Recurring Billing

curl --location --request POST 'https://api.sandbox.hit-pay.com/v1/subscription-plan' \
--header 'X-BUSINESS-API-KEY: meowmeowmeow' \
--header 'X-Requested-With: XMLHttpRequest' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'name=Spotify Premium' \
--data-urlencode 'description=Spotify Monthly Subscription' \
--data-urlencode 'currency=SGD' \
--data-urlencode 'amount=9.90' \
--data-urlencode 'cycle=monthly' \
--data-urlencode 'reference=spotify_premium_2022'

<?php
require_once('vendor/autoload.php');

$client = new \GuzzleHttp\Client();

$response = $client->request('POST', 'https://api.staging.hit-pay.com/v1/subscription-plan', [
  'form_params' =>[
  	'name' => 'Spotify Premium',
    'description' => 'Spotify Monthly Subscription',
  	'currency' => 'SGD'
  	'amount' => 9.90,
  	'cycle' => 'monthly',
  	'reference' => 'spotify_premium_2022'
  ],
  'headers' => [
    'Content-Type' => 'application/x-www-form-urlencoded',
    'X-Requested-With' => 'XMLHttpRequest',
    'accept' => 'application/json',
    'x-api-key' => 'meowmeowmeow',
  ],
]);

echo $response->getBody();

function validateWebhook($payload, $signature, $salt) {
    $computedSignature = hash_hmac('sha256', $payload, $salt);
    return hash_equals($computedSignature, $signature);
}

// Usage
$payload = file_get_contents('php://input');
$signature = $_SERVER['HTTP_HITPAY_SIGNATURE'];
$salt = 'your_salt_from_dashboard';

if (validateWebhook($payload, $signature, $salt)) {
    $data = json_decode($payload, true);
    // Process the payment confirmation
    // Mark order as paid
} else {
    http_response_code(401);
    exit('Invalid signature');
}

const crypto = require('crypto');

function validateWebhook(payload, signature, salt) {
    const computedSignature = crypto
        .createHmac('sha256', salt)
        .update(payload)
        .digest('hex');
    return crypto.timingSafeEqual(
        Buffer.from(computedSignature),
        Buffer.from(signature)
    );
}

// Usage in Express
app.post('/webhook', (req, res) => {
    const payload = JSON.stringify(req.body);
    const signature = req.headers['hitpay-signature'];
    const salt = 'your_salt_from_dashboard';

    if (validateWebhook(payload, signature, salt)) {
        // Process the payment confirmation
        // Mark order as paid
        res.status(200).send('OK');
    } else {
        res.status(401).send('Invalid signature');
    }
});