Settle Mobile Money
With Absolute Precision.

// ClaimFlow Webhook Verification in PHP
<?php
$secret = 'whsec_your_webhook_secret_key';
$payload = file_get_contents('php://input');
$signature = $_SERVER['HTTP_X_CLAIMFLOW_SIGNATURE'] ?? '';

$expectedSignature = hash_hmac('sha256', $payload, $secret);

if (hash_equals($expectedSignature, $signature)) {
    $event = json_decode($payload, true);
    // Verified! Fulfill order
    fulfillOrder($event['order_id'], $event['amount']);
    http_response_code(200);
} else {
    http_response_code(401); // Invalid signature
}

// ClaimFlow Webhook Verification in Node.js / Express
const crypto = require('crypto');

app.post('/webhook', express.raw({ type: 'application/json' }), (req, res) => {
  const secret = 'whsec_your_webhook_secret_key';
  const signature = req.headers['x-claimflow-signature'];
  
  const expectedSignature = crypto
    .createHmac('sha256', secret)
    .update(req.body)
    .digest('hex');

  if (crypto.timingSafeEqual(Buffer.from(expectedSignature), Buffer.from(signature))) {
    const event = JSON.parse(req.body.toString());
    // Process payment event
    res.status(200).json({ received: true });
  } else {
    res.status(401).send('Bad Signature');
  }
});

# ClaimFlow Webhook Verification in Python / FastAPI
import hmac, hashlib
from fastapi import FastAPI, Request, HTTPException

app = FastAPI()

@app.post("/webhook")
async def claimflow_webhook(request: Request):
    secret = b"whsec_your_webhook_secret_key"
    signature = request.headers.get("X-ClaimFlow-Signature", "")
    payload = await request.body()
    
    expected = hmac.new(secret, payload, hashlib.sha256).hexdigest()
    if not hmac.compare_digest(expected, signature):
        raise HTTPException(status_code=401, detail="Invalid signature")
        
    data = await request.json()
    # Fulfill order
    return {"status": "success"}

# Generate a Payment Reference via cURL
curl -X POST https://claimflow.browndatahub.com/backend/api/generate-reference.php \
  -H "Content-Type: application/json" \
  -H "X-API-KEY: cf_live_your_api_key_here" \
  -d '{
    "amount": 150.00,
    "currency": "GHS",
    "order_id": "order_77615"
  }'