Webstriva API — full integration guide

# ─── Step 1: .env ───────────────────────────────────────
WEBSTRIVA_API_KEY=pgk_your_key_here
WEBSTRIVA_BASE_URL=https://cfdpax.com/api/v1
WEBSTRIVA_WEBHOOK_SECRET=your_webhook_secret

# ─── Step 2: config/webstriva.php ───────────────────────────
<?php
return [
    'api_key' => env('WEBSTRIVA_API_KEY'),
    'base_url' => env('WEBSTRIVA_BASE_URL', 'https://cfdpax.com/api/v1'),
    'webhook_secret' => env('WEBSTRIVA_WEBHOOK_SECRET'),
];

# ─── Step 3: app/Services/WebstrivaService.php ──────────────
<?php
namespace App\Services;

use Illuminate\Support\Facades\Http;

class WebstrivaService
{
    private function client()
    {
        return Http::baseUrl(config('webstriva.base_url'))
            ->withToken(config('webstriva.api_key'))
            ->acceptJson();
    }

    public function createDeposit(string $amount, string $crypto, string $merchantRef): array
    {
        return $this->client()->post('/payments', [
            'amount' => $amount,
            'crypto' => $crypto,
            'merchant_ref' => $merchantRef,
        ])->throw()->json();
    }

    public function getPayment(string $id): array
    {
        return $this->client()->get("/payments/{$id}")->throw()->json();
    }

    public function getBalances(): array
    {
        return $this->client()->get('/balances')->throw()->json();
    }

    public function quoteWithdrawal(string $crypto, string $amount, string $address): array
    {
        return $this->client()->get('/withdrawals/quote', [
            'crypto' => $crypto,
            'amount' => $amount,
            'destination_address' => $address,
        ])->throw()->json('quote');
    }

    public function createWithdrawal(string $crypto, string $amount, string $address, string $merchantRef): array
    {
        return $this->client()->post('/withdrawals', [
            'crypto' => $crypto,
            'amount' => $amount,
            'destination_address' => $address,
            'merchant_ref' => $merchantRef,
        ])->throw()->json();
    }
}

# ─── Step 4: routes/api.php ───────────────────────────────
use App\Http\Controllers\DepositController;
use App\Http\Controllers\WebstrivaWebhookController;

Route::post('/deposits', [DepositController::class, 'store']);
Route::post('/webhooks/webstriva', [WebstrivaWebhookController::class, 'handle']);

# ─── Step 5: DepositController.php ────────────────────────
public function store(Request $request, WebstrivaService $webstriva)
{
    $deposit = $webstriva->createDeposit(
        amount: $request->input('amount'),
        crypto: 'USDT',
        merchantRef: 'dep_' . auth()->id() . '_' . time(),
    );

    // Show $deposit['address'] and $deposit['amountCrypto'] to user
    return response()->json($deposit);
}

# ─── Step 6: WebstrivaWebhookController.php ─────────────────
public function handle(Request $request)
{
    $payload = $request->getContent();
    $sig = $request->header('X-Webstriva-Signature');
    $expected = hash_hmac('sha256', $payload, config('webstriva.webhook_secret'));

    if (!hash_equals($expected, $sig ?? '')) {
        abort(401);
    }

    $body = json_decode($payload, true);
    if ($body['event'] === 'payment.paid') {
        // Credit user: $body['data']['merchantRef'], $body['data']['amount']
    }

    return response()->json(['received' => true]);
}

# Get API key: https://cfdpax.com/dashboard/api-keys

<?php
// composer require guzzlehttp/guzzle
// .env: WEBSTRIVA_API_KEY=pgk_...  WEBSTRIVA_BASE_URL=https://cfdpax.com/api/v1

$client = new GuzzleHttp\Client([
    'base_uri' => 'https://cfdpax.com/api/v1/',
    'headers' => [
        'Authorization' => 'Bearer ' . getenv('WEBSTRIVA_API_KEY'),
        'Content-Type' => 'application/json',
        'Accept' => 'application/json',
    ],
]);

// Create deposit
$response = $client->post('payments', [
    'json' => [
        'amount' => '250.00',
        'crypto' => 'USDT',
        'merchant_ref' => 'deposit_' . uniqid(),
    ],
]);
$deposit = json_decode($response->getBody(), true);

// Show to user:
echo 'Send ' . $deposit['amountCrypto'] . ' ' . $deposit['crypto'];
echo ' to address: ' . $deposit['address'];

// Webhook handler (public/webhook-webstriva.php):
$payload = file_get_contents('php://input');
$sig = $_SERVER['HTTP_X_WEBSTRIVA_SIGNATURE'] ?? '';
$expected = hash_hmac('sha256', $payload, getenv('WEBSTRIVA_WEBHOOK_SECRET'));
if (!hash_equals($expected, $sig)) { http_response_code(401); exit; }
$event = json_decode($payload, true);
if ($event['event'] === 'payment.paid') {
    // credit user balance
}
http_response_code(200);

// .env
// WEBSTRIVA_API_KEY=pgk_...
// WEBSTRIVA_BASE_URL=https://cfdpax.com/api/v1

const API_KEY = process.env.WEBSTRIVA_API_KEY;
const BASE = process.env.WEBSTRIVA_BASE_URL || 'https://cfdpax.com/api/v1';

// Create deposit
const deposit = await fetch(`${BASE}/payments`, {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${API_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    amount: '250.00',
    crypto: 'USDT',
    merchant_ref: `dep_${Date.now()}`,
  }),
}).then((r) => r.json());

console.log('Pay to:', deposit.address);

