{
  "info": {
    "name": "SocialAPI — Full",
    "_postman_id": "718636b6-ac6a-4848-9690-c3b584dc7baa",
    "description": "Coleção de testes para SocialAPI (HMAC, JSON e multipart)",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
  },
  "variable": [
    {
      "key": "base_url",
      "value": "https://social-api.meuapp.online"
    },
    {
      "key": "key_id",
      "value": "YOUR_KEY_ID"
    },
    {
      "key": "secret",
      "value": "YOUR_SECRET_HEX"
    },
    {
      "key": "account_selector",
      "value": "radiogospelhd"
    },
    {
      "key": "image_url",
      "value": "https://storage.example.com/image.jpg"
    },
    {
      "key": "video_url",
      "value": "https://storage.example.com/video.mp4"
    },
    {
      "key": "last_task_id",
      "value": ""
    }
  ],
  "item": [
    {
      "name": "Auth Ping",
      "request": {
        "method": "GET",
        "header": [],
        "url": {
          "raw": "{{base_url}}/v1/auth_ping",
          "host": [
            "{{base_url}}"
          ],
          "path": [
            "v1",
            "auth_ping"
          ]
        }
      },
      "event": [
        {
          "listen": "prerequest",
          "script": {
            "type": "text/javascript",
            "exec": [
              "",
              "const method = pm.request.method;",
              "let path = pm.request.url.getPath(); if (!path) path = '/';",
              "const ts = Math.floor(Date.now()/1000).toString();",
              "function hex(n){ const c='abcdef0123456789'; let s=''; for(let i=0;i<n;i++) s+=c[Math.floor(Math.random()*c.length)]; return s; }",
              "const nonce = hex(24);",
              "let raw = '';",
              "if (pm.request.body && pm.request.body.mode === 'raw') raw = pm.request.body.raw || '';",
              "const bodyHash = CryptoJS.SHA256(raw).toString(CryptoJS.enc.Hex);",
              "const canonical = [method, path, ts, nonce, bodyHash].join('\\n');",
              "const keyId = pm.collectionVariables.get('key_id') || pm.variables.get('key_id');",
              "const secretHex = pm.collectionVariables.get('secret') || pm.variables.get('secret');",
              "const signature = CryptoJS.enc.Base64.stringify(CryptoJS.HmacSHA256(canonical, CryptoJS.enc.Hex.parse(secretHex)));",
              "pm.request.headers.upsert({ key: 'X-Key-Id', value: keyId });",
              "pm.request.headers.upsert({ key: 'X-Timestamp', value: ts });",
              "pm.request.headers.upsert({ key: 'X-Nonce', value: nonce });",
              "pm.request.headers.upsert({ key: 'X-Signature', value: signature });"
            ]
          }
        }
      ]
    },
    {
      "name": "OAuth — Facebook",
      "request": {
        "method": "GET",
        "header": [],
        "url": {
          "raw": "{{base_url}}/v1/auth/facebook",
          "host": [
            "{{base_url}}"
          ],
          "path": [
            "v1",
            "auth",
            "facebook"
          ]
        }
      }
    },
    {
      "name": "OAuth — YouTube",
      "request": {
        "method": "GET",
        "header": [],
        "url": {
          "raw": "{{base_url}}/v1/auth/youtube",
          "host": [
            "{{base_url}}"
          ],
          "path": [
            "v1",
            "auth",
            "youtube"
          ]
        }
      }
    },
    {
      "name": "OAuth — TikTok",
      "request": {
        "method": "GET",
        "header": [],
        "url": {
          "raw": "{{base_url}}/v1/auth/tiktok",
          "host": [
            "{{base_url}}"
          ],
          "path": [
            "v1",
            "auth",
            "tiktok"
          ]
        }
      }
    },
    {
      "name": "POST — JSON (Facebook image)",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          }
        ],
        "url": {
          "raw": "{{base_url}}/v1/posts",
          "host": [
            "{{base_url}}"
          ],
          "path": [
            "v1",
            "posts"
          ]
        },
        "body": {
