Tracking API

POST /api/track HTTP/1.1
Host: afterads.com
Content-Type: application/json
X-Signature: 5e88e2d4...
X-Timestamp: 1715174400

{
  "event": "product_view",
  "store_id": "salla:1234567890",
  "session_id": "...",
  "user_id": "salla:9876543210",
  "metadata": {
    "product_id": "1828908128",
    "category": "fashion",
    "currency": "SAR",
    "price": 350
  }
}

import { createHmac } from 'crypto';

const expected = createHmac('sha256', SECRET_KEY)
  .update(timestamp + ':' + JSON.stringify(body))
  .digest('hex');

if (!constantTimeEqual(expected, providedSignature)) {
  return 401;
}

// Inside a Salla theme (server- or client-side)
async function trackEvent(event, metadata) {
  const ts = Math.floor(Date.now() / 1000);
  const body = JSON.stringify({
    event,
    store_id: salla.config.store.id,
    session_id: getSessionId(),
    user_id: salla.user?.id,
    metadata,
  });
  const signature = await sign(ts + ':' + body, AFTERADS_TRACKING_KEY);

  await fetch('https://afterads.com/api/track', {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json',
      'X-Signature': signature,
      'X-Timestamp': String(ts),
    },
    body,
  });
}

trackEvent('add_to_cart', {
  product_id: '1828908128',
  quantity: 1,
  price: 350,
});