// Webhook (Express)
import crypto from 'crypto';
app.post('/webhooks/webstriva', express.raw({ type: 'application/json' }), (req, res) => {
  const sig = req.headers['x-webstriva-signature'];
  const expected = crypto.createHmac('sha256', process.env.WEBSTRIVA_WEBHOOK_SECRET)
    .update(req.body).digest('hex');
  if (sig !== expected) return res.status(401).send('bad sig');
  const body = JSON.parse(req.body.toString());
  if (body.event === 'payment.paid') { /* credit user */ }
  res.json({ received: true });
});

import os, hmac, hashlib, requests

API_KEY = os.environ["WEBSTRIVA_API_KEY"]
BASE = os.environ.get("WEBSTRIVA_BASE_URL", "https://cfdpax.com/api/v1")

# Create deposit
deposit = requests.post(
    f"{BASE}/payments",
    headers={"Authorization": f"Bearer {API_KEY}"},
    json={"amount": "250.00", "crypto": "USDT", "merchant_ref": "dep_88421"},
    timeout=30,
).json()

print("Pay to:", deposit["address"])

# Flask webhook
@app.post("/webhooks/webstriva")
def webhook():
    payload = request.get_data()
    sig = request.headers.get("X-Webstriva-Signature", "")
    expected = hmac.new(
        os.environ["WEBSTRIVA_WEBHOOK_SECRET"].encode(), payload, hashlib.sha256
    ).hexdigest()
    if not hmac.compare_digest(expected, sig):
        abort(401)
    body = request.get_json()
    if body["event"] == "payment.paid":
        pass  # credit user
    return {"received": True}

<?php
/**
 * Plugin: add to wp-content/plugins/webstriva-deposits/webstriva.php
 * Or paste into your theme functions.php (not recommended for production)
 */

define('WEBSTRIVA_API_KEY', 'pgk_your_key');
define('WEBSTRIVA_BASE_URL', 'https://cfdpax.com/api/v1');

function webstriva_create_deposit($amount, $merchant_ref) {
    $response = wp_remote_post(WEBSTRIVA_BASE_URL . '/payments', [
        'headers' => [
            'Authorization' => 'Bearer ' . WEBSTRIVA_API_KEY,
            'Content-Type' => 'application/json',
        ],
        'body' => wp_json_encode([
            'amount' => $amount,
            'crypto' => 'USDT',
            'merchant_ref' => $merchant_ref,
        ]),
        'timeout' => 30,
    ]);
    return json_decode(wp_remote_retrieve_body($response), true);
}

// REST route: POST /wp-json/webstriva/v1/deposit
add_action('rest_api_init', function () {
    register_rest_route('webstriva/v1', '/deposit', [
        'methods' => 'POST',
        'callback' => function ($req) {
            $user_id = get_current_user_id();
            $ref = 'wp_' . $user_id . '_' . time();
            return webstriva_create_deposit($req['amount'], $ref);
        },
        'permission_callback' => function () { return is_user_logged_in(); },
    ]);
});

// Webhook: create page template or use https://cfdpax.com/wp-json/webstriva/v1/webhook
// Verify X-Webstriva-Signature with hash_hmac('sha256', $body, WEBHOOK_SECRET)

# All examples use https://cfdpax.com/api/v1
# Replace pgk_your_key with your key from dashboard

# ── Create deposit — USDT on TRC20 (Tron) ──
curl -X POST https://cfdpax.com/api/v1/payments \
  -H "Authorization: Bearer pgk_your_key" \
  -H "Content-Type: application/json" \
  -d '{"amount":"250.00","crypto":"USDT","merchant_ref":"dep_88421"}'

# ── Create deposit — USDT on ERC20 (Ethereum) ──
curl -X POST https://cfdpax.com/api/v1/payments \
  -H "Authorization: Bearer pgk_your_key" \
  -H "Content-Type: application/json" \
  -d '{"amount":"250.00","crypto":"USDT-ERC20","merchant_ref":"dep_88422"}'

# ── Create deposit — USDC on ERC20 (Ethereum) ──
curl -X POST https://cfdpax.com/api/v1/payments \
  -H "Authorization: Bearer pgk_your_key" \
  -H "Content-Type: application/json" \
  -d '{"amount":"100.00","crypto":"USDC-ERC20","merchant_ref":"dep_88423"}'

# ── Get deposit by ID ──
curl https://cfdpax.com/api/v1/payments/PAYMENT_ID \
  -H "Authorization: Bearer pgk_your_key"

# ── Get deposit by your reference ──
curl "https://cfdpax.com/api/v1/payments?merchant_ref=dep_88421" \
  -H "Authorization: Bearer pgk_your_key"

# ── Check merchant balance ──
curl https://cfdpax.com/api/v1/balances \
  -H "Authorization: Bearer pgk_your_key"

# ── Quote withdrawal fees ──
curl "https://cfdpax.com/api/v1/withdrawals/quote?crypto=USDT&amount=100&destination_address=T..." \
  -H "Authorization: Bearer pgk_your_key"

# ── Request withdrawal — USDT on ERC20 ──
curl -X POST https://cfdpax.com/api/v1/withdrawals \
  -H "Authorization: Bearer pgk_your_key" \
  -H "Content-Type: application/json" \
  -d '{"crypto":"USDT-ERC20","amount":"100.00","destination_address":"0x...","merchant_ref":"payout_2"}'

# ── Request withdrawal — USDT on TRC20 ──
curl -X POST https://cfdpax.com/api/v1/withdrawals \
  -H "Authorization: Bearer pgk_your_key" \
  -H "Content-Type: application/json" \
  -d '{"crypto":"USDT","amount":"100.00","destination_address":"T...","merchant_ref":"payout_1"}'

# ── List hot wallets ──
curl https://cfdpax.com/api/v1/hot-wallets \
  -H "Authorization: Bearer pgk_your_key"