Payments API

import { useState } from 'react'

export function TipButton({ workId }) {
  const [loading, setLoading] = useState(false)

  const handleTip = async () => {
    setLoading(true)
    try {
      const response = await fetch('/api/payments/create-tip', {
        method: 'POST',
        headers: { 'Content-Type': 'application/json' },
        body: JSON.stringify({
          workId,
          amount: '0.01',
          currency: 'ETH',
          anonymous: true
        })
      })
      const intent = await response.json()
      window.open(intent.paymentUrl, '_blank')
    } catch (error) {
      console.error('Tip failed:', error)
    } finally {
      setLoading(false)
    }
  }

  return (
    <button onClick={handleTip} disabled={loading}>
      {loading ? 'Processing...' : 'Support this work'}
    </button>
  )
}

// app/api/payments/create-tip/route.ts
import { NobleIDPayments } from '@nobleid/payments-sdk'

const payments = new NobleIDPayments({
  apiKey: process.env.NOBLEID_API_KEY, // Server-side only, secure
  environment: process.env.NODE_ENV === 'production' ? 'production' : 'sandbox'
})

export async function POST(request: Request) {
  try {
    const body = await request.json()
    const intent = await payments.createTipIntent(body)
    return Response.json(intent)
  } catch (error) {
    return Response.json({ error: 'Failed to create tip intent' }, { status: 500 })
  }
}

import crypto from 'crypto'

export async function POST(request) {
  const body = await request.text()
  const signature = request.headers.get('x-nobleid-signature')
  
  // Verify webhook signature
  const expectedSignature = crypto
    .createHmac('sha256', process.env.NOBLEID_WEBHOOK_SECRET)
    .update(body)
    .digest('hex')
  
  if (signature !== `sha256=${expectedSignature}`) {
    return new Response('Invalid signature', { status: 401 })
  }
  
  const event = JSON.parse(body)
  
  switch (event.event) {
    case 'tip.confirmed':
      // Handle confirmed tip
      await handleTipConfirmed(event.data)
      break
    case 'escrow.claimed':
      // Handle escrow claim
      await handleEscrowClaimed(event.data)
      break
  }
  
  return new Response('OK')
}