設定您的伺服器以與 Fluz JS Widget 互動 - Fluz

安裝 Fluz Javascript widget 相對簡單。您必須在您的網站頁面上嵌入或匯入該 Javascript。當 javascript 載入後，您可以將某個 UI 元素綁定為開啟所匯入 javascript 所包含的模態視窗。您還必須包含一個 JWT，以預先授權使用者完成特定交易，如下所述。

建立「預先核准交易」權杖

由於使用者會與 Fluz 平台互動，將資金在您的消費帳戶之間進出，任何與 widget 的互動都必須包含一個已簽章的 JWT 權杖，以有效「預先授權」使用者完成該筆交易。這代表著，例如，如果使用者「abc123」在其營運商帳戶中有 $50 並希望提領至 Fluz，您需要產生一個 patToken，讓 Fluz 能用它來驗證該筆交易與金額。此 patToken 會包含 amount、您的 apiKey、transactionType、externalId、使用者資料，然後是一個 JTI。此權杖使用您的 apiSecret 簽署，該值可在 Fluz 的 for-developers 區段中您的應用程式詳細資料裡找到。

key	value
amount	以美元與美分表示的使用者獲准可交易的金額。對於不涉及金流的 widget 類型（例如 `ENROLLMENT`）則非必填
transactionType	`DEPOSIT` 或 `WITHDRAW`。 `DEPOSIT` 表示使用者將資金存入 Fluz，然後移轉至您的營運商消費帳戶。 `WITHDRAW` 表示使用者將從您的營運商消費帳戶出款至其 Fluz 帳戶。 `ENROLLMENT` 會執行帳戶設定而非交易 — 參見 Enrollment Widget。目前僅在 staging 提供。
steps	當 `transactionType` 為 `ENROLLMENT` 時必填，否則忽略。為使用者應看到的設定步驟之有序陣列：`KYC`、`FUNDING_SOURCE`、`PIN`。未知或重複的值會拒絕該工作階段。參見 Enrollment Widget。
apiKey	您應用程式的 API key
externalId	您對該使用者的唯一識別碼。可以是 userId、accountId、電話號碼、電子郵件地址——任何您系統中使用的識別。我們在傳送如 webhook 事件等資訊給您時會提供此值，以便您在系統中對應該使用者。
jti	在您簽署權杖時產生的 UUID v4。我們使用此權杖以確保冪等性。可閱讀官方 jti 規格。
phoneNumber (optional)	使用者的電話號碼字串。若傳入，使用者將略過登入/註冊流程中的 Enter the phone number 步驟，並直接進入 Enter the two-factor-authentication code 步驟
firstName (optional)	使用者的名字字串
lastName (optional)	使用者的姓氏字串
email (optional)	使用者的電子郵件字串
username (optional)	使用者的使用者名稱字串

產生 JWT 的程式碼片段

JavaScript

import jwt from 'jsonwebtoken';

const { sign } = jwt;
const amount = 0; // Pass in the amount here
const transactionType = ""; // DEPOSIT or WITHDRAW
const externalId = ""; // This is your unique identifier. It might be a userID, accountID.

const jti = uuidv4();

const secret = ""; // Your api secret

const generatedToken = sign({
  amount,
  apiKey: "", // Your apiKey
  transactionType,
  externalId,
  jti,
}, secret, { expiresIn: '1 day' });

Ruby

Installation: gem install jwt

require 'jwt'
require 'securerandom'

amount = 0 # Pass in the amount here
transaction_type = "" # DEPOSIT or WITHDRAW
external_id = "" # This is your unique identifier. It might be a userID, accountID.

jti = SecureRandom.uuid

secret = "" # Your api secret

payload = {
  amount: amount,
  apiKey: "", # Your apiKey
  transactionType: transaction_type,
  externalId: external_id,
  jti: jti,
  exp: Time.now.to_i + (24 * 60 * 60) # 1 day
}

generated_token = JWT.encode(payload, secret, 'HS256')
puts generated_token

Python

Installation: pip install PyJWT

import jwt
import uuid
from datetime import datetime, timedelta

amount = 0  # Pass in the amount here
transaction_type = "" # DEPOSIT or WITHDRAW
external_id = ""  # This is your unique identifier. It might be a userID, accountID.

jti = str(uuid.uuid4())

secret = ""  # Your API_SECRET. Please reach out to your Fluz account manager if you do not have this.

