企业 API 文档

export P2G_KEY="你的 API Key"

curl https://pay2gpt.com/api/v1/business/credits \
  -H "Authorization: Bearer $P2G_KEY"

{
  "credits": {
    "products": [
      {"product": "plus", "product_name": "ChatGPT Plus", "balance": 48},
      {"product": "pro", "product_name": "ChatGPT Pro", "balance": 5}
    ],
    "max_in_progress": 10,
    "in_progress": 2
  }
}

curl -X POST https://pay2gpt.com/api/v1/business/activations \
  -H "Authorization: Bearer $P2G_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: 7c1e9a52-4d3b-4f0e-8a61-2b9d5c0e3f14" \
  -d '{"product": "plus", "session": "<完整 Session JSON 文本，或 session-token 的值>"}'

{
  "order": {
    "order_number": "P2G-3F9A1C7E5B2D4A6C8E0F1A2B",
    "product": "plus",
    "product_name": "Plus",
    "status": "checking",
    "target_account_label": null,
    "rejection_reason": null,
    "expires_at": "2026-12-03T08:00:00Z",
    "fulfilled_at": null,
    "refunded_at": null,
    "created_at": "2026-11-03T08:00:00Z"
  }
}

{
  "error": {
    "code": "insufficient_credits",
    "message": "该套餐的开通次数不足"
  }
}

{
  "credits": {
    "products": [
      {"product": "plus", "product_name": "ChatGPT Plus", "balance": 48},
      {"product": "pro", "product_name": "ChatGPT Pro", "balance": 5}
    ],
    "max_in_progress": 10,
    "in_progress": 2
  }
}

{
  "products": [
    {
      "slug": "plus",
      "name": "ChatGPT Plus",
      "list_price_cents": 2190,
      "currency": "usd"
    }
  ]
}

curl -X POST https://pay2gpt.com/api/v1/business/orders \
  -H "Authorization: Bearer $P2G_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: 0b6f3d2e-91a4-4c57-b8e2-5f7a1c9d4e60" \
  -d '{"product": "plus", "quantity": 2}'

{
  "orders": [
    {
      "order_number": "P2G-3F9A1C7E5B2D4A6C8E0F1A2B",
      "product": "plus",
      "product_name": "Plus",
      "status": "awaiting_account",
      "target_account_label": null,
      "rejection_reason": null,
      "expires_at": "2026-12-03T08:00:00Z",
      "fulfilled_at": null,
      "refunded_at": null,
      "created_at": "2026-11-03T08:00:00Z"
    },
    {
      "order_number": "P2G-8D2E4F6A0B1C3D5E7F9A1B2C",
      "product": "plus",
      "product_name": "Plus",
      "status": "awaiting_account",
      "target_account_label": null,
      "rejection_reason": null,
      "expires_at": "2026-12-03T08:00:00Z",
      "fulfilled_at": null,
      "refunded_at": null,
      "created_at": "2026-11-03T08:00:00Z"
    }
  ]
}

curl -X POST https://pay2gpt.com/api/v1/business/activations \
  -H "Authorization: Bearer $P2G_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: 7c1e9a52-4d3b-4f0e-8a61-2b9d5c0e3f14" \
  -d '{"product": "plus", "session": "<完整 Session JSON 文本，或 session-token 的值>"}'

{
  "order": {
    "order_number": "P2G-3F9A1C7E5B2D4A6C8E0F1A2B",
    "product": "plus",
    "product_name": "Plus",
    "status": "checking",
    "target_account_label": null,
    "rejection_reason": null,
    "expires_at": "2026-12-03T08:00:00Z",
    "fulfilled_at": null,
    "refunded_at": null,
    "created_at": "2026-11-03T08:00:00Z"
  }
}

curl "https://pay2gpt.com/api/v1/business/orders?status=processing&limit=50" \
  -H "Authorization: Bearer $P2G_KEY"

{
  "orders": [
    {
      "order_number": "P2G-3F9A1C7E5B2D4A6C8E0F1A2B",
      "product": "plus",
      "product_name": "Plus",
      "status": "processing",
      "target_account_label": "al***@example.com",
      "rejection_reason": null,
      "expires_at": "2026-12-03T08:00:00Z",
      "fulfilled_at": null,
      "refunded_at": null,
      "created_at": "2026-11-03T08:00:00Z"
    }
  ],
  "next_cursor": "eyJpZCI6MTIzNH0"
}

{
  "order": {
    "order_number": "P2G-3F9A1C7E5B2D4A6C8E0F1A2B",
    "product": "plus",
    "product_name": "Plus",
    "status": "succeeded",
    "target_account_label": "al***@example.com",
    "rejection_reason": null,
    "expires_at": "2026-12-03T08:00:00Z",
    "fulfilled_at": "2026-11-03T08:04:12Z",
    "refunded_at": null,
    "created_at": "2026-11-03T08:00:00Z"
  }
}

curl -X POST https://pay2gpt.com/api/v1/business/orders/P2G-3F9A1C7E5B2D4A6C8E0F1A2B/credential \
  -H "Authorization: Bearer $P2G_KEY" \
  -H "Content-Type: application/json" \
  -d '{"session": "<完整 Session JSON 文本，或 session-token 的值>"}'

curl -X POST https://pay2gpt.com/api/v1/business/orders/P2G-3F9A1C7E5B2D4A6C8E0F1A2B/cancellation \
  -H "Authorization: Bearer $P2G_KEY"

