import requests
import hmac
import hashlib

API_KEY = "pk_live_ваш_api_ключ"
SECRET_KEY = "sk_live_ваш_секретный_ключ"
BASE_URL = "https://sandbox.reptiloid.vg"  # Для тестов

# === Генерация подписи ===
def generate_signature(data: dict, secret_key: str) -> str:
    SIGN_FIELDS = ['merchant_id', 'order_id', 'amount', 'currency',
                   'user_id', 'callback_url']

    sign_data = {}
    for k, v in data.items():
        if k not in SIGN_FIELDS or v is None:
            continue
        if isinstance(v, float) and v == int(v):
            v = int(v)
        sign_data[k] = v

    sorted_params = sorted(sign_data.items())
    sign_string = '&'.join(f"{k}={v}" for k, v in sorted_params)
    sign_string += secret_key

    return hmac.new(
        secret_key.encode('utf-8'),
        sign_string.encode('utf-8'),
        hashlib.sha256
    ).hexdigest()

# === Создание платежа ===
data = {
    "merchant_id": "merch_abc123",
    "order_id": "order_001",
    "amount": 1000,
    "currency": "RUB",
    "callback_url": "https://your-site.com/webhook",
    "description": "Оплата заказа #001"
}

data["sign"] = generate_signature(data, SECRET_KEY)

response = requests.post(
    f"{BASE_URL}/api/v1/invoice/create",
    json=data,
    headers={"X-Api-Key": API_KEY}
)

result = response.json()
print(result)

# Ответ:
# {
#   "status": "success",
#   "payment_id": "inv_20250315_A1B2C3D4",
#   "payment_url": "https://..../select-operator/inv_20250315_A1B2C3D4",
#   "details": {
#     "original_amount": 1000,
#     "total_amount": 1012,     # с маркером
#     "marker": 12,
#     "amount_usdt": 12.97,
#     "expires_at": "2025-03-15T13:30:00+00:00"
#   }
# }

# Перенаправьте клиента на payment_url
print(f"Ссылка для оплаты: {result['payment_url']}")

const crypto = require('crypto');
const axios = require('axios');

const API_KEY = 'pk_live_ваш_api_ключ';
const SECRET_KEY = 'sk_live_ваш_секретный_ключ';
const BASE_URL = 'https://sandbox.reptiloid.vg'; // Для тестов

// === Генерация подписи ===
function generateSignature(data, secretKey) {
  const SIGN_FIELDS = ['merchant_id', 'order_id', 'amount', 'currency',
                       'user_id', 'callback_url'];

  const signData = {};
  for (const [k, v] of Object.entries(data)) {
    if (!SIGN_FIELDS.includes(k) || v === null || v === undefined) continue;
    signData[k] = (typeof v === 'number' && v === Math.floor(v))
      ? Math.floor(v) : v;
  }

  const sorted = Object.entries(signData).sort(([a], [b]) => a.localeCompare(b));
  let signString = sorted.map(([k, v]) => `${k}=${v}`).join('&');
  signString += secretKey;

  return crypto.createHmac('sha256', secretKey)
    .update(signString, 'utf8')
    .digest('hex');
}

// === Создание платежа ===
async function createPayment() {
  const data = {
    merchant_id: 'merch_abc123',
    order_id: 'order_001',
    amount: 1000,
    currency: 'RUB',
    callback_url: 'https://your-site.com/webhook',
    description: 'Оплата заказа #001'
  };

  data.sign = generateSignature(data, SECRET_KEY);

  const response = await axios.post(
    `${BASE_URL}/api/v1/invoice/create`,
    data,
    { headers: { 'X-Api-Key': API_KEY } }
  );

  console.log(response.data);
  // Перенаправьте клиента на response.data.payment_url
}

createPayment();

<?php
$apiKey = 'pk_live_ваш_api_ключ';
$secretKey = 'sk_live_ваш_секретный_ключ';
$baseUrl = 'https://sandbox.reptiloid.vg'; // Для тестов

