POST /webhook HTTP/1.1
Host: xxx
Content-Type: application/json
Signature-Method: HMAC-SHA256
Signature: D29qUeeyV14HFG6DiuyFRsGLILlxzL8s7okeRMHjzFU=
Timestamp: 1756879969964

{
    "eventType": "CARD_TRANSACTION.CREATED",
    "apiVersion": "v3",
    "code": "000000",
    "message": "",
    "resource": "{\"id\":\"1234567890\",\"cardId\":\"4111111111111111\",\"createTime\":\"1756879969964\",\"processingCode\":\"00\",\"accountId\":\"ACC987654321\",\"transactionAmount\":\"150.00\",\"transactionCurrency\":\"USD\",\"billingAmount\":\"150.00\",\"billingCurrency\":\"USD\",\"merchantName\":\"Example Store\",\"merchantCity\":\"New York\",\"merchantCountry\":\"USA\",\"transactionType\":\"authorization\",\"mcc\":\"5812\"}",
    "createTime": "1756879969964",
    "id": "60633733-2b0d-41a2-a6b4-12b3ba085428"
}

{
  "received": true
}

@Slf4j
public class Example {
    private static final String HMAC_SHA256 = "HmacSHA256";

    // generate sign
    public static String sign(String data, String secret) {
        try {
            Mac mac = Mac.getInstance(HMAC_SHA256);
            SecretKeySpec secretKey = new SecretKeySpec(secret.getBytes(StandardCharsets.UTF_8), HMAC_SHA256);
            mac.init(secretKey);
            byte[] hash = mac.doFinal(data.getBytes(StandardCharsets.UTF_8));
            return Base64.getEncoder().encodeToString(hash);
        } catch (Exception e) {
            log.error("sign error", e);
            return null;
        }
    }

    // verify sign
    public static boolean verify(String data, String signature, String secret) {
        try {
            String computedSignature = sign(data, secret);
            return computedSignature != null && computedSignature.equals(signature);
        } catch (Exception e) {
            return false;
        }
    }

    public static void main(String[] args) {
        String data = "{\"a\":\"b\"}";
        String secret = "6d8557a0cded4483b8d9c3cea0272cd7";
        String signature = sign(data, secret);
        System.out.println(signature);
    }
	//sign = Sj972aD0pmG+zClb7mKoUBZbQd5KlAyxaCKHUSMpBME=
}

const crypto = require('crypto');

/**
 * Generates HMAC-SHA256 signature
 * @param {string} data - The data to be signed
 * @param {string} secret - The secret key for signing
 * @returns {string|null} Base64 encoded signature, null if error occurs
 */
function sign(data, secret) {
    try {
        // Create HMAC-SHA256 hash object
        const hmac = crypto.createHmac('sha256', secret);
        // Update with data using UTF-8 encoding
        hmac.update(data, 'utf8');
        // Calculate signature and return as Base64
        return hmac.digest('base64');
    } catch (error) {
        console.error('Signing error:', error);
        return null;
    }
}

/**
 * Verifies HMAC-SHA256 signature
 * @param {string} data - The original data
 * @param {string} signature - The signature to verify
 * @param {string} secret - The secret key for verification
 * @returns {boolean} True if verification succeeds, false otherwise
 */
function verify(data, signature, secret) {
    try {
        const computedSignature = sign(data, secret);
        return computedSignature !== null && computedSignature === signature;
    } catch (error) {
        console.error('Verification error:', error);
        return false;
    }
}

// Example usage
function main() {
    const data = '{"a":"b"}';
    const secret = '6d8557a0cded4483b8d9c3cea0272cd7';
    const signature = sign(data, secret);
    console.log('Generated signature:', signature);
    
    // Verify the generated signature
    const isValid = verify(data, signature, secret);
    console.log('Signature valid:', isValid);
}

// Run example
main();
    

package main

import (
	"crypto/hmac"
	"crypto/sha256"
	"encoding/base64"
	"fmt"
	"log"
)

// sign generates an HMAC-SHA256 signature for the given data using the secret key
// Returns the base64-encoded signature or an error if something fails
func sign(data, secret string) (string, error) {
	// Create a new HMAC-SHA256 hasher using the secret key
	h := hmac.New(sha256.New, []byte(secret))
	
	// Write the data to be signed
	_, err := h.Write([]byte(data))
	if err != nil {
		return "", fmt.Errorf("failed to write data: %w", err)
	}
	
	// Calculate the HMAC hash and encode it as base64
	signature := base64.StdEncoding.EncodeToString(h.Sum(nil))
	return signature, nil
}

// verify checks if the provided signature matches the computed signature for the data
// Returns true if verification succeeds, false otherwise
func verify(data, signature, secret string) bool {
	// Compute the expected signature
	computedSignature, err := sign(data, secret)
	if err != nil {
		log.Printf("Verification error: %v", err)
		return false
	}
	
	// Compare the computed signature with the provided one
	return computedSignature == signature
}

func main() {
	data := `{"a":"b"}`
	secret := "6d8557a0cded4483b8d9c3cea0272cd7"
	
	// Generate signature
	signature, err := sign(data, secret)
	if err != nil {
		log.Fatalf("Failed to generate signature: %v", err)
	}
	fmt.Println("Generated signature:", signature)
	
	// Verify signature
	isValid := verify(data, signature, secret)
	fmt.Println("Signature valid:", isValid)
}
    

{
    "id": "6a94b9c7-40d6-4007-a5d0-a96d714a1108",
    "apiVersion": "v3",
    "code": "000000",
    "message": "",
    "createTime": "1757659595371",
    "eventType": "ACCOUNT.REGISTERED",
    "resource": "..."
}

