Authentication

import crypto from "node:crypto";

function signRequest({ method, path, body, secret, keyId }: {
  method: string;
  path: string;
  body: string; // exact JSON bytes you will send
  secret: string; // your HMAC signing secret — <your_secret>
  keyId: string;
}) {
  const timestamp = new Date().toISOString();
  const nonce = crypto.randomBytes(32).toString("hex"); // 64 hex chars
  const bodyHash = body
    ? crypto.createHash("sha256").update(body).digest("hex")
    : "";
  const canonical = [method, path, timestamp, nonce, bodyHash].join("\n") + "\n";
  const signature = crypto
    .createHmac("sha256", secret)
    .update(canonical)
    .digest("base64");
  return {
    "X-Zennopay-Key-Id": keyId,
    "X-Zennopay-Timestamp": timestamp,
    "X-Zennopay-Nonce": nonce,
    "X-Zennopay-Signature": signature,
  };
}

import hmac, hashlib, base64, secrets
from datetime import datetime, timezone

def sign_request(method: str, path: str, body: bytes, secret: str, key_id: str):
    timestamp = datetime.now(timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ")
    nonce = secrets.token_hex(32)  # 64 hex chars
    body_hash = hashlib.sha256(body).hexdigest() if body else ""
    canonical = "\n".join([method, path, timestamp, nonce, body_hash]) + "\n"
    signature = base64.b64encode(
        hmac.new(secret.encode(), canonical.encode(), hashlib.sha256).digest()
    ).decode()
    return {
        "X-Zennopay-Key-Id": key_id,
        "X-Zennopay-Timestamp": timestamp,
        "X-Zennopay-Nonce": nonce,
        "X-Zennopay-Signature": signature,
    }