curl -X POST https://api-sandbox.y.uno/v1/checkout/sessions \
  -H "public-api-key: $YUNO_PUBLIC_API_KEY" \
  -H "private-secret-key: $YUNO_PRIVATE_SECRET_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "account_id": "'$YUNO_ACCOUNT_ID'",
    "merchant_order_id": "order-0001",
    "payment_description": "Test order",
    "country": "US",
    "amount": { "currency": "USD", "value": 25 }
  }'

const res = await fetch(`${YUNO_API_URL}/v1/checkout/sessions`, {
  method: "POST",
  headers: {
    "public-api-key": "<PUBLIC_API_KEY>",
    "private-secret-key": "<PRIVATE_SECRET_KEY>",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    account_id: YUNO_ACCOUNT_ID,
    merchant_order_id: "order-0001",
    payment_description: "Test order",
    country: "US",
    amount: { currency: "USD", value: 25 }
  })
});
const { checkout_session } = await res.json();

import requests

res = requests.post(
    f"{YUNO_API_URL}/v1/checkout/sessions",
    headers={
        "public-api-key": PUBLIC_API_KEY,
        "private-secret-key": PRIVATE_SECRET_KEY,
    },
    json={
        "account_id": ACCOUNT_ID,
        "merchant_order_id": "order-0001",
        "payment_description": "Test order",
        "country": "US",
        "amount": {"currency": "USD", "value": 25},
    },
)
checkout_session = res.json()["checkout_session"]

curl https://api-sandbox.y.uno/v1/payments/$PAYMENT_ID \
  -H "public-api-key: $YUNO_PUBLIC_API_KEY" \
  -H "private-secret-key: $YUNO_PRIVATE_SECRET_KEY"

const res = await fetch(`${YUNO_API_URL}/v1/payments/${paymentId}`, {
  headers: {
    "public-api-key": "<PUBLIC_API_KEY>",
    "private-secret-key": "<PRIVATE_SECRET_KEY>"
  }
});
const { payment } = await res.json();

if (payment.status === "SUCCEEDED") {
  fulfillOrder(payment.merchant_order_id);
}

res = requests.get(
    f"{YUNO_API_URL}/v1/payments/{payment_id}",
    headers={
        "public-api-key": PUBLIC_API_KEY,
        "private-secret-key": PRIVATE_SECRET_KEY,
    },
)
payment = res.json()["payment"]

if payment["status"] == "SUCCEEDED":
    fulfill_order(payment["merchant_order_id"])

# Send a test event to your own endpoint
curl -X POST https://your-app.example/webhooks/yuno \
  -H "Content-Type: application/json" \
  -d '{
    "type": "payment",
    "type_event": "payment.purchase",
    "version": 2,
    "data": { "payment": { "status": "SUCCEEDED" } }
  }'

app.post("/webhooks/yuno", express.raw({ type: "application/json" }), (req, res) => {
  // 1. Verify the HMAC signature before trusting the body
  //    (see Verify webhook signatures)
  if (!verifyYunoSignature(req)) return res.sendStatus(401);
  const event = JSON.parse(req.body);

  // 2. Acknowledge events you do not handle
  if (event.type_event !== "payment.purchase") return res.sendStatus(200);

  // 3. Yuno retries on failure and sends one event per status change:
  //    act once per payment and status
  const payment = event.data.payment;
  if (!alreadyHandled(payment.id, payment.status)) {
    updateOrder(payment);
  }

  // Respond fast
  res.sendStatus(200);
});

@app.post("/webhooks/yuno")
def yuno_webhook():
    # 1. Verify the HMAC signature before trusting the body
    #    (see Verify webhook signatures)
    if not verify_yuno_signature(request):
        return "", 401
    event = request.get_json()

    # 2. Acknowledge events you do not handle
    if event["type_event"] != "payment.purchase":
        return "", 200

    # 3. Yuno retries on failure and sends one event per status change:
    #    act once per payment and status
    payment = event["data"]["payment"]
    if not already_handled(payment["id"], payment["status"]):
        update_order(payment)

    # Respond fast
    return "", 200