API de Faqturia

const res = await fetch('https://app.faqturia.com/api/v1/invoices', {
  method: 'POST',
  headers: {
    'X-API-Key': process.env.FAQTURIA_API_KEY,
    'Content-Type': 'application/json',
    // Reintentar con la misma clave nunca timbra dos veces
    'Idempotency-Key': 'pedido-10482',
  },
  body: JSON.stringify({
    "client_id": "3f1c2d4e-5a6b-4c7d-8e9f-0a1b2c3d4e5f",
    "uso_cfdi": "G03",
    "forma_pago": "03",
    "metodo_pago": "PUE",
    "conceptos": [
      {
        "descripcion": "Servicio de consultoría",
        "cantidad": 1,
        "precio_unitario": 10000,
        "clave_prod_serv": "80141600",
        "clave_unidad": "E48",
        "impuestos": true
      }
    ]
  }),
});

const body = await res.json();
if (!res.ok) {
  // { error: { code, message, request_id, field?, issues? } }
  throw new Error(`${body.error.code}: ${body.error.message} (${body.error.request_id})`);
}
console.log(body.data.uuid, body.data.serie, body.data.folio);

import os, requests

res = requests.post(
    "https://app.faqturia.com/api/v1/invoices",
    headers={
        "X-API-Key": os.environ["FAQTURIA_API_KEY"],
        "Idempotency-Key": "pedido-10482",
    },
    json={
        "client_id": "3f1c2d4e-5a6b-4c7d-8e9f-0a1b2c3d4e5f",
        "uso_cfdi": "G03",
        "forma_pago": "03",
        "metodo_pago": "PUE",
        "conceptos": [{
            "descripcion": "Servicio de consultoría",
            "cantidad": 1,
            "precio_unitario": 10000,
            "clave_prod_serv": "80141600",
            "clave_unidad": "E48",
            "impuestos": True,
        }],
    },
    timeout=60,
)
body = res.json()
if not res.ok:
    raise RuntimeError(f"{body['error']['code']}: {body['error']['message']}")
print(body["data"]["uuid"])

<?php
$ch = curl_init('https://app.faqturia.com/api/v1/invoices');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'X-API-Key: ' . getenv('FAQTURIA_API_KEY'),
        'Content-Type: application/json',
        'Idempotency-Key: pedido-10482',
    ],
    CURLOPT_POSTFIELDS => json_encode([
        'client_id'   => '3f1c2d4e-5a6b-4c7d-8e9f-0a1b2c3d4e5f',
        'uso_cfdi'    => 'G03',
        'forma_pago'  => '03',
        'metodo_pago' => 'PUE',
        'conceptos'   => [[
            'descripcion'     => 'Servicio de consultoría',
            'cantidad'        => 1,
            'precio_unitario' => 10000,
            'clave_prod_serv' => '80141600',
            'clave_unidad'    => 'E48',
            'impuestos'       => true,
        ]],
    ]),
]);
$body = json_decode(curl_exec($ch), true);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
if ($status >= 400) {
    throw new Exception($body['error']['code'] . ': ' . $body['error']['message']);
}
echo $body['data']['uuid'];

import crypto from 'node:crypto';

// rawBody: el cuerpo EXACTO recibido (no lo re-serialices)
export function verifyFaqturiaWebhook(rawBody, signatureHeader, secret, toleranceSec = 300) {
  const parts = Object.fromEntries(signatureHeader.split(',').map((p) => p.trim().split('=')));
  const t = Number(parts.t);
  if (!Number.isFinite(t) || !parts.v1) return false;
  if (Math.abs(Date.now() / 1000 - t) > toleranceSec) return false; // anti-replay

  const expected = crypto.createHmac('sha256', secret).update(`${t}.${rawBody}`).digest('hex');
  const a = Buffer.from(expected, 'hex');
  const b = Buffer.from(parts.v1, 'hex');
  return a.length === b.length && crypto.timingSafeEqual(a, b);
}

import hmac, hashlib, time

def verify_faqturia_webhook(raw_body: bytes, signature_header: str, secret: str, tolerance: int = 300) -> bool:
    parts = dict(p.strip().split("=", 1) for p in signature_header.split(","))
    t, v1 = int(parts.get("t", "0")), parts.get("v1", "")
    if not v1 or abs(time.time() - t) > tolerance:
        return False
    expected = hmac.new(secret.encode(), f"{t}.".encode() + raw_body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(expected, v1)

<?php
function verify_faqturia_webhook(string $rawBody, string $header, string $secret, int $tolerance = 300): bool {
    $parts = [];
    foreach (explode(',', $header) as $p) {
        [$k, $v] = array_map('trim', explode('=', $p, 2));
        $parts[$k] = $v;
    }
    $t = (int) ($parts['t'] ?? 0);
    if (empty($parts['v1']) || abs(time() - $t) > $tolerance) return false;
    $expected = hash_hmac('sha256', $t . '.' . $rawBody, $secret);
    return hash_equals($expected, $parts['v1']);
}