Skip to content
Longport WhaleLongport Whale
Trade Password

Trade Password Auth

This interface is used to verify whether the trading password of a specified securities account is correct. By providing the account number account_no and the encrypted trading password encrypt_password, it returns the asset account unique identifier aaid and the user account member_id upon successful verification.

Password transmission requires the password to be encrypted. The encryption method is as follows:

const Crypto = require('crypto-js')

const encryptedPassword = function encodePassword(ts, password) {
    const keyMD5 = Crypto.MD5(ts.toString())
    const pwdMD5 = Crypto.MD5(password)
    const iv = keyMD5.slice(0, 16)

    return Crypto.AES.encrypt(pwdMD5, keyMD5, {
        mode: Crypto.mode.CBC,
        padding: Crypto.pad.Pkcs7
    });
}

Here ts is the value of x-timestamp in the request header, which is a Unix timestamp.

POSThttps://b-api.lbkrs.com/v1/whaleapi/account/trade/auth_pwd

Production: https://b-api.lbkrs.com · Test: https://b-api.longbridge.xyz

Authorization

AuthorizationstringheaderRequired

Send the Broker ACCESS_TOKEN as Authorization: Bearer <token>.

Permission

broker_api.super_manage

The Broker ACCESS_TOKEN must be granted the permission below, or the call will be rejected.

Request body application/json

Responses

HTTP 200OK
Standard response envelopecodemessagedata
dataobjectdata structure

Data

accountobjectrequired

Account Info

Child attributes
aaidstringrequired

Aaid

member_idstringrequired

Member Id

HTTP 400Bad request. Check the business error code in code and the error details in message.
Standard response envelopecodemessagedata
dataobjectdata structure

No nested fields

HTTP 401The user is not authenticated, or the login session has expired.
Standard response envelopecodemessagedata
dataobjectdata structure

No nested fields

HTTP 403The current account is not authorized to use this feature. Grant the required permission to the account in User Permission.
Standard response envelopecodemessagedata
dataobjectdata structure

No nested fields

HTTP 408The request timed out. Check the business error code in code and the error details in message.
Standard response envelopecodemessagedata
dataobjectdata structure

No nested fields

Whale Docs