payload = {
    "amount": amount,
    "apiKey": "", # Your apiKey
    "transactionType": transaction_type,
    "externalId": external_id,
    "jti": jti,
    "exp": datetime.utcnow() + timedelta(days=1)
}

generated_token = jwt.encode(payload, secret, algorithm="HS256")
print(generated_token)

Go

package main

import (
    "fmt"
    "time"
    "github.com/golang-jwt/jwt/v5"
    "github.com/google/uuid"
)

func main() {
    amount := 0 // Pass in the amount here
    transactionType := "" // DEPOSIT or WITHDRAW
    externalId := "" // This is your unique identifier. It might be a userID, accountID.
    
    jti := uuid.New().String()
    
    secret := "" // Your api_secret
    
    claims := jwt.MapClaims{
        "amount":          amount,
        "apiKey":          "", // your api_key
        "transactionType": transactionType,
        "externalId":      externalId,
        "jti":             jti,
        "exp":             time.Now().Add(24 * time.Hour).Unix(),
    }
    
    token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
    generatedToken, err := token.SignedString([]byte(secret))
    
    if err != nil {
        fmt.Println("Error generating token:", err)
        return
    }
    
    fmt.Println(generatedToken)
}

Java

import io.jsonwebtoken.Jwts;
import io.jsonwebtoken.SignatureAlgorithm;
import java.util.Date;
import java.util.HashMap;
import java.util.Map;
import java.util.UUID;

public class JwtGenerator {
    public static void main(String[] args) {
        int amount = 0; // Pass in the amount here
        String transactionType = ""; // DEPOSIT or WITHDRAW
        String externalId = ""; // This is your unique identifier. It might be a userID, accountID.
        
        String jti = UUID.randomUUID().toString();
        
        String secret = ""; // Your api_secret
        
        Map<String, Object> claims = new HashMap<>();
        claims.put("amount", amount);
        claims.put("apiKey", ""); // your api_key
        claims.put("transactionType", transactionType);
        claims.put("externalId", externalId);
        
        long expirationTime = System.currentTimeMillis() + (24 * 60 * 60 * 1000); // 1 day
        
        String generatedToken = Jwts.builder()
                .setClaims(claims)
                .setId(jti)
                .setExpiration(new Date(expirationTime))
                .signWith(SignatureAlgorithm.HS256, secret)
                .compact();
        
        System.out.println(generatedToken);
    }
}
     

PHP

<?php

require 'vendor/autoload.php';

use Firebase\JWT\JWT;
use Ramsey\Uuid\Uuid;

$amount = 0; // Pass in the amount here
$transactionType = ""; // DEPOSIT or WITHDRAW
$externalId = ""; // This is your unique identifier. It might be a userID, accountID.

$jti = Uuid::uuid4()->toString();

$secret = ""; // Your api_secret

$payload = [
    "amount" => $amount,
    "apiKey" => "", // your api_key
    "transactionType" => $transactionType,
    "externalId" => $externalId,
    "jti" => $jti,
    "exp" => time() + (24 * 60 * 60) // 1 day
];

$generatedToken = JWT::encode($payload, $secret, 'HS256');
echo $generatedToken;
?>

C# (.NET)

using System;
using System.Collections.Generic;
using System.IdentityModel.Tokens.Jwt;
using System.Security.Claims;
using Microsoft.IdentityModel.Tokens;
using System.Text;

class JwtGenerator
{
    static void Main()
    {
        int amount = 0; // Pass in the amount here
        string transactionType = ""; // DEPOSIT or WITHDRAW
        string externalId = ""; // This is your unique identifier. It might be a userID, accountID.
        
        string jti = Guid.NewGuid().ToString();
        
        string secret = ""; // Your api_secret
        
        var claims = new List<Claim>
        {
            new Claim("amount", amount.ToString()),
            new Claim("apiKey", ""), // your api_key
            new Claim("transactionType", transactionType),
            new Claim("externalId", externalId),
            new Claim(JwtRegisteredClaimNames.Jti, jti)
        };
        
        var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(secret));
        var creds = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);
        
        var token = new JwtSecurityToken(
            claims: claims,
            expires: DateTime.UtcNow.AddDays(1),
            signingCredentials: creds
        );
        
        var generatedToken = new JwtSecurityTokenHandler().WriteToken(token);
        Console.WriteLine(generatedToken);
    }
}