          "mode": "raw",
          "raw": "{\"account\": \"{{account_selector}}\", \"account_ids\": [\"facebook\"], \"post_type\": \"image\", \"text\": \"Meu Post\\n\\nDescrição\", \"media_urls\": [\"{{image_url}}\"], \"article_url\": \"https://example.com/artigo\"}"
        }
      },
      "event": [
        {
          "listen": "prerequest",
          "script": {
            "type": "text/javascript",
            "exec": [
              "",
              "const method = pm.request.method;",
              "let path = pm.request.url.getPath(); if (!path) path = '/';",
              "const ts = Math.floor(Date.now()/1000).toString();",
              "function hex(n){ const c='abcdef0123456789'; let s=''; for(let i=0;i<n;i++) s+=c[Math.floor(Math.random()*c.length)]; return s; }",
              "const nonce = hex(24);",
              "let raw = '';",
              "if (pm.request.body && pm.request.body.mode === 'raw') raw = pm.request.body.raw || '';",
              "const bodyHash = CryptoJS.SHA256(raw).toString(CryptoJS.enc.Hex);",
              "const canonical = [method, path, ts, nonce, bodyHash].join('\\n');",
              "const keyId = pm.collectionVariables.get('key_id') || pm.variables.get('key_id');",
              "const secretHex = pm.collectionVariables.get('secret') || pm.variables.get('secret');",
              "const signature = CryptoJS.enc.Base64.stringify(CryptoJS.HmacSHA256(canonical, CryptoJS.enc.Hex.parse(secretHex)));",
              "pm.request.headers.upsert({ key: 'X-Key-Id', value: keyId });",
              "pm.request.headers.upsert({ key: 'X-Timestamp', value: ts });",
              "pm.request.headers.upsert({ key: 'X-Nonce', value: nonce });",
              "pm.request.headers.upsert({ key: 'X-Signature', value: signature });"
            ]
          }
        },
        {
          "listen": "test",
          "script": {
            "type": "text/javascript",
            "exec": [
              "",
              "if (pm.response.code === 200) {",
              "  try {",
              "    const data = pm.response.json();",
              "    if (data.task_id) pm.collectionVariables.set('last_task_id', data.task_id);",
              "  } catch (e) {}",
              "}"
            ]
          }
        }
      ]
    },
    {
      "name": "POST — JSON (YouTube video)",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          }
        ],
        "url": {
          "raw": "{{base_url}}/v1/posts",
          "host": [
            "{{base_url}}"
          ],
          "path": [
            "v1",
            "posts"
          ]
        },
        "body": {
          "mode": "raw",
          "raw": "{\"account\": \"{{account_selector}}\", \"account_ids\": [\"youtube\"], \"post_type\": \"video\", \"text\": \"Título do vídeo\\n\\nDescrição do vídeo\", \"media_urls\": [\"{{video_url}}\"]}"
        }
      },
      "event": [
        {
          "listen": "prerequest",
          "script": {
            "type": "text/javascript",
            "exec": [
              "",
              "const method = pm.request.method;",
              "let path = pm.request.url.getPath(); if (!path) path = '/';",
              "const ts = Math.floor(Date.now()/1000).toString();",
              "function hex(n){ const c='abcdef0123456789'; let s=''; for(let i=0;i<n;i++) s+=c[Math.floor(Math.random()*c.length)]; return s; }",
              "const nonce = hex(24);",
              "let raw = '';",
              "if (pm.request.body && pm.request.body.mode === 'raw') raw = pm.request.body.raw || '';",
              "const bodyHash = CryptoJS.SHA256(raw).toString(CryptoJS.enc.Hex);",
              "const canonical = [method, path, ts, nonce, bodyHash].join('\\n');",
              "const keyId = pm.collectionVariables.get('key_id') || pm.variables.get('key_id');",
              "const secretHex = pm.collectionVariables.get('secret') || pm.variables.get('secret');",
              "const signature = CryptoJS.enc.Base64.stringify(CryptoJS.HmacSHA256(canonical, CryptoJS.enc.Hex.parse(secretHex)));",
