Headers[0] := TNameValuePair.Create('Authorization', authorizationHeader);
Headers[1] := TNameValuePair.Create('Date', dateRFC1123);
Headers[2] := TNameValuePair.Create('Content-Type', contentType);
Headers[3] := TNameValuePair.Create('Accept', 'application/json');

procedure TPaymentLinksTestForm.CreatePaymentLink;
var
HTTPClient: THTTPClient;
RequestBodyStream: TStringStream;
Response: IHTTPResponse;
Headers: TNetHeaders;
 
pspid: string;
apiKey: string;
secretKey: string;
 
requestMethod: string;
contentType: string;
baseURL: string;
resourcePath: string;
fullURL: string;
 
dateRFC1123: string;
stringToHash: string;
hmacSignature: string;
authorizationHeader: string;
 
jsonBody: string;
responseContent: string;
begin
try
LogMessage('=== Payment Links API Test Started ===');
 
// =========================================================
// CONFIGURATION
// =========================================================
pspid := 'PRINTEMPS4';
 
// Replace these values with the real API key and secret.
// Important: if the previous secret was shared externally, rotate it.
apiKey := 'YOUR_API_KEY_HERE';
secretKey := 'YOUR_SECRET_KEY_HERE';
 
requestMethod := 'POST';
contentType := 'application/json';
 
baseURL := 'https://payment.preprod.direct.worldline-solutions.com';
 
// This path is used BOTH for the URL and for the HMAC string.
// For the HMAC, it must be the path only, not the full URL.
resourcePath := '/v2/' + pspid + '/paymentlinks';
 
fullURL := baseURL + resourcePath;
 
LogMessage('PSPID: ' + pspid);
LogMessage('Request Method: ' + requestMethod);
LogMessage('Content-Type: ' + contentType);
LogMessage('Base URL: ' + baseURL);
LogMessage('Resource Path: ' + resourcePath);
LogMessage('Full URL: ' + fullURL);
LogMessage('');
 
// =========================================================
// DATE HEADER
// =========================================================
dateRFC1123 := GetRFC1123DateTime;
 
LogMessage('Date header: ' + dateRFC1123);
LogMessage('');
 
// =========================================================
// HMAC SIGNATURE
// =========================================================
// Worldline HMAC string format:
//
// POST
// application/json
// Tue, 10 Jun 2026 12:34:56 GMT
// /v2/PRINTEMPS4/paymentlinks
//
// Use LF only: #10
// Do not use CRLF: #13#10
// Do not add the full host.
// Do not add an extra blank line unless the API documentation requires
// signed x-gcs headers.
stringToHash :=
requestMethod + #10 +
contentType + #10 +
dateRFC1123 + #10 +
resourcePath;
 
LogMessage('String To Hash:');
LogMessage(StringReplace(stringToHash, #10, '\n', [rfReplaceAll]));
LogMessage('');
 
hmacSignature := ComputeHMACSHA256(stringToHash, secretKey);
 
authorizationHeader := 'GCS v1HMAC:' + apiKey + ':' + hmacSignature;
 
LogMessage('HMAC Signature: ' + hmacSignature);
LogMessage('Authorization Header: GCS v1HMAC:' + apiKey + ':<signature hidden>');
LogMessage('');
 
// =========================================================
// JSON BODY
// =========================================================
jsonBody :=
'{' + #13#10 +
' "expirationDate": "2026-08-01T14:15:22Z",' + #13#10 +
' "description": "TEST Payment Link - ' + FormatDateTime('yyyymmdd hhnn', Now) + '",' + #13#10 +
' "paymentLinkOrder": {' + #13#10 +
' "merchantReference": "PRINTEMPS4-' + FormatDateTime('yyyymmddhhnnss', Now) + '",' + #13#10 +
' "amount": {' + #13#10 +
' "amount": 1000,' + #13#10 +
' "currencyCode": "EUR"' + #13#10 +
' }' + #13#10 +
' },' + #13#10 +
' "recipientName": "Jean Bon",' + #13#10 +
' "merchantReference": "your-order-' + FormatDateTime('yyyymmddhhnnss', Now) + '"' + #13#10 +
'}';
 
LogMessage('JSON Body:');
LogMessage(jsonBody);
LogMessage('');
 
// =========================================================
// HTTP HEADERS
// =========================================================
SetLength(Headers, 4);
 
Headers[0] := TNameValuePair.Create('Authorization', authorizationHeader);
Headers[1] := TNameValuePair.Create('Date', dateRFC1123);
Headers[2] := TNameValuePair.Create('Content-Type', contentType);
Headers[3] := TNameValuePair.Create('Accept', 'application/json');
 
LogMessage('Headers:');
LogMessage(' Authorization: GCS v1HMAC:' + apiKey + ':<signature hidden>');
LogMessage(' Date: ' + dateRFC1123);
LogMessage(' Content-Type: ' + contentType);
LogMessage(' Accept: application/json');
LogMessage('');
 
