========================================
TESTE DE VALIDAÇÃO HMAC - OPENPIX
========================================

Payload:
{"event":"OPENPIX:CHARGE_COMPLETED","charge":{"correlationID":"test_hmac_1789488490","transactionID":"txn_6aa96d6a25a2a","status":"COMPLETED","value":10000,"paidAt":"2026-09-15T13:08:10.000Z"}}

Secret configurado:
openpix_EtpEIRxeT+5yt4MM4E8Ern3/WVoLzuRDtlJx15jHrFc=
Tamanho: 52 caracteres

========================================
TESTANDO DIFERENTES MÉTODOS DE HMAC
========================================

1. HMAC com secret direto:
   Signature: aed5d7d2336e483ef3e6c94733a29869090949d0d05844332673373973aeb2c2

2. HMAC com secret SEM prefixo 'openpix_':
   Secret usado: EtpEIRxeT+5yt4MM4E8Ern3/WVoLzuRDtlJx15jHrFc=
   Signature: 8e6b148955c4c5a7b47a47388513c96b8ad8adf6954c2a7c5a5955fae7d9c054

3. HMAC com secret (sem prefixo) decodificado de Base64:
   Secret decodificado (tamanho): 32 bytes
   Signature: 5e80ffad115600f7b2cb584f5a8f9f530b35e7308f37c1ddfc266175743932ec

========================================
TESTANDO CADA MÉTODO COM O WEBHOOK
========================================

1. Testando: Secret direto
   Signature: aed5d7d2336e483ef3e6c94733a29869090949d0d05844332673373973aeb2c2
   HTTP Status: 404
   Response: {
    "message": "The route api/webhooks/openpix could not be found."
}
   ❌ FALHOU (Status 404)

2. Testando: Secret sem prefixo
   Signature: 8e6b148955c4c5a7b47a47388513c96b8ad8adf6954c2a7c5a5955fae7d9c054
   HTTP Status: 404
   Response: {
    "message": "The route api/webhooks/openpix could not be found."
}
   ❌ FALHOU (Status 404)

3. Testando: Secret sem prefixo (Base64 decoded)
   Signature: 5e80ffad115600f7b2cb584f5a8f9f530b35e7308f37c1ddfc266175743932ec
   HTTP Status: 404
   Response: {
    "message": "The route api/webhooks/openpix could not be found."
}
   ❌ FALHOU (Status 404)

========================================
❌ NENHUM MÉTODO FUNCIONOU
========================================

Verifique:
1. O secret está correto?
   Secret atual: openpix_EtpEIRxeT+5yt4MM4E8Ern3/WVoLzuRDtlJx15jHrFc=

2. Verifique os logs do Laravel para mais detalhes:
   tail -100 backend/storage/logs/laravel.log | grep -A 10 'HMAC'

3. O OpenPIX pode usar um formato diferente. Consulte a documentação:
   https://developers.openpix.com.br/docs/webhook/webhook-signature