Параметры запроса

Пример запроса

const crypto = require('crypto');

const data = {
  store_id: 'SHOP00001',
  order_id: 'ORDER-12345',
  amount: 1500.00,
  description: 'Оплата заказа #12345',
  success_url: 'https://myshop.ru/success',
  fail_url: 'https://myshop.ru/fail'
};

// Создание подписи
const signString = Object.keys(data)
  .sort()
  .map(key => `${key}=${data[key]}`)
  .join('&');
const signature = crypto
  .createHmac('sha256', 'ВАШ_СЕКРЕТНЫЙ_КЛЮЧ')
  .update(signString)
  .digest('hex');

const response = await fetch('https://assetlink.ru/api/gateway/payments/create', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({ ...data, signature })
});

Пример ответа

{
  "success": true,
  "payment_id": "550e8400-e29b-41d4-a716-446655440000",
  "payment_code": "A7B3C9D2E5F1",
  "payment_url": "https://gate.assetlink.ru/pay/A7B3C9D2E5F1",
  "amount": 1500.00,
  "token_symbol": "STUDIO",
  "expires_at": "2026-01-30T15:30:00.000Z"
}

Параметры запроса

Статусы платежа

Формат уведомления

{
  "event": "payment.completed",
  "payment_id": "550e8400-e29b-41d4-a716-446655440000",
  "order_id": "ORDER-12345",
  "amount": 1500.00,
  "token_symbol": "STUDIO",
  "token_amount": 1500.00,
  "status": "completed",
  "paid_at": "2026-01-30T15:25:00.000Z"
}

Проверка подписи webhook

Подпись передаётся в заголовке X-AssetLink-Signature

const crypto = require('crypto');

function verifyWebhook(body, signature, webhookSecret) {
  const signString = Object.keys(body)
    .sort()
    .map(key => `${key}=${body[key]}`)
    .join('&');

  const expected = crypto
    .createHmac('sha256', webhookSecret)
    .update(signString)
    .digest('hex');

  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expected)
  );
}

Примеры на разных языках

<?php
$data = [
    'store_id' => 'SHOP00001',
    'order_id' => 'ORDER-12345',
    'amount' => 1500.00
];

ksort($data);
$signString = http_build_query($data);
$signature = hash_hmac('sha256', $signString, $secretKey);

$data['signature'] = $signature;

import hmac
import hashlib
from urllib.parse import urlencode

data = {
    'store_id': 'SHOP00001',
    'order_id': 'ORDER-12345',
    'amount': 1500.00
}

sign_string = urlencode(sorted(data.items()))
signature = hmac.new(
    secret_key.encode(),
    sign_string.encode(),
    hashlib.sha256
).hexdigest()

data['signature'] = signature