Documentação NightPay API

curl https://api.nightpay.app/v1/payments \
  -H "Authorization: Bearer sua_api_key_aqui" \
  -H "Content-Type: application/json"

// ⚠️ IMPORTANTE: Este código deve rodar no BACKEND (servidor)
// Nunca exponha sua API Key no frontend!

const response = await fetch('https://api.nightpay.app/v1/payments', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer sua_api_key',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    amount: 100.00,
    description: 'Produto X',
    customer_email: 'cliente@email.com'
  })
});

const payment = await response.json();
console.log('Código PIX:', payment.pix_code);

{
  "id": "pay_1a2b3c4d5e6f",
  "status": "pending",
  "amount": 100.00,
  "description": "Produto X",
  "pix_code": "00020126580014br.gov.bcb.pix...",
  "qr_code_url": "https://api.nightpay.app/v1/qr/pay_1a2b3c4d5e6f",
  "expires_at": "2025-10-14T18:30:00Z",
  "created_at": "2025-10-14T17:30:00Z"
}

curl https://api.nightpay.app/v1/payments/pay_1a2b3c4d5e6f \
  -H "Authorization: Bearer sua_api_key"

{
  "id": "pay_1a2b3c4d5e6f",
  "status": "paid",
  "amount": 100.00,
  "description": "Produto X",
  "customer_email": "cliente@email.com",
  "paid_at": "2025-10-14T17:35:00Z",
  "created_at": "2025-10-14T17:30:00Z"
}

curl -X DELETE https://api.nightpay.app/v1/payments/pay_1a2b3c4d5e6f \
  -H "Authorization: Bearer sua_api_key"

const response = await fetch('https://api.nightpay.app/v1/subscriptions', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer sua_api_key',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    plan_id: 'plan_monthly_pro',
    customer_email: 'cliente@email.com',
    customer_name: 'João Silva',
    trial_days: 7
  })
});

const subscription = await response.json();
console.log(subscription);

{
  "id": "sub_1a2b3c4d5e6f",
  "status": "trialing",
  "plan_id": "plan_monthly_pro",
  "customer_email": "cliente@email.com",
  "current_period_start": "2025-10-14T17:30:00Z",
  "current_period_end": "2025-11-14T17:30:00Z",
  "trial_end": "2025-10-21T17:30:00Z",
  "created_at": "2025-10-14T17:30:00Z"
}

curl -X DELETE https://api.nightpay.app/v1/subscriptions/sub_1a2b3c4d5e6f \
  -H "Authorization: Bearer sua_api_key"

{
  "name": "Plano Pro",
  "amount": 49.90,
  "interval": "monthly",
  "trial_days": 7
}

{
  "event": "payment.paid",
  "data": {
    "id": "pay_1a2b3c4d5e6f",
    "status": "paid",
    "amount": 100.00,
    "paid_at": "2025-10-14T17:35:00Z"
  }
}

const crypto = require('crypto');

function verifyWebhook(payload, signature, secret) {
  const hmac = crypto.createHmac('sha256', secret);
  const digest = hmac.update(payload).digest('hex');
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(digest)
  );
}

{
  "error": {
    "type": "invalid_request",
    "message": "Valor mínimo é R$ 1,00",
    "field": "amount"
  }
}

const express = require('express');
const app = express();

// ✅ CORRETO: Validar valores no backend
app.post('/checkout', async (req, res) => {
  const { product_id, customer_email } = req.body;
  
  // Buscar preço real do produto no banco de dados
  const product = await db.products.findById(product_id);
  
  if (!product) {
    return res.status(404).json({ error: 'Produto não encontrado' });
  }
  
  // Criar pagamento com valor validado
  const payment = await fetch('https://api.nightpay.app/v1/payments', {
    method: 'POST',
    headers: {
      'Authorization': 'Bearer ' + process.env.NIGHTPAY_API_KEY,
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({
      amount: product.price, // ✅ Valor do banco de dados
      description: product.name,
      customer_email: customer_email,
      metadata: { 
        product_id: product.id,
        order_id: await createOrder(product_id, customer_email)
      }
    })
  }).then(r => r.json());
  
  res.json({ 
    payment_id: payment.id,
    qr_code_url: payment.qr_code_url,
    pix_code: payment.pix_code
  });
});

// ✅ Backend - Usar plan_id criado no dashboard
app.post('/subscribe', async (req, res) => {
  const { plan_id, customer_email } = req.body;
  
  // Validar planos permitidos
  const validPlans = [
    'plan_pro_monthly',
    'plan_pro_yearly',
    'plan_enterprise_monthly'
  ];
  
  if (!validPlans.includes(plan_id)) {
    return res.status(400).json({ error: 'Plano inválido' });
  }
  
  // Criar assinatura (valores já estão no plano)
  const subscription = await createSubscription({
    plan_id: plan_id, // Plano criado no dashboard
    customer_email: customer_email
  });
  
  res.json(subscription);
});

const payment = await createPayment({
  amount: 100.00,
  description: 'Produto marketplace',
  splits: [
    {
      recipient_id: 'vendor_123',
      percentage: 85, // 85% para vendedor
      liable: true
    },
    {
      recipient_id: 'platform',
      percentage: 15 // 15% taxa da plataforma
    }
  ]
});

// Backend - Validar limites de doação
app.post('/donate', async (req, res) => {
  let { amount, donor_email, project_id } = req.body;
  
  // Validar valor mínimo e máximo
  amount = parseFloat(amount);
  if (amount < 5.00 || amount > 10000.00) {
    return res.status(400).json({ 
      error: 'Valor deve estar entre R$ 5,00 e R$ 10.000,00' 
    });
  }
  
  const donation = await createPayment({
    amount: amount,
    description: `Doação - Projeto ${project_id}`,
    customer_email: donor_email,
    metadata: {
      type: 'donation',
      project: project_id,
      anonymous: req.body.anonymous || false
    }
  });
  
  res.json(donation);
});

// Backend - Usar plan_id validado
app.post('/donate/recurring', async (req, res) => {
  const { plan_id, donor_email } = req.body;
  
  // Validar se o plano existe e é de doação
  const validPlans = ['plan_donate_10', 'plan_donate_25', 'plan_donate_50', 'plan_donate_100'];
  if (!validPlans.includes(plan_id)) {
    return res.status(400).json({ error: 'Plano inválido' });
  }
  
  const recurringDonation = await createSubscription({
    plan_id: plan_id, // ✅ Valor do plano é fixo
    customer_email: donor_email,
    metadata: {
      type: 'recurring_donation',
      cause: req.body.cause || 'general'
    }
  });
  
  res.json(recurringDonation);
});