Query a transaction

API_KEY="YOUR_API_KEY"
SECRET_KEY="YOUR_SECRET_KEY"
BASE_URL="https://api-sandbox.inspay.dev/merchant"
 
CANONICAL='{"id":"TXN-20261011-001","nonce":"e7f8a9b0","timestamp":"1791729147"}'
SIG=$(printf '%s' "$CANONICAL" | openssl dgst -sha256 -hmac "$SECRET_KEY" -hex | awk '{print $NF}')
 
curl -sS -X POST "$BASE_URL/transactions" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $API_KEY" \
  -H "x-signature: $SIG" \
  --data-binary "$CANONICAL"

import crypto from "node:crypto";
 
const API_KEY = "YOUR_API_KEY";
const SECRET_KEY = "YOUR_SECRET_KEY";
const BASE_URL = "https://api-sandbox.inspay.dev/merchant";
 
function jsonString(value) {
  let out = '"';
  for (const ch of String(value)) {
    const cp = ch.codePointAt(0);
    if (ch === '"') out += '\\"';
    else if (ch === "\\") out += "\\\\";
    else if (ch === "\b") out += "\\b";
    else if (ch === "\f") out += "\\f";
    else if (ch === "\n") out += "\\n";
    else if (ch === "\r") out += "\\r";
    else if (ch === "\t") out += "\\t";
    else if (cp < 0x20 || cp > 0x7e) {
      if (cp > 0xffff) {
        const adj = cp - 0x10000;
        const hi = 0xd800 + (adj >> 10);
        const lo = 0xdc00 + (adj & 0x3ff);
        out += "\\u" + hi.toString(16).padStart(4, "0");
        out += "\\u" + lo.toString(16).padStart(4, "0");
      } else {
        out += "\\u" + cp.toString(16).padStart(4, "0");
      }
    } else out += ch;
  }
  return out + '"';
}
 
const body = {
  id: "TXN-20261011-001",
  timestamp: Math.floor(Date.now() / 1000),
  nonce: crypto.randomBytes(8).toString("hex"),
};
const canonical = "{" + Object.keys(body).sort().map((key) => jsonString(key) + ":" + jsonString(String(body[key]))).join(",") + "}";
const signature = crypto.createHmac("sha256", SECRET_KEY).update(canonical).digest("hex");
const res = await fetch(BASE_URL + "/transactions", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "x-api-key": API_KEY,
    "x-signature": signature,
  },
  body: canonical,
});
console.log(res.status, await res.text());

import hashlib
import hmac
import json
import secrets
import time
import urllib.error
import urllib.request
 
API_KEY = "YOUR_API_KEY"
SECRET_KEY = "YOUR_SECRET_KEY"
BASE_URL = "https://api-sandbox.inspay.dev/merchant"
 
body = {
    "id": "TXN-20261011-001",
    "timestamp": int(time.time()),
    "nonce": secrets.token_hex(8),
}
payload = {k: str(v) for k, v in body.items() if v is not None}
canonical = json.dumps(payload, sort_keys=True, separators=(",", ":"))
signature = hmac.new(SECRET_KEY.encode(), canonical.encode(), hashlib.sha256).hexdigest()
request = urllib.request.Request(
    BASE_URL + "/transactions",
    data=canonical.encode(),
    method="POST",
    headers={
        "Content-Type": "application/json",
        "x-api-key": API_KEY,
        "x-signature": signature,
    },
)
try:
    with urllib.request.urlopen(request) as response:
        print(response.status, response.read().decode())
except urllib.error.HTTPError as error:
    print(error.code, error.read().decode())