// Google Pay test configuration
const testConfig = {
  environment: 'TEST',
  merchantId: '01234567890123456789',
  merchantName: 'Test Merchant'
};

{
  "protocolVersion": "ECv2",
  "signature": "test_signature_here",
  "signedMessage": "test_signed_message"
}

// Apple Pay test setup
const applePayConfig = {
  merchantIdentifier: 'merchant.com.example.test',
  displayName: 'Test Store',
  domainName: 'test.example.com'
};

{
  "paymentRequestId": "pr_test_123456789",
  "status": "completed",
  "transactionId": "txn_test_987654321",
  "amount": 10.00,
  "currency": "USD",
  "timestamp": "2024-01-15T10:30:00Z",
  "signature": "test_signature_hash"
}

{
  "paymentRequestId": "pr_test_123456789",
  "status": "failed",
  "errorCode": "CARD_DECLINED",
  "errorMessage": "Card was declined",
  "timestamp": "2024-01-15T10:30:00Z",
  "signature": "test_signature_hash"
}

// Test webhook signature verification
const crypto = require('crypto');

function verifyWebhookSignature(payload, signature, secret) {
  const expectedSignature = crypto
    .createHmac('sha512', secret)
    .update(payload)
    .digest('hex');
  
  return signature === expectedSignature;
}

// Test with known values
const testPayload = '{"paymentRequestId":"pr_test_123"}';
const testSecret = 'test_webhook_secret';
const testSignature = crypto
  .createHmac('sha512', testSecret)
  .update(testPayload)
  .digest('hex');

console.log('Signature valid:', verifyWebhookSignature(testPayload, testSignature, testSecret));

curl -X POST https://sandbox-api.caibo.com/payments/h2h/1 \
  -H "X-API-Key: invalid_key" \
  -H "Content-Type: application/json"
# Expected: 401 Unauthorized

curl -X POST https://sandbox-api.caibo.com/payments/h2h/1 \
  -H "X-API-Key: sandbox_key" \
  -H "Content-Type: application/json" \
  -d '{"amount":10.00}'
# Expected: 400 Bad Request

curl -X POST https://sandbox-api.caibo.com/payments/h2h/1 \
  -H "X-API-Key: sandbox_key" \
  -H "Content-Type: application/json" \
  -d '{"name":"Test","amount":-10.00,"unit":"USD"}'
# Expected: 400 Bad Request

// Test rate limits
async function testRateLimit() {
  const requests = [];
  
  // Send 150 requests (above 100/min limit)
  for (let i = 0; i < 150; i++) {
    requests.push(createTestPayment());
  }
  
  const results = await Promise.allSettled(requests);
  const rateLimited = results.filter(r => 
    r.status === 'rejected' && r.reason.status === 429
  );
  
  console.log(`Rate limited requests: ${rateLimited.length}`);
}

# Install ngrok
npm install -g ngrok

# Expose local webhook endpoint
ngrok http 3000

# Use the HTTPS URL as your webhook endpoint
# https://abc123.ngrok.io/webhook

const express = require('express');
const app = express();

app.use(express.json());

app.post('/webhook', (req, res) => {
  console.log('Webhook received:', {
    headers: req.headers,
    body: req.body,
    timestamp: new Date().toISOString()
  });
  
  res.status(200).send('OK');
});

app.listen(3000, () => {
  console.log('Webhook test server running on port 3000');
});

// Structured logging for debugging
const logger = {
  info: (message, data) => console.log(JSON.stringify({
    level: 'info',
    message,
    data,
    timestamp: new Date().toISOString()
  })),
  
  error: (message, error) => console.error(JSON.stringify({
    level: 'error',
    message,
    error: error.message,
    stack: error.stack,
    timestamp: new Date().toISOString()
  }))
};

// Usage
logger.info('Payment created', { paymentId: 'pr_123' });
logger.error('Payment failed', new Error('Card declined'));

// Enable debug mode for detailed logging
const DEBUG = process.env.NODE_ENV === 'development';

if (DEBUG) {
  console.log('Request payload:', JSON.stringify(payload, null, 2));
  console.log('Response:', JSON.stringify(response, null, 2));
}