Vaše systémy.
Jedna prepojená fakturácia.

curl --fail-with-body --request POST "https://www.billex.sk/api/v1/doklady" \
  --header "Authorization: Bearer $BILLEX_API_KEY" \
  --header 'Accept: application/json' \
  --header 'Content-Type: application/json' \
  --header "Idempotency-Key: $BILLEX_IDEMPOTENCY_KEY" \
  --data-binary @- <<'JSON'
{
    "typ": "faktura",
    "datum_vystavenia": "2026-10-03",
    "datum_dodania": "2026-10-03",
    "datum_splatnosti": "2026-10-17",
    "mena": "EUR",
    "sposob_uhrady": "prevod",
    "odberatel": {
        "nazov": "Demo odberateľ, s.r.o.",
        "ico": "12345678",
        "email": "integracia@example.test",
        "ulica": "Testovacia 1",
        "psc": "81101",
        "mesto": "Bratislava",
        "krajina": "Slovensko"
    },
    "polozky": [
        {
            "nazov": "Webhosting",
            "mnozstvo": "1",
            "jednotka": "mesiac",
            "cena_bez_dph": "49.00",
            "sadzba_dph": "23"
        }
    ]
}
JSON

<?php
$headers = ['Authorization: Bearer '.getenv('BILLEX_API_KEY'), 'Accept: application/json'];
$headers[] = 'Content-Type: application/json';
$headers[] = 'Idempotency-Key: '.getenv('BILLEX_IDEMPOTENCY_KEY');
$body = <<<'JSON'
{
    "typ": "faktura",
    "datum_vystavenia": "2026-10-03",
    "datum_dodania": "2026-10-03",
    "datum_splatnosti": "2026-10-17",
    "mena": "EUR",
    "sposob_uhrady": "prevod",
    "odberatel": {
        "nazov": "Demo odberateľ, s.r.o.",
        "ico": "12345678",
        "email": "integracia@example.test",
        "ulica": "Testovacia 1",
        "psc": "81101",
        "mesto": "Bratislava",
        "krajina": "Slovensko"
    },
    "polozky": [
        {
            "nazov": "Webhosting",
            "mnozstvo": "1",
            "jednotka": "mesiac",
            "cena_bez_dph