Setting Up the HTTP Headers

This page describes the headers used in the REST API requests.

Header Description SaaS Applications On-premises Applications
Content-Type

Determines the data type of the body. Only the JSON type response is supported. For example:

Content-Type: application/json
Content-Length

Indicates the size of the entity-body, in bytes. For example:

Content-Length: 20
Accept

Used for the format type of a REST API to prepare the response. Only the JSON type response is supported. For example:

Accept: application/json	
x-sntl-content-sha256

A custom header that contains SHA256 of the request/response body. For example:

x-sntl-content-sha256: 7ba7bf9d4819f6f9892edc7aab6432566265cb69ef3acd2fc1f35fbf8758a2c6
x-sntl-epoch

A custom header that contains EPOCH time in seconds. If the time difference between the RMS Cloud LM and the requesting user/device is more than 15 minutes, the request is discarded and the client authentication fails. For example:

x-sntl-epoch: 1540054530
x-sntl-message-id

A custom header, the value of which is set to a randomly-generated string (UUID). A mismatch in the message IDs of the request sent by the client and the response received from the RMS Cloud LM can also be used to flag an error. For example:

x-sntl-message-id: C1EC68F7-9661-4580-94A8-8F0E0CC67D84
Authorization

The RMS Cloud LM REST APIs use the standard HTTP Authorization header to pass the JWT access token. This is the only header that needs to be passed for every request.

The access token is generated under the auth token as described here.

Authorization: Bearer <access_token>
x-sntl-signature

A custom header that contains the signature computed using the procedure described here.

x-sntl-signature: 7212140:ctYnwSqB11uO3G93ZzMCkRz1WAmPzT3BtVRjtnHK6yA=
x-sntl-customer-id A custom header that contains the customer ID that identifies a customer. It can be obtained from Sentinel EMS.