Power Your Platform with KamioKash's Dynamic API

import crypto from 'crypto';

const apiKey = process.env.KAMIOKASH_API_KEY;
const secret = process.env.KAMIOKASH_SECRET;

const timestamp = new Date().toISOString();
const body = JSON.stringify({ wallet_id: 'w_123' });
const signature = crypto
  .createHmac('sha256', secret)
  .update(body + ":" + timestamp)
  .digest('hex');

const headers = {
  'X-API-Key': apiKey,
  'X-Timestamp': timestamp,
  'X-Signature': signature,
};

// Create a member
const member = await fetch('https://api.kamiokash.com/v1/member', {
  method: 'POST',
  headers,
  body: JSON.stringify({
    externalId: 'cust_abc123',
    firstName: 'Leo',
	lastName: "Kash",
  }),
}).then(res => res.json());

// Issue a voucher to the member
const voucher = await fetch('https://api.kamiokash.com/v1/orders/simple', {
  method: 'POST',
  headers,
  body: JSON.stringify({
	reference: "instant_1",
	date: "2026-01-27T09:23:06.658Z",
	owner: "cust_abc123",
	variantId: "VERY_COOL_GIFT_CARD_1",
	quantity: 1
  }),
}).then(res => res.json());

console.log(voucher);
// {
//   "id": "v_xyz789",
//   "date": "2026-01-27T09:23:06.659Z",
//   "owner": "cust_abc123",
//   "codes": [
//     {
//       "code": "SPEND_ME_NOW",
//       "codeRenderType": "text",
//       "isUsed": false,
//       "expiresAt": "2030-01-27T09:23:06.659Z"
//     }
//   ]
// }

// Webhook endpoint handler (e.g., Next.js API route)
export async function POST(request) {
  const body = await request.text();
  const timestamp = request.headers.get('X-Timestamp');
  const signature = request.headers.get('X-Kamio-Signature');

  // Verify webhook signature
  const expectedSig = crypto
    .createHmac('sha256', process.env.KAMIOKASH_WEBHOOK_SECRET)
    .update(timestamp + body)
    .digest('hex');

  if (signature !== expectedSig) {
    return Response.json({ error: 'Invalid signature' }, { status: 401 });
  }

  const event = JSON.parse(body);
  
  switch (event.type) {
    case 'transaction.successful':
      await handleUpdatedWalletBalance(event.data);
      break;
    case 'order.successful':
      await handleOrderPushNotification(event.data);
      break;
  }

  return Response.json({ received: true });
}