// === Генерация подписи ===
function generateSignature(array $data, string $secretKey): string {
    $signFields = ['merchant_id', 'order_id', 'amount', 'currency',
                   'user_id', 'callback_url'];

    $signData = [];
    foreach ($data as $k => $v) {
        if (!in_array($k, $signFields) || $v === null) continue;
        if (is_float($v) && $v == intval($v)) $v = intval($v);
        $signData[$k] = $v;
    }

    ksort($signData);
    $signString = http_build_query($signData, '', '&');
    $signString .= $secretKey;

    return hash_hmac('sha256', $signString, $secretKey);
}

// === Создание платежа ===
$data = [
    'merchant_id' => 'merch_abc123',
    'order_id' => 'order_001',
    'amount' => 1000,
    'currency' => 'RUB',
    'callback_url' => 'https://your-site.com/webhook',
    'description' => 'Оплата заказа #001'
];

$data['sign'] = generateSignature($data, $secretKey);

$ch = curl_init("$baseUrl/api/v1/invoice/create");
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_POSTFIELDS => json_encode($data),
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        "X-Api-Key: $apiKey"
    ],
    CURLOPT_RETURNTRANSFER => true,
]);

$response = json_decode(curl_exec($ch), true);
curl_close($ch);

echo "Payment URL: " . $response['payment_url'];
?>

const express = require('express');
const crypto = require('crypto');
const app = express();

app.use(express.json());

const SECRET_KEY = 'sk_live_ваш_секретный_ключ';

function verifyWebhook(payload, secretKey) {
  const SIGN_FIELDS = ['order_id', 'payment_id', 'status',
                       'amount', 'amount_usdt', 'timestamp'];

  const providedSign = payload.sign || '';
  const signData = {};

  for (const [k, v] of Object.entries(payload)) {
    if (!SIGN_FIELDS.includes(k) || k === 'sign' || v == null) continue;
    signData[k] = (typeof v === 'number' && v === Math.floor(v))
      ? Math.floor(v) : v;
  }

  const sorted = Object.entries(signData).sort(([a], [b]) => a.localeCompare(b));
  let signString = sorted.map(([k, v]) => `${k}=${v}`).join('&');
  signString += secretKey;

  const expectedSign = crypto.createHmac('sha256', secretKey)
    .update(signString, 'utf8')
    .digest('hex');

  return crypto.timingSafeEqual(
    Buffer.from(expectedSign), Buffer.from(providedSign)
  );
}

app.post('/webhook', (req, res) => {
  const payload = req.body;

  if (!verifyWebhook(payload, SECRET_KEY)) {
    return res.status(403).json({ status: 'error' });
  }

  if (payload.status === 'completed') {
    console.log(`Заказ ${payload.order_id} оплачен: ${payload.amount} RUB`);
    // creditUser(payload.order_id, payload.amount);
  }

  res.json({ status: 'ok' });
});

app.listen(3000);

<?php
$secretKey = 'sk_live_ваш_секретный_ключ';
$payload = json_decode(file_get_contents('php://input'), true);

// Проверка подписи
$signFields = ['order_id', 'payment_id', 'status',
               'amount', 'amount_usdt', 'timestamp'];

$signData = [];
foreach ($payload as $k => $v) {
    if (!in_array($k, $signFields) || $k === 'sign' || $v === null) continue;
    if (is_float($v) && $v == intval($v)) $v = intval($v);
    $signData[$k] = $v;
}

ksort($signData);
$signString = http_build_query($signData, '', '&') . $secretKey;
$expectedSign = hash_hmac('sha256', $signString, $secretKey);

if (!hash_equals($expectedSign, $payload['sign'] ?? '')) {
    http_response_code(403);
    echo json_encode(['status' => 'error']);
    exit;
}

// Обработка
if ($payload['status'] === 'completed') {
    // Зачислить средства
    error_log("Заказ {$payload['order_id']} оплачен: {$payload['amount']} RUB");
}

echo json_encode(['status' => 'ok']);
?>