API authentication and request signing

curl "https://api.caseprimus.ai/api/caseprimus/v1/watchlist/entities/search" \
  -X POST \
  -H "X-CasePrimus-Api-Key: $CASEPRIMUS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "$skip": 0, "$limit": 10 }'

const res = await fetch("https://api.caseprimus.ai/api/caseprimus/v1/watchlist/entities/search", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "X-CasePrimus-Api-Key": process.env.CASEPRIMUS_API_KEY,
  },
  body: JSON.stringify({ $skip: 0, $limit: 10 }),
});

import os
import requests

res = requests.post(
    "https://api.caseprimus.ai/api/caseprimus/v1/watchlist/entities/search",
    headers={"X-CasePrimus-Api-Key": os.environ["CASEPRIMUS_API_KEY"]},
    json={"$skip": 0, "$limit": 10},
)

const crypto = require("crypto");

const method = "POST";
const path = "/api/caseprimus/v1/watchlist/cases";
const body = JSON.stringify({ caseIdentifier: { cnr: "DLHC01-004821-2026" } });
const timestamp = Date.now().toString();

// Sign EXACTLY this string: method, path, timestamp and the raw body bytes,
// joined by newlines, with your own RSA private key.
const payload = `${method}\n${path}\n${timestamp}\n${body}`;
const signature = crypto
  .sign("RSA-SHA256", Buffer.from(payload), YOUR_PRIVATE_KEY_PEM)
  .toString("base64");

const response = await fetch(`https://api.caseprimus.ai${path}`, {
  method,
  headers: {
    "Content-Type": "application/json",
    "X-CasePrimus-Api-Key": YOUR_API_KEY_SECRET,
    "X-Signature": signature,
    "X-Signature-Timestamp": timestamp,
  },
  body,
});

import time
import json
import base64
import requests
from cryptography.hazmat.primitives import hashes
from cryptography.hazmat.primitives.asymmetric import padding
from cryptography.hazmat.primitives.serialization import load_pem_private_key

method = "POST"
path = "/api/caseprimus/v1/watchlist/cases"
body = json.dumps({"caseIdentifier": {"cnr": "DLHC01-004821-2026"}})
timestamp = str(int(time.time() * 1000))

# Sign EXACTLY this string: method, path, timestamp and the raw body bytes,
# joined by newlines, with your own RSA private key.
payload = f"{method}\n{path}\n{timestamp}\n{body}".encode()
private_key = load_pem_private_key(YOUR_PRIVATE_KEY_PEM, password=None)
signature = base64.b64encode(
    private_key.sign(payload, padding.PKCS1v15(), hashes.SHA256())
).decode()

response = requests.post(
    f"https://api.caseprimus.ai{path}",
    headers={
        "Content-Type": "application/json",
        "X-CasePrimus-Api-Key": YOUR_API_KEY_SECRET,
        "X-Signature": signature,
        "X-Signature-Timestamp": timestamp,
    },
    data=body,
)