// =========================================================
// EXECUTE REQUEST
// =========================================================
HTTPClient := THTTPClient.Create;
try
HTTPClient.ConnectionTimeout := 30000;
HTTPClient.ResponseTimeout := 30000;
HTTPClient.UserAgent := 'Delphi Payment Links Test';
 
RequestBodyStream := TStringStream.Create(jsonBody, TEncoding.UTF8);
try
RequestBodyStream.Position := 0;
 
LogMessage('Executing POST request...');
LogMessage('');
 
Response := HTTPClient.Post(
fullURL,
RequestBodyStream,
nil,
Headers
);
 
LogMessage('=== RESPONSE ===');
LogMessage('HTTP Status Code: ' + IntToStr(Response.StatusCode));
LogMessage('Status Text: ' + Response.StatusText);
LogMessage('');
 
responseContent := Response.ContentAsString(TEncoding.UTF8);
 
LogMessage('Response Content:');
LogMessage(responseContent);
LogMessage('');
 
case Response.StatusCode of
200, 201:
begin
LogMessage('SUCCESS: Payment Link created.');
end;
 
400:
begin
LogMessage('ERROR 400: Bad Request.');
LogMessage('Check the JSON payload/schema.');
end;
 
401:
begin
LogMessage('ERROR 401: Unauthorized.');
LogMessage('Check API key, secret key, Date header, HMAC string, and Content-Type.');
end;
 
403:
begin
LogMessage('ERROR 403: ACCESS_TO_MERCHANT_NOT_ALLOWED.');
LogMessage('Check merchant access, API key permissions, and IP whitelist.');
end;
 
406:
begin
LogMessage('ERROR 406: Not Acceptable.');
LogMessage('Check the endpoint URL, Accept header, Content-Type header, and Payment Links API activation.');
end;
 
else
begin
LogMessage('ERROR: HTTP ' + IntToStr(Response.StatusCode));
end;
end;
 
finally
RequestBodyStream.Free;
end;
 
finally
HTTPClient.Free;
end;
 
LogMessage('');
LogMessage('=== Payment Links API Test Completed ===');
 
except
on E: Exception do
begin
LogMessage('');
LogMessage('EXCEPTION: ' + E.ClassName + ' - ' + E.Message);
end;
end;
end;

$headers = New-Object "System.Collections.Generic.Dictionary[[String],[String]]"
$headers.Add("Authorization", "Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMyIsImF1dGgiOiJBZG1pbmlzdHJhdGV1ciIsIm9yZ0NvZGUiOiI0NDUiLCJhdXRoZW50RGF0ZVRpbWUiOiIyMDI2MDMxNzA5MjIwOCIsImV4cCI6MTc3MzgyNTcyOH0.U44uVs-aopxqLf-cmvREwjSvwxo57NrK6QAn21WeerU")
$headers.Add("Content-Type", "application/json")
 
$body = @"
{
  `"documentNumber`": `"V445013-0000001`",
  `"orderType`": `"VAD`",
  `"paymentDetails`": [
    {
      `"lineNumber`": `"1`",
      `"amount`": `"1`",
      `"paymentMethod`": `"ZZ26`"
    },
     {
      `"lineNumber`": `"2`",
      `"amount`": `"1`",
      `"paymentMethod`": `"ZZ26`"
    }
  ]
}
"@
 
$response = Invoke-RestMethod 'https://api.ptsrc.adeiz.com/services/orderservice/api/v1/sales-orders-lite' -Method 'POST' -Headers $headers -Body $body
$response | ConvertTo-Json]

procedure SendSalesOrder;
var
  RESTClient: TRESTClient;
  RESTRequest: TRESTRequest;
  RESTResponse: TRESTResponse;
   paymentDetailsArray:tjsonarray;
  jsonBody, payment1, payment2: TJSONObject;
  jsonObject, paymentDetailsObject: TJSONObject;
begin
  // Créer le client REST
  RESTClient := TRESTClient.Create(nil);
  try
    RESTClient.BaseURL := 'https://api.ptsrc.adeiz.com/services/orderservice/api/v1/sales-orders-lite';
 
    // Créer la requête
    RESTRequest := TRESTRequest.Create(nil);
    try
      RESTRequest.Client := RESTClient;
      RESTRequest.Method := rmPOST;
 
