BURIDA

# Format de la chaîne à signer :
METHOD|PATH|TIMESTAMP|field1=value1|field2=value2|...

# Exemple concret :
GET|/api/1200263/factures-non-soldees|1757580100
GET|/api/tarifs/evenements-occasionnels|1757580100
POST|/api/webhook/{client}/paiement|1757580100|idTransaction=TRX123456
POST|/api/webhook/{client}/paiement-occasionnel|1757580100|idTransaction=TXN1757494924308

# Headers requis :
X-HMAC-Signature: /iQRSEtLBjaNWrpVJY+i1KYg5uAofWcGW0ppvswnFCI=
X-Timestamp: 1757580100
X-Client-Id: orange-money-client

# Headers facultatif :
X-Signature-Strategy: FIELDS

# Récupération de la grille tarifaire pour les paiements occasionnels
GET /api/tarifs/evenements-occasionnels
Headers:
  X-HMAC-Signature: Xg/dPiBpy7Atq4UPaySWTM8LcvQTi9JXOUxTZakSIZQ=
  X-Timestamp: 1761825016
  X-Client-Id: orange-money-client
  Accept: application/json

# Réponse 200 OK
{
  "tarifs": [
    {
      "id": 6,
      "code": "ANIMATION_ENTREPRISE",
      "libelle": "Animation promotionnelle (entreprises, supermarchés, grandes surfaces, PME, secteur informel)",
      "tarif": 65000,
      "categorie": "ANIMATION_PROMOTIONNELLE",
      "description": "Animation sur site pour entreprises, commerces et PME"
    },
    {
      "id": 5,
      "code": "ANIMATION_CARAVANE",
      "libelle": "Animation promotionnelle – CARAVANE (voiture, camionnette, camion, etc.)",
      "tarif": 130000,
      "categorie": "ANIMATION_PROMOTIONNELLE",
      "description": "Animation mobile avec véhicule (voiture, camionnette, camion)"
    },
    {
      "id": 4,
      "code": "BAPTEME",
      "libelle": "Baptême",
      "tarif": 5000,
      "categorie": "CEREMONIE",
      "description": "Prestation pour baptême"
    },
    {
      "id": 3,
      "code": "ANNIVERSAIRE",
      "libelle": "Anniversaire",
      "tarif": 5000,
      "categorie": "CEREMONIE",
      "description": "Prestation pour anniversaire"
    },
    {
      "id": 2,
      "code": "MARIAGE_INTERIEUR",
      "libelle": "Mariage / Dot (Intérieur)",
      "tarif": 20000,
      "categorie": "CEREMONIE",
      "description": "Prestation pour mariage ou dot à l'intérieur du pays (hors Abidjan)"
    },
    {
      "id": 1,
      "code": "MARIAGE_ABIDJAN",
      "libelle": "Mariage / Dot (District d'Abidjan et Assinie)",
      "tarif": 30000,
      "categorie": "CEREMONIE",
      "description": "Prestation pour mariage ou dot dans le district d'Abidjan et à Assinie"
    }
  ],
  "dateMAJ": "2025-10-30",
  "devise": "FCFA",
  "count": 6
}

# Paiement ponctuel multi-client avec tarif événement
POST /api/webhook/{client}/paiement-occasionnel
Headers:
  X-HMAC-Signature: HJNX3LSzG0rtXFXJtRrCTFAZQ4jUXxGbUWdAVuSbExM=
  X-Timestamp: 1757580551
  X-Client-Id: orange-money-client
  Content-Type: application/json

Body:
{
  "idTransaction": "TXN1757494924308",
  "commentaire": "Paiement ponctuel",
  "contact": "+2250712345678",
  "description": "Prestation musicale",
  "tarifEvenementId": 1,
  "montant": 30000
}

# Réponse 200 OK
{
  "status": "success",
  "message": "Payment processed successfully",
  "reglementId": 656387,
  "numeroQuittance": "TXN1757494924308",
  "montantTotal": "30000.0",
  "tarifEvenementDTO": {
    "code": "MARIAGE_ABIDJAN",
    "tarif": 30000,
    "description": "Prestation pour mariage ou dot dans le district d'Abidjan et à Assinie"
  },
  "facturesTraitees": [
    {
      "numeroFacture": "OCC-20251030-165555-764",
      "montantPaye": "30000.0",
      "nouveauSolde": "0.0"
    }
  ],
  "success": true
}

# 1. Télécharger l'outil (disponible après compilation)
wget http://localhost:8085/downloads/hmac-generator-v2.jar

# 2. Exécuter avec vos paramètres
java -jar hmac-generator-v2.jar \
  --method GET \
  --path /api/1200263/factures-non-soldees \
  --secret "VOTRE_SECRET_HMAC"

java -jar hmac-generator-v2.jar \
  --method POST \
  --path /api/webhook/orange/paiement \
  --fields "idTransaction=TXN1757494924191" \
  --secret "VOTRE_SECRET_HMAC"


