Coastal Pay API

import requests
import hmac
import hashlib

API_KEY = "cpay_live_xxxxxxxxxxxxx"
BASE_URL = "https://api-pay.coastalai.dev"
WEBHOOK_SECRET = "your_webhook_secret"

headers = {"Authorization": f"Bearer {API_KEY}"}

# --- Create a payment ---
def create_payment():
    payload = {
        "merchant_id": "merch_abc123",
        "customer_id": "cust_789",
        "transaction_id": "txn_456",
        "amount_usd": 50.00,
        "currency": "BTC",
        "callback_url": "https://your-server.com/webhooks/crypto"
    }

    response = requests.post(
        f"{BASE_URL}/api/v1/payments",
        json=payload,
        headers=headers
    )
    response.raise_for_status()
    data = response.json()

    print(f"Payment created: {data['payment_id']}")
    print(f"Send {data['crypto_amount']} BTC to: {data['wallet_address']}")
    return data

# --- Check payment status ---
def check_status(payment_id):
    response = requests.get(
        f"{BASE_URL}/api/v1/payments/{payment_id}/status",
        headers=headers
    )
    response.raise_for_status()
    data = response.json()

    print(f"Status: {data['status']}")
    return data

# --- Verify webhook signature ---
def verify_webhook(raw_body: bytes, signature: str) -> bool:
    expected = hmac.new(
        WEBHOOK_SECRET.encode(),
        raw_body,
        hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(expected, signature)

# Flask webhook handler example
from flask import Flask, request, jsonify

app = Flask(__name__)

@app.route("/webhooks/crypto", methods=["POST"])
def handle_webhook():
    signature = request.headers.get("X-Coastal-Signature", "")

    if not verify_webhook(request.data, signature):
        return jsonify({"error": "Invalid signature"}), 401

    event = request.get_json()
    print(f"Payment {event['payment_id']} is now {event['status']}")

    return jsonify({"received": True}), 200

<?php

$apiKey       = 'cpay_live_xxxxxxxxxxxxx';
$baseUrl      = 'https://api-pay.coastalai.dev';
$webhookSecret = 'your_webhook_secret';

// --- Create a payment ---
function createPayment() {
    global $apiKey, $baseUrl;

    $payload = json_encode([
        'merchant_id'    => 'merch_abc123',
        'customer_id'    => 'cust_789',
        'transaction_id' => 'txn_456',
        'amount_usd'     => 50.00,
        'currency'       => 'BTC',
        'callback_url'   => 'https://your-server.com/webhooks/crypto',
    ]);

    $ch = curl_init("$baseUrl/api/v1/payments");
    curl_setopt_array($ch, [
        CURLOPT_POST           => true,
        CURLOPT_POSTFIELDS     => $payload,
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_HTTPHEADER     => [
            "Authorization: Bearer $apiKey",
            'Content-Type: application/json',
        ],
    ]);

    $response = curl_exec($ch);
    $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);

    if ($httpCode !== 201) {
        throw new \Exception("API error: $response");
    }

    $data = json_decode($response, true);
    echo "Payment created: " . $data['payment_id'] . "\n";
    echo "Send " . $data['crypto_amount'] . " BTC to: " . $data['wallet_address'] . "\n";

    return $data;
}

// --- Check payment status ---
function checkStatus($paymentId) {
    global $apiKey, $baseUrl;

    $ch = curl_init("$baseUrl/api/v1/payments/$paymentId/status");
    curl_setopt_array($ch, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_HTTPHEADER     => [
            "Authorization: Bearer $apiKey",
        ],
    ]);

    $response = curl_exec($ch);
    curl_close($ch);

    $data = json_decode($response, true);
    echo "Status: " . $data['status'] . "\n";

    return $data;
}

// --- Verify webhook signature ---
function verifyWebhook($rawBody, $signature) {
    global $webhookSecret;

    $expected = hash_hmac('sha256', $rawBody, $webhookSecret);
    return hash_equals($expected, $signature);
}

// Webhook handler
$rawBody   = file_get_contents('php://input');
$signature = $_SERVER['HTTP_X_COASTAL_SIGNATURE'] ?? '';

if (!verifyWebhook($rawBody, $signature)) {
    http_response_code(401);
    echo json_encode(['error' => 'Invalid signature']);
    exit;
}

$event = json_decode($rawBody, true);
echo "Payment " . $event['payment_id'] . " is now " . $event['status'] . "\n";

http_response_code(200);
echo json_encode(['received' => true]);
?>