How to Integrate Lovable with Payoneer

1import { serve } from "https://deno.land/std@0.168.0/http/server.ts";
2import { createClient } from "https://esm.sh/@supabase/supabase-js@2";
3
4const CLIENT_ID = Deno.env.get("PAYONEER_CLIENT_ID") ?? "";
5const CLIENT_SECRET = Deno.env.get("PAYONEER_CLIENT_SECRET") ?? "";
6const ENVIRONMENT = Deno.env.get("PAYONEER_ENVIRONMENT") ?? "sandbox";
7const SUPABASE_URL = Deno.env.get("SUPABASE_URL") ?? "";
8const SUPABASE_SERVICE_ROLE_KEY = Deno.env.get("SUPABASE_SERVICE_ROLE_KEY") ?? "";
9
10const TOKEN_URL = ENVIRONMENT === "production"
11  ? "https://api.payoneer.com/v4/oauth2/token"
12  : "https://api.sandbox.payoneer.com/v4/oauth2/token";
13
14const corsHeaders = {
15  "Access-Control-Allow-Origin": "*",
16  "Access-Control-Allow-Headers": "authorization, x-client-info, apikey, content-type",
17};
18
19export async function getAccessToken(): Promise<string> {
20  const supabase = createClient(SUPABASE_URL, SUPABASE_SERVICE_ROLE_KEY);
21
22  // Check cache
23  const { data: cached } = await supabase
24    .from("payoneer_token_cache")
25    .select("token, expires_at")
26    .eq("environment", ENVIRONMENT)
27    .gt("expires_at", new Date(Date.now() + 5 * 60 * 1000).toISOString())
28    .single();
29
30  if (cached?.token) return cached.token;
31
32  // Fetch new token
33  const authString = btoa(`${CLIENT_ID}:${CLIENT_SECRET}`);
34  const res = await fetch(TOKEN_URL, {
35    method: "POST",
36    headers: {
37      "Authorization": `Basic ${authString}`,
38      "Content-Type": "application/x-www-form-urlencoded",
39    },
40    body: "grant_type=client_credentials&scope=read+write+payouts",
41  });
42
43  if (!res.ok) {
44    const err = await res.text();
45    throw new Error(`Payoneer auth failed: ${err}`);
46  }
47
48  const data = await res.json();
49  const expiresAt = new Date(Date.now() + (data.expires_in - 60) * 1000).toISOString();
50
51  await supabase.from("payoneer_token_cache").upsert(
52    { environment: ENVIRONMENT, token: data.access_token, expires_at: expiresAt },
53    { onConflict: "environment" }
54  );
55
56  return data.access_token;
57}
58
59serve(async (req) => {
60  if (req.method === "OPTIONS") {
61    return new Response("ok", { headers: corsHeaders });
62  }
63  try {
64    const token = await getAccessToken();
65    return new Response(JSON.stringify({ token }), { headers: { ...corsHeaders, "Content-Type": "application/json" } });
66  } catch (e) {
67    return new Response(JSON.stringify({ error: (e as Error).message }), { status: 500, headers: { ...corsHeaders, "Content-Type": "application/json" } });
68  }
69});

