Kvell API Documentation

import { createHash, createHmac } from "node:crypto";

const body = JSON.stringify({
  transactionId: "ORDER-2026-001",
  amount: 15000,       // 150.00 TRY (integer kuruş)
  currency: "TRY",
  description: "Order #1234",
  returnUrl: "https://yoursite.com/return",
});

// Sign: "{timestamp}\nPOST\n/v1/payments/sessions\n{sha256(body)}"
const timestamp = new Date().toISOString();
const bodyHash = createHash("sha256").update(body).digest("hex");
const signature = createHmac("sha256", process.env.KVELL_SECRET_KEY)
  .update(timestamp + "\nPOST\n/v1/payments/sessions\n" + bodyHash)
  .digest("hex");

const response = await fetch(
  "https://api.pay.sandbox.kvell.group/v1/payments/sessions",
  {
    method: "POST",
    headers: {
      "Content-Type": "application/json",
      "X-Api-Key": process.env.KVELL_API_KEY,
      "X-Signature": signature,
      "X-Timestamp": timestamp,
    },
    body,
  }
);

const session = await response.json();
// => { sessionId: "3f1c…", checkoutUrl: "https://pay.kvell.group/s/…" }