设置您的服务器以与 Fluz JS 小部件交互 - Fluz

安装 Fluz Javascript 小部件相对简单。您需要将 Javascript 嵌入或导入到站点的某个页面上。Javascript 加载完成后，您可以将某个 UI 元素绑定为打开随导入脚本一起提供的 javascript 模态框。您还必须包含一个 JWT，用于预先授权用户完成特定交易，详见下文。

创建“预先批准的交易”令牌

由于用户将与 Fluz 平台交互以在您的消费账户之间进出资金，任何与小部件的交互都必须包含一个已签名的 JWT 令牌，该令牌可有效地“预先授权”用户完成交易。这意味着，例如，如果用户“abc123”在其运营商账户中有 $50 想要提现到 Fluz，您需要生成一个 patToken，供 Fluz 用于验证交易和金额。该 patToken 包含 amount、您的 apiKey、transactionType、externalId、用户数据以及一个 JTI。该令牌使用您的 apiSecret 签名，可在 Fluz 的 for-developers 应用详情中找到。

key	value
amount	用户获批可用于交易的美元和美分金额。对于不涉及资金流动的小部件类型（如 `ENROLLMENT`）则不必填
transactionType	`DEPOSIT` 或 `WITHDRAW`。 `DEPOSIT` 表示用户将资金充值到 Fluz，然后转入您的运营商消费账户。 `WITHDRAW` 表示用户从您的运营商消费账户向其 Fluz 账户发起付款。 `ENROLLMENT` 运行账户设置流程而非交易 —— 参见 Enrollment Widget。目前仅在 staging 可用。
steps	当 `transactionType` 为 `ENROLLMENT` 时必填，否则忽略。为用户应看到的设置步骤的有序数组：`KYC`、`FUNDING_SOURCE`、`PIN`。未知或重复的值会拒绝该会话。参见 Enrollment Widget。
apiKey	您应用的 API key
externalId	您用于标识用户的唯一标识符。可以是 userId、accountId、电话号码、电子邮件地址——即您系统中所使用的任何标识符。我们会在向您发送例如 webhook 事件等信息时提供此值，以便您在系统中完成用户映射。
jti	在您签名令牌时生成的 UUID v4。我们将此令牌用于幂等性。可在官方 jti 规范中阅读更多内容。
phoneNumber (optional)	包含用户电话号码的字符串。如果传入，用户将跳过登录/注册流程中的输入手机号码步骤，直接进入输入双重身份验证代码步骤
firstName (optional)	用户的名字字符串
lastName (optional)	用户的姓氏字符串
email (optional)	用户的电子邮箱字符串
username (optional)	用户名字符串

生成 JWT 的代码片段

JavaScript

import jwt from 'jsonwebtoken';

const { sign } = jwt;
const amount = 0; // Pass in the amount here
const transactionType = ""; // DEPOSIT or WITHDRAW
const externalId = ""; // This is your unique identifier. It might be a userID, accountID.

const jti = uuidv4();

const secret = ""; // Your api secret

const generatedToken = sign({
  amount,
  apiKey: "", // Your apiKey
  transactionType,
  externalId,
  jti,
}, secret, { expiresIn: '1 day' });

Ruby

安装： gem install jwt

require 'jwt'
require 'securerandom'

amount = 0 # Pass in the amount here
transaction_type = "" # DEPOSIT or WITHDRAW
external_id = "" # This is your unique identifier. It might be a userID, accountID.

jti = SecureRandom.uuid

secret = "" # Your api secret

payload = {
  amount: amount,
  apiKey: "", # Your apiKey
  transactionType: transaction_type,
  externalId: external_id,
  jti: jti,
  exp: Time.now.to_i + (24 * 60 * 60) # 1 day
}

generated_token = JWT.encode(payload, secret, 'HS256')
puts generated_token

Python

安装： pip install PyJWT

import jwt
import uuid
from datetime import datetime, timedelta

amount = 0  # Pass in the amount here
transaction_type = "" # DEPOSIT or WITHDRAW
external_id = ""  # This is your unique identifier. It might be a userID, accountID.

jti = str(uuid.uuid4())

secret = ""  # Your API_SECRET. Please reach out to your Fluz account manager if you do not have this.

