인증

Java
import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import java.io.ByteArrayOutputStream;
import java.io.IOException;
import java.io.InputStream;
import java.io.OutputStream;
import java.net.HttpURLConnection;
import java.net.URL;
import java.nio.charset.StandardCharsets;
import java.security.InvalidKeyException;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.text.SimpleDateFormat;
import java.util.Base64;
import java.util.Date;
import java.util.TimeZone;

public class Main {

    public static void main(String[] args) throws NoSuchAlgorithmException, InvalidKeyException, IOException {

        // 팝빌에서 발급받은 API Key의 LinkID
        String linkID = "TESTER";

        // 팝빌에서 발급받은 API Key의 SecretKey
        String secretKey = "SwWxqU+0TErBXy/9TVjIPEnI0VTUMMSQZtJf3Ed8q3I=";

        // 팝빌회원 사업자번호
        String accessID = "1234567890";

        // 토큰 사용 허용 IP -> 요청 헤더 X-LH-Forwarded에 사용
        String forwardedIP = "*";

        // API 버전 -> 요청 헤더 X-LH-Version에 사용
        String apiVersion = "2.0";

        // 테스트 환경: POPBILL_TEST, 운영 환경 : POPBILL
        String serviceID = "POPBILL_TEST";

        // Request Body
        String requestBody = "{\"access_id\":\"" + accessID + "\", \"scope\":[\"110\", \"member\"]}";
        byte[] bodyBytes = requestBody.getBytes(StandardCharsets.UTF_8);

        // BodyDigest (SHA-256 -> Base64 encode)
        byte[] sha256Bytes = MessageDigest.getInstance("SHA-256").digest(bodyBytes);
        String bodyDigest = Base64.getEncoder().encodeToString(sha256Bytes);

        // 요청 일시(UTC) -> 요청 헤더 X-LH-Date에 사용
        SimpleDateFormat sdf = new SimpleDateFormat("yyyy-MM-dd'T'HH:mm:ss'Z'");
        sdf.setTimeZone(TimeZone.getTimeZone("UTC"));
        String requestDT = sdf.format(new Date());

        // 요청 URI
        String resourceURI = "/" + serviceID + "/Token";

        // StringToSign 구성
        String stringToSign = "POST" 		+ "\n"
                                    + bodyDigest 		+ "\n"
                                    + requestDT 		+ "\n"
                                    + forwardedIP		+ "\n"
                                    + apiVersion		+ "\n"
                                    + resourceURI;

        // Signature
        Mac mac = Mac.getInstance("HmacSHA256");
        mac.init(new SecretKeySpec(Base64.getDecoder().decode(secretKey), "HmacSHA256"));

        byte[] hmacBytes = mac.doFinal(stringToSign.getBytes(StandardCharsets.UTF_8));
        String signature = Base64.getEncoder().encodeToString(hmacBytes);

        // Authorization Header
        String authorization = "LINKHUB" + " " + linkID + " " + signature;

        URL url = new URL("https://auth.linkhub.co.kr" + resourceURI);
        HttpURLConnection conn = (HttpURLConnection) url.openConnection();
        conn.setRequestMethod("POST");
        conn.setDoOutput(true);
        conn.setRequestProperty("Content-Type", "application/json");
        conn.setRequestProperty("Authorization", authorization);
        conn.setRequestProperty("x-lh-forwarded", forwardedIP);
        conn.setRequestProperty("x-lh-date", requestDT);
        conn.setRequestProperty("x-lh-version", apiVersion);

        try (OutputStream os = conn.getOutputStream()) {
            os.write(bodyBytes);
        }

        int status = conn.getResponseCode();
        InputStream is = (status == HttpURLConnection.HTTP_OK) ? conn.getInputStream() : conn.getErrorStream();

        ByteArrayOutputStream baos = new ByteArrayOutputStream();
        byte[] buf = new byte[8192];
        int n;
        while ((n = is.read(buf)) != -1) {
            baos.write(buf, 0, n);
        }
        is.close();

        String responseBody = new String(baos.toByteArray(), StandardCharsets.UTF_8);

        System.out.println("Body : " + responseBody);
    }
}

{
    "session_token": "dGfY0osTAoWNdlNwmugjEDTu...4MuWhVplgLrlQ7FzenX98qiZYDSqQ0ISEOJP",
    "serviceID": "POPBILL_TEST",
    "linkID": "TESTER",
    "userID": "1234567890",
    "partnerCode": "014040000003",
    "usercode": "025070002467",
    "scope": [ "member", "110" ],
    "ipaddress": "*",
    "expiration": "2025-11-19T03:41:17.839Z"
}