curl -X GET "https://gate.reviopay.com/api/v1/clients/" \
  -H "Authorization: Bearer YOUR_API_KEY"

{
  "__all__": {
    "message": "Invalid or expired authentication token",
    "code": "invalid_token"
  }
}

    # Wrong
    -H "Authorization: your_api_key"
 
    # Correct
    -H "Authorization: Bearer your_api_key"

{
  "__all__": {
    "message": "Authorization header is required",
    "code": "missing_authorization"
  }
}

headers = {
    "Authorization": f"Bearer {api_key}",
    "Content-Type": "application/json"
}

{
  "brand_id": {
    "message": "Invalid pk \"xxx\" - object does not exist",
    "code": "does_not_exist"
  }
}

{
  "success_redirect": "https://www.example.com/success",
  "failure_redirect": "https://www.example.com/failure",
  ...
}

# Check how total is calculated
total = sum(
    product['price'] * int(product.get('quantity', '1'))
    for product in products
)

{
  "products": [
    {"name": "Item", "price": 5000, "quantity": "2"}  // quantity is STRING
  ],
  "total_override": null  // Don't set unless intentional
}

# Check purchase for detailed error
GET https://gate.reviopay.com/api/v1/purchases/{id}/
 
# Response includes:
{
  "status": "failed",
  "payment_failure_reason": "do_not_honour"
}

# Check current status
GET https://gate.reviopay.com/api/v1/purchases/{id}/
 
# Response
{
  "status": "pending",
  "events": [...],  // Check for processing events
  "payment_method_details": {...}
}

GET https://gate.reviopay.com/api/v1/webhooks/
 
# Check your endpoints are listed

curl -X POST "https://www.example.com/webhooks/precium" \
  -H "Content-Type: application/json" \
  -d '{"test": true}'

import base64
from cryptography.hazmat.primitives import hashes, serialization
from cryptography.hazmat.primitives.asymmetric import padding
 
# Signing is ASYMMETRIC RSA — there is no shared secret to compare against.
# The two most common causes of a failure here are verifying a re-serialised
# body instead of the raw bytes, and using the wrong public key.
 
def debug_signature(raw_body: bytes, received_sig: str, public_key_pem: str) -> bool:
    print(f"X-Signature: {received_sig}")
    print(f"Raw body length: {len(raw_body)} bytes")
    key = serialization.load_pem_public_key(public_key_pem.encode())
    try:
        key.verify(
            base64.b64decode(received_sig),
            raw_body,
            padding.PKCS1v15(),
            hashes.SHA256(),
        )
        print("Valid")
        return True
    except Exception as exc:
        print(f"Invalid: {exc}")
        print("Check: raw bytes (not json.dumps output)? correct key for this webhook?")
        return False

    # Wrong - parsed JSON
    payload = json.dumps(request.json)
 
    # Correct - raw body
    payload = request.get_data(as_text=True)

# Implement idempotency
processed_events = set()
 
def handle_webhook(event):
    event_id = event.get('id')
 
    if event_id in processed_events:
        return  # Already processed
 
    processed_events.add(event_id)
    # Process event...

CREATE TABLE webhook_events (
    event_id VARCHAR(50) PRIMARY KEY,
    event_type VARCHAR(50),
    processed_at TIMESTAMP DEFAULT NOW()
);

# Check if payment completed
GET https://gate.reviopay.com/api/v1/purchases/{id}/
 
# Verify status is "paid" or "hold"
 
# List client tokens
GET https://gate.reviopay.com/api/v1/clients/{client_id}/recurring_tokens/

{
  "purchase": {
    "products": [{"name": "Auth", "price": 0}]
  },
  "skip_capture": true,
  "force_recurring": true
}

# Verify token exists
GET https://gate.reviopay.com/api/v1/clients/{client_id}/recurring_tokens/{token_id}/
 
# Check original purchase
GET https://gate.reviopay.com/api/v1/purchases/{token_id}/

{
  "success_redirect": "https://...",  // Required
  "failure_redirect": "https://...",  // Required
  "purchase": {
    "request_client_details": []  // Must be empty
  }
}

<!-- Exact field names required -->
<input name='cardholder_name'>  <!-- Latin, max 30 chars -->
<input name='card_number'>       <!-- Digits only, max 19 -->
<input name='expires'>           <!-- MM/YY format -->
<input name='cvc'>               <!-- 3-4 digits -->
<input name='pm' value='visa'>   <!-- Payment method -->

import time
 
start = time.time()
response = requests.get(url, headers=headers)
elapsed = time.time() - start
print(f"Response time: {elapsed:.2f}s")

HTTP 429 Too Many Requests
 
Headers:
X-RateLimit-Limit: 100
X-RateLimit-Remaining: 0
X-RateLimit-Reset: 1619740860

import time
 
def api_request_with_backoff(func, max_retries=3):
    for attempt in range(max_retries):
        response = func()
 
        if response.status_code == 429:
            reset_time = int(response.headers.get('X-RateLimit-Reset', 0))
            wait = max(reset_time - time.time(), 2 ** attempt)
            print(f"Rate limited. Waiting {wait:.0f}s...")
            time.sleep(wait)
            continue
 
        return response
 
    raise Exception("Rate limit exceeded after retries")

import logging
 
logging.basicConfig(level=logging.DEBUG)
 
# Log all requests
import http.client
http.client.HTTPConnection.debuglevel = 1

def debug_response(response):
    print(f"Status: {response.status_code}")
    print(f"Headers: {dict(response.headers)}")
    print(f"Body: {response.text}")

curl -v -X POST "https://gate.reviopay.com/api/v1/purchases/" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"..."}'