Access Authorization List

## Overview

The Access Authorization List allows you to authorize third-party systems to integrate with the LarkXR platform. Any system not listed here will be denied access, preventing unauthorized third-party integrations.

![](https://docs.paraverse.cc/media/202504/37fa4f2bd7794fbf80c5c2e287ba11b48628.png)

## API Security: adminKey and adminSecret

Certain API operations (such as uploading or modifying applications) require authenticated, signed requests using `adminKey` and `adminSecret`. Signed credentials expire after **15 minutes** — after expiry, the signature must be recalculated to generate a new valid request.

### Signature Generation Steps

1. Collect `adminKey`, `adminSecret`, and the current Unix timestamp (as a long integer).
2. Sort these three values alphabetically.
3. Concatenate the sorted values into a single string.
4. Compute the **SHA-1 digest** of the concatenated string.
5. Pass `adminKey`, `timestamp`, and `signature` as parameters in the API request.

### Java Example

```java
public static String getSignature(String key, String secret, String timestamp) {
    String[] arr = new String[] { key, secret, timestamp };
    Arrays.sort(arr);
    StringBuilder sb = new StringBuilder();
    for (String s : arr) { sb.append(s); }
    try {
        MessageDigest md = MessageDigest.getInstance("SHA-1");
        byte[] digest = md.digest(sb.toString().getBytes());
        return byteToStr(digest);
    } catch (NoSuchAlgorithmException e) {
        e.printStackTrace();
    }
    return null;
}

private static String byteToStr(byte[] byteArray) {
    StringBuilder sb = new StringBuilder();
    for (byte b : byteArray) { sb.append(byteToHexStr(b)); }
    return sb.toString();
}

private static String byteToHexStr(byte mByte) {
    char[] Digit = { '0','1','2','3','4','5','6','7','8','9','A','B','C','D','E','F' };
    return new String(new char[]{ Digit[(mByte >>> 4) & 0x0F], Digit[mByte & 0x0F] });
}
```

### PHP Example

```php
sort($arr, SORT_NATURAL);
$string = implode('', $arr);
$signature = sha1($string);
```