import crypto from "node:crypto";

const secret = process.env.LOOTX_HOOK_SECRET!;
const body = JSON.stringify({
  action: "order",
  exchange: "bybit",
  symbol: "BTCUSDT",
  side: "buy",
  qty: "0.01",
  stopLoss: "61250",
  requestId: crypto.randomUUID(),
});
const ts = Math.floor(Date.now() / 1000).toString();
const signature = crypto
  .createHmac("sha256", secret)
  .update(`${ts}.${body}`)
  .digest("hex");

const res = await fetch(HOOK_URL, {
  method: "POST",
  headers: {
    "content-type": "application/json",
    "x-lootx-timestamp": ts,
    "x-lootx-signature": `sha256=${signature}`,
  },
  body,
});

import hmac, hashlib, json, os, time, uuid, requests

secret = os.environ["LOOTX_HOOK_SECRET"].encode()
body = json.dumps({
    "action": "order",
    "exchange": "bybit",
    "symbol": "BTCUSDT",
    "side": "buy",
    "qty": "0.01",
    "stopLoss": "61250",
    "requestId": str(uuid.uuid4()),
}, separators=(",", ":"))          # без пробелов: подписываем то, что отправляем
ts = str(int(time.time()))
sig = hmac.new(secret, f"{ts}.{body}".encode(), hashlib.sha256).hexdigest()

requests.post(HOOK_URL, data=body, timeout=10, headers={
    "content-type": "application/json",
    "x-lootx-timestamp": ts,
    "x-lootx-signature": f"sha256={sig}",
})

$secret = getenv('LOOTX_HOOK_SECRET');
$body = json_encode([
  'action' => 'order',
  'exchange' => 'bybit',
  'symbol' => 'BTCUSDT',
  'side' => 'buy',
  'qty' => '0.01',
  'requestId' => bin2hex(random_bytes(8)),
], JSON_UNESCAPED_SLASHES);
$ts = (string) time();
$sig = hash_hmac('sha256', "$ts.$body", $secret);

$ch = curl_init(HOOK_URL);
curl_setopt_array($ch, [
  CURLOPT_POST => true,
  CURLOPT_POSTFIELDS => $body,
  CURLOPT_HTTPHEADER => [
    'Content-Type: application/json',
    "X-LootX-Timestamp: $ts",
    "X-LootX-Signature: sha256=$sig",
  ],
]);
curl_exec($ch);