Security Spec

Cryptographic HMAC-SHA256 Token Spec

Cryptographically signed tokens contain expiring timestamps and unique auction UUID nonces to prevent click replay fraud.

Token Payload Structure

{
  "adId": "ad-uuid-123",
  "publisherId": "pub-user-999",
  "clearingPriceMicros": "2480000",
  "auctionId": "8f4a1c9e-5b2d-4e9f-9a1b-3c5d7e9f2a4b",
  "timestamp": 1726084200000,
  "nonce": "a1b2c3d4e5f60708"
}