Build loyalty into your checkout.

curl https://api.niqati.com/v1/me \
  -H "Authorization: Bearer nq_live_YOUR_KEY"

const res = await fetch("https://api.niqati.com/v1/me", {
  headers: { Authorization: "Bearer nq_live_YOUR_KEY" }
});
const { data } = await res.json();

import requests
r = requests.get(
    "https://api.niqati.com/v1/me",
    headers={"Authorization": "Bearer nq_live_YOUR_KEY"},
)
print(r.json()["data"])

$ch = curl_init("https://api.niqati.com/v1/me");
curl_setopt($ch, CURLOPT_HTTPHEADER, ["Authorization: Bearer nq_live_YOUR_KEY"]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$data = json_decode(curl_exec($ch), true);

# Every request carries the Bearer token
curl https://api.niqati.com/v1/cards \
  -H "Authorization: Bearer nq_live_YOUR_KEY"

const niqati = (path, init={}) => fetch(
  `https://api.niqati.com/v1${path}`,
  { ...init, headers: {
      Authorization: `Bearer ${process.env.NIQATI_KEY}`,
      ...init.headers } }
);

import os, requests
s = requests.Session()
s.headers["Authorization"] = f"Bearer {os.environ['NIQATI_KEY']}"
r = s.get("https://api.niqati.com/v1/cards")

$key = getenv("NIQATI_KEY");
$headers = ["Authorization: Bearer $key"];

curl -X POST https://api.niqati.com/v1/customers \
  -H "Authorization: Bearer nq_live_YOUR_KEY" \
  -H "Idempotency-Key: enroll-0501234567" \
  -H "Content-Type: application/json" \
  -d '{
    "card_id": "abe7a8fd-…",
    "phone": "0501234567",
    "display_name": "Sara"
  }'

await fetch("https://api.niqati.com/v1/customers", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${key}`,
    "Idempotency-Key": "enroll-0501234567",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    card_id: "abe7a8fd-…", phone: "0501234567", display_name: "Sara"
  })
});

s.post("https://api.niqati.com/v1/customers",
  headers={"Idempotency-Key": "enroll-0501234567"},
  json={"card_id": "abe7a8fd-…",
        "phone": "0501234567",
        "display_name": "Sara"})

$body = json_encode([
  "card_id" => "abe7a8fd-…",
  "phone" => "0501234567",
  "display_name" => "Sara",
]);
// POST with Idempotency-Key header …

# Award 50 points for a SAR 100 sale
curl -X POST https://api.niqati.com/v1/transactions \
  -H "Authorization: Bearer nq_live_YOUR_KEY" \
  -H "Idempotency-Key: order-9F2A" \
  -H "Content-Type: application/json" \
  -d '{
    "type": "earn",
    "customer_ref": "0501234567",
    "points": 50,
    "reference_id": "order-9F2A"
  }'

await niqati("/transactions", {
  method: "POST",
  headers: {
    "Idempotency-Key": "order-9F2A",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    type: "earn", customer_ref: "0501234567",
    points: 50, reference_id: "order-9F2A"
  })
});

s.post("https://api.niqati.com/v1/transactions",
  headers={"Idempotency-Key": "order-9F2A"},
  json={
    "type": "earn",
    "customer_ref": "0501234567",
    "points": 50,
    "reference_id": "order-9F2A",
  })

$body = json_encode([
  "type" => "earn",
  "customer_ref" => "0501234567",
  "points" => 50,
  "reference_id" => "order-9F2A",
]);

import crypto from "node:crypto";

function verify(secret, header, rawBody) {
  const [t, v1] = header.split(",").map(p => p.split("=")[1]);
  const expected = crypto.createHmac("sha256", secret)
    .update(`${t}.${rawBody}`).digest("hex");
  return crypto.timingSafeEqual(
    Buffer.from(v1), Buffer.from(expected));
}

import hmac, hashlib

def verify(secret, header, raw_body):
    parts = dict(p.split("=") for p in header.split(","))
    expected = hmac.new(secret.encode(),
        f"{parts['t']}.{raw_body}".encode(),
        hashlib.sha256).hexdigest()
    return hmac.compare_digest(parts["v1"], expected)