DRW × Accurate Connector & API Tester

Prosedur Registrasi (yang sudah dilakukan)

  1. Daftar trial Accurate Online — accurate.id/trial/aol (30 hari gratis).
  2. Developer Console — account.accurate.id/developer → Add New Application → dapat Client ID, Client Secret, App Key, Signature Secret. Set OAuth callback.
  3. Aktivasi API Token — di Accurate Online buka database → Pengaturan → Accurate Store → tab API Token → hubungkan aplikasi → muncul API Token aat.NTA… (terikat ke database).
  4. Pasang kredensial ke backend/config.php di server (token aat. + signature secret).

Daftar Token yang Harus Didapat

KredensialDariDipakai untuk
Client IDDeveloper ConsoleOAuth (atas nama user)
Client SecretDeveloper ConsoleOAuth — tukar code→token
App KeyDeveloper ConsoleIdentitas aplikasi (bukan bearer)
Signature Secret ✅Developer ConsoleKunci HMAC tanda tangan request
API Token aat.NTA… ✅Accurate Store → API TokenBearer jalur API Token (server-to-server) — yang dipakai tool ini

Tool ini memakai jalur API Token (signature): Authorization: Bearer {aat} + X-Api-Timestamp + X-Api-Signature = hex(HMAC-SHA256(timestamp, signatureSecret)). Tanpa browser/OAuth.

Arsitektur

Browser (SPA)
   │  Authorization: Bearer <App Access Key>
   ▼
accurate.drwapp.com  ── /api/* ──►  backend (PHP-FPM)  ──►  AccurateClient
                                         │  sign + host cache
                                         ▼
                            account.accurate.id/api/api-token.do  → host (odin.accurate.id)
                            {host}/accurate/api/{resource}/{action}.do  (CRUD)