API Documentation

require 'net/http'
require 'json'

session_id = 'cs_a1b2c3d4e5f6'
uri = URI("https://jopay.me/api/checkout/v1/sessions/#{session_id}")
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = true

request = Net::HTTP::Get.new(uri)
request['Authorization'] = 'Bearer sk_live_your_api_key'

response = http.request(request)
session = JSON.parse(response.body)

if session['status'] == 'completed'
  # Fulfill the order
end

import requests

session_id = 'cs_a1b2c3d4e5f6'
response = requests.get(
    f'https://jopay.me/api/checkout/v1/sessions/{session_id}',
    headers={
        'Authorization': 'Bearer sk_live_your_api_key'
    }
)

session = response.json()

if session['status'] == 'completed':
    # Fulfill the order
    pass

const sessionId = 'cs_a1b2c3d4e5f6';
const response = await fetch(
  `https://jopay.me/api/checkout/v1/sessions/${sessionId}`,
  {
    headers: {
      'Authorization': 'Bearer sk_live_your_api_key'
    }
  }
);

const session = await response.json();

if (session.status === 'completed') {
  // Fulfill the order
}

def verify_signature(payload, signature, secret)
  expected = OpenSSL::HMAC.hexdigest('SHA256', secret, payload)
  ActiveSupport::SecurityUtils.secure_compare(
    "sha256=#{expected}",
    signature
  )
end

# In your controller
def webhook
  payload = request.body.read
  signature = request.headers['X-JoPay-Signature']

  unless verify_signature(payload, signature, ENV['WEBHOOK_SECRET'])
    return head :unauthorized
  end

  # Process the event
end

import hmac
import hashlib

def verify_signature(payload, signature, secret):
    expected = hmac.new(
        secret.encode('utf-8'),
        payload.encode('utf-8'),
        hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(
        f'sha256={expected}',
        signature
    )

# In your Flask/Django view
@app.route('/webhook', methods=['POST'])
def webhook():
    payload = request.get_data(as_text=True)
    signature = request.headers.get('X-JoPay-Signature')

    if not verify_signature(payload, signature, WEBHOOK_SECRET):
        return 'Unauthorized', 401

    # Process the event
    return 'OK', 200

const crypto = require('crypto');

function verifySignature(payload, signature, secret) {
  const expected = crypto
    .createHmac('sha256', secret)
    .update(payload)
    .digest('hex');
  return crypto.timingSafeEqual(
    Buffer.from(`sha256=${expected}`),
    Buffer.from(signature)
  );
}

// In your Express route
app.post('/webhook', (req, res) => {
  const payload = req.body;
  const signature = req.headers['x-jopay-signature'];

  if (!verifySignature(JSON.stringify(payload), signature, WEBHOOK_SECRET)) {
    return res.status(401).send('Unauthorized');
  }

  // Process the event
  res.status(200).send('OK');
});