const crypto = require('crypto');
const API_KEY = 'YOUR_API_KEY';
const API_SECRET = 'YOUR_API_SECRET';
const store_id = 12345;
const user_id = 678;
const username = 'username';
const user_email = '[email protected]';
const product_id = 104;
const quantity = 1;
const payment_gateway = 'lidio';

const hashString = [API_KEY, store_id, user_id, username, user_email, product_id, quantity, payment_gateway].join('|');
const hash = Buffer.from(
  crypto.createHmac('sha256', API_SECRET).update(hashString).digest()
).toString('base64');

const body = new URLSearchParams({
  api_key: API_KEY,
  hash,
  store_id: String(store_id),
  user_id: String(user_id),
  username,
  user_email,
  user_ip: '203.0.113.10',
  user_fullname: 'John Doe',
  user_phone: '+13125550100',
  product_id: String(product_id),
  quantity: String(quantity),
  payment_gateway,
  lang: 'tr',
  currency: 'TRY',
});

const res = await fetch('https://dodopin.com/checkout/token_direct.php', {
  method: 'POST',
  headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
  body,
});
const data = await res.json();
// redirect user to data.redirect

import base64, hashlib, hmac, urllib.parse, urllib.request

API_KEY = 'YOUR_API_KEY'
API_SECRET = 'YOUR_API_SECRET'
store_id = 12345
user_id = 678
username = 'username'
user_email = '[email protected]'
product_id = 104
quantity = 1
payment_gateway = 'lidio'

hash_string = '|'.join(map(str, [
    API_KEY, store_id, user_id, username, user_email, product_id, quantity, payment_gateway
]))
digest = hmac.new(API_SECRET.encode(), hash_string.encode(), hashlib.sha256).digest()
hash_b64 = base64.b64encode(digest).decode()

post = urllib.parse.urlencode({
    'api_key': API_KEY,
    'hash': hash_b64,
    'store_id': store_id,
    'user_id': user_id,
    'username': username,
    'user_email': user_email,
    'user_ip': '203.0.113.10',
    'user_fullname': 'John Doe',
    'user_phone': '+13125550100',
    'product_id': product_id,
    'quantity': quantity,
    'payment_gateway': payment_gateway,
    'lang': 'tr',
    'currency': 'TRY',
}).encode()

req = urllib.request.Request(
    'https://dodopin.com/checkout/token_direct.php',
    data=post,
    method='POST',
)
with urllib.request.urlopen(req) as resp:
    print(resp.read().decode())

# Compute hash server-side first, then:
curl -X POST 'https://dodopin.com/checkout/token_direct.php' \
  -d 'api_key=YOUR_API_KEY' \
  -d 'hash=BASE64_HMAC' \
  -d 'store_id=12345' \
  -d 'user_id=678' \
  -d 'username=username' \
  -d '[email protected]' \
  -d 'user_ip=203.0.113.10' \
  -d 'user_fullname=John+Doe' \
  -d 'user_phone=%2B13125550100' \
  -d 'product_id=104' \
  -d 'quantity=1' \
  -d 'payment_gateway=lidio' \
  -d 'lang=tr' \
  -d 'currency=TRY'