Create checkout integration

<?php

namespace App\Services;

use Illuminate\Support\Facades\Http;
use Illuminate\Support\Str;
use RuntimeException;

class SendboxPay
{
    public function createPayment(array $payload): array
    {
        $merchantId = config('services.sendboxpay.merchant_id');
        $merchantDomain = config('services.sendboxpay.domain');
        $body = json_encode($payload, JSON_UNESCAPED_SLASHES);
        $timestamp = (string) time();
        $nonce = Str::random(32);
        $signature = hash_hmac(
            'sha256',
            $merchantId . "\n" . $merchantDomain . "\n" . $timestamp . "\n" . $nonce . "\n" . $body,
            config('services.sendboxpay.secret')
        );

        $response = Http::withBody($body, 'application/json')
            ->withHeaders([
                'X-SBP-Merchant-ID' => $merchantId,
                'X-SBP-Merchant-Domain' => $merchantDomain,
                'X-SBP-API-Key' => config('services.sendboxpay.key'),
                'X-SBP-Timestamp' => $timestamp,
                'X-SBP-Nonce' => $nonce,
                'X-SBP-Signature' => $signature,
            ])
            ->post('https://www.sendboxpay.cyou/api/v1/payment/create.php');

        if (!$response->successful()) {
            throw new RuntimeException($response->body());
        }

        return $response->json();
    }
}

import crypto from 'node:crypto';

export async function createPayment(payload) {
  const merchantId = process.env.SENDBOXPAY_MERCHANT_ID;
  const merchantDomain = process.env.SENDBOXPAY_MERCHANT_DOMAIN;
  const body = JSON.stringify(payload);
  const timestamp = Math.floor(Date.now() / 1000).toString();
  const nonce = crypto.randomBytes(16).toString('hex');
  const signature = crypto
    .createHmac('sha256', process.env.SENDBOXPAY_API_SECRET)
    .update(`${merchantId}\n${merchantDomain}\n${timestamp}\n${nonce}\n${body}`)
    .digest('hex');

  const response = await fetch('https://www.sendboxpay.cyou/api/v1/payment/create.php', {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json',
      'X-SBP-Merchant-ID': merchantId,
      'X-SBP-Merchant-Domain': merchantDomain,
      'X-SBP-API-Key': process.env.SENDBOXPAY_API_KEY,
      'X-SBP-Timestamp': timestamp,
      'X-SBP-Nonce': nonce,
      'X-SBP-Signature': signature
    },
    body
  });

  const result = await response.json();
  if (!response.ok) throw new Error(JSON.stringify(result));
  return result;
}

import hashlib
import hmac
import json
import os
import secrets
import time
import requests

payload = {
    "order_id": f"ORDER-{int(time.time())}",
    "amount": "500.00",
    "customer_name": "Customer Name",
    "customer_email": "customer@example.com",
    "customer_phone": "01712345678",
}
merchant_id = os.environ["SENDBOXPAY_MERCHANT_ID"]
merchant_domain = os.environ["SENDBOXPAY_MERCHANT_DOMAIN"]
body = json.dumps(payload, separators=(",", ":"))
timestamp = str(int(time.time()))
nonce = secrets.token_hex(16)
message = f"{merchant_id}\n{merchant_domain}\n{timestamp}\n{nonce}\n{body}".encode()
signature = hmac.new(
    os.environ["SENDBOXPAY_API_SECRET"].encode(),
    message,
    hashlib.sha256,
).hexdigest()

response = requests.post(
    "https://www.sendboxpay.cyou/api/v1/payment/create.php",
    data=body,
    headers={
        "Content-Type": "application/json",
        "X-SBP-Merchant-ID": merchant_id,
        "X-SBP-Merchant-Domain": merchant_domain,
        "X-SBP-API-Key": os.environ["SENDBOXPAY_API_KEY"],
        "X-SBP-Timestamp": timestamp,
        "X-SBP-Nonce": nonce,
        "X-SBP-Signature": signature,
    },
    timeout=30,
)
response.raise_for_status()
print(response.json()["checkout_url"])