Overview of Online Ordering API Certification Tutorials

import hmac
import hashlib
import json

def generate_signature(body, path):
  # Secret for the environment that you are pointing the request to
  secret = 'SECRET_GOES_HERE'
  payload = ''.join((path,(body)))
  signature = hmac.new(bytes(secret, 'UTF-8'), bytes(payload, 'UTF-8'), hashlib.sha1).hexdigest()

  return signature

class GenerateSignature
    # Secret for the environment that you are pointing the request to
    SECRET = "SECRET_GOES_HERE"

    def self.generate_signature(body, path)
        payload = path + body
        signature = OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new('sha1'), SECRET, payload)
        return signature
    end
end

# You will need to install the Requests package before this code will work.
# To do so, see the installation instructions here: https://requests.readthedocs.io/en/latest/user/install/#install
import requests
from generate_signature import generate_signature

def send_request(path, http_verb, body):
  base_uri = "https://server-name-goes-here.punchh.com"

  url = base_uri + path

  signature = generate_signature(body, path)

  headers = {
    'Accept': 'application/json',
    'Content-Type': 'application/json',
    'x-pch-digest': signature,

    # A guest's access_token can be retrieved from the API response to a Sign Up or Sign In API call.
    # To get an access_token for use with our Online Ordering APIs, this will need to be configured on the Punchh Platform.
    # Please reach out to your Punchh representative in order to get that set up.
    # NOTE: Remove this Authorization header for requests where it is not listed as a required header (e.g., sign-up, login, etc.).
    'Authorization': 'Bearer ACCESS_TOKEN_GOES_HERE'
    
    # Example only - change the User-Agent header as outlined here in the documentation:
    # https://developers.punchh.com/docs/dev-portal-online-ordering/5a9dba2cf6dc0-user-agent
    'User-Agent': 'Punchh/OnlineOrder/1.0/Web/BrowserVersion/OS_Type'
  }

  response = requests.request(method=http_verb, url=url, headers=headers, data=body)

  if response.content:
    return response.text
  else:
    return response.status_code

class HttpClient
  require "json"
  require "net/http"
  require "openssl"
  require "uri"

  # Sandbox base URI:
  BASE_URI = "https://server-name-goes-here.punchh.com"

  def self.send_request(path, http_verb, body)
    begin
      concatenated_url = BASE_URI + path
      url = URI("#{concatenated_url}")

      http = Net::HTTP.new(url.host, url.port)
      http.use_ssl = true

      request = ""
      case http_verb
      when "GET"
        request = Net::HTTP::Get.new(url)
      when "POST"
        request = Net::HTTP::Post.new(url)
      when "PATCH"
        request = Net::HTTP::Patch.new(url)
      when "PUT"
        request = Net::HTTP::Put.new(url)
      when "DELETE"
        request = Net::HTTP::Delete.new(url)
      else
        return
      end

      request["Accept"] = "application/json"
      request["Content-Type"] = "application/json"
      
      # A guest's access_token can be retrieved from the API response to a Sign Up or Sign In API call.
      # To get an access_token for use with our Online Ordering APIs, this will need to be configured on the Punchh Platform.
      # Please reach out to your Punchh representative in order to get that set up.
      # NOTE: Remove this Authorization header for requests where it is not listed as a required header (e.g., sign-up, login, etc.).
      request["Authorization"] = "Bearer ACCESS_TOKEN_GOES_HERE"

      # Example only - change the User-Agent header as outlined here in the documentation:
      # https://developers.punchh.com/docs/dev-portal-online-ordering/5a9dba2cf6dc0-user-agent
      request["User-Agent"] = "Punchh/OnlineOrder/1.0/Web/BrowserVersion/OS_Type"

      unless body.nil?
        request.body = body
      end
      puts "Request Body: #{request.body}"
      signature = GenerateSignature::generate_signature(request.body, url.path)
      request['x-pch-digest'] = signature

      response = http.request(request)
    end
    if valid_json?(response.body)
      puts "HTTP Status Code: #{response.code.to_i}|Response: #{JSON.parse(response.body)}"
    else
      puts "HTTP Status Code: #{response.code.to_i}"
    end
  end

  def self.valid_json?(json)
    JSON.parse(json)
    return true
  rescue JSON::ParserError => e
    return false
  end
end