{
    "id": "6a94b9c7-40d6-4007-a5d0-a96d714a1108",
    "apiVersion": "v3", 
    "code": "000000",
    "message": "",
    "createTime": "1757659595371",
    "eventType": "KYB.UPDATED",
    "resource": "..."
}

{
    "id": "6a94b9c7-40d6-4007-a5d0-a96d714a1108",
    "eventType": "CARD.CREATED",
    "code": "000000",
    "message": "",
    "resource": "...",
    "apiVersion": "v3",
    "createTime":"1756879969964"
}

{
  "code": "000000",
  "message": "success",
  "data": {
    "id": "ba0a5c6d-ee96-4c44-82f1-dc306d325d8e",
    "accountId": "ba0a5c6d-ee96-4c44-82f1-dc306d325d8e",
    "cardId": "ba0a5c6d-ee96-4c44-82f1-dc306d325d8e",
    "shippingAddress": {
      "addressLine1": "123 Main Street",
      "addressLine2": "Apt 4B",
      "city": "New York",
      "state": "NY",
      "country": "US",
      "postalCode": "10001"
    },
    "phoneNumber": "13765987596",
    "email": "[email protected]",
    "phoneCountryCode": "86",
    "firstName": "John",
    "lastName": "Smith",
    "realName": "John Smith",
    "realFirstName": "John",
    "realLastName": "Smith",
    "idNumber": "A123456789",
    "idType": "PASSPORT",
    "dob": "1985-06-15",
    "expirationDate": "2026-12-31",
    "displayStatus": "ACTIVE",
    "batchNumber": "ba0a5c6d-ee96-4c44-82f1-dc306d325d8e",
    "cardStyle": "Plastic"
  }
}

{
    "apiVersion": "v3",
    "code": "000000",
    "createTime": "1767583925529",
    "eventType": "PHYSICAL_CARD.SHIPPING",
    "id": "57d40040-5218-4504-b991-28193c379d24",
    "message": "",
    "resource": "{"cardId":"d9485cd6-6753-449f-8cd6-222ba54a84df","expressCompany":"顺丰速运","trackingNumber":"089765463456765"}"
}

{
    "apiVersion": "v3",
    "code": "000000",
    "createTime": "1764830001154",
    "eventType": "PHYSICAL_CARD.VERIFY",
    "id": "92dd0b86-8040-4728-89c6-faefc8293c6b",
    "message": "",
    "resource": "{"cardId":"ca3a6f77-307b-49aa-ba8c-1d0f9ebebd4c","firstName":"Knope","lastName":"Leslie","status":"Success","reason":"","accountId":"78f4348c-cf66-4578-9ecc-21ace7b96148"}"
}

{
    "id": "1f74664d-7680-4038-ac0f-16e62d7d0372",
    "accountId": "a1d699e1-d1a7-4125-9953-4f03be19f6b3",
    "currency": "USD",
    "amount": "100",
    "fee": "0",
    "type": 1,
    "status": "CLOSED",
    "createTime": "1755498145103"
}

{
    "id": "6a94b9c7-40d6-4007-a5d0-a96d714a1108",
    "eventType": "CARD_TRANSACTION.CREATED",
    "code": "000000",
    "message": "",
    "resource": "...",
    "apiVersion": "v3",
    "createTime":"1756879969964"
}

{
    "id": "6a94b9c7-40d6-4007-a5d0-a96d714a1108",
    "eventType": "CARD.BALANCE.NEGATIVE",
    "code": "000000",
    "message": "",
    "resource": "...",
    "apiVersion": "v3",
    "createTime":"1756879969964"
}

{
    "id": "6a94b9c7-40d6-4007-a5d0-a96d714a1108",
    "code": "000000",
    "message": "",
    "eventType": "BUDGET.CREATED",
    "resource": "...",
    "apiVersion": "v3",
    "createTime":"1756879969964"
}

{
    "id": "6a94b9c7-40d6-4007-a5d0-a96d714a1108",
    "code": "000000",
    "message": "",
    "eventType": "BUDGET_TRANSACTION.CREATED",
    "resource": "...",
    "apiVersion": "v3",
    "createTime":"1756879969964"
}

{
    "id": "6a94b9c7-40d6-4007-a5d0-a96d714a1108",
    "code": "000000",
    "message": "",
    "eventType": "CARDHOLDER.CREATED",
    "resource": "...",
    "apiVersion": "v3",
    "createTime":"1756879969964"
}

{
    "id": "6a94b9c7-40d6-4007-a5d0-a96d714a1108",
    "code": "000000",
    "message": "",
    "apiVersion": "v3",
    "createTime": "1757659595371",
    "eventType": "BUSINESS_TRANSFER.PAYOUT.PAYMENT.CREATED",
    "resource": "..."
}

{
    "id": "6a94b9c7-40d6-4007-a5d0-a96d714a1108",
    "code": "000000",
    "message": "",
    "apiVersion": "v3",
    "createTime": "1757649535314",
    "eventType": "BUSINESS_TRANSFER.CREATED",
    "resource": "..."
}

{
    "id": "6a94b9c7-40d6-4007-a5d0-a96d714a1108",
    "code": "000000",
    "message": "",
    "createTime": "1757649535314",
    "eventType": "CARD.3DS.OTP",
    "resource": "..."
}

{
    "id": "6a94b9c7-40d6-4007-a5d0-a96d714a1108",
    "code": "000000",
    "message": "",
    "apiVersion": "v3",
    "createTime": "1757649535314",
    "eventType": "BUSINESS_ACCOUNT_TRANSACTION.CREATED",
    "resource": "..."
}

{
    "id": "6a94b9c7-40d6-4007-a5d0-a96d714a1108",
    "code": "000000",
    "message": "",
    "createTime": "1757649535314",
    "eventType": "CARD.3DS.OTP",
    "resource": "..."
}