Copy a Node HMAC signing example for API-triggered link fetch jobs.

import crypto from "node:crypto";

const API_KEY = "lp_live_example";
const API_SECRET = "replace-with-api-link-secret";
const endpoint = "https://your-link-peeler.example/api/links/fetch";

const payload = {
  idempotencyKey: "offer-001-2026-05-26",
  trackingUrl: "https://trk.example/a1",
  source: "platform_api",
  rowId: "offer-001"
};

const timestamp = Math.floor(Date.now() / 1000).toString();
const nonce = crypto.randomUUID();
const body = JSON.stringify(payload);
const signingBase = [timestamp, nonce, body].join(".");

const signature = crypto
  .createHmac("sha256", API_SECRET)
  .update(signingBase)
  .digest("hex");

const response = await fetch(endpoint, {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "X-Link-Peeler-Key": API_KEY,
    "X-Link-Peeler-Timestamp": timestamp,
    "X-Link-Peeler-Nonce": nonce,
    "X-Link-Peeler-Signature": signature
  },
  body
});

if (!response.ok) {
  throw new Error(await response.text());
}

console.log(await response.json());