SealTrust API Documentation

import crypto from 'crypto';

function verifyWebhook(
  payload: string,
  signature: string,
  secret: string,
): boolean {
  const expected = crypto
    .createHmac('sha256', secret)
    .update(payload)
    .digest('hex');
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expected),
  );
}

// In your webhook handler:
app.post('/webhooks/sealtrust', (req, res) => {
  const signature = req.headers['x-sealtrust-signature'];
  const isValid = verifyWebhook(
    JSON.stringify(req.body),
    signature,
    process.env.SEALTRUST_WEBHOOK_SECRET,
  );

  if (!isValid) {
    return res.status(401).send('Invalid signature');
  }

  const { type, data } = req.body;
  switch (type) {
    case 'product.minted':
      handleProductMinted(data);
      break;
    case 'product.scanned':
      handleProductScanned(data);
      break;
  }

  res.status(200).send('OK');
});

npm install @sealtrust/sdk
# or
yarn add @sealtrust/sdk
# or
pnpm add @sealtrust/sdk

import { SealTrust } from '@sealtrust/sdk';

// Initialize with your API key
const st = new SealTrust('st_live_your_api_key', {
  // Optional configuration
  baseUrl: 'https://api.sealtrust.io/v1',  // default
  timeout: 30000,                            // 30s default
  retries: 3,                                // auto-retry on 5xx
});

{
  "error": {
    "code": "product_not_found",
    "message": "No product found with ID 'prod_invalid'",
    "status": 404,
    "request_id": "req_abc123xyz"
  }
}