Trading API

const crypto = require('crypto');

// Step 1: Hash your API secret (do this once and cache the result)
function hashSecret(apiSecret) {
  return crypto.createHash('sha256').update(apiSecret).digest('hex');
}

// Step 2: Sign each request using the hashed secret
function signRequest(secretHash, method, path, body, timestamp) {
  const payload = `${timestamp}${method}${path}${body}`;
  return crypto
    .createHmac('sha256', secretHash)
    .update(payload)
    .digest('hex');
}

// Setup: Hash your secret once
const API_KEY = 'pbp_user_your_api_key_here';
const API_SECRET = 'pbpus_your_api_secret_here';
const SECRET_HASH = hashSecret(API_SECRET);

// Example: Place an order
const timestamp = Math.floor(Date.now() / 1000).toString();
const body = JSON.stringify({
  marketId: 'market-uuid',
  outcome: 'YES',
  side: 'buy',
  price: 65,
  amount: 1000,
  orderType: 'limit',
});

// Note: 'path' must include the full path + query string
// e.g. '/api/trading/orders' for POST,
//      '/api/trading/orders?orderId=abc' for DELETE
const path = '/api/trading/orders';
const signature = signRequest(SECRET_HASH, 'POST', path, body, timestamp);

const response = await fetch('https://predictbet.pro/api/trading/orders', {
  method: 'POST',
  headers: {
    'X-API-Key': API_KEY,
    'X-API-Signature': signature,
    'X-Timestamp': timestamp,
    'Content-Type': 'application/json',
  },
  body,
});

const result = await response.json();
console.log(result);