import os, requests

payload = {
    'client_id':     os.getenv('CCPAG_CLIENT_ID'),
    'client_secret': os.getenv('CCPAG_CLIENT_SECRET'),
    'nome':          'Ellen Ripley',
    'cpf':           '98765432100',
    'valor':         299.90,
    'descricao':     'Premium plan — Order #4821',
    'urlnoty':       'https://yoursite.com/webhook/ccpag',
}

r = requests.post('https://api.ccpaglobal.com/v2/pix/qrcode.php', data=payload)
data = r.json()

if r.status_code == 200 and 'qrcode' in data:
    print(f"QR Code: {data['qrcode']}")
    print(f"Transaction ID: {data['transactionId']}")
else:
    print(f"Error: {data.get('message', 'Unknown')}")

curl -X POST https://api.ccpaglobal.com/v2/pix/qrcode.php \
  -d "client_id=$CCPAG_CLIENT_ID" \
  -d "client_secret=$CCPAG_CLIENT_SECRET" \
  -d "nome=Ellen Ripley" \
  -d "cpf=98765432100" \
  -d "valor=299.90" \
  -d "descricao=Premium plan — Order #4821" \
  -d "urlnoty=https://yoursite.com/webhook/ccpag"

import os, requests

r = requests.get('https://api.ccpaglobal.com/v2/pix/status.php', params={
    'client_id':      os.getenv('CCPAG_CLIENT_ID'),
    'client_secret':  os.getenv('CCPAG_CLIENT_SECRET'),
    'transaction_id': '0eaf56ba401c9bfa5d61mkm3ch551oyt',
})

tx = r.json()['transaction']
print(f"Status: {tx['status']}")
if tx['status'] == 'PAID':
    print(f"Paid at: {tx['paid_at']}")

curl "https://api.ccpaglobal.com/v2/pix/status.php\
?client_id=$CCPAG_CLIENT_ID\
&client_secret=$CCPAG_CLIENT_SECRET\
&transaction_id=0eaf56ba401c9bfa5d61mkm3ch551oyt"

import os, requests

r = requests.get('https://api.ccpaglobal.com/v2/account/balance.php', params={
    'client_id':     os.getenv('CCPAG_CLIENT_ID'),
    'client_secret': os.getenv('CCPAG_CLIENT_SECRET'),
})
data = r.json()
print(f"Available: R$ {data['balance']['available']}")

curl "https://api.ccpaglobal.com/v2/account/balance.php\
?client_id=$CCPAG_CLIENT_ID&client_secret=$CCPAG_CLIENT_SECRET"

const axios = require('axios');

axios.get('https://api.ccpaglobal.com/v2/account/balance.php', {
  params: {
    client_id:     process.env.CCPAG_CLIENT_ID,
    client_secret: process.env.CCPAG_CLIENT_SECRET,
  }
}).then(({ data }) => {
  console.log(`Available: R$ ${data.balance.available}`);
});

from flask import Flask, request
import json
from datetime import datetime

app = Flask(__name__)

@app.route('/webhook/ccpag', methods=['POST'])
def webhook():
    data = request.get_json()
    if not data:
        return 'Invalid JSON', 400

    with open('webhook.log', 'a') as f:
        f.write(f"{datetime.now()} — {json.dumps(data)}\n")

    if data.get('transactionType') == 'RECEIVEPIX' and data.get('status') == 'PAID':
        release_product(data['transactionId'], data['amount'])

    return 'OK', 200

const express = require('express');
const fs = require('fs');
const app = express();

app.use(express.json());

app.post('/webhook/ccpag', (req, res) => {
  const data = req.body;

  fs.appendFileSync('webhook.log',
    `${new Date().toISOString()} — ${JSON.stringify(data)}\n`
  );

  if (data.transactionType === 'RECEIVEPIX' && data.status === 'PAID') {
    releaseProduct(data.transactionId, data.amount);
  }

  res.status(200).send('OK');
});

app.listen(3000);

import hmac, hashlib, os
from flask import Flask, request, abort

app = Flask(__name__)
WEBHOOK_SECRET = os.getenv('CCPAG_WEBHOOK_SECRET')

@app.route('/webhook', methods=['POST'])
def webhook():
    body = request.get_data()
    sig  = request.headers.get('X-CCPAG-Signature', '')
    expected = 'sha256=' + hmac.new(
        WEBHOOK_SECRET.encode(), body, hashlib.sha256
    ).hexdigest()

    if not hmac.compare_digest(expected, sig):
        abort(401, 'Invalid signature')

    data = request.get_json()
    if data.get('transactionType') == 'RECEIVEPIX' and data.get('status') == 'PAID':
        release_product(data['transactionId'], data['amount'])

    return 'OK', 200

const express = require('express');
const crypto  = require('crypto');

const app    = express();
const SECRET = process.env.CCPAG_WEBHOOK_SECRET;

app.post('/webhook', express.raw({ type: 'application/json' }), (req, res) => {
    const sig      = req.headers['x-ccpag-signature'] || '';
    const expected = 'sha256=' + crypto
        .createHmac('sha256', SECRET)
        .update(req.body)
        .digest('hex');

    if (!crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(sig))) {
        return res.status(401).send('Invalid signature');
    }

    const data = JSON.parse(req.body);
    if (data.transactionType === 'RECEIVEPIX' && data.status === 'PAID') {
        releaseProduct(data.transactionId, data.amount);
    }
    res.status(200).send('OK');
});

app.listen(3000);