ابنِ مع Baynoy

curl https://api.baynoy.com/v1/payments \
  -H "Authorization: Bearer sk_test_••••" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
    "amount": 4900,
    "currency": "USD",
    "methods": ["card","usdc"],
    "payout":  { "type": "bank", "currency": "USD" }
  }'

import crypto from "node:crypto";

export async function POST(req: Request) {
  const header = req.headers.get("Baynoy-Signature")!; // t=...,v1=...
  const body = await req.text();
  const { t, v1 } = Object.fromEntries(
    header.split(",").map((p) => p.split("=")),
  );
  const expected = crypto
    .createHmac("sha256", process.env.BAYNOY_WHSEC!)
    .update(`${t}.${body}`)
    .digest("hex");
  if (v1 !== expected) return new Response("bad signature", { status: 401 });
  const evt = JSON.parse(body); // evt.type === "payment.succeeded"
  return new Response("ok");
}