Autenticação

{timestamp}.{METHOD}.{canonicalPath}.{sha256hex(rawBody)}

import { createHash, createHmac } from "node:crypto";

function canonicalQuery(params = {}) {
  // params: { chave: string | string[] }
  const parts = Object.keys(params)
    .sort()
    .flatMap((key) =>
      []
        .concat(params[key])
        .sort()
        .map((value) => `${encodeURIComponent(key)}=${encodeURIComponent(value)}`),
    );
  return parts.length ? `?${parts.join("&")}` : "";
}

function sign({ keyId, secret, method, path, query = {}, body = "" }) {
  const timestamp = Math.floor(Date.now() / 1000).toString();
  const bodyHash = createHash("sha256").update(body).digest("hex");
  const canonicalPath = `${path}${canonicalQuery(query)}`;
  const canonical = `${timestamp}.${method.toUpperCase()}.${canonicalPath}.${bodyHash}`;
  const signature = createHmac("sha256", secret).update(canonical).digest("hex");
  return {
    "X-Api-Key": keyId,
    "X-Timestamp": timestamp,
    "X-Signature": signature,
  };
}

const body = JSON.stringify({ cpf: "52998224725", name: "Maria da Silva" });

const res = await fetch("https://api.prismapay.com.br/v1/accounts/pf", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "Idempotency-Key": crypto.randomUUID(),
    ...sign({
      keyId: process.env.PRISMAPAY_KEY_ID,
      secret: process.env.PRISMAPAY_SECRET,
      method: "POST",
      path: "/v1/accounts/pf",
      body,
    }),
  },
  body,
});