Transf. Interna

TIMESTAMP=$(date +%s)
NONCE=$(uuidgen)
BODY='{"username":"recipient_user","amount":50.00,"currency":"BRL","description":"Pagamento parceiro","external_id":"transfer_001"}'
SIGNATURE=$(printf '%s' "$TIMESTAMP.$NONCE.$BODY" | openssl dgst -sha256 -hmac "$SIGNING_KEY" -hex | awk '{print $2}')

curl -X POST https://api.bspay.co/v2/internal_transfers/payment \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -H "X-Signature: $SIGNATURE" \
  -H "X-Timestamp: $TIMESTAMP" \
  -H "X-Nonce: $NONCE" \
  -d "$BODY"

$body = json_encode([
    'username'    => 'recipient_user',
    'amount'      => 50.00,
    'currency'    => 'BRL',
    'description' => 'Pagamento parceiro',
    'external_id' => 'transfer_001',
]);

$timestamp = (string) time();
$nonce     = bin2hex(random_bytes(16));
$signature = hash_hmac('sha256', "{$timestamp}.{$nonce}.{$body}", $signingKey);

$ch = curl_init('https://api.bspay.co/v2/internal_transfers/payment');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer {$token}",
        'Content-Type: application/json',
        "X-Signature: {$signature}",
        "X-Timestamp: {$timestamp}",
        "X-Nonce: {$nonce}",
    ],
    CURLOPT_POSTFIELDS => $body,
]);
$res = json_decode(curl_exec($ch), true);

import crypto from 'node:crypto';

const body = JSON.stringify({
  username: 'recipient_user',
  amount: 50.00,
  currency: 'BRL',
  description: 'Pagamento parceiro',
  external_id: 'transfer_001'
});

const timestamp = Math.floor(Date.now() / 1000).toString();
const nonce     = crypto.randomUUID();
const signature = crypto
  .createHmac('sha256', signingKey)
  .update(`${timestamp}.${nonce}.${body}`)
  .digest('hex');

const res = await fetch('https://api.bspay.co/v2/internal_transfers/payment', {
  method: 'POST',
  headers: {
    'Authorization': `Bearer ${token}`,
    'Content-Type': 'application/json',
    'X-Signature': signature,
    'X-Timestamp': timestamp,
    'X-Nonce': nonce,
  },
  body,
});
const data = await res.json();

import hmac, hashlib, json, time, uuid, requests

body = json.dumps({
    "username": "recipient_user",
    "amount": 50.00,
    "currency": "BRL",
    "description": "Pagamento parceiro",
    "external_id": "transfer_001",
}, separators=(",", ":"))

timestamp = str(int(time.time()))
nonce     = str(uuid.uuid4())
signature = hmac.new(
    signing_key.encode(),
    f"{timestamp}.{nonce}.{body}".encode(),
    hashlib.sha256,
).hexdigest()

res = requests.post(
    'https://api.bspay.co/v2/internal_transfers/payment',
    headers={
        'Authorization': f'Bearer {token}',
        'Content-Type': 'application/json',
        'X-Signature': signature,
        'X-Timestamp': timestamp,
        'X-Nonce': nonce,
    },
    data=body,
)

{
  "success": true,
  "data": {
    "transaction_id": "abc123def456",
    "from_user": "seu_username",
    "to_user": "recipient_user",
    "amount": "50.00",
    "currency": "BRL",
    "status": "confirmed",
    "created_at": "2026-04-30T14:00:00Z"
  },
  "request_id": "d83a1af58da407fcc881c0af",
  "timestamp": "2026-04-30T14:00:00Z"
}

{
  "success": false,
  "error": {
    "code": "USER_NOT_FOUND",
    "message": "Destination user not found.",
    "group": "VALIDATION",
    "retryable": false
  }
}

{
  "success": false,
  "error": {
    "code": "INSUFFICIENT_BALANCE",
    "message": "Insufficient balance.",
    "group": "VALIDATION",
    "retryable": false
  }
}