              "pm.request.headers.upsert({ key: 'X-Key-Id', value: keyId });",
              "pm.request.headers.upsert({ key: 'X-Timestamp', value: ts });",
              "pm.request.headers.upsert({ key: 'X-Nonce', value: nonce });",
              "pm.request.headers.upsert({ key: 'X-Signature', value: signature });"
            ]
          }
        },
        {
          "listen": "test",
          "script": {
            "type": "text/javascript",
            "exec": [
              "",
              "if (pm.response.code === 200) {",
              "  try {",
              "    const data = pm.response.json();",
              "    if (data.task_id) pm.collectionVariables.set('last_task_id', data.task_id);",
              "  } catch (e) {}",
              "}"
            ]
          }
        }
      ]
    },
    {
      "name": "POST — multipart (Facebook image file)",
      "request": {
        "method": "POST",
        "header": [],
        "url": {
          "raw": "{{base_url}}/v1/posts",
          "host": [
            "{{base_url}}"
          ],
          "path": [
            "v1",
            "posts"
          ]
        },
        "body": {
          "mode": "formdata",
          "formdata": [
            {
              "key": "media",
              "type": "file",
              "src": ""
            },
            {
              "key": "post_type",
              "value": "image",
              "type": "text"
            },
            {
              "key": "text",
              "value": "Meu Post\n\nDescrição",
              "type": "text"
            },
            {
              "key": "account",
              "value": "{{account_selector}}",
              "type": "text"
            },
            {
              "key": "account_ids",
              "value": "[\"facebook\"]",
              "type": "text"
            },
            {
              "key": "article_url",
              "value": "https://example.com/artigo",
              "type": "text"
            }
          ]
        }
      },
      "event": [
        {
          "listen": "prerequest",
          "script": {
            "type": "text/javascript",
            "exec": [
              "",
              "const method = pm.request.method;",
              "let path = pm.request.url.getPath(); if (!path) path = '/';",
              "const ts = Math.floor(Date.now()/1000).toString();",
              "function hex(n){ const c='abcdef0123456789'; let s=''; for(let i=0;i<n;i++) s+=c[Math.floor(Math.random()*c.length)]; return s; }",
              "const nonce = hex(24);",
              "let raw = '';",
              "if (pm.request.body && pm.request.body.mode === 'raw') raw = pm.request.body.raw || '';",
              "const bodyHash = CryptoJS.SHA256(raw).toString(CryptoJS.enc.Hex);",
              "const canonical = [method, path, ts, nonce, bodyHash].join('\\n');",
              "const keyId = pm.collectionVariables.get('key_id') || pm.variables.get('key_id');",
              "const secretHex = pm.collectionVariables.get('secret') || pm.variables.get('secret');",
              "const signature = CryptoJS.enc.Base64.stringify(CryptoJS.HmacSHA256(canonical, CryptoJS.enc.Hex.parse(secretHex)));",
              "pm.request.headers.upsert({ key: 'X-Key-Id', value: keyId });",
              "pm.request.headers.upsert({ key: 'X-Timestamp', value: ts });",
              "pm.request.headers.upsert({ key: 'X-Nonce', value: nonce });",
              "pm.request.headers.upsert({ key: 'X-Signature', value: signature });"
            ]
          }
        },
        {
          "listen": "test",
          "script": {
            "type": "text/javascript",
            "exec": [
              "",
              "if (pm.response.code === 200) {",
              "  try {",
              "    const data = pm.response.json();",
              "    if (data.task_id) pm.collectionVariables.set('last_task_id', data.task_id);",
              "  } catch (e) {}",
              "}"
            ]
          }
        }
      ]
    },
    {
      "name": "POST — JSON (Instagram reel)",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          }
