Question

I’m developing an API system which requires this type of authentication. The user will send an HTTP request with its id, the data, and a hash (the data hashed with the private key) and then in the server I check if the hash matches with the same procees here.
Is it like the implementation must be?
And I’m going to use as public key the id of the client but what is the best method to generate the private key, sha256 of the id, of a randon number?

Answer 1

checking out what amazon s3 is doing for the authentication might be a good start

basically they are doing the same thing as you proposed, and they use RFC 2104HMAC-SHA1 for the hashing. The implementation depends on your choice of languages.