====================================================================
NexusPay — Exemplos cURL (testes manuais rápidos)
Base: https://pay.nxschain.com/api
====================================================================
Preencha antes:
  AK="sua_api_key"
  SK="sua_secret_key"

Assinatura (bash):
  ts=$(date +%s%3N)
  sign() {  # $1=metodo $2=path $3=body(vazio ok)
    local body="$3"
    local shabody=$(printf '%s' "$body" | sha256sum | cut -d' ' -f1)
    printf '%s' "$ts:$1:$2:$shabody" | openssl dgst -sha256 -hmac "$SK" | awk '{print $2}'
  }

1) Info da rota (público — sem auth)
--------------------------------------------------------------------
curl -s https://pay.nxschain.com/api/v1/pix/info
# {"ok":true,"mode":"sandbox","feeBps":200,"brlRate":5,...}

2) Criar ordem Pix (venda US$ 25,00)
--------------------------------------------------------------------
body='{"amountUSD":25}'
ts=$(date +%s%3N); sig=$(sign POST /v1/pix "$body")
curl -s -X POST https://pay.nxschain.com/api/v1/pix \
  -H "Content-Type: application/json" \
  -H "X-Nexus-Api-Key: $AK" -H "X-Nexus-Timestamp: $ts" \
  -H "X-Nexus-Signature: $sig" -d "$body"
# guarde o "id" retornado (ex.: pix_xxxx_yyyy)

3) Polling de status (troque PIX_ID)
--------------------------------------------------------------------
curl -s https://pay.nxschain.com/api/v1/pix/PIX_ID
# {"ok":true,"id":"pix_…","status":"PENDING","paidAt":null,...}

4) Simular pagamento (SANDBOX — secret do sandbox; em prod quem
   chama é o provedor licenciado com o secret dele)
--------------------------------------------------------------------
curl -s -X POST https://pay.nxschain.com/api/v1/pix/webhook \
  -H "Content-Type: application/json" \
  -H "X-Pix-Secret: pix-sandbox-secret" \
  -d '{"id":"PIX_ID","status":"PAID"}'
# → marca PAID e responde com o sweep:
# {"ok":true,"orderId":"…","sweep":{"step":"vault.deposit(USDT-BEP20,…)","recipient":"0x…lojista"}}

5) Perfil do lojista (confere taxas e credenciais ativas)
--------------------------------------------------------------------
ts=$(date +%s%3N); sig=$(sign GET /v1/merchant/profile "")
curl -s https://pay.nxschain.com/api/v1/merchant/profile \
  -H "X-Nexus-Api-Key: $AK" -H "X-Nexus-Timestamp: $ts" \
  -H "X-Nexus-Signature: $sig"
# {"address":"0x…","name":"…","feeBpsToken":180,"feeBpsNative":50,"webhookUrl":…}

6) Webhook de retorno que SEU servidor recebe (verificação)
--------------------------------------------------------------------
# O motor POSTa na sua webhookUrl com:
#   X-Nexus-Signature: HMAC-SHA256(webhookSecret, corpo_bruto)
# Verifique com:
printf '%s' "$CORPO_BRUTO_RECEBIDO" | openssl dgst -sha256 -hmac "$SEU_WEBHOOK_SECRET"
# compare (hash_equals / timing-safe) com o header recebido e responda 200.
====================================================================
Doc completa: https://pay.nxschain.com/integracao
Demo ao vivo: https://pay.nxschain.com/checkout-demo
Suporte: suporte@inovatrek.com.br · WhatsApp (21) 99459-1338
====================================================================
