Dokumentacja API webhooków

<?php
// 1) Zapisz ref przy wejściu z linku afiliacyjnego
add_action('init', function () {
    if (!empty($_GET['ref'])) {
        setcookie('deneeu_ref', sanitize_text_field($_GET['ref']), time() + 30 * DAY_IN_SECONDS, '/');
    }
});

// 2) Zgłoś konwersję po opłaceniu zamówienia
add_action('woocommerce_order_status_completed', function ($order_id) {
    $order = wc_get_order($order_id);
    if (!$order || empty($_COOKIE['deneeu_ref'])) {
        return;
    }

    $payload = wp_json_encode([
        'orderId' => (string) $order_id,
        'amount'  => (float) $order->get_total(),
        'ref'     => sanitize_text_field($_COOKIE['deneeu_ref']),
        'email'   => $order->get_billing_email(),
    ]);

    $signature = hash_hmac('sha256', $payload, 'TWOJ_WEBHOOK_SECRET');

    wp_remote_post('https://www.deneeu.pl/api/conversion', [
        'headers' => [
            'Content-Type' => 'application/json',
            'x-api-key'    => 'TWOJ_API_KEY',
            'x-signature'  => $signature,
        ],
        'body'    => $payload,
        'timeout' => 10,
    ]);
});

const crypto = require("crypto");

async function reportConversion({ orderId, amount, ref, email }) {
  const payload = JSON.stringify({ orderId, amount, ref, email });
  const signature = crypto
    .createHmac("sha256", process.env.DENEEU_WEBHOOK_SECRET)
    .update(payload)
    .digest("hex");

  const response = await fetch("https://www.deneeu.pl/api/conversion", {
    method: "POST",
    headers: {
      "Content-Type": "application/json",
      "x-api-key": process.env.DENEEU_API_KEY,
      "x-signature": signature,
    },
    body: payload,
  });

  if (!response.ok) {
    throw new Error(`Deneeu webhook error: ${response.status}`);
  }

  return response.json();
}

import hashlib
import hmac
import json
import requests

API_KEY = "TWOJ_API_KEY"
WEBHOOK_SECRET = "TWOJ_WEBHOOK_SECRET"

def report_conversion(order_id: str, amount: float, ref: str, email: str | None = None) -> dict:
    payload = json.dumps({
        "orderId": order_id,
        "amount": amount,
        "ref": ref,
        "email": email,
    })
    signature = hmac.new(WEBHOOK_SECRET.encode(), payload.encode(), hashlib.sha256).hexdigest()

    response = requests.post(
        "https://www.deneeu.pl/api/conversion",
        data=payload,
        headers={
            "Content-Type": "application/json",
            "x-api-key": API_KEY,
            "x-signature": signature,
        },
        timeout=10,
    )
    response.raise_for_status()
    return response.json()

curl -X POST https://www.deneeu.pl/api/conversion \
  -H "Content-Type: application/json" \
  -H "x-api-key: TWOJ_API_KEY" \
  -H "x-signature: OBLICZONY_HMAC_SHA256" \
  -d '{
    "orderId": "zamowienie-123",
    "amount": 299.99,
    "ref": "id_influencera",
    "email": "klient@example.com"
  }'