        ],
        "url": {
          "raw": "{{base_url}}/v1/posts",
          "host": [
            "{{base_url}}"
          ],
          "path": [
            "v1",
            "posts"
          ]
        },
        "body": {
          "mode": "raw",
          "raw": "{\"account\": \"{{account_selector}}\", \"account_ids\": [\"instagram\"], \"post_type\": \"video\", \"text\": \"Título do Reel\", \"media_urls\": [\"{{video_url}}\"]}"
        }
      },
      "event": [
        {
          "listen": "prerequest",
          "script": {
            "type": "text/javascript",
            "exec": [
              "",
              "const method = pm.request.method;",
              "let path = pm.request.url.getPath(); if (!path) path = '/';",
              "const ts = Math.floor(Date.now()/1000).toString();",
              "function hex(n){ const c='abcdef0123456789'; let s=''; for(let i=0;i<n;i++) s+=c[Math.floor(Math.random()*c.length)]; return s; }",
              "const nonce = hex(24);",
              "let raw = '';",
              "if (pm.request.body && pm.request.body.mode === 'raw') raw = pm.request.body.raw || '';",
              "const bodyHash = CryptoJS.SHA256(raw).toString(CryptoJS.enc.Hex);",
              "const canonical = [method, path, ts, nonce, bodyHash].join('\\n');",
              "const keyId = pm.collectionVariables.get('key_id') || pm.variables.get('key_id');",
              "const secretHex = pm.collectionVariables.get('secret') || pm.variables.get('secret');",
              "const signature = CryptoJS.enc.Base64.stringify(CryptoJS.HmacSHA256(canonical, CryptoJS.enc.Hex.parse(secretHex)));",
              "pm.request.headers.upsert({ key: 'X-Key-Id', value: keyId });",
              "pm.request.headers.upsert({ key: 'X-Timestamp', value: ts });",
              "pm.request.headers.upsert({ key: 'X-Nonce', value: nonce });",
              "pm.request.headers.upsert({ key: 'X-Signature', value: signature });"
            ]
          }
        },
        {
          "listen": "test",
          "script": {
            "type": "text/javascript",
            "exec": [
              "",
              "if (pm.response.code === 200) {",
              "  try {",
              "    const data = pm.response.json();",
              "    if (data.task_id) pm.collectionVariables.set('last_task_id', data.task_id);",
              "  } catch (e) {}",
              "}"
            ]
          }
        }
      ]
    },
    {
      "name": "POST — JSON (TikTok vídeo)",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          }
        ],
        "url": {
          "raw": "{{base_url}}/v1/posts",
          "host": [
            "{{base_url}}"
          ],
          "path": [
            "v1",
            "posts"
          ]
        },
        "body": {
          "mode": "raw",
          "raw": "{\"account\": \"{{account_selector}}\", \"account_ids\": [\"tiktok\"], \"post_type\": \"video\", \"text\": \"Título do TikTok\", \"media_urls\": [\"{{video_url}}\"]}"
        }
      },
      "event": [
        {
          "listen": "prerequest",
          "script": {
            "type": "text/javascript",
            "exec": [
              "",
              "const method = pm.request.method;",
              "let path = pm.request.url.getPath(); if (!path) path = '/';",
              "const ts = Math.floor(Date.now()/1000).toString();",
              "function hex(n){ const c='abcdef0123456789'; let s=''; for(let i=0;i<n;i++) s+=c[Math.floor(Math.random()*c.length)]; return s; }",
              "const nonce = hex(24);",
              "let raw = '';",
              "if (pm.request.body && pm.request.body.mode === 'raw') raw = pm.request.body.raw || '';",
              "const bodyHash = CryptoJS.SHA256(raw).toString(CryptoJS.enc.Hex);",
              "const canonical = [method, path, ts, nonce, bodyHash].join('\\n');",
              "const keyId = pm.collectionVariables.get('key_id') || pm.variables.get('key_id');",
              "const secretHex = pm.collectionVariables.get('secret') || pm.variables.get('secret');",
