Avant Global API

{
  "event":        "pix_confirmed",
  "operation_id": "OTC20260401120000AABB1234",
  "timestamp":    1775000000,
  "data": {
    // campos especificos do evento
  }
}

{
  "error": {
    "code":    "invalid_wallet",
    "message": "Endereco TRC-20 invalido. Deve comecar com T e ter 34 caracteres."
  }
}

# 1. Solicitar cotacao
curl -X POST https://api.avantglobal.com.br/v1/quote \
  -H "X-Api-Key: avant_test_your_key" \
  -H "Content-Type: application/json" \
  -d '{"valor_usdt": 500, "wallet_trc20": "TQn9Y2khEsLJW1ChVWFMSMeRDow5KcbLSE"}'

# 2. Confirmar cotacao (use o operation_id retornado)
curl -X POST https://api.avantglobal.com.br/v1/quote/confirm \
  -H "X-Api-Key: avant_test_your_key" \
  -H "Content-Type: application/json" \
  -d '{"op_id": "OTC20260401120000AABB1234"}'

# 3. Simular pagamento PIX (sandbox only)
curl -X POST https://api.avantglobal.com.br/v1/sandbox/pix-pay \
  -H "X-Api-Key: avant_test_your_key" \
  -H "Content-Type: application/json" \
  -d '{"op_id": "OTC20260401120000AABB1234"}'

# 4. Verificar estado final
curl https://api.avantglobal.com.br/v1/operation/OTC20260401120000AABB1234 \
  -H "X-Api-Key: avant_test_your_key"

import requests
import hmac
import hashlib
import json

API_KEY = "avant_test_your_key"
BASE    = "https://api.avantglobal.com.br"
HEADERS = {"X-Api-Key": API_KEY, "Content-Type": "application/json"}

# 1. Solicitar cotacao
resp = requests.post(f"{BASE}/v1/quote", headers=HEADERS, json={
    "valor_usdt":   500,
    "wallet_trc20": "TQn9Y2khEsLJW1ChVWFMSMeRDow5KcbLSE"
})
data = resp.json()["data"]
op_id = data["operation_id"]
print(f"Cotacao: {data['preco_avant']} BRL/USDT | Total: R$ {data['valor_brl']}")

# 2. Confirmar e receber PIX
resp = requests.post(f"{BASE}/v1/quote/confirm", headers=HEADERS, json={"op_id": op_id})
pix = resp.json()["data"]
print(f"PIX QR Code: {pix['pix_qrcode'][:50]}...")

# 3. Simular pagamento (sandbox)
resp = requests.post(f"{BASE}/v1/sandbox/pix-pay", headers=HEADERS, json={"op_id": op_id})
print(f"Status: {resp.json()['data']['estado']}")

# 4. Verificar operacao
resp = requests.get(f"{BASE}/v1/operation/{op_id}", headers=HEADERS)
op = resp.json()["data"]
print(f"TX Hash: {op.get('hash_tx', 'N/A')}")


# --- Webhook verification ---
def verify_webhook(body: bytes, signature: str, secret: str) -> bool:
    expected = "sha256=" + hmac.new(
        secret.encode(), body, hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(expected, signature)

const API_KEY = "avant_test_your_key";
const BASE    = "https://api.avantglobal.com.br";

const headers = {
  "X-Api-Key":    API_KEY,
  "Content-Type": "application/json"
};

async function fullFlow() {
  // 1. Solicitar cotacao
  const quoteResp = await fetch(`${BASE}/v1/quote`, {
    method: "POST", headers,
    body: JSON.stringify({
      valor_usdt:   500,
      wallet_trc20: "TQn9Y2khEsLJW1ChVWFMSMeRDow5KcbLSE"
    })
  });
  const { data: quote } = await quoteResp.json();
  console.log(`Cotacao: ${quote.preco_avant} BRL/USDT`);

  // 2. Confirmar cotacao
  const confirmResp = await fetch(`${BASE}/v1/quote/confirm`, {
    method: "POST", headers,
    body: JSON.stringify({ op_id: quote.operation_id })
  });
  const { data: pix } = await confirmResp.json();
  console.log(`PIX gerado: ${pix.pix_qrcode.slice(0, 50)}...`);

  // 3. Simular pagamento (sandbox)
  const payResp = await fetch(`${BASE}/v1/sandbox/pix-pay`, {
    method: "POST", headers,
    body: JSON.stringify({ op_id: quote.operation_id })
  });
  const { data: result } = await payResp.json();
  console.log(`Estado final: ${result.estado}`);
}

fullFlow().catch(console.error);


// --- Webhook verification (Express.js) ---
const crypto = require("crypto");

function verifyWebhook(req, secret) {
  const sig      = req.headers["x-avant-signature"] || "";
  const expected = "sha256=" + crypto
    .createHmac("sha256", secret)
    .update(JSON.stringify(req.body))
    .digest("hex");
  return crypto.timingSafeEqual(
    Buffer.from(expected), Buffer.from(sig)
  );
}