Nonce can be anything you want. It’s just supposed to be random for all API requests you made with that particular timestamp.
A nonce is a random string, uniquely generated by the client to allow the server to verify that a request has never been made before and helps prevent replay attacks when requests are made over a non-secure channel. The nonce value MUST be unique across all requests with the same timestamp, client credentials, and token combinations.
– Nonce and Timestamp