skillpp 0.1.0

package/skills/binance/p2p/references/authentication.md

@@ -0,0 +1,100 @@
+# Binance P2P Authentication
+
+All P2P personal order endpoints (SAPI) require HMAC SHA256 signed requests.
+
+## Base URL
+
+`https://api.binance.com`
+
+## Required Headers
+
+* `X-MBX-APIKEY`: your_api_key
+* `User-Agent`: binance-wallet/1.0.0 (Skill)
+
+## ⚠️ CRITICAL: SAPI-Specific Behavior
+
+**DO NOT sort parameters** - SAPI keeps original insertion order (different from standard Binance API).
+
+**Correct approach for SAPI:**
+- Keep parameter insertion order when building query string
+- Example: `page=1&rows=20&recvWindow=60000&timestamp=1710460800000`
+
+**Wrong approach (standard Binance API only):**
+- Sorting parameters alphabetically will cause signature verification failure
+- SAPI does NOT sort parameters like standard REST API
+
+## Signing Process
+
+### Step 1: Build Query String
+
+Include all parameters plus `timestamp` (current Unix time in milliseconds):
+`timestamp=1234567890123`
+
+**Optional:** Add `recvWindow` (default 60000ms for P2P endpoints) for timestamp tolerance.
+
+### Step 2: Percent-Encode Parameters
+
+Before generating the signature, **percent-encode all parameter names and values using UTF-8 encoding according to RFC 3986.**
+Unreserved characters that must not be encoded: `A-Z a-z 0-9 - _ . ~`
+
+- Chinese characters example:
+  `symbol=这是测试币456`
+
+Percent-encoded:
+`symbol=%E8%BF%99%E6%98%AF%E6%B5%8B%E8%AF%95%E5%B8%81456`
+
+**Important:**
+The exact encoded query string must be used for both signing and the HTTP request.
+
+### Step 3: Generate Signature
+
+Generate the HMAC SHA256 signature from the encoded query string using your secret key:
+
+```bash
+# Example using openssl
+echo -n "page=1&rows=20&recvWindow=60000&timestamp=1234567890123" | \
+  openssl dgst -sha256 -hmac "your_secret_key"
+```
+
+### Step 4: Append Signature
+
+Add signature parameter to the query string:
+`page=1&rows=20&recvWindow=60000&timestamp=1234567890123&signature=abc123...`
+
+### Step 5: Add Headers
+
+Include required headers:
+- `X-MBX-APIKEY`: Your API key
+- `User-Agent`: `binance-wallet/1.0.0 (Skill)`
+
+## Complete Bash Example
+
+```bash
+#!/bin/bash
+API_KEY="your_api_key"
+SECRET_KEY="your_secret_key"
+BASE_URL="https://api.binance.com"
+
+# Get current timestamp
+TIMESTAMP=$(date +%s000)
+
+# Build query string (without signature)
+# CRITICAL: Keep parameter order, do NOT sort
+QUERY="page=1&rows=20&recvWindow=60000&timestamp=${TIMESTAMP}"
+
+# Generate signature
+SIGNATURE=$(echo -n "$QUERY" | openssl dgst -sha256 -hmac "$SECRET_KEY" | cut -d' ' -f2)
+
+# Make request
+curl -X GET \
+  "${BASE_URL}/sapi/v1/c2c/orderMatch/listUserOrderHistory?${QUERY}&signature=${SIGNATURE}" \
+  -H "X-MBX-APIKEY: ${API_KEY}" \
+  -H "User-Agent: binance-wallet/1.0.0 (Skill)"
+```
+
+## Security Notes
+
+* Never share your secret key
+* Use IP whitelist in Binance API settings
+* Enable only required permissions (Enable Reading for P2P order history)
+* Store credentials securely in .env file (add to .gitignore)