Offers API. Your design, our offers.

curl -G "https://api.moonetix.com/v1/offers" \
  -d user_id=user_1234 -d country=US -d device=android \
  -H "Authorization: Bearer $MOONETIX_API_KEY"

<?php
$query = http_build_query([
    'user_id' => $userId,
    'country' => $countryCode,
    'ua'      => $_SERVER['HTTP_USER_AGENT'] ?? '',
]);
$ch = curl_init('https://api.moonetix.com/v1/offers?' . $query);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT        => 10,
    CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $apiKey],
]);
$data = json_decode((string)curl_exec($ch), true);

const params = new URLSearchParams({
  user_id: userId,
  country: countryCode,
  ua: req.headers['user-agent'] || '',
});
const res = await fetch(`https://api.moonetix.com/v1/offers?${params}`, {
  headers: { Authorization: `Bearer ${process.env.MOONETIX_API_KEY}` },
});
const data = await res.json();

import os, requests
 
r = requests.get(
    "https://api.moonetix.com/v1/offers",
    params={"user_id": user_id, "country": country_code, "ua": user_agent},
    headers={"Authorization": f"Bearer {os.environ['MOONETIX_API_KEY']}"},
    timeout=10,
)
data = r.json()

{
  "ok": true,
  "currency": "Coins",
  "offers": [
    {
      "id": 58,
      "title": "Nova Quest: reach level 10",
      "reward": 975,
      "payout_usd": 1.5,
      "start_url": "https://wall.moonetix.com/..."
    }
  ]
}

for (const offer of data.offers) {
  list.append(card({
    title: offer.title,
    reward: `${offer.reward} ${data.currency}`,
    href: offer.start_url,
  }));
}

https://yoursite.com/postback?user={user_id}&tx={transaction_id}&status={status}&reward={reward}&hash={hash}

<?php
$tx     = $_GET['tx'] ?? '';
$userId = $_GET['user'] ?? '';
$reward = $_GET['reward'] ?? '';
$status = $_GET['status'] ?? '';
 
$secret   = getenv('MOONETIX_POSTBACK_SECRET');
$expected = hash_hmac('sha256', "$tx:$userId:$reward:$status", $secret);
if (!hash_equals($expected, $_GET['hash'] ?? '')) {
    http_response_code(403);
    exit;
}
 
if ($status === '1') {
    credit_once($userId, $tx, $reward);   // once per transaction ID
} elseif ($status === '2') {
    reverse_if_credited($userId, $tx, $reward);
}
http_response_code(200);

const crypto = require('crypto');
 
app.get('/postback', (req, res) => {
  const { tx, user, reward, status, hash } = req.query;
  const secret = process.env.MOONETIX_POSTBACK_SECRET;
  const expected = crypto.createHmac('sha256', secret)
    .update(`${tx}:${user}:${reward}:${status}`)
    .digest('hex');
  const valid = typeof hash === 'string'
    && hash.length === expected.length
    && crypto.timingSafeEqual(Buffer.from(hash), Buffer.from(expected));
  if (!valid) return res.sendStatus(403);
 
  if (status === '1') creditOnce(user, tx, reward);   // once per transaction ID
  if (status === '2') reverseIfCredited(user, tx, reward);
  res.sendStatus(200);
});

import hmac, hashlib, os
from flask import request, abort
 
@app.get("/postback")
def postback():
    a = request.args
    parts = [a.get(k, "") for k in ("tx", "user", "reward", "status")]
    msg = ":".join(parts)
    secret = os.environ["MOONETIX_POSTBACK_SECRET"].encode()
    expected = hmac.new(secret, msg.encode(), hashlib.sha256).hexdigest()
    if not hmac.compare_digest(expected, a.get("hash", "")):
        abort(403)
 
    if a.get("status") == "1":
        credit_once(a["user"], a["tx"], a["reward"])   # once per transaction ID
    elif a.get("status") == "2":
        reverse_if_credited(a["user"], a["tx"], a["reward"])
    return "", 200