Unofficial SynapsePay .NET Rest Client

Provides API interfaces & strongly-typed request/responses for SynapsePay's v3 Rest API.

Usage

Simplest

var api = new SynapseUserApiClient(new SynapseApiClientCredentials 
    {
        ClientId="<clientid>", 
        ClientSecret="<clientsecret>"
    }, "https://sandbox.synapsepay.com/api/3/");

var apiUser = new SynapseApiUserCredentials {
    Fingerprint = "<fingerprint>",
    IpAddressOfUser = "10.1.0.1"
};

var userResp = await api.CreateUserAsync(apiUser, new CreateUserRequest
    {
        Logins = new CreateUserRequestLogin[]
        {
            new CreateUserRequestLogin {
                Email = "[email protected]",
                ReadOnly = true
            }
        },
        PhoneNumbers = new string[] { "555-123-1233" },
        LegalNames = new string[] { "Freddy Krueger" },
        Extra = new CreateUserRequestExtra
        {
            SuppId = "LocalId",
            CipTag = 1
    });

Assert.IsTrue(!string.IsNullOrEmpty(userResp.RefreshToken));

If calling more than one resource type

var creds = new SynapseApiCredentials
            {
                ClientId = ConfigurationManager.AppSettings["SynapseClientId"],
                ClientSecret = ConfigurationManager.AppSettings["SynapseClientSecret"]
            };
var url = ConfigurationManager.AppSettings["SynapseBaseUrl"];
var factory = new SynapseRestClientFactory(creds, url);
var userApi = factory.CreateUserApiClient();
var nodeApi = factory.CreateNodeApiClient();
//etc..

Webhook HMAC Verification

Helper function implementing https://discuss.synapsepay.com/t/hmac-for-web-hooks/17

HMACSignatureValidator.IsValid(signature, secret, oid, date);

This can be used in an ActionFilter to authenticate your requests

    [AttributeUsage(AttributeTargets.Method)]
    public class ValidateSynapseHMACAttribute : ActionFilterAttribute
    {
        public override void OnActionExecuting(HttpActionContext actionContext)
        {
            var secret = ConfigurationManager.AppSettings["SynapseClientSecret"];
            var headers = actionContext.ControllerContext.Request.Headers;
            var values = (IEnumerable<string>)null;
            if (headers.TryGetValues("X-Synapse-Signature", out values))
            {
                var signature = values.First();
                var request = actionContext.ControllerContext.Request;
                dynamic data = actionContext.ActionArguments["request"];
                var oid = Convert.ToString(data._id["$oid"]);
                var date = Convert.ToString(data.recent_status.date["$date"]);

                if (HMACValidator.IsValid(signature, secret, oid, date))
                {
                    base.OnActionExecuting(actionContext);
                    return;
                } 
            }
            throw new HttpResponseException(System.Net.HttpStatusCode.Forbidden);
            
        }


    }