{
  "entries": [
    {
      "id": "bcre_8Kf3Qx2LmN7p",
      "kind": "order_refund",
      "product": "plus",
      "count": 1,
      "balance_after": 50,
      "amount_cents": null,
      "currency": null,
      "reference": null,
      "order_number": "P2G-8D2E4F6A0B1C3D5E7F9A1B2C",
      "created_at": "2026-11-03T09:10:00Z"
    },
    {
      "id": "bcre_2Vh9Ry4TwZ1c",
      "kind": "order_debit",
      "product": "plus",
      "count": -1,
      "balance_after": 49,
      "amount_cents": null,
      "currency": null,
      "reference": null,
      "order_number": "P2G-8D2E4F6A0B1C3D5E7F9A1B2C",
      "created_at": "2026-11-03T08:00:00Z"
    },
    {
      "id": "bcre_5Tn1Wc8PqA3d",
      "kind": "topup",
      "product": "plus",
      "count": 50,
      "balance_after": 50,
      "amount_cents": 100750,
      "currency": "usd",
      "reference": "0x9f2c4e8b1d7a3c5e6f0b2d4a8c1e3f5a7b9d0c2e4f6a8b1c3d5e7f9a0b2c4e6d",
      "order_number": null,
      "created_at": "2026-11-02T03:00:00Z"
    }
  ],
  "next_cursor": null
}

awaiting_account  → checking → processing → succeeded
checking          → account_rejected → checking        （换账号重新提交）
processing        → failed → refunded                  （自动退回一次）
awaiting_account  → refunded                           （取消）
account_rejected  → refunded                           （取消）

POST /your/webhook/path HTTP/1.1
Content-Type: application/json
Pay2GPT-Event-Id: 5d0c8f5e-3a7b-4c1e-9f2a-6b8d0e4c1a37
Pay2GPT-Signature: t=1762156800,v1=3b1f0c...

{
  "id": "5d0c8f5e-3a7b-4c1e-9f2a-6b8d0e4c1a37",
  "type": "order.succeeded",
  "created_at": "2026-11-03T08:04:12Z",
  "data": {
    "order": {
      "order_number": "P2G-3F9A1C7E5B2D4A6C8E0F1A2B",
      "product": "plus",
      "product_name": "Plus",
      "status": "succeeded",
      "target_account_label": "al***@example.com",
      "rejection_reason": null,
      "expires_at": "2026-12-03T08:00:00Z",
      "fulfilled_at": "2026-11-03T08:04:12Z",
      "refunded_at": null,
      "created_at": "2026-11-03T08:00:00Z"
    }
  }
}

require "openssl"

# raw_body: 原始请求体字符串；header: Pay2GPT-Signature 头；secret: Webhook 密钥
def valid_pay2gpt_signature?(raw_body, header, secret, tolerance: 300)
  parts = header.to_s.split(",").to_h { |part| part.split("=", 2) }
  timestamp, signature = parts["t"], parts["v1"]
  return false unless timestamp&.match?(/\A\d+\z/) && signature
  return false if (Time.now.to_i - timestamp.to_i).abs > tolerance

  expected = OpenSSL::HMAC.hexdigest("SHA256", secret, "#{timestamp}.#{raw_body}")
  OpenSSL.secure_compare(expected, signature)
end

# Rails: valid_pay2gpt_signature?(request.raw_post, request.headers["Pay2GPT-Signature"], ENV["P2G_WEBHOOK_SECRET"])

import hashlib
import hmac
import time

def valid_pay2gpt_signature(raw_body: bytes, header: str, secret: str, tolerance: int = 300) -> bool:
    parts = dict(part.split("=", 1) for part in (header or "").split(",") if "=" in part)
    timestamp, signature = parts.get("t", ""), parts.get("v1")
    if not timestamp.isdigit() or not signature:
        return False
    if abs(time.time() - int(timestamp)) > tolerance:
        return False
    expected = hmac.new(secret.encode(), timestamp.encode() + b"." + raw_body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(expected, signature)

# Flask: valid_pay2gpt_signature(request.get_data(), request.headers.get("Pay2GPT-Signature"), os.environ["P2G_WEBHOOK_SECRET"])

const crypto = require("node:crypto");

// rawBody: 原始请求体 Buffer；header: Pay2GPT-Signature 头；secret: Webhook 密钥
function validPay2gptSignature(rawBody, header, secret, tolerance = 300) {
  const parts = Object.fromEntries(String(header || "").split(",").map((part) => {
    const index = part.indexOf("=");
    return [part.slice(0, index), part.slice(index + 1)];
  }));
  const timestamp = parts.t;
  const signature = parts.v1;
  if (!/^\d+$/.test(timestamp || "") || !signature) return false;
  if (Math.abs(Date.now() / 1000 - Number(timestamp)) > tolerance) return false;

  const expected = crypto.createHmac("sha256", secret)
    .update(Buffer.concat([Buffer.from(`${timestamp}.`), rawBody]))
    .digest("hex");
  const a = Buffer.from(expected);
  const b = Buffer.from(signature);
  return a.length === b.length && crypto.timingSafeEqual(a, b);
}

// Express: app.post("/hooks/pay2gpt", express.raw({ type: "application/json" }), (req, res) => {
//   if (!validPay2gptSignature(req.body, req.get("Pay2GPT-Signature"), process.env.P2G_WEBHOOK_SECRET)) return res.sendStatus(400);
//   res.sendStatus(200);
// });