestamp

const timestamp = Math.floor(Date.now() / 1000);
console.log(timestamp);

<?php
$timestamp = time();
echo $timestamp;

import time
timestamp = int(time.time())
print(timestamp)

const timestamp = Math.floor(Date.now() / 1000);
console.log(timestamp);

long timestamp = System.currentTimeMillis() / 1000;
System.out.println(timestamp);

package main
import (
	"fmt"
	"time"
)
func main() {
	timestamp := time.Now().Unix()
	fmt.Println(timestamp)
}

using System;
class Program
{
    static void Main()
    {
        long timestamp = DateTimeOffset
            .UtcNow
            .ToUnixTimeSeconds();
        Console.WriteLine(timestamp);
    }
}

int timestamp = DateTime.now()
    .millisecondsSinceEpoch ~/ 1000;
print(timestamp);

​

Important Notes

• Timestamp must always be generated in UNIX seconds format
• Generate a fresh timestamp for every API request
• Expired timestamps may be rejected
• Server and client system time should remain synchronized
• Reusing old timestamps may invalidate requests

​

Replay Attack Protection

• Prevent duplicate request execution
• Improve request security
• Validate request freshness

​

Example API Request

curl 
--request 
POST \
--url 
https://sandbox.Elite Neo Bank.com/api/v3/pg/order/create \
--header "Content-Type: application/json" \
--header "Accept: application/json" \
--header "X-API-KEY: pk_test_xxxxxxxxx" \
--header "X-SIGNATURE: GENERATED_SIGNATURE" \
--header "X-TIMESTAMP: 1778659835" \
--data '{}'

​

Common Errors

​

401 Unauthorized

• Expired timestamp
• Invalid timestamp format
• Timestamp mismatch
• Missing X-TIMESTAMP header

​

Best Practices

• Always generate timestamps server-side
• Synchronize server time using NTP
• Never hardcode timestamps
• Generate timestamps immediately before requests
• Validate timestamps while processing webhooks