Accept card, bank and USSD payments with one checkout link

curl https://checkout.paybeta.ng/api/v1/payments \
  -H "P-API-KEY: $PAYBETA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "mode": "test",
    "reference": "ORDER-1001",
    "amount": 25000,
    "description": "Pro plan, monthly",
    "customer": { "email": "ada@example.com" },
    "redirect_url": "https://shop.example/thanks"
  }'

// Laravel
$payment = Http::withHeaders(['P-API-KEY' => config('services.paybeta.key')])
    ->post('https://checkout.paybeta.ng/api/v1/payments', [
        'mode' => 'test',
        'reference' => $order->reference,
        'amount' => 25000,
        'customer' => ['email' => $order->email],
        'redirect_url' => route('orders.thanks', $order),
    ])
    ->throw();

return redirect($payment->json('data.checkout_url'));

const res = await fetch('https://checkout.paybeta.ng/api/v1/payments', {
  method: 'POST',
  headers: {
    'P-API-KEY': process.env.PAYBETA_API_KEY,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    mode: 'test',
    reference: order.reference,
    amount: 25000,
    customer: { email: order.email },
    redirect_url: 'https://shop.example/thanks',
  }),
});

const { data } = await res.json();
// Send the customer to data.checkout_url

// 201 Created
{
  "status": "success",
  "data": {
    "id": "pay_k3j9x2…",
    "reference": "ORDER-1001",
    "status": "pending",
    "mode": "test",
    "amount": 25000,
    "fee": 350,
    "checkout_url": "https://checkout.paybeta.ng/pay/pay_k3j9x2…"
  }
}

// Signature = HMAC SHA256 of data.reference, keyed with your secret key
const expected = crypto
  .createHmac('sha256', process.env.PAYBETA_SECRET_KEY)
  .update(req.body.data.reference)
  .digest('hex');

const given = req.get('Signature') || '';
const valid = given.length === expected.length
  && crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(given));

if (valid && req.body.eventType === 'transaction.successful') {
  await fulfil(req.body.data.reference);
}