haybtech-sdk 1.0.0

Official Python SDK for HayBTech Payment Gateway

HayBTech Python SDK

Official Python SDK for the HayBTech Payment Gateway API -- mobile payments across West Africa .

---

Installation

pip install haybtech-sdk

---

Quick Start (Zero-Config)

If you have HAYBTECH_SECRET_KEY set in your environment (e.g. via .env), you can initialize the SDK with zero configuration:

from haybtech import HayBTechClient

client = HayBTechClient()

(Optional) You can also pass the key explicitly:

client = HayBTechClient('sk_test_your_key')

Initiate a payment

try: response = client.payments.create({ 'merchant_ref': 'ORDER-12345', 'amount': 5000, 'currency': 'XOF', 'return_url': 'https://mysite.com/success', 'cancel_url': 'https://mysite.com/cancel', 'callback_url': 'https://mysite.com/webhook' })

print(f"Payment URL: {response.redirect_url()}")

# Django Helper
# return response.to_django_redirect()

except Exception as e: print(f"Error: {e}")

---

## Webhooks

### Django

```python
from haybtech import Webhook, SignatureException

def my_webhook_view(request):
    payload = request.body.decode('utf-8')
    signature = request.headers.get('X-HayBTech-Signature')
    secret = 'whsec_...'

    try:
        event = Webhook.construct_event(payload, signature, secret)
        
        if event['event'] == 'payment.success':
            merchant_ref = event['data']['merchant_ref']
            # Mark order as paid
            
        return HttpResponse("OK", status=200)
    except SignatureException:
        return HttpResponse("Invalid Signature", status=403)

Flask

from flask import Flask, request, jsonify
from haybtech import Webhook, SignatureException

app = Flask(__name__)

@app.route('/webhook', methods=['POST'])
def webhook():
    payload = request.get_data(as_text=True)
    signature = request.headers.get('X-HayBTech-Signature')

    try:
        event = Webhook.construct_event(payload, signature, 'whsec_...')
        
        if event['event'] == 'payment.success':
            # Mark order as paid
            pass
        
        return jsonify(status='ok'), 200
    except SignatureException:
        return jsonify(error='Invalid Signature'), 403

FastAPI

from fastapi import FastAPI, Request, HTTPException
from haybtech import Webhook, SignatureException

app = FastAPI()

@app.post("/webhook")
async def webhook(request: Request):
    payload = (await request.body()).decode('utf-8')
    signature = request.headers.get('X-HayBTech-Signature')

    try:
        event = Webhook.construct_event(payload, signature, 'whsec_...')
        
        if event['event'] == 'payment.success':
            # Mark order as paid
            pass
        
        return {"status": "ok"}
    except SignatureException:
        raise HTTPException(status_code=403, detail="Invalid Signature")

---

Available Events

Event	Description
payment.success	Payment confirmed
payment.failed	Payment failed
payment.cancelled	Cancelled by customer
payment.expired	Payment timed out
payment.expired	Payment timed out

---

Error Handling

from haybtech import HayBTechClient
from haybtech.exceptions import ApiException, HayBTechException

client = HayBTechClient('sk_test_...')

try:
    response = client.payments.create(params)
except ApiException as e:
    print(e.message)       # Human-readable message
    print(e.http_status)   # 400, 422, 500...
    print(e.error_code)    # e.g., "insufficient_funds"
except HayBTechException as e:
    # SDK not configured, key invalid, etc.
    print(e)

---

Test Mode

client = HayBTechClient('sk_test_...') # No real charges

---

---

Security Features

This SDK is built for Maximum Security:

• Zero Dependencies: Uses only standard Python libraries (urllib, hmac, hashlib). No vulnerabilities from external packages.
• Secret Masking: Keys are automatically masked in repr() and protected against pickle serialization.
• Memory Protection: Webhook payloads are capped at 1 MB to prevent memory exhaustion attacks.
• Timing Attack Resistance: Uses hmac.compare_digest for signature verification.
• Replay Protection: 5-minute timestamp tolerance on webhook signatures.
• CRLF Guard: Prevents HTTP header injection via malformed keys.

---

API Resources

Resource	Description
client.payments	Create, retrieve, list, and verify transactions
client.webhooks	Manage notification endpoints programmatically

---

MIT License