واجهة برمجة SOGESTIO

curl https://sogestio.ma/api/customers?pageSize=50 \
  -H "Authorization: Bearer sgk_xxxxxxxxxxxx_votre_secret"

const res = await fetch("https://sogestio.ma/api/invoices", {
  method: "POST",
  headers: {
    "Authorization": `Bearer ${process.env.SOGESTIO_API_KEY}`,
    "Content-Type": "application/json",
    "Idempotency-Key": order.id, // safe to retry: never creates a duplicate
  },
  body: JSON.stringify({
    kind: "invoice",
    customerId: "c_123",
    customerName: "Supérette Al Baraka",
    issueDate: "2026-10-07",
    currency: "MAD",
    lines: [{ label: "Terminal de caisse", quantity: 1, unitPriceHt: 490000, vatRate: 20 }],
  }),
});
const invoice = await res.json(); // amounts in centimes: 490000 = 4 900,00 DH

$payload = file_get_contents('php://input');
$header  = $_SERVER['HTTP_X_SOGESTIO_SIGNATURE']; // "t=1760000000,v1=ab12…"
parse_str(str_replace(',', '&', $header), $sig);
$expected = hash_hmac('sha256', $sig['t'] . '.' . $payload, getenv('SOGESTIO_WEBHOOK_SECRET'));
if (!hash_equals($expected, $sig['v1']) || abs(time() - (int)$sig['t']) > 300) {
  http_response_code(400); exit;
}
$event = json_decode($payload, true); // $_SERVER['HTTP_X_SOGESTIO_EVENT'] = "invoice.validated"