Integration Process

Step 1: GROUP Manager or Operator Representative should provide Naga Games with the following information:

Information Needed	Description
Group Name	Group Name is used to identify the GROUP within Naga Games database. Naga Games shall assign a unique *group code* to the operator.
Manager Email
Brand Name	Brand Name is used to identify the BRAND (Operator) within Naga Games database. Naga Games shall assign a unique *brand code* to the operator.
Domain	A link to the operator domain.
Currency List	Currencies that the brand is supported.
Brand API Server IPs	Brand API Server IPs shall be added to Naga Games IP Whitelist, allowing them to communicate with the system. Brand API Server IPs should be sent to Naga Games separately via email (or any secure means of communication).
Authorize URL	AuthorizeURL will be added to the Operator’s WALLET, an integration account that allows the operator’s server to communicate with Naga Games server.

Step 2: Naga Games provides Operators with the following information.

Information	Description
Group Code	Each Group is assigned a unique *group code*.
Brand Code	Each Brand is assigned a unique *brand code*.
Secret Key	Secret Key would be provided for operators to verify the data signature attached with each request that comes from Naga Games using the RSA verification algorithm. How to generate signature by HMAC-SHA256.
Group Admin Account in BO	Each Group Admin is assigned a Group Admin Account to access our Back Office.

Signing & Verifying

📘
About Secret Key
For each Operator, a Secret Key will be generated and assigned accordingly. This scheme serves as a security mechanism.
All request data coming from the Operator as well as the Secret Key must be hashed using HMAC-SHA256. The resulting hash is a signature, which should be sent to Naga Games along with the request.
Naga Games also uses the Secret Key to hash every request coming from Operators using the HMAC algorithm and verifies if the resulting signature matches the one sent with the request. This helps to guarantee the data integrity and also the data source authenticity.
Secret Key can be reset by Operators on our Back Office.
Naga Games shall send the Secret Key via the registered manager email.

📘
How to Generate Signature by HMAC-SHA256?
Recipe: Generate Signature by HMAC-SHA256.

Step 3: Optional - Naga Games provides Operators with the method to get our Server API's IP. Operator can add it into the whitelist to verify IP.

Get Server API's IP:
https://api.game-stg.topasianplatform.com/health/server-ip?mode=local
(Refer to Get Server IP API).

Calling this API, Operators can always get the most recently updated IP of the Game Server.

🚧
Notice
Please retry with this API: https://api.game-stg.topasianplatform.com/health/server-ip if the above one does not work.