Guide développeur

curl -X POST "http://nabila.bconsultingsarl.com//api/v1/payments" \
  -H "Authorization: Bearer $NABILA_KEY" \
  -H "Idempotency-Key: commande-1001" \
  -H "Content-Type: application/json" \
  -d '{"amount":15000,"currency":"XOF","country":"BJ","phone":"+22961000000","description":"Commande 1001","external_ref":"CMD-1001","metadata":{"panier":"A-77"}}'

<?php
$ch = curl_init('http://nabila.bconsultingsarl.com//api/v1/payments');
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'Authorization: Bearer ' . getenv('NABILA_KEY'),
        'Idempotency-Key: commande-1001',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode([
        'amount' => 15000,
        'currency' => 'XOF',
        'country' => 'BJ',
        'phone' => '+22961000000',
        'description' => 'Commande 1001',
        'external_ref' => 'CMD-1001',
        'metadata' => [
            'panier' => 'A-77',
        ],
    ]),
]);
$reponse = json_decode(curl_exec($ch), true);
$code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
var_dump($code, $reponse);

const res = await fetch('http://nabila.bconsultingsarl.com//api/v1/payments', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.NABILA_KEY}`,
    'Idempotency-Key': 'commande-1001',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
      "amount": 15000,
      "currency": "XOF",
      "country": "BJ",
      "phone": "+22961000000",
      "description": "Commande 1001",
      "external_ref": "CMD-1001",
      "metadata": {
          "panier": "A-77"
      }
  }),
});
console.log(res.status, await res.json());

import os, requests

r = requests.request(
    'POST', 'http://nabila.bconsultingsarl.com//api/v1/payments',
    headers={
        'Authorization': 'Bearer ' + os.environ['NABILA_KEY'],
        'Idempotency-Key': 'commande-1001',
    },
    json={"amount":15000,"currency":"XOF","country":"BJ","phone":"+22961000000","description":"Commande 1001","external_ref":"CMD-1001","metadata":{"panier":"A-77"}},
    timeout=10,
)
print(r.status_code, r.json())

<?php
$corps = file_get_contents('php://input');
[$t, $v1] = array_map(fn($p) => explode('=', $p, 2)[1], explode(',', $_SERVER['HTTP_NABILA_SIGNATURE']));
$attendu = hash_hmac('sha256', $t . '.' . $corps, getenv('NABILA_WEBHOOK_SECRET'));
if (!hash_equals($attendu, $v1) || abs(time() - (int)$t) > 300) { http_response_code(400); exit; }
$evenement = json_decode($corps, true);
http_response_code(200);

import crypto from 'node:crypto';

app.post('/webhooks/nabila', express.raw({ type: 'application/json' }), (req, res) => {
  const [t, v1] = req.get('Nabila-Signature').split(',').map(p => p.split('=')[1]);
  const attendu = crypto.createHmac('sha256', process.env.NABILA_WEBHOOK_SECRET).update(t + '.' + req.body).digest('hex');
  if (!crypto.timingSafeEqual(Buffer.from(attendu), Buffer.from(v1)) || Math.abs(Date.now() / 1000 - Number(t)) > 300) return res.sendStatus(400);
  const evenement = JSON.parse(req.body);
  res.sendStatus(200);
});

import hmac, hashlib, os, time

def verifier(corps: bytes, entete: str) -> bool:
    t, v1 = [p.split('=', 1)[1] for p in entete.split(',')]
    attendu = hmac.new(os.environ['NABILA_WEBHOOK_SECRET'].encode(), f'{t}.'.encode() + corps, hashlib.sha256).hexdigest()
    return hmac.compare_digest(attendu, v1) and abs(time.time() - int(t)) < 300