const crypto = require('crypto');

function verifyWebhookSignature(payload, signature, webhookSecret) {
    const computedSignature = crypto
        .createHmac('sha256', webhookSecret)
        .update(payload)
        .digest('hex');
    return crypto.timingSafeEqual(
        Buffer.from(computedSignature),
        Buffer.from(signature)
    );
}

// Express.js example
app.post('/webhook', (req, res) => {
    const payload = JSON.stringify(req.body);
    const signature = req.headers['x-fundsvera-signature'];
    const webhookSecret = 'your_webhook_secret';
    
    if (verifyWebhookSignature(payload, signature, webhookSecret)) {
        const event = req.body;
        
        if (event.event === 'transaction.completed') {
            console.log('Transaction completed:', event.data);
            // Process transaction
        }
        
        res.status(200).json({ status: 'received' });
    } else {
        res.status(401).json({ error: 'Invalid signature' });
    }
});

import hmac
import hashlib
import json
from flask import Flask, request, jsonify

app = Flask(__name__)
WEBHOOK_SECRET = 'your_webhook_secret'

def verify_signature(payload, signature):
    computed = hmac.new(
        WEBHOOK_SECRET.encode('utf-8'),
        payload.encode('utf-8'),
        hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(computed, signature)

@app.route('/webhook', methods=['POST'])
def webhook():
    payload = request.get_data(as_text=True)
    signature = request.headers.get('X-Fundsvera-Signature', '')
    
    if verify_signature(payload, signature):
        data = request.get_json()
        
        if data.get('event') == 'transaction.completed':
            # Process successful transaction
            print(f"Transaction completed: {data['data']}")
        
        return jsonify({'status': 'received'}), 200
    else:
        return jsonify({'error': 'Invalid signature'}), 401

if __name__ == '__main__':
    app.run(port=3000)

const axios = require('axios');

async function createVirtualAccount() {
    try {
        const response = await axios.post(
            'https://fundsvera.co/api/v1/create-virtual-account',
            {
                email: '[email protected]',
                name: 'John Doe',
                bank_code: '100033',
                phone: '08012345678'
            },
            {
                headers: {
                    'Authorization': 'Bearer YOUR_SECRET_KEY',
                    'Public-Key': 'YOUR_PUBLIC_KEY',
                    'Content-Type': 'application/json'
                }
            }
        );
  }
}
createVirtualAccount();

import requests

url = "https://fundsvera.co/api/v1/create-virtual-account"

headers = {
    "Authorization": "Bearer YOUR_SECRET_KEY",
    "Public-Key": "YOUR_PUBLIC_KEY",
    "Content-Type": "application/json"
}

payload = {
    "email": "[email protected]",
    "name": "John Doe",
    "bank_code": "100033",
    "phone": "08012345678"
}

response = requests.post(url, json=payload, headers=headers)

curl -X POST https://fundsvera.co/api/v1/create-virtual-account \
  -H "Authorization: Bearer YOUR_SECRET_KEY" \
  -H "Public-Key: YOUR_PUBLIC_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "[email protected]",
    "name": "John Doe",
    "bank_code": "100033",
    "phone": "08012345678"
  }'

const express = require('express');
const crypto = require('crypto');
const app = express();

app.use(express.json());

const WEBHOOK_SECRET = 'your_webhook_secret';

function verifySignature(payload, signature) {
    const computed = crypto
        .createHmac('sha256', WEBHOOK_SECRET)
        .update(payload)
        .digest('hex');
    return crypto.timingSafeEqual(Buffer.from(computed), Buffer.from(signature));
}

app.post('/webhook', (req, res) => {
    const payload = JSON.stringify(req.body);
    const signature = req.headers['x-fundsvera-signature'];
    
    if (!verifySignature(payload, signature)) {
        return res.status(401).json({ error: 'Invalid signature' });
    }
    
    const event = req.body;
    
    // Handle different event types
    switch(event.event) {
        case 'transaction.completed':
            console.log(`✅ Payment received: ₦${event.data.amount}`);
            console.log(`Account: ${event.data.account_number}`);
            console.log(`Reference: ${event.data.reference}`);
            // Update your database here
            break;
            
        case 'transaction.failed':
            console.log(`❌ Transaction failed: ${event.data.reference}`);
            break;
            
        case 'va.created':
            console.log(`🎉 New VA created: ${event.data.virtual_account.account_number}`);
            break;
    }
    
    res.status(200).json({ status: 'received' });
});

app.listen(3000, () => {
    console.log('Webhook server running on port 3000');
});

from flask import Flask, request, jsonify
import hmac
import hashlib
import json
import logging

app = Flask(__name__)
WEBHOOK_SECRET = 'your_webhook_secret'

logging.basicConfig(level=logging.INFO)

def verify_signature(payload, signature):
    computed = hmac.new(
        WEBHOOK_SECRET.encode('utf-8'),
        payload.encode('utf-8'),
        hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(computed, signature)

@app.route('/webhook', methods=['POST'])
def webhook():
    payload = request.get_data(as_text=True)
    signature = request.headers.get('X-Fundsvera-Signature', '')
    
    if not verify_signature(payload, signature):
        return jsonify({'error': 'Invalid signature'}), 401
    
    data = request.get_json()
    event = data.get('event')
    
    if event == 'transaction.completed':
        tx_data = data['data']
        logging.info(f"Payment received: ₦{tx_data['amount']}")
        logging.info(f"Account: {tx_data['account_number']}")
        logging.info(f"Reference: {tx_data['reference']}")
        
        # Update your database here
        # Send notifications
        
    elif event == 'transaction.failed':
        logging.warning(f"Failed transaction: {data['data']['reference']}")
        
    elif event == 'va.created':
        logging.info(f"New VA: {data['data']['virtual_account']['account_number']}")
    
    return jsonify({'status': 'received'}), 200

if __name__ == '__main__':
    app.run(port=3000, debug=True)