Integration Process

A client - owner of a GROUP of gaming domains - shall follow the below procedure to successfully integrate with Naga Games

Step 1: GROUP Manager or Operator Representative should provide Naga Games with the following information:

Information NeededDescription
Group NameGroup Name is used to identify the GROUP within Naga Games database. Naga Games shall assign a unique group code to the operator.
Manager Email
Brand NameBrand Name is used to identify the BRAND (Operator) within Naga Games database. Naga Games shall assign a unique brand code to the operator.
DomainA link to the operator domain.
Currency ListCurrencies that the brand is supported.
Brand API Server IPsBrand API Server IPs shall be added to Naga Games IP Whitelist, allowing them to communicate with the system. Brand API Server IPs should be sent to Naga Games separately via email (or any secure means of communication).
Authorize URLAuthorizeURL will be added to the Operator’s WALLET, an integration account that allows the operator’s server to communicate with Naga Games server.

Step 2: Naga Games provides Operators with the following information.

InformationDescription
Group CodeEach Group is assigned a unique group code.
Brand CodeEach Brand is assigned a unique brand code.
Secret KeySecret Key would be provided for operators to verify the data signature attached with each request that comes from Naga Games using the RSA verification algorithm.

Let check: How to generate signature by HMAC-SHA256 and verifying?
Group Admin Account in BOEach Group Admin is assigned a Group Admin Account to access to our Back Office.

Signing & Verifying

πŸ“˜

About Secret Key

For each Operator, a Secret Key will be generated and assigned accordingly. This scheme serves as a security mechanism.

All request data coming from the Operator as well as the Secret Key must be hashed using HMAC-SHA256. The resulting hash is a signature, which should be sent to Naga Games along with the request.
Naga Games also uses the Secret Key to hash every request coming from Operators using the HMAC algorithm and verifies if the resulting signature matches the one sent with the request. This helps to guarantee the data integrity and also the data source authenticity.

Secret Key can be reset by Operators on our Back Office.

Naga Games shall send the Secret Key via the registered manager email.

πŸ“˜

How to Generate Signature by HMAC-SHA256?

Recipe: Generate Signature by HMAC-SHA256.

Step 3: Optional - Naga Games provides Operators with the method to get our Server API's IP. Operator can add into whitelist to verify IP.

Get Server API's IP https://api.game-stg.topasianplatform.com/health/server-ip?mode=local (let check Get Server IP API)

Calling this API, Operators can always get the most recently updated IP of the Game Server.

🚧

Notice

Please retry with this API: https://api.game-stg.topasianplatform.com/health/server-ip if the above one does not work.