payload = {
    "amount": amount,
    "apiKey": "", # Your apiKey
    "transactionType": transaction_type,
    "externalId": external_id,
    "jti": jti,
    "exp": datetime.utcnow() + timedelta(days=1)
}

generated_token = jwt.encode(payload, secret, algorithm="HS256")
print(generated_token)

Go

package main

import (
    "fmt"
    "time"
    "github.com/golang-jwt/jwt/v5"
    "github.com/google/uuid"
)

func main() {
    amount := 0 // Pass in the amount here
    transactionType := "" // DEPOSIT or WITHDRAW
    externalId := "" // This is your unique identifier. It might be a userID, accountID.
    
    jti := uuid.New().String()
    
    secret := "" // Your api_secret
    
    claims := jwt.MapClaims{
        "amount":          amount,
        "apiKey":          "", // your api_key
        "transactionType": transactionType,
        "externalId":      externalId,
        "jti":             jti,
        "exp":             time.Now().Add(24 * time.Hour).Unix(),
    }
    
    token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
    generatedToken, err := token.SignedString([]byte(secret))
    
    if err != nil {
        fmt.Println("Error generating token:", err)
        return
    }
    
    fmt.Println(generatedToken)
}

Java

import io.jsonwebtoken.Jwts;
import io.jsonwebtoken.SignatureAlgorithm;
import java.util.Date;
import java.util.HashMap;
import java.util.Map;
import java.util.UUID;

public class JwtGenerator {
    public static void main(String[] args) {
        int amount = 0; // Pass in the amount here
        String transactionType = ""; // DEPOSIT or WITHDRAW
        String externalId = ""; // This is your unique identifier. It might be a userID, accountID.
        
        String jti = UUID.randomUUID().toString();
        
        String secret = ""; // Your api_secret
        
        Map<String, Object> claims = new HashMap<>();
        claims.put("amount", amount);
        claims.put("apiKey", ""); // your api_key
        claims.put("transactionType", transactionType);
        claims.put("externalId", externalId);
        
        long expirationTime = System.currentTimeMillis() + (24 * 60 * 60 * 1000); // 1 day
        
        String generatedToken = Jwts.builder()
                .setClaims(claims)
                .setId(jti)
                .setExpiration(new Date(expirationTime))
                .signWith(SignatureAlgorithm.HS256, secret)
                .compact();
        
        System.out.println(generatedToken);
    }
}
     

PHP

<?php

require 'vendor/autoload.php';

use Firebase\JWT\JWT;
use Ramsey\Uuid\Uuid;

$amount = 0; // Pass in the amount here
$transactionType = ""; // DEPOSIT or WITHDRAW
$externalId = ""; // This is your unique identifier. It might be a userID, accountID.

$jti = Uuid::uuid4()->toString();

$secret = ""; // Your api_secret

$payload = [
    "amount" => $amount,
    "apiKey" => "", // your api_key
    "transactionType" => $transactionType,
    "externalId" => $externalId,
    "jti" => $jti,
    "exp" => time() + (24 * 60 * 60) // 1 day
];

$generatedToken = JWT::encode($payload, $secret, 'HS256');
echo $generatedToken;
?>

C# (.NET)

using System;
using System.Collections.Generic;
using System.IdentityModel.Tokens.Jwt;
using System.Security.Claims;
using Microsoft.IdentityModel.Tokens;
using System.Text;

class JwtGenerator
{
    static void Main()
    {
        int amount = 0; // Pass in the amount here
        string transactionType = ""; // DEPOSIT or WITHDRAW
        string externalId = ""; // This is your unique identifier. It might be a userID, accountID.
        
        string jti = Guid.NewGuid().ToString();
        
        string secret = ""; // Your api_secret
        
        var claims = new List<Claim>
        {
            new Claim("amount", amount.ToString()),
            new Claim("apiKey", ""), // your api_key
            new Claim("transactionType", transactionType),
            new Claim("externalId", externalId),
            new Claim(JwtRegisteredClaimNames.Jti, jti)
        };
        
        var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(secret));
        var creds = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);
        
        var token = new JwtSecurityToken(
            claims: claims,
            expires: DateTime.UtcNow.AddDays(1),
            signingCredentials: creds
        );
        
        var generatedToken = new JwtSecurityTokenHandler().WriteToken(token);
        Console.WriteLine(generatedToken);
    }
}