Paysafe Gateway — API

import base64, hashlib, json, time, uuid, httpx
from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey

PARTNER_ID = "0f90e5b5-171a-4df4-a793-7fc12b63a447"
priv = Ed25519PrivateKey.from_private_bytes(base64.b64decode("PRIVATE_KEY_b64"))
BASE = "https://sandbox.lycode.one"

def signed(method, path, payload=None):
    body = json.dumps(payload).encode() if payload is not None else b""
    ts = str(int(time.time()))
    body_hash = hashlib.sha256(body).hexdigest()
    msg = f"{ts}.{method.upper()}.{path}.{body_hash}".encode()
    headers = {
        "X-Partner-Id": PARTNER_ID,
        "X-Timestamp": ts,
        "X-Nonce": uuid.uuid4().hex,
        "X-Signature": base64.b64encode(priv.sign(msg)).decode(),
        "Content-Type": "application/json",
    }
    return httpx.request(method, BASE + path, headers=headers, content=body)

r = signed("POST", "/v1/payments", {
    "client": {"external_id": "user-42", "email": "user@example.com"},
    "amount": 100, "currency": "RUB",
})
print(r.json())

const crypto = require("crypto");

const PARTNER_ID = "0f90e5b5-171a-4df4-a793-7fc12b63a447";
const PRIV_B64 = "PRIVATE_KEY_b64";        // 32-байтный seed в base64
const BASE = "https://sandbox.lycode.one";

// Ed25519 ключ из 32-байтного seed (PKCS8)
const seed = Buffer.from(PRIV_B64, "base64");
const privKey = crypto.createPrivateKey({
  key: Buffer.concat([Buffer.from("302e020100300506032b657004220420", "hex"), seed]),
  format: "der", type: "pkcs8",
});

async function signed(method, path, payload) {
  const body = payload !== undefined ? JSON.stringify(payload) : "";
  const ts = Math.floor(Date.now() / 1000).toString();
  const bodyHash = crypto.createHash("sha256").update(body).digest("hex");
  const msg = `${ts}.${method.toUpperCase()}.${path}.${bodyHash}`;
  const sig = crypto.sign(null, Buffer.from(msg), privKey).toString("base64");
  const res = await fetch(BASE + path, {
    method,
    headers: {
      "X-Partner-Id": PARTNER_ID,
      "X-Timestamp": ts,
      "X-Nonce": crypto.randomUUID().replace(/-/g, ""),
      "X-Signature": sig,
      "Content-Type": "application/json",
    },
    body: body || undefined,
  });
  return res.json();
}

signed("POST", "/v1/payments", {
  client: { external_id: "user-42", email: "user@example.com" },
  amount: 100, currency: "RUB",
}).then(console.log);

<?php
$PARTNER_ID = "0f90e5b5-171a-4df4-a793-7fc12b63a447";
$PRIV = base64_decode("PRIVATE_KEY_b64");   // 32-байтный seed
$BASE = "https://sandbox.lycode.one";

$keypair = sodium_crypto_sign_seed_keypair($PRIV);
$secret  = sodium_crypto_sign_secretkey($keypair);

function signed($method, $path, $payload = null) {
    global $PARTNER_ID, $secret, $BASE;
    $body = $payload !== null ? json_encode($payload) : "";
    $ts   = (string) time();
    $hash = hash("sha256", $body);
    $msg  = "$ts." . strtoupper($method) . ".$path.$hash";
    $sig  = base64_encode(sodium_crypto_sign_detached($msg, $secret));

    $ch = curl_init($BASE . $path);
    curl_setopt_array($ch, [
        CURLOPT_CUSTOMREQUEST => $method,
        CURLOPT_POSTFIELDS    => $body,
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_HTTPHEADER => [
            "X-Partner-Id: $PARTNER_ID",
            "X-Timestamp: $ts",
            "X-Nonce: " . bin2hex(random_bytes(16)),
            "X-Signature: $sig",
            "Content-Type: application/json",
        ],
    ]);
    return curl_exec($ch);
}

echo signed("POST", "/v1/payments", [
    "client" => ["external_id" => "user-42", "email" => "user@example.com"],
    "amount" => 100, "currency" => "RUB",
]);

package main

import (
    "bytes"
    "crypto/ed25519"
    "crypto/sha256"
    "encoding/base64"
    "encoding/hex"
    "fmt"
    "io"
    "net/http"
    "time"

    "github.com/google/uuid"
)

const (
    partnerID = "0f90e5b5-171a-4df4-a793-7fc12b63a447"
    privB64   = "PRIVATE_KEY_b64" // 32-байтный seed
    base      = "https://sandbox.lycode.one"
)

func signed(method, path string, body []byte) (string, error) {
    seed, _ := base64.StdEncoding.DecodeString(privB64)
    priv := ed25519.NewKeyFromSeed(seed)
    ts := fmt.Sprintf("%d", time.Now().Unix())
    h := sha256.Sum256(body)
    msg := ts + "." + method + "." + path + "." + hex.EncodeToString(h[:])
    sig := base64.StdEncoding.EncodeToString(ed25519.Sign(priv, []byte(msg)))

    req, _ := http.NewRequest(method, base+path, bytes.NewReader(body))
    req.Header.Set("X-Partner-Id", partnerID)
    req.Header.Set("X-Timestamp", ts)
    req.Header.Set("X-Nonce", uuid.NewString())
    req.Header.Set("X-Signature", sig)
    req.Header.Set("Content-Type", "application/json")

    resp, err := http.DefaultClient.Do(req)
    if err != nil {
        return "", err
    }
    defer resp.Body.Close()
    b, _ := io.ReadAll(resp.Body)
    return string(b), nil
}

func main() {
    body := []byte(`{"client":{"external_id":"user-42"},"amount":100,"currency":"RUB"}`)
    out, _ := signed("POST", "/v1/payments", body)
    fmt.Println(out)
}

# Подпись (X-Signature) считается по формуле и подставляется заранее
# (см. примеры на Python/Node/PHP/Go выше).

curl -X POST https://sandbox.lycode.one/v1/payments \
  -H "X-Partner-Id: 0f90e5b5-171a-4df4-a793-7fc12b63a447" \
  -H "X-Timestamp: 1782000000" \
  -H "X-Nonce: 9f1c4a2b6d7e4f10b2c3d4e5f6a7b8c9" \
  -H "X-Signature: BASE64_ED25519_SIGNATURE" \
  -H "Content-Type: application/json" \
  -d '{"client":{"external_id":"user-42","email":"user@example.com"},"amount":100,"currency":"RUB"}'