Webhooks

curl -X POST https://qrsimple.cucu.bo/api/v1/webhook \
  -H "X-Api-Key: <tu_api_key>" \
  -H "Content-Type: application/json" \
  -d '{"url":"https://tu-sistema.com/webhooks/cucu"}'

{
  "url": "https://tu-sistema.com/webhooks/cucu",
  "secret": "whsec_...",
  "events": ["qr.paid"],
  "createdAt": "2026-09-22T20:15:00Z"
}

{
  "event": "qr.paid",
  "occurredAt": "2026-09-22T20:42:48Z",
  "data": {
    "qrId": "36146199",
    "amount": "75.00",
    "currency": "BOB",
    "status": "PAID",
    "externalReference": "ORD-0871",
    "paidAt": "2026-09-22T20:42:48Z"
  }
}

from standardwebhooks import Webhook

Webhook(secret).verify(raw_body, dict(request.headers))  # lanza si no valida

firmado = f"{webhook-id}.{webhook-timestamp}.{cuerpo_crudo}"
firma   = base64(HMAC-SHA256(clave, firmado))