Odesin Geliştirici Merkezi

const BASE = "https://odesin.com";
const API_KEY = "sk_live_XXXXXXXXXXXX";

function odesinSignPost(apiKey, rawBody) {
  const ts = Math.floor(Date.now() / 1000).toString();
  const enc = new TextEncoder();
  const payload = enc.encode(`${ts}\nPOST\n${rawBody}`);
  return crypto.subtle.importKey("raw", enc.encode(apiKey), { name: "HMAC", hash: "SHA-256" }, false, ["sign"])
    .then((key) => crypto.subtle.sign("HMAC", key, payload))
    .then((buf) => ({
      "x-odesin-timestamp": ts,
      "x-odesin-signature": Array.from(new Uint8Array(buf), (b) => b.toString(16).padStart(2, "0")).join(""),
    }));
}

async function startHostedCardCheckout(order) {
  const rawBody = JSON.stringify({
    mode: "card",
    amount: order.total,
    currency: "TRY",
    return_url: order.successUrl,
    callback_url: order.webhookUrl,
    customer_name: order.customerName,
    customer_email: order.customerEmail,
    customer_phone: order.customerPhone,
    description: order.description ?? "",
  });
  const sig = await odesinSignPost(API_KEY, rawBody);
  const res = await fetch(`${BASE}/api/payment/create-session`, {
    method: "POST",
    headers: { "Content-Type": "application/json", "x-api-key": API_KEY, ...sig },
    body: rawBody,
  });
  const data = await res.json();
  if (!res.ok) throw new Error(data.error ?? res.statusText);
  window.location.href = data.checkout_url;
}

import hashlib, hmac, time, json, requests

BASE = "https://odesin.com"
API_KEY = "sk_live_XXXXXXXXXXXX"

def odesin_sign_post(api_key: str, raw_body: str) -> dict:
    ts = str(int(time.time()))
    msg = f"${ts}\nPOST\n${raw_body}".encode("utf-8")
    sig = hmac.new(api_key.encode("utf-8"), msg, hashlib.sha256).hexdigest()
    return {"x-odesin-timestamp": ts, "x-odesin-signature": sig}

body = {
    "mode": "card",
    "amount": 199.90,
    "return_url": "https://magazaniz.com/tesekkur",
    "callback_url": "https://magazaniz.com/api/webhook",
    "customer_name": "Ali Veli",
    "customer_email": "ali@email.com",
    "customer_phone": "05321234567",
}
raw = json.dumps(body, separators=(",", ":"), ensure_ascii=False)
sig_h = odesin_sign_post(API_KEY, raw)
r = requests.post(
    f"{BASE}/api/payment/create-session",
    headers={"Content-Type": "application/json", "x-api-key": API_KEY, **sig_h},
    data=raw.encode("utf-8"),
)
r.raise_for_status()
checkout_url = r.json()["checkout_url"]

<?php
$base = "https://odesin.com";
$apiKey = getenv('ODESIN_API_KEY') ?: '';
$payload = [
    'mode' => 'card',
    'amount' => 199.90,
    'currency' => 'TRY',
    'return_url' => 'https://magazaniz.com/tesekkur',
    'callback_url' => 'https://magazaniz.com/api/webhook',
    'customer_name' => 'Ali Veli',
    'customer_email' => 'ali@email.com',
    'customer_phone' => '05321234567',
    'description' => 'Sipariş #4521',
];
$body = json_encode($payload, JSON_UNESCAPED_UNICODE);
$ts = (string) time();
$sig = hash_hmac('sha256', $ts . "
POST
" . $body, $apiKey);
$ch = curl_init($base . '/api/payment/create-session');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST => true,
    CURLOPT_POSTFIELDS => $body,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'x-api-key: ' . $apiKey,
        'x-odesin-timestamp: ' . $ts,
        'x-odesin-signature: ' . $sig,
    ],
]);
$raw = curl_exec($ch);
curl_close($ch);
$data = json_decode($raw, true);