Cash-out

TIMESTAMP=$(date +%s)
NONCE=$(uuidgen)
BODY='{"external_id":"saque_001","amount":50.00,"currency":"BRL","key":"12345678901","key_type":"cpf","description":"Saque PIX"}'
SIGNATURE=$(printf '%s' "$TIMESTAMP.$NONCE.$BODY" | openssl dgst -sha256 -hmac "$SIGNING_KEY" -hex | awk '{print $2}')

curl -X POST https://api.bspay.co/v2/transactions/cashout \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -H "X-Signature: $SIGNATURE" \
  -H "X-Timestamp: $TIMESTAMP" \
  -H "X-Nonce: $NONCE" \
  -d "$BODY"

$body = json_encode([
    'external_id' => 'saque_001',
    'amount'      => 50.00,
    'currency'    => 'BRL',
    'key'         => '12345678901',
    'key_type'    => 'cpf',
    'description' => 'Saque PIX',
]);

$timestamp = (string) time();
$nonce     = bin2hex(random_bytes(16));
$signature = hash_hmac('sha256', "{$timestamp}.{$nonce}.{$body}", $signingKey);

$ch = curl_init('https://api.bspay.co/v2/transactions/cashout');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer {$token}",
        "Content-Type: application/json",
        "X-Signature: {$signature}",
        "X-Timestamp: {$timestamp}",
        "X-Nonce: {$nonce}",
    ],
    CURLOPT_POSTFIELDS => $body,
]);
$res = json_decode(curl_exec($ch), true);
// $res['data']['transaction_id']

import crypto from 'node:crypto';

const body = JSON.stringify({
  external_id: 'saque_001',
  amount: 50.00,
  currency: 'BRL',
  key: '12345678901',
  key_type: 'cpf',
  description: 'Saque PIX',
});

const timestamp = Math.floor(Date.now() / 1000).toString();
const nonce     = crypto.randomUUID();
const signature = crypto
  .createHmac('sha256', signingKey)
  .update(`${timestamp}.${nonce}.${body}`)
  .digest('hex');

const res = await fetch('https://api.bspay.co/v2/transactions/cashout', {
  method: 'POST',
  headers: {
    'Authorization': `Bearer ${token}`,
    'Content-Type': 'application/json',
    'X-Signature': signature,
    'X-Timestamp': timestamp,
    'X-Nonce': nonce,
  },
  body, // raw — NÃO re-stringify
});
const { data } = await res.json();

import hmac, hashlib, json, time, uuid, requests

body = json.dumps({
    "external_id": "saque_001",
    "amount": 50.00,
    "currency": "BRL",
    "key": "12345678901",
    "key_type": "cpf",
    "description": "Saque PIX",
}, separators=(",", ":"))

timestamp = str(int(time.time()))
nonce     = str(uuid.uuid4())
signature = hmac.new(
    signing_key.encode(),
    f"{timestamp}.{nonce}.{body}".encode(),
    hashlib.sha256,
).hexdigest()

res = requests.post(
    "https://api.bspay.co/v2/transactions/cashout",
    headers={
        "Authorization": f"Bearer {token}",
        "Content-Type": "application/json",
        "X-Signature": signature,
        "X-Timestamp": timestamp,
        "X-Nonce": nonce,
    },
    data=body,
)

{
  "success": true,
  "data": {
    "transaction_id": "1e2da23478577eaedf6e0ad8dea877cb",
    "external_id": "saque_001",
    "currency": "BRL",
    "amount": 50.00,
    "fee": 1.00,
    "status": "pending",
    "created_at": "2026-04-30T14:02:48Z"
  },
  "message": "PENDING",
  "request_id": "d83a1af58da407fcc881c0af",
  "timestamp": "2026-04-30T14:02:48Z"
}

{
  "success": true,
  "data": {
    "transaction_id": "8f3a2b1c4d5e6f7a8b9c0d1e2f3a4b5c",
    "external_id": "crypto_001",
    "currency": "USDT",
    "network": "tron",
    "amount": 50.00,
    "status": "pending",
    "created_at": "2026-04-30T14:05:12Z"
  },
  "message": "PENDING",
  "request_id": "a1b2c3d4e5f6a7b8c9d0e1f2",
  "timestamp": "2026-04-30T14:05:12Z"
}

{
  "success": false,
  "error": {
    "code": "INVALID_SIGNATURE",
    "message": "HMAC signature mismatch.",
    "group": "AUTH",
    "retryable": false
  }
}

{
  "success": false,
  "error": {
    "code": "INSUFFICIENT_FUNDS",
    "message": "Insufficient funds for amount + fee.",
    "group": "VALIDATION",
    "retryable": false,
    "details": {
      "available": "30.00",
      "required": "51.00"
    }
  }
}