Build with BaseUPI

// Example using Express.js
import crypto from "crypto";
import express from "express";

app.post('/api/webhooks', express.raw({ type: "application/json" }), (req, res) => {
  const signature = req.headers['x-baseupi-signature'];
  const timestamp = req.headers['x-baseupi-timestamp'];
  
  const payloadToHash = `${timestamp}.${req.body.toString()}`;
  const myComputedSignature = crypto
    .createHmac("sha256", process.env.BASEUPI_WEBHOOK_SECRET)
    .update(payloadToHash)
    .digest("hex");

  if (signature !== myComputedSignature) {
    return res.status(401).send("Unauthorized Webhook!");
  }

  const event = JSON.parse(req.body.toString());
  if (event.type === 'BASEUPI_PAYMENT_SUCCESS') {
    // Fulfill order securely here!
  }

  res.status(200).send("OK");
});

npm install @baseupi/node

import { BaseUPI, WebhookSignatureError } from '@baseupi/node';

const baseupi = new BaseUPI({ apiKey: process.env.BASEUPI_API_KEY });

// Creating an order securely
const order = await baseupi.orders.create({
  amountPaise: 50000,
  merchantOrderId: 'order_99'
});

// Inside your webhook route:
try {
  const event = baseupi.webhooks.constructEvent({
    payload: req.body, 
    signature: req.headers['x-baseupi-signature'], 
    timestamp: req.headers['x-baseupi-timestamp'],
    secret: process.env.BASEUPI_WEBHOOK_SECRET
  });
} catch(err) {
  // Protects against Fake Webhook hackers automatically
}

npm install @baseupi/react

import { BaseUPICheckout } from '@baseupi/react';
import '@baseupi/react/styles.css';

function CheckoutButton({ checkoutToken }) {
  return (
    <BaseUPICheckout 
      checkoutToken={checkoutToken} // Passed securely from your backend
      onSuccess={() => alert("Payment confirmed!")}
      onClose={() => console.log("User closed checkout")}
    >
      <button className="bg-blue-600 px-6 py-2 rounded">
        Pay with UPI
      </button>
    </BaseUPICheckout>
  );
}