Pruebas locales

pnpm dev
# o
bun run dev

import express from "express";
import { verifySimplePayWebhook } from "./verify-simplepay-webhook";

const app = express();

app.post(
  "/webhooks/simplepay",
  express.raw({ type: "application/json" }),
  async (request, response) => {
    const rawBody = request.body.toString("utf8");

    verifySimplePayWebhook({
      rawBody,
      signatureHeader: request.header("SimplePay-Signature") ?? null,
      secret: process.env.SIMPLEPAY_WEBHOOK_SECRET!,
    });

    const event = JSON.parse(rawBody);
    await processSimplePayEvent(event);

    response.sendStatus(204);
  },
);

app.listen(3000);

dev-tunnel http 3000

curl -sS -X POST "https://api.simplepay.mx/v1/webhook_endpoints" \
  -H "Authorization: Bearer $SIMPLEPAY_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: webhook_endpoint_dev_tunnel_v1" \
  -d '{
    "url": "https://dev-tunnel.example.com/webhooks/simplepay",
    "description": "Local development tunnel",
    "enabled_events": ["booking.confirmed", "booking.expired", "booking.cancelled"]
  }'

curl -sS -X POST "https://api.simplepay.mx/v1/events/spwevt_0123456789abcdef0123456789abcdef/replay" \
  -H "Authorization: Bearer $SIMPLEPAY_API_KEY"

import crypto from "node:crypto";

export function signTestPayload(payload: string, secret: string) {
  const timestamp = Math.floor(Date.now() / 1000);
  const signature = crypto
    .createHmac("sha256", secret)
    .update(`${timestamp}.${payload}`)
    .digest("hex");

  return `t=${timestamp},v1=${signature}`;
}