      // Ajouter les en-têtes
//      restrequest.AddParameter('Authorization');
      restrequest.AddParameter('"Authorization"','"Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMyIsImF1dGgiOiJBZG1pbmlzdHJhdGV1ciIsIm9yZ0NvZGUiOiI0NDUiLCJhdXRoZW50RGF0ZVRpbWUiOiIyMDI2MDMxNzEzMjIzMCIsImV4cCI6MTc3Mzg0MDE1MH0.tIflejQyPcCKp52zPRhYCuiSB0XMkHLIAHyoF*****"',pkHTTPHEADER);
//      RESTRequest.AddHeader('Authorization', 'Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMyIsImF1dGgiOiJBZG1pbmlzdHJhdGV1ciIsIm9yZ0NvZGUiOiI0NDUiLCJhdXRoZW50RGF0ZVRpbWUiOiIyMDI2MDMxNzA5MjIwOCIsImV4cCI6MTc3MzgyNTcyOH0.U44uVs-aopxqLf-cmvREwjSvwxo57NrK6QAn21*****');
      RESTRequest.Addparameter('Content-Type', 'application/json');
 
      // Construire le corps JSON
      jsonBody := TJSONobject.Create;
 
      // Créer la partie principale
      jsonObject := TJSONObject.Create;
      try
        jsonObject.AddPair('documentNumber', 'V445013-0000001');
        jsonObject.AddPair('orderType', 'VAD');
 
        // PaymentDetails array
        paymentDetailsArray := TJSONarray.Create;
 
        // Payment 1
        payment1 := TJSONObject.Create;
        payment1.AddPair('lineNumber', '1');
        payment1.AddPair('amount', '1');
        payment1.AddPair('paymentMethod', 'ZZ26');
 
        // Payment 2
        payment2 := TJSONObject.Create;
        payment2.AddPair('lineNumber', '2');
        payment2.AddPair('amount', '1');
        payment2.AddPair('paymentMethod', 'ZZ26');
 
        paymentDetailsArray.Add(payment1);
        paymentDetailsArray.Add(payment2);
 
        jsonObject.AddPair('paymentDetails', paymentDetailsArray);
 
        // Convertir en string
        jsonBody:=jsonObject;
      finally
        // Libérer les objets temporaires
        // Note: jsonObject, paymentDetailsArray, payment1, payment2 sont ajoutés à jsonBody
        // et seront libérés avec jsonBody si on ne les libère pas ici
      end;
 
      // Définir le corps de la requête
      restrequest.AddBody(jsonBody.ToString);
//      RESTRequest.Body := TEncoding.UTF8.GetBytes(jsonBody.ToString);
//      RESTRequest.ContentType:=application/json;
 
      // Exécuter la requête
      RESTResponse := TRESTResponse.Create(nil);
      try
        RESTRequest.Response := RESTResponse;
        RESTRequest.Execute;
 
        // Traiter la réponse
//        showmessage ('Réponse: ', RESTResponse.Content);
        form5.memo1.lines.add(RESTResponse.Content);
        finally
        RESTResponse.Free;
      end;
 
    finally
      RESTRequest.Free;
    end;
 
  finally
    RESTClient.Free;
  end;
end;

object RESTClient1: TRESTClient
  BaseURL = 
    'https://api.ptsrc.adeiz.com/services/orderservice/api/v1/sales-o' +
    'rders-lite'
  Params = <>
  SynchronizedEvents = False
end
object RESTRequest1: TRESTRequest
  AssignedValues = [rvConnectTimeout, rvReadTimeout]
  Client = RESTClient1
  Method = rmPOST
  Params = <
    item
      Kind = pkHTTPHEADER
      Name = 'Authorization'
      Options = [poDoNotEncode]
      Value = 
        'Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMyIsImF1dGgiOiJBZG1pbmlz' +
        'dHJhdGV1ciIsIm9yZ0NvZGUiOiI0NDUiLCJhdXRoZW50RGF0ZVRpbWUiOiIyMDI2' +
        'MDMxNjE0MjMxOSIsImV4cCI6MTc3Mzc1NzM5OX0.esg-OQXCTo_Nwke8G_6HkuGM' +
        'dGa3g3Z7b0uK5mrH_xY'
    end
    item
      Kind = pkREQUESTBODY
      Name = 'bodyB6827D9362784EE6BA295D02118AD896'
      Value = 
        'bodyB6827D9362784EE6BA295D02118AD896{'#13#10'  "documentNumber": "V445013-0000001",'#13#10'  "orderType": "VAD",' +
        #13#10'  "paymentDetails": ['#13#10'    {'#13#10'      "lineNumber": "1",'#13#10'      ' +
        '"amount": "1",'#13#10'      "paymentMethod": "ZZ26"'#13#10'    },'#13#10'     {'#13#10' ' +
        '     "lineNumber": "2",'#13#10'      "amount": "1",'#13#10'      "paymentMet' +
        'hod": "ZZ26"'#13#10'    }'#13#10'  ]'#13#10'}'
      ContentTypeStr = 'application/json'
    end>
  Response = RESTResponse1
  SynchronizedEvents = False
end
object RESTResponse1: TRESTResponse
end