========================================
TESTE DE VALIDAÇÃO HMAC - OPENPIX
========================================

Payload:
{"event":"OPENPIX:CHARGE_COMPLETED","charge":{"correlationID":"test_hmac_1794755783","transactionID":"txn_6af9ccc75d4c5","status":"COMPLETED","value":10000,"paidAt":"2026-11-15T12:16:23.000Z"}}

Secret configurado:
openpix_EtpEIRxeT+5yt4MM4E8Ern3/WVoLzuRDtlJx15jHrFc=
Tamanho: 52 caracteres

========================================
TESTANDO DIFERENTES MÉTODOS DE HMAC
========================================

1. HMAC com secret direto:
   Signature: b611b1544071c02d5eb3b609a5c3d3d5d45911957175417480c2406d6397af79

2. HMAC com secret SEM prefixo 'openpix_':
   Secret usado: EtpEIRxeT+5yt4MM4E8Ern3/WVoLzuRDtlJx15jHrFc=
   Signature: e49d71c5d8e09548d67f6e5150a597bd1b2253bad2b19b3fb1b1c9ad6c59262c

3. HMAC com secret (sem prefixo) decodificado de Base64:
   Secret decodificado (tamanho): 32 bytes
   Signature: c109c8593f7ba452df463a06f3f536c29cbe6c6e0091145fa5806b7d541bff8e

========================================
TESTANDO CADA MÉTODO COM O WEBHOOK
========================================

1. Testando: Secret direto
   Signature: b611b1544071c02d5eb3b609a5c3d3d5d45911957175417480c2406d6397af79
   HTTP Status: 404
   Response: {
    "message": "The route api/webhooks/openpix could not be found."
}
   ❌ FALHOU (Status 404)

2. Testando: Secret sem prefixo
   Signature: e49d71c5d8e09548d67f6e5150a597bd1b2253bad2b19b3fb1b1c9ad6c59262c
   HTTP Status: 404
   Response: {
    "message": "The route api/webhooks/openpix could not be found."
}
   ❌ FALHOU (Status 404)

3. Testando: Secret sem prefixo (Base64 decoded)
   Signature: c109c8593f7ba452df463a06f3f536c29cbe6c6e0091145fa5806b7d541bff8e
   HTTP Status: 404
   Response: {
    "message": "The route api/webhooks/openpix could not be found."
}
   ❌ FALHOU (Status 404)

========================================
❌ NENHUM MÉTODO FUNCIONOU
========================================

Verifique:
1. O secret está correto?
   Secret atual: openpix_EtpEIRxeT+5yt4MM4E8Ern3/WVoLzuRDtlJx15jHrFc=

2. Verifique os logs do Laravel para mais detalhes:
   tail -100 backend/storage/logs/laravel.log | grep -A 10 'HMAC'

3. O OpenPIX pode usar um formato diferente. Consulte a documentação:
   https://developers.openpix.com.br/docs/webhook/webhook-signature