# 3. Résultat généré (exemple) :
╔══════════════════════════════════════════════════════════╗
║                   HEADERS HMAC V2 GÉNÉRÉS                ║
╚══════════════════════════════════════════════════════════╝
Stratégie: FIELDS (Critical Fields)
─────────────────────────────────────────────────────────────
X-HMAC-Signature: /iQRSEtLBjaNWrpVJY+i1KYg5uAofWcGW0ppvswnFCI=
X-Timestamp: 1757580100
X-Client-Id: orange-money-client
X-Signature-Strategy: FIELDS

import com.ebenyx.burida.util.HmacGeneratorV2.SignatureStrategy;
import java.nio.charset.StandardCharsets;
import java.time.Instant;
import java.util.Base64;
import java.util.HashMap;
import java.util.Map;
import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;

public class HmacClientOrangeExample {

  private static final String HMAC_ALGORITHM = "HmacSHA256";
  private static final String DEFAULT_SECRET = "VOTRE_SECRET_HMAC";
  private static final String DEFAULT_CLIENT_ID = "orange-money-client";

  public static void main(String[] args) throws Exception {
    System.out.println("Hmac Generator v2");
    long timestamp = Instant.now().getEpochSecond();

    String method = "GET";
    String path = "/api/1200263/factures-non-soldees";
    String clientId = DEFAULT_CLIENT_ID;
    String body = null;

    String signature = generateSignature(method, "/api/1200263/factures-non-soldees", timestamp, null,
        "VOTRE_SECRET_HMAC");

    // Afficher les résultats
    printResults(signature, timestamp, clientId);

    // Afficher la commande curl
    printCurlCommand(method, path, signature, timestamp, clientId, body);
  }

  private static String generateSignature(String method, String path, long timestamp,
      Map<String, String> fields, String secret) throws Exception {
    String dataToSign = generateFieldsData(method, path, timestamp, fields);
    return calculateHmac(dataToSign, secret);
  }

  private static String generateFieldsData(String method, String path, long timestamp,
      Map<String, String> fields) {
    StringBuilder data = new StringBuilder();
    data.append(method).append("|");
    data.append(path).append("|");
    data.append(timestamp);

    if (fields != null && !fields.isEmpty()) {
      for (Map.Entry<String, String> entry : fields.entrySet()) {
        data.append("|").append(entry.getKey()).append("=").append(entry.getValue());
      }
    }

    return data.toString();
  }

  private static String calculateHmac(String data, String secret) throws Exception {
    Mac mac = Mac.getInstance(HMAC_ALGORITHM);
    SecretKeySpec secretKey = new SecretKeySpec(secret.getBytes(StandardCharsets.UTF_8),
        HMAC_ALGORITHM);
    mac.init(secretKey);
    byte[] hmacBytes = mac.doFinal(data.getBytes(StandardCharsets.UTF_8));
    return Base64.getEncoder().encodeToString(hmacBytes);
  }

  private static void printResults(String signature, long timestamp, String clientId) {
    System.out.println();
    System.out.println("╔══════════════════════════════════════════════════════════╗");
    System.out.println("║                   HEADERS HMAC V2 GÉNÉRÉS                ║");
    System.out.println("╚══════════════════════════════════════════════════════════╝");
    System.out.println("─────────────────────────────────────────────────────────────");
    System.out.println("X-HMAC-Signature: " + signature);
    System.out.println("X-Timestamp: " + timestamp);
    System.out.println("X-Client-Id: " + clientId);
    System.out.println();
  }

  private static void printCurlCommand(String method, String path, String signature,
      long timestamp, String clientId, String body) {
    System.out.println("╔══════════════════════════════════════════════════════════╗");
    System.out.println("║                    COMMANDE CURL DE TEST                 ║");
    System.out.println("╚══════════════════════════════════════════════════════════╝");
    System.out.println();

    StringBuilder curl = new StringBuilder();
    curl.append("curl -X ").append(method);
    curl.append(" http://localhost:8085").append(path);
    curl.append(" \\\n");
    curl.append("  -H \"X-HMAC-Signature: ").append(signature).append("\" \\\n");
    curl.append("  -H \"X-Timestamp: ").append(timestamp).append("\" \\\n");
    curl.append("  -H \"X-Client-Id: ").append(clientId).append("\" \\\n");
    curl.append("  -H \"Content-Type: application/json\"");

    if (body != null && !body.isEmpty() && !method.equals("GET")) {
      curl.append(" \\\n  -d '").append(body).append("'");
    }

    System.out.println(curl.toString());
    System.out.println();
  }
}