Creates a dynamic invoice tied to a specific payment link template, allowing merchants to pass customer and product details.

Authentication - HMAC-SHA256

All requests MUST include custom headers for security and verification:

Required Headers:

• Content-Type: Must be application/json
• x-api-key: Merchant's Public Key (pk_...)
• x-timestamp: Current time in milliseconds (e.g., 1758957600000)
• x-signature: HMAC-SHA256 hash
• X-Api-Version: API version (v1)

Optional Headers:

• x-trace-id: Request trace ID for logging

HMAC Signature Calculation

const method = 'POST';
const path = '/checkout/payment-link/invoice';
const timestamp = Date.now().toString();
const body = JSON.stringify(requestBody);
const message = method + path + timestamp + body;
const signature = crypto.createHmac('sha256', SECRET_KEY).update(message).digest('hex');

Environment & Security

• Organizations with status !== 'live' can only use sandbox API keys
• Live organizations can use both sandbox and live API keys
• Production requests must come from whitelisted IPs