$payload = [
    'merchant_order_id' => 'PED-1001',
    'amount' => '149.99',
    'currency' => 'USD',
    'customer' => [
        'first_name' => 'Nombre',
        'last_name' => 'Apellido',
        'email' => 'cliente@ejemplo.com',
        'phone' => '+34600111222',
        'country' => 'US',
        'date_of_birth' => '1990-05-20',
    ],
    'customer_details' => [
        'first_name' => 'Nombre',
        'last_name' => 'Apellido',
        'country_of_residence' => 'US',
        'state_of_residence' => 'FL',
        'post_code' => '33101',
        'phone' => '+34600111222',
        'date_of_birth' => '1990-05-20',
    ],
    'site' => [
        'url' => 'https://tu-dominio.com/',
        'name' => 'Mi tienda',
        'platform' => 'woocommerce',
    ],
    'notify_url' => 'https://tu-dominio.com/wp-json/riskpaygo/v1/webhook',
    'return_url' => 'https://tu-dominio.com/pago/completado',
    'cancel_url' => 'https://tu-dominio.com/pago/cancelado',
];

$ch = curl_init('https://riskpaygo.com/portal/api/plugin/payments/create');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST => true,
    CURLOPT_HTTPHEADER => [
        'Accept: application/json',
        'Content-Type: application/json',
        'Authorization: Bearer TU_API_TOKEN',
        'X-RPG-Merchant: TU_MERCHANT_ID',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload, JSON_UNESCAPED_SLASHES),
]);

$response = curl_exec($ch);
curl_close($ch);

$data = json_decode($response, true);
if (!empty($data['success']) && !empty($data['data']['checkout_url'])) {
    header('Location: ' . $data['data']['checkout_url']);
    exit;
}

const response = await fetch('https://riskpaygo.com/portal/api/plugin/payments/create', {
  method: 'POST',
  headers: {
    'Accept': 'application/json',
    'Content-Type': 'application/json',
    'Authorization': 'Bearer TU_API_TOKEN',
    'X-RPG-Merchant': 'TU_MERCHANT_ID'
  },
  body: JSON.stringify({
    merchant_order_id: 'PED-1001',
    amount: '149.99',
    currency: 'USD',
    customer: {
      first_name: 'Nombre',
      last_name: 'Apellido',
      email: 'cliente@ejemplo.com',
      phone: '+34600111222',
      country: 'US',
      date_of_birth: '1990-05-20'
    },
    customer_details: {
      first_name: 'Nombre',
      last_name: 'Apellido',
      country_of_residence: 'US',
      state_of_residence: 'FL',
      post_code: '33101',
      phone: '+34600111222',
      date_of_birth: '1990-05-20'
    },
    site: {
      url: 'https://tu-dominio.com/',
      name: 'Mi tienda',
      platform: 'custom'
    },
    notify_url: 'https://tu-dominio.com/webhook/riskpaygo',
    return_url: 'https://tu-dominio.com/pago/completado',
    cancel_url: 'https://tu-dominio.com/pago/cancelado'
  })
});

const data = await response.json();
if (data.success && data.data.checkout_url) {
  window.location.href = data.data.checkout_url;
}

import crypto from 'crypto';

function validateRiskPayGoWebhook(rawBody, signature, secret) {
  const expected = crypto
    .createHmac('sha256', secret)
    .update(rawBody)
    .digest('hex');

  return crypto.timingSafeEqual(
    Buffer.from(expected),
    Buffer.from(signature || '')
  );
}