import hmac
import hashlib
import time
import json

def generate_hmac_signature(secret, timestamp, payload):
    message = f"{timestamp}:{payload}".encode('utf-8')
    secret_key = secret.encode('utf-8')
    signature = hmac.new(secret_key, message, hashlib.sha256).hexdigest()
    return signature

timestamp = int(time.time() * 1000)
payload = json.dumps({ # your request body })
access_secret = 'your_access_secret_from_login'
hmac_signature = generate_hmac_signature(access_secret, timestamp, payload)

<?php

function generateHmacSignature($secret, $timestamp, $payload) {
    $message = $timestamp . ":" . $payload;
    return hash_hmac('sha256', $message, $secret);
}

$timestamp = round(microtime(true) * 1000);
$payload = json_encode([ /* your request body */ ]);
$accessSecret = 'your_access_secret_from_login';
$hmacSignature = generateHmacSignature($accessSecret, $timestamp, $payload);
?>

using System;
using System.Security.Cryptography;
using System.Text;

public class HmacGenerator
{
    public static string GenerateHmacSignature(string secret, long timestamp, string payload)
    {
        var message = $"{timestamp}:{payload}";
        var secretBytes = Encoding.UTF8.GetBytes(secret);
        var messageBytes = Encoding.UTF8.GetBytes(message);

        using (var hmac = new HMACSHA256(secretBytes))
        {
            var hash = hmac.ComputeHash(messageBytes);
            return BitConverter.ToString(hash).Replace("-", "").ToLower();
        }
    }

    public static void Main()
    {
        var timestamp = new DateTimeOffset(DateTime.UtcNow).ToUnixTimeMilliseconds();
        var payload = "{\\"key\\":\\"value\\"}"; // JSON string of your payload
        var accessSecret = "your_access_secret_from_login";
        var hmacSignature = GenerateHmacSignature(accessSecret, timestamp, payload);
    }
}

import requests
import hmac
import hashlib
import time
import json
import os
import secrets

def generate_hmac_signature(secret, timestamp, payload):
    message = f"{timestamp}:{payload}".encode('utf-8')
    secret_key = secret.encode('utf-8')
    signature = hmac.new(secret_key, message, hashlib.sha256).hexdigest()
    return signature

def make_member_request(base_url, method, url, payload, access_token, access_secret):
    try:
        timestamp = int(time.time() * 1000)
        payload_string = json.dumps(payload)
        
        hmac_signature = generate_hmac_signature(access_secret, timestamp, payload_string)
        
        headers = {
            'Accept': 'application/json',
            'x-api-key': os.environ.get('HTTP_AUTHORIZATION_KEY', ''),
            'Authorization': f'Bearer {access_token}',
            'x-hmac-signature': hmac_signature,
            'x-request-timestamp': str(timestamp),
            'x-nonce-string': secrets.token_hex(16)
        }
        
        full_url = f"{base_url}{url}"
        
        if method.lower() == 'get':
            response = requests.get(full_url, headers=headers)
        elif method.lower() == 'post':
            response = requests.post(full_url, headers=headers, json=payload)
        elif method.lower() == 'put':
            response = requests.put(full_url, headers=headers, json=payload)
        elif method.lower() == 'delete':
            response = requests.delete(full_url, headers=headers)
        else:
            raise ValueError(f"Unsupported method: {method}")
        
        return response
        
    except Exception as error:
        print(f"Error during request to {url}: {error}")
        raise error

# Example usage
def example_request():
    base_url = "https://api-solid-staging.xend.africa"
    access_token = "your_access_token_from_login"
    access_secret = "your_access_secret_from_login"
    
    # Example: Get member profile
    response = make_member_request(
        base_url,
        "get",
        "/api/Member/profile",
        {},
        access_token,
        access_secret
    )
    
    print("Response:", response.json())

# cURL Example - Manual request construction
# Replace the following variables with your actual values:
# - YOUR_API_KEY: Your API key
# - YOUR_ACCESS_TOKEN: Access token from login
# - YOUR_ACCESS_SECRET: Access secret from login
# - TIMESTAMP: Current timestamp in milliseconds
# - NONCE_STRING: Random 32-character string
# - HMAC_SIGNATURE: Generated HMAC signature

# Step 1: Generate timestamp and nonce
TIMESTAMP=$(date +%s)000
NONCE_STRING=$(openssl rand -hex 16)

# Step 2: Prepare payload (for POST/PUT requests)
PAYLOAD='{"key":"value"}'  # Replace with your actual payload

# Step 3: Generate HMAC signature
# Note: You'll need to implement this in your shell or use a tool
# HMAC_SIGNATURE=$(echo -n "${TIMESTAMP}:${PAYLOAD}" | openssl dgst -sha256 -hmac "YOUR_ACCESS_SECRET" | cut -d' ' -f2)

# Step 4: Make the request
curl -X GET "https://api-solid-staging.xend.africa/api/Member/profile" \
  -H "Accept: application/json" \
  -H "x-api-key: YOUR_API_KEY" \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN" \
  -H "x-hmac-signature: HMAC_SIGNATURE" \
  -H "x-request-timestamp: $TIMESTAMP" \
  -H "x-nonce-string: $NONCE_STRING"

# Example POST request with payload
curl -X POST "https://api-solid-staging.xend.africa/api/Member/update-profile" \
  -H "Accept: application/json" \
  -H "Content-Type: application/json" \
  -H "x-api-key: YOUR_API_KEY" \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN" \
  -H "x-hmac-signature: HMAC_SIGNATURE" \
  -H "x-request-timestamp: $TIMESTAMP" \
  -H "x-nonce-string: $NONCE_STRING" \
  -d "$PAYLOAD"