1import { serve } from "https://deno.land/std@0.168.0/http/server.ts";
2import { createClient } from "https://esm.sh/@supabase/supabase-js@2";
3
4const PROGRAM_ID = Deno.env.get("PAYONEER_PROGRAM_ID") ?? "";
5const ENVIRONMENT = Deno.env.get("PAYONEER_ENVIRONMENT") ?? "sandbox";
6const SUPABASE_URL = Deno.env.get("SUPABASE_URL") ?? "";
7const SUPABASE_SERVICE_ROLE_KEY = Deno.env.get("SUPABASE_SERVICE_ROLE_KEY") ?? "";
8
9const API_BASE = ENVIRONMENT === "production"
10  ? "https://api.payoneer.com/v4"
11  : "https://api.sandbox.payoneer.com/v4";
12
13const corsHeaders = {
14  "Access-Control-Allow-Origin": "*",
15  "Access-Control-Allow-Headers": "authorization, x-client-info, apikey, content-type",
16};
17
18async function getToken(): Promise<string> {
19  // Import from payoneer-auth or duplicate the logic inline
20  const supabase = createClient(SUPABASE_URL, SUPABASE_SERVICE_ROLE_KEY);
21  const { data } = await supabase.from("payoneer_token_cache").select("token").eq("environment", ENVIRONMENT).gt("expires_at", new Date().toISOString()).single();
22  if (data?.token) return data.token;
23  throw new Error("No valid Payoneer token — call payoneer-auth first");
24}
25
26serve(async (req) => {
27  if (req.method === "OPTIONS") return new Response("ok", { headers: corsHeaders });
28
29  try {
30    const { userId, email, firstName, lastName } = await req.json();
31    const supabase = createClient(SUPABASE_URL, SUPABASE_SERVICE_ROLE_KEY);
32    const token = await getToken();
33
34    const res = await fetch(`${API_BASE}/programs/${PROGRAM_ID}/payees`, {
35      method: "POST",
36      headers: { "Authorization": `Bearer ${token}`, "Content-Type": "application/json" },
37      body: JSON.stringify({
38        payee_id: userId,
39        contact: { email, first_name: firstName, last_name: lastName },
40      }),
41    });
42
43    if (!res.ok) {
44      const err = await res.text();
45      throw new Error(`Payoneer payee error: ${err}`);
46    }
47
48    const data = await res.json();
49    await supabase.from("users").update({
50      payoneer_payee_id: data.payee_id ?? userId,
51      payoneer_registration_link: data.registration_link,
52      payoneer_status: "PENDING",
53    }).eq("id", userId);
54
55    return new Response(
56      JSON.stringify({ payeeId: data.payee_id, registrationLink: data.registration_link }),
57      { headers: { ...corsHeaders, "Content-Type": "application/json" } }
58    );
59  } catch (e) {
60    return new Response(
61      JSON.stringify({ error: (e as Error).message }),
62      { status: 500, headers: { ...corsHeaders, "Content-Type": "application/json" } }
63    );
64  }
65});

1import { serve } from "https://deno.land/std@0.168.0/http/server.ts";
2import { createClient } from "https://esm.sh/@supabase/supabase-js@2";
3
4const PROGRAM_ID = Deno.env.get("PAYONEER_PROGRAM_ID") ?? "";
5const ENVIRONMENT = Deno.env.get("PAYONEER_ENVIRONMENT") ?? "sandbox";
6const SUPABASE_URL = Deno.env.get("SUPABASE_URL") ?? "";
7const SUPABASE_SERVICE_ROLE_KEY = Deno.env.get("SUPABASE_SERVICE_ROLE_KEY") ?? "";
8
9const API_BASE = ENVIRONMENT === "production"
10  ? "https://api.payoneer.com/v4"
11  : "https://api.sandbox.payoneer.com/v4";
12
13const corsHeaders = {
14  "Access-Control-Allow-Origin": "*",
15  "Access-Control-Allow-Headers": "authorization, x-client-info, apikey, content-type",
16};
17
18serve(async (req) => {
19  if (req.method === "OPTIONS") return new Response("ok", { headers: corsHeaders });
20
21  try {
22    const { payouts } = await req.json() as { payouts: Array<{ payeeId: string; amount: number; currency: string; description: string; internalId: string }> };
23    const supabase = createClient(SUPABASE_URL, SUPABASE_SERVICE_ROLE_KEY);
24
25    // Get cached token
26    const { data: tokenData } = await supabase.from("payoneer_token_cache").select("token").eq("environment", ENVIRONMENT).gt("expires_at", new Date().toISOString()).single();
27    if (!tokenData?.token) throw new Error("No valid token — refresh authentication");
28
29    const results: Array<{ internalId: string; success: boolean; paymentId?: string; error?: string }> = [];
30
31    for (const payout of payouts) {
32      const res = await fetch(`${API_BASE}/programs/${PROGRAM_ID}/payouts`, {
33        method: "POST",
34        headers: { "Authorization": `Bearer ${tokenData.token}`, "Content-Type": "application/json" },
35        body: JSON.stringify({
36          client_reference_id: payout.internalId,
37          payee_id: payout.payeeId,
38          amount: payout.amount,
39          currency: payout.currency,
40          description: payout.description,
41        }),
42      });
43
44      const data = await res.json();
45      if (res.ok && data.payment_id) {
46        await supabase.from("payouts").update({ payoneer_payment_id: data.payment_id, status: "sent" }).eq("id", payout.internalId);
47        results.push({ internalId: payout.internalId, success: true, paymentId: data.payment_id });
48      } else {
49        await supabase.from("payouts").update({ status: "failed", error_message: data.message ?? "Unknown error" }).eq("id", payout.internalId);
50        results.push({ internalId: payout.internalId, success: false, error: data.message });
51      }
52    }
53
54    return new Response(JSON.stringify({ results }), { headers: { ...corsHeaders, "Content-Type": "application/json" } });
55  } catch (e) {
56    return new Response(JSON.stringify({ error: (e as Error).message }), { status: 500, headers: { ...corsHeaders, "Content-Type": "application/json" } });
57  }
58});