OsayCore API Documentation

// Signature Base String:
// If POST/PUT/PATCH request with a body: "{timestamp}.{request_body_as_string}"
// If GET/DELETE request (no body): "{timestamp}." (timestamp followed by a dot)

// HMAC Algorithm: HMAC-SHA256
// Key: Your App Secret Key (bytes)
// Message: The Signature Base String (bytes)

// Example (Conceptual):
// request_body = '{"user_id": "...", "amount": 10.0}'
// timestamp = "1678886400" // Current Unix timestamp
// message = `${timestamp}.${request_body}`
// signature = hmac_sha256(your_app_secret_key.encode('utf-8'), message.encode('utf-8')).hexdigest()

# Conceptual Python code in your backend after user login validation
import requests
import hashlib
import hmac
import time
import json

OSAYCORE_API_KEY = "YOUR_APP_API_KEY"
OSAYCORE_SECRET_KEY = "YOUR_APP_SECRET_KEY"
OSAYCORE_BASE_URL = "https://api.osaycore.com/api"

def generate_hmac_signature(secret_key, timestamp, payload):
    message = f"{timestamp}.{payload}".encode('utf-8')
    signature = hmac.new(secret_key.encode('utf-8'), message, hashlib.sha256).hexdigest()
    return signature

def get_osaycore_user_jwt(your_internal_user_id):
    endpoint = f"{OSAYCORE_BASE_URL}/auth/generate-user-jwt"
    timestamp = str(int(time.time()))
    payload = json.dumps({"user_id": str(your_internal_user_id)})

    signature = generate_hmac_signature(OSAYCORE_SECRET_KEY, timestamp, payload)

    headers = {
        'Content-Type': 'application/json',
        'X-OSAYCORE-API-KEY': OSAYCORE_API_KEY,
        'X-OSAYCORE-TIMESTAMP': timestamp,
        'X-OSAYCORE-SIGNATURE': signature
    }

    try:
        response = requests.post(endpoint, headers=headers, data=payload)
        response.raise_for_status() # Raise an exception for HTTP errors
        return response.json().get('jwt_token')
    except requests.exceptions.RequestException as e:
        print(f"Error generating OsayCore JWT: {e}")
        print(f"Response: {response.text if 'response' in locals() else 'N/A'}")
        return None

# Then your mobile app receives this JWT from your backend and uses it.

# Conceptual Python code in your backend for an API endpoint
import requests
import hashlib
import hmac
import time
import json
import uuid # For client_reference_id

OSAYCORE_API_KEY = "YOUR_APP_API_KEY"
OSAYCORE_SECRET_KEY = "YOUR_APP_SECRET_KEY"
OSAYCORE_BASE_URL = "https://api.osaycore.com/api"

def generate_hmac_signature(secret_key, timestamp, payload):
    message = f"{timestamp}.{payload}".encode('utf-8')
    signature = hmac.new(secret_key.encode('utf-8'), message, hashlib.sha256).hexdigest()
    return signature

def deduct_user_credits_api(user_jwt, amount_to_charge, action_description):
    endpoint = f"{OSAYCORE_BASE_URL}/action/deduct-credits"
    timestamp = str(int(time.time()))
    payload_data = {
        "amount": amount_to_charge,
        "description": action_description,
        "client_reference_id": str(uuid.uuid4()) # Example: unique ID for this action
    }
    payload = json.dumps(payload_data)

    signature = generate_hmac_signature(OSAYCORE_SECRET_KEY, timestamp, payload)

    headers = {
        'Content-Type': 'application/json',
        'Authorization': `Bearer ${user_jwt}`, # User's JWT
        'X-OSAYCORE-API-KEY': OSAYCORE_API_KEY,
        'X-OSAYCORE-TIMESTAMP': timestamp,
        'X-OSAYCORE-SIGNATURE': signature
    }

    try:
        response = requests.post(endpoint, headers=headers, data=payload)
        response.raise_for_status() # Raise an exception for HTTP errors (4xx or 5xx)
        return response.json()
    except requests.exceptions.HTTPError as e:
        print(f"HTTP Error during credit deduction: {e.response.status_code} - {e.response.text}")
        return {"success": False, "error": e.response.json().get('error', 'Unknown API error')}
    except requests.exceptions.RequestException as e:
        print(f"Network/Connection Error during credit deduction: {e}")
        return {"success": False, "error": "Network or connection error"}

# Conceptual Python code in your backend for a refund or bonus
import requests
import hashlib
import hmac
import time
import json

OSAYCORE_API_KEY = "YOUR_APP_API_KEY"
OSAYCORE_SECRET_KEY = "YOUR_APP_SECRET_KEY"
OSAYCORE_BASE_URL = "https://api.osaycore.com/api"

def generate_hmac_signature(secret_key, timestamp, payload):
    message = f"{timestamp}.{payload}".encode('utf-8')
    signature = hmac.new(secret_key.encode('utf-8'), message, hashlib.sha256).hexdigest()
    return signature

def add_user_credits_api(user_id, amount, reason, transaction_type="BONUS", payment_id=None):
    endpoint = f"{OSAYCORE_BASE_URL}/credits/add-credits"
    timestamp = str(int(time.time()))
    payload_data = {
        "user_id": str(user_id),
        "amount": amount,
        "description": reason,
        "transaction_type": transaction_type
    }
    if payment_id:
        payload_data["payment_id"] = str(payment_id)
        
    payload = json.dumps(payload_data)

    signature = generate_hmac_signature(OSAYCORE_SECRET_KEY, timestamp, payload)

    headers = {
        'Content-Type': 'application/json',
        'X-OSAYCORE-API-KEY': OSAYCORE_API_KEY,
        'X-OSAYCORE-TIMESTAMP': timestamp,
        'X-OSAYCORE-SIGNATURE': signature
    }

    try:
        response = requests.post(endpoint, headers=headers, data=payload)
        response.raise_for_status()
        return response.json()
    except requests.exceptions.RequestException as e:
        print(f"Error adding credits: {e}")
        return {"success": False, "error": str(e)}

# Conceptual Python code in your backend
import requests
import hashlib
import hmac
import time
import json

OSAYCORE_API_KEY = "YOUR_APP_API_KEY"
OSAYCORE_SECRET_KEY = "YOUR_APP_SECRET_KEY"
OSAYCORE_BASE_URL = "https://api.osaycore.com/api"

def generate_hmac_signature(secret_key, timestamp, payload=""): # Payload can be empty for GET
    message = f"{timestamp}.{payload}".encode('utf-8')
    signature = hmac.new(secret_key.encode('utf-8'), message, hashlib.sha256).hexdigest()
    return signature

def get_user_context_api(user_jwt):
    endpoint = f"{OSAYCORE_BASE_URL}/user/context"
    timestamp = str(int(time.time()))
    # For GET requests, the payload for signature is typically an empty string
    payload = "" 

    signature = generate_hmac_signature(OSAYCORE_SECRET_KEY, timestamp, payload)

    headers = {
        'Content-Type': 'application/json',
        'Authorization': `Bearer ${user_jwt}`,
        'X-OSAYCORE-API-KEY': OSAYCORE_API_KEY,
        'X-OSAYCORE-TIMESTAMP': timestamp,
        'X-OSAYCORE-SIGNATURE': signature
    }

    try:
        response = requests.get(endpoint, headers=headers)
        response.raise_for_status()
        return response.json()
    except requests.exceptions.RequestException as e:
        print(f"Error fetching user context: {e}")
        return {"success": False, "error": str(e)}