Seamless Wallet API
Instant Play. Zero Player Transfers.

<?php
namespace App\Http\Controllers;

use Illuminate\Http\Request;
use App\Models\User;

class SeamlessWalletWebhookController extends Controller
{
    public function handle(Request $request)
    {
        $operatorCode = config('services.gsc.operator_code');
        $secretKey    = config('services.gsc.secret_key');

        // 1. Verify HMAC-SHA256 Signature
        $method      = $request->input('method'); // e.g. getbalance, changebalance, rollback
        $requestTime = $request->input('request_time');
        $expectedSign = md5($operatorCode . $requestTime . $method . $secretKey);

        if (strtolower($request->input('sign')) !== strtolower($expectedSign)) {
            return response()->json(['code' => 5003, 'message' => 'Invalid HMAC Signature'], 200);
        }

        // 2. Fetch Player Account
        $memberAccount = $request->input('member_account');
        $user = User::where('username', $memberAccount)->first();

        if (!$user) {
            return response()->json(['code' => 1001, 'message' => 'Player Account Not Found'], 200);
        }

        // 3. Handle Balance Query
        if ($method === 'getbalance') {
            return response()->json([
                'code'    => 0,
                'message' => 'SUCCESS',
                'data'    => [
                    'member_account' => $user->username,
                    'balance'        => (float)$user->balance,
                    'currency'       => 'USD'
                ]
            ]);
        }

        // 4. Handle Wager / Win Balance Adjustment
        if ($method === 'changebalance') {
            $amount = (float)$request->input('amount');
            $txId   = $request->input('transaction_id');

            // Prevent overdraft on debit
            if ($amount < 0 && $user->balance < abs($amount)) {
                return response()->json(['code' => 1002, 'message' => 'Insufficient Player Balance'], 200);
            }

            // Atomic balance mutation
            $user->balance += $amount;
            $user->save();

            return response()->json([
                'code'    => 0,
                'message' => 'SUCCESS',
                'data'    => [
                    'member_account' => $user->username,
                    'balance'        => (float)$user->balance,
                    'transaction_id' => $txId
                ]
            ]);
        }

        // 5. Handle Atomic Rollback
        if ($method === 'rollback') {
            $rollbackAmount = (float)$request->input('amount');
            $user->balance += $rollbackAmount;
            $user->save();

            return response()->json(['code' => 0, 'message' => 'ROLLBACK_SUCCESS']);
        }

        return response()->json(['code' => 9999, 'message' => 'Unknown Method'], 200);
    }
}