Connectez votre boutique en ligne à DROPP

Authorization: Bearer dropp_sk_live_xxxxxxxxxxxxxxxx

curl "https://api.dropp237.com/api/v1/ecommerce/relay-points?city=Douala" \
  -H "Authorization: Bearer $DROPP_API_KEY"

[
  {
    "id": "8f0c2c1e-5b7a-4a52-9d1e-2b8f3c4d5e6f",
    "name": "DROPP Akwa",
    "city": "Douala",
    "neighborhood": "Akwa",
    "address": "Papeterie du Centre, boulevard de la Liberté",
    "latitude": 4.0511,
    "longitude": 9.7043,
    "phone_number": "+237690000000",
    "photo_url": null
  }
]

curl "https://api.dropp237.com/api/v1/ecommerce/quote?weight=1.5" \
  -H "Authorization: Bearer $DROPP_API_KEY"

# {"package_size": "M", "weight": 1.5, "shipping_fee": 2750.0, "currency": "XAF"}

curl -X POST "https://api.dropp237.com/api/v1/ecommerce/shipments" \
  -H "Authorization: Bearer $DROPP_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: order-CMD-1001" \
  -d '{
    "external_reference": "CMD-1001",
    "recipient": { "name": "Paul Mbarga", "phone_number": "677112233" },
    "destination_relay_id": "8f0c2c1e-5b7a-4a52-9d1e-2b8f3c4d5e6f",
    "weight": 1.5,
    "cod_amount": 0,
    "content_description": "Baskets"
  }'

{
  "tracking_id": "DRP-3F6D45992EFD",
  "external_reference": "CMD-1001",
  "status": "CREATED",
  "package_size": "M",
  "weight": 1.5,
  "shipping_fee": 2750.0,
  "currency": "XAF",
  "fee_paid": false,
  "cod_amount": 0.0,
  "cod_status": "NONE",
  "recipient_name": "Paul Mbarga",
  "recipient_phone": "+237677112233",
  "destination_relay": { "name": "DROPP Akwa", "city": "Douala", "...": "..." },
  "expires_in_seconds": 604800,
  "timeline": [{ "status": "CREATED", "relay_point_name": null, "created_at": "…" }],
  "test_mode": false
}

# One parcel
curl "https://api.dropp237.com/api/v1/ecommerce/shipments/DRP-3F6D45992EFD" -H "Authorization: Bearer $DROPP_API_KEY"

# By order number
curl "https://api.dropp237.com/api/v1/ecommerce/shipments?external_reference=CMD-1001" -H "Authorization: Bearer $DROPP_API_KEY"

# Cancel (only while the fee is not paid)
curl -X DELETE "https://api.dropp237.com/api/v1/ecommerce/shipments/DRP-3F6D45992EFD" -H "Authorization: Bearer $DROPP_API_KEY"

curl -X PUT "https://api.dropp237.com/api/v1/ecommerce/webhook" \
  -H "Authorization: Bearer $DROPP_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url": "https://ma-boutique.cm/webhooks/dropp"}'

# {"url": "...", "test_mode": false, "secret": "whsec_..."}  <- keep the secret

# Send a test event
curl -X POST "https://api.dropp237.com/api/v1/ecommerce/webhook/test" -H "Authorization: Bearer $DROPP_API_KEY"

POST /webhooks/dropp
Dropp-Signature: t=1760781120,v1=5f2c…
Dropp-Event: shipment.status_changed
Dropp-Event-Id: evt_3f1c…

{
  "id": "evt_3f1c…",
  "type": "shipment.status_changed",
  "created_at": "2026-10-18T09:12:00+00:00",
  "test_mode": false,
  "data": {
    "previous_status": "IN_TRANSIT",
    "shipment": { "tracking_id": "DRP-3F6D45992EFD", "external_reference": "CMD-1001", "status": "READY_FOR_PICKUP", "...": "..." }
  }
}

import crypto from "node:crypto";
import express from "express";

const app = express();
// The signature is computed on the raw body: do not parse it before.
app.post("/webhooks/dropp", express.raw({ type: "application/json" }), (req, res) => {
  const header = req.get("Dropp-Signature") ?? "";
  const { t, v1 } = Object.fromEntries(header.split(",").map((p) => p.split("=")));
  const expected = crypto
    .createHmac("sha256", process.env.DROPP_WEBHOOK_SECRET)
    .update(`${t}.${req.body}`)
    .digest("hex");
  const fresh = Math.abs(Date.now() / 1000 - Number(t)) < 300;
  if (!v1 || !fresh || !crypto.timingSafeEqual(Buffer.from(v1), Buffer.from(expected))) {
    return res.sendStatus(401);
  }
  const event = JSON.parse(req.body);
  // Ignore an event.id already handled, then update the order.
  res.sendStatus(200);
});

# Test key: dropp_sk_test_...
curl -X POST "https://api.dropp237.com/api/v1/ecommerce/test/shipments/TST-7BABF5615428/simulate" \
  -H "Authorization: Bearer $DROPP_TEST_KEY" \
  -H "Content-Type: application/json" \
  -d '{"action": "advance"}'