The storeVero API

curl -X POST https://storevero.com/api/v1/ecommerce/products \
  -H "Authorization: Bearer YOUR_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Aroma Diffuser",
    "price": 1499,
    "sku": "AD-001",
    "stock": 50,
    "category_id": 3,
    "is_active": true
  }'

await fetch('https://storevero.com/api/v1/ecommerce/products', {
  method: 'POST',
  headers: {
    'Authorization': `Bearer ${token}`,
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    name: 'Aroma Diffuser', price: 1499,
    sku: 'AD-001', stock: 50, category_id: 3, is_active: true
  })
});

Http::withToken($token)->post(
  'https://storevero.com/api/v1/ecommerce/products', [
    'name' => 'Aroma Diffuser', 'price' => 1499,
    'sku' => 'AD-001', 'stock' => 50, 'category_id' => 3, 'is_active' => true,
]);

{
  "data": {
    "id": 41, "name": "Aroma Diffuser", "slug": "aroma-diffuser",
    "price": "1499.00", "sku": "AD-001", "stock": 50,
    "category_id": 3, "is_active": true,
    "created_at": "2026-07-29T10:20:31Z"
  }
}

curl -X POST https://storevero.com/api/v1/orders/1042/fulfill \
  -H "Authorization: Bearer YOUR_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{ "tracking_number": "IN123456789", "carrier": "Delhivery" }'

await fetch('https://storevero.com/api/v1/orders/1042/fulfill', {
  method: 'POST',
  headers: { 'Authorization': `Bearer ${token}`, 'Content-Type': 'application/json' },
  body: JSON.stringify({ tracking_number: 'IN123456789', carrier: 'Delhivery' })
});

Http::withToken($token)->post(
  'https://storevero.com/api/v1/orders/1042/fulfill', [
    'tracking_number' => 'IN123456789', 'carrier' => 'Delhivery',
]);

curl -X POST https://storevero.com/api/v1/ecommerce/inventory/adjust \
  -H "Authorization: Bearer YOUR_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{ "product_id": 41, "quantity": -3, "reason": "sale" }'

await fetch('https://storevero.com/api/v1/ecommerce/inventory/adjust', {
  method: 'POST',
  headers: { 'Authorization': `Bearer ${token}`, 'Content-Type': 'application/json' },
  body: JSON.stringify({ product_id: 41, quantity: -3, reason: 'sale' })
});

Http::withToken($token)->post(
  'https://storevero.com/api/v1/ecommerce/inventory/adjust', [
    'product_id' => 41, 'quantity' => -3, 'reason' => 'sale',
]);

curl -X POST https://storevero.com/api/v1/ecommerce/storefront/demo/orders \
  -H "Content-Type: application/json" \
  -d '{
    "customer_email": "buyer@example.com",
    "items": [{ "product_id": 41, "quantity": 2 }],
    "shipping_address": { "name": "A. Kumar", "city": "Pune", "pincode": "411001" }
  }'

await fetch('https://storevero.com/api/v1/ecommerce/storefront/demo/orders', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({
    customer_email: 'buyer@example.com',
    items: [{ product_id: 41, quantity: 2 }],
    shipping_address: { name: 'A. Kumar', city: 'Pune', pincode: '411001' }
  })
});

Http::post('https://storevero.com/api/v1/ecommerce/storefront/demo/orders', [
  'customer_email' => 'buyer@example.com',
  'items' => [['product_id' => 41, 'quantity' => 2]],
  'shipping_address' => ['name' => 'A. Kumar', 'city' => 'Pune', 'pincode' => '411001'],
]);

query ProductByHandle($handle: String!) {
  productByHandle(handle: $handle) {
    id
    title
    handle
    priceRange { minVariantPrice { amount currencyCode } }
    images(first: 3) { edges { node { url altText } } }
  }
}

curl -X POST https://storevero.com/api/v1/storefront/graphql \
  -H "X-Shopify-Storefront-Access-Token: YOUR_STOREFRONT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{ "query": "{ productByHandle(handle: \"aroma-diffuser\") { title } }" }'

mutation {
  cartCreate(input: { lines: [{ merchandiseId: "41", quantity: 2 }] }) {
    cart { id checkoutUrl
      lines(first: 10) { edges { node { quantity } } }
    }
  }
}

$payload = file_get_contents('php://input');
$signature = $_SERVER['HTTP_X_STOREVERO_HMAC_SHA256'] ?? '';
$expected = base64_encode(hash_hmac('sha256', $payload, $webhookSecret, true));
if (! hash_equals($expected, $signature)) {
  http_response_code(401); exit;
}
// ✓ verified — parse and handle
$event = json_decode($payload, true);

import crypto from 'crypto';
function verify(rawBody, signature, secret) {
  const expected = crypto.createHmac('sha256', secret)
    .update(rawBody, 'utf8').digest('base64');
  return crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(signature));
}