Quickstart

// E-commerce Order
meta_data: {
  order_id: "ORD_123",
  customer_id: "CUS_456", 
  shipping_address: "123 Main St",
  products: ["SKU_001", "SKU_002"],
  coupon_code: "SUMMER20"
}

// Course Enrollment
meta_data: {
  course_id: "COURSE_789",
  student_id: "STU_101",
  enrollment_date: "2024-01-15",
  course_type: "premium",
  referral_code: "REF123"
}

// Subscription Payment
meta_data: {
  subscription_id: "SUB_456",
  plan_type: "annual",
  renewal_date: "2025-01-15",
  features: ["feature1", "feature2"],
  previous_plan: "monthly"
}

// ❌ Avoid exposing API key in frontend
const apiKey = "pk_live_xxxxx"; // Never do this

// ✅ Make API calls through your backend
async function createPayment(data) {
  const response = await fetch('/api/payments/create', {
    method: 'POST',
    body: JSON.stringify(data)
  });
  return response.json();
}

function validatePayment(data) {
  if (data.price <= 0) throw new Error('Invalid price');
  if (!SUPPORTED_COUNTRIES.includes(data.buyer_country)) {
    throw new Error('Country not supported');
  }
  if (!data.buyer_name?.trim()) {
    throw new Error('Buyer name required');
  }
}

try {
  const response = await createPayment(paymentDetails);
  if (response.payment_url) {
    window.location.href = response.payment_url;
  }
} catch (error) {
  console.error('Payment creation failed:', error);
  showUserFriendlyError(error);
}

async function handleWebhook(request) {
  const signature = request.headers['opm-signature'];
  if (!verifySignature(request.body, signature)) {
    throw new Error('Invalid signature');
  }
  // Process webhook asynchronously
  await processWebhookEvent(request.body);
}

async function logPaymentAttempt(paymentData, result) {
  await logger.info('Payment attempt', {
    timestamp: new Date(),
    paymentId: paymentData.id,
    status: result.status,
    amount: paymentData.price,
    country: paymentData.buyer_country
  });
}