Everyone. Everywhere.

import crypto from 'node:crypto';

const path = '/api/v1/merchant/checkout/sessions';
const body = JSON.stringify({
  merchant_reference: 'ORDER-1001',
  amount: '249.50',
  currency: 'SLE',
  success_url: 'https://merchant.test/paid',
  cancel_url: 'https://merchant.test/cart'
});

const timestamp = new Date().toISOString();
const signature = crypto
  .createHmac('sha256', process.env.TENKIPAY_SECRET_KEY)
  .update([timestamp, 'POST', path, body].join('\n'))
  .digest('hex');

const response = await fetch(`https://me.tenkipay.com${path}`, {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'X-TenkiPay-Key': process.env.TENKIPAY_PUBLIC_KEY,
    'X-TenkiPay-Timestamp': timestamp,
    'X-TenkiPay-Signature': signature,
    'Idempotency-Key': 'checkout:ORDER-1001:v1'
  },
  body
});

const { data } = await response.json();
res.redirect(303, data.checkout_url);