              "const signature = CryptoJS.enc.Base64.stringify(CryptoJS.HmacSHA256(canonical, CryptoJS.enc.Hex.parse(secretHex)));",
              "pm.request.headers.upsert({ key: 'X-Key-Id', value: keyId });",
              "pm.request.headers.upsert({ key: 'X-Timestamp', value: ts });",
              "pm.request.headers.upsert({ key: 'X-Nonce', value: nonce });",
              "pm.request.headers.upsert({ key: 'X-Signature', value: signature });"
            ]
          }
        },
        {
          "listen": "test",
          "script": {
            "type": "text/javascript",
            "exec": [
              "",
              "if (pm.response.code === 200) {",
              "  try {",
              "    const data = pm.response.json();",
              "    if (data.task_id) pm.collectionVariables.set('last_task_id', data.task_id);",
              "  } catch (e) {}",
              "}"
            ]
          }
        }
      ]
    },
    {
      "name": "POST — JSON (YouTube live_schedule + thumb)",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          }
        ],
        "url": {
          "raw": "{{base_url}}/v1/posts",
          "host": [
            "{{base_url}}"
          ],
          "path": [
            "v1",
            "posts"
          ]
        },
        "body": {
          "mode": "raw",
          "raw": "{\"account\": \"{{account_selector}}\", \"account_ids\": [\"youtube\"], \"post_type\": \"live_schedule\", \"text\": \"Título da Live\\n\\nDescrição da Live\", \"media_urls\": [\"{{image_url}}\"], \"scheduled_time\": \"2025-12-01 18:00:00\"}"
        }
      },
      "event": [
        {
          "listen": "prerequest",
          "script": {
            "type": "text/javascript",
            "exec": [
              "",
              "const method = pm.request.method;",
              "let path = pm.request.url.getPath(); if (!path) path = '/';",
              "const ts = Math.floor(Date.now()/1000).toString();",
              "function hex(n){ const c='abcdef0123456789'; let s=''; for(let i=0;i<n;i++) s+=c[Math.floor(Math.random()*c.length)]; return s; }",
              "const nonce = hex(24);",
              "let raw = '';",
              "if (pm.request.body && pm.request.body.mode === 'raw') raw = pm.request.body.raw || '';",
              "const bodyHash = CryptoJS.SHA256(raw).toString(CryptoJS.enc.Hex);",
              "const canonical = [method, path, ts, nonce, bodyHash].join('\\n');",
              "const keyId = pm.collectionVariables.get('key_id') || pm.variables.get('key_id');",
              "const secretHex = pm.collectionVariables.get('secret') || pm.variables.get('secret');",
              "const signature = CryptoJS.enc.Base64.stringify(CryptoJS.HmacSHA256(canonical, CryptoJS.enc.Hex.parse(secretHex)));",
              "pm.request.headers.upsert({ key: 'X-Key-Id', value: keyId });",
              "pm.request.headers.upsert({ key: 'X-Timestamp', value: ts });",
              "pm.request.headers.upsert({ key: 'X-Nonce', value: nonce });",
              "pm.request.headers.upsert({ key: 'X-Signature', value: signature });"
            ]
          }
        },
        {
          "listen": "test",
          "script": {
            "type": "text/javascript",
            "exec": [
              "",
              "if (pm.response.code === 200) {",
              "  try {",
              "    const data = pm.response.json();",
              "    if (data.task_id) pm.collectionVariables.set('last_task_id', data.task_id);",
              "  } catch (e) {}",
              "}"
            ]
          }
        }
      ]
    },
    {
      "name": "get_task_result (usa last_task_id)",
      "request": {
        "method": "GET",
        "header": [],
        "url": {
          "raw": "{{base_url}}/v1/get_task_result?task_id={{last_task_id}}",
          "host": [
            "{{base_url}}"
          ],
          "path": [
            "v1",
            "get_task_result?task_id={{last_task_id}}"
          ]
        }
      }
    }
  ]
}