// Public Bridge (ProspectLayer)
const BASE = "https://prospectlayer.com";
const WORKSPACE_ID = "4";
const APP_ID = "prospectlayer";
const CLIENT_ID = "019c70ac-7d68-730b-99fb-30f1af7ea423";
const CLIENT_SECRET = "8c0a3ac0c11be931fc9912904d29e9e4897db7e5bb2cf204";
const ACTION = "prospects.search";

const url = `${BASE}/public/${WORKSPACE_ID}/${APP_ID}/backend/bridge/${CLIENT_ID}/${ACTION}`;

const payload = {
    "query": "restaurants",
    "limit": 25,
    "location": {
        "city": "Los Angeles",
        "state": "CA"
    }
};

// rawBody must match EXACT bytes sent
const rawBody = JSON.stringify(payload); // keep stable; avoid pretty-print in production
const ts = Math.floor(Date.now() / 1000);

// Browser: uses WebCrypto for HMAC
async function hmacSha256Hex(secret, message) {
  const enc = new TextEncoder();
  const key = await crypto.subtle.importKey(
    "raw",
    enc.encode(secret),
    { name: "HMAC", hash: "SHA-256" },
    false,
    ["sign"]
  );
  const sigBuf = await crypto.subtle.sign("HMAC", key, enc.encode(message));
  return [...new Uint8Array(sigBuf)].map(b => b.toString(16).padStart(2, "0")).join("");
}

(async () => {
  const msg = `${ts}.${rawBody}`;
  const sig = await hmacSha256Hex(CLIENT_SECRET, msg);

  const res = await fetch(url, {
    method: "POST",
    headers: {
      "Content-Type": "application/json",
      "X-PC-TS": String(ts),
      "X-PC-SIG": sig,
    },
    body: rawBody,
  });

  const data = await res.json();
  console.log(res.status, data);
})();

# Public Bridge (ProspectLayer)
# 1) Replace WORKSPACE_ID, APP_ID, CLIENT_ID, CLIENT_SECRET
# 2) Pick an action (dot-format), e.g. system.health, prospects.search, lists.list
#
# Signature: HMAC-SHA256(secret, "{ts}.{rawBody}")
# Headers:
#   X-PC-TS: unix timestamp
#   X-PC-SIG: hex hmac

BASE="https://prospectlayer.com"
WORKSPACE_ID="4"
APP_ID="prospectlayer"
CLIENT_ID="019c70ac-7d68-730b-99fb-30f1af7ea423"
CLIENT_SECRET="8c0a3ac0c11be931fc9912904d29e9e4897db7e5bb2cf204"
ACTION="prospects.search"

URL="${BASE}/public/${WORKSPACE_ID}/${APP_ID}/backend/bridge/${CLIENT_ID}/${ACTION}"
TS=$(date +%s)

BODY='{
    "query": "restaurants",
    "limit": 25,
    "location": {
        "city": "Los Angeles",
        "state": "CA"
    }
}'

SIG=$(printf "%s.%s" "$TS" "$BODY" | openssl dgst -sha256 -hmac "$CLIENT_SECRET" -hex | awk '{print $2}')

curl -s -X POST "$URL" \
  -H "Content-Type: application/json" \
  -H "X-PC-TS: $TS" \
  -H "X-PC-SIG: $SIG" \
  --data "$BODY"

import time
import hmac
import hashlib
import json
import requests

BASE = "https://prospectlayer.com"
WORKSPACE_ID = "4"
APP_ID = "prospectlayer"
CLIENT_ID = "019c70ac-7d68-730b-99fb-30f1af7ea423"
CLIENT_SECRET = "8c0a3ac0c11be931fc9912904d29e9e4897db7e5bb2cf204"
ACTION = "prospects.search"

url = f"{BASE}/public/{WORKSPACE_ID}/{APP_ID}/backend/bridge/{CLIENT_ID}/{ACTION}"

payload = {
    "query": "restaurants",
    "limit": 25,
    "location": {
        "city": "Los Angeles",
        "state": "CA"
    }
}

# Important: rawBody must be EXACT bytes you send
raw_body = json.dumps(payload, separators=(",", ":"), ensure_ascii=False)

ts = int(time.time())
msg = f"{ts}.{raw_body}".encode("utf-8")
sig = hmac.new(CLIENT_SECRET.encode("utf-8"), msg, hashlib.sha256).hexdigest()

headers = {
  "Content-Type": "application/json",
  "X-PC-TS": str(ts),
  "X-PC-SIG": sig,
}

res = requests.post(url, data=raw_body.encode("utf-8"), headers=headers, timeout=30)
print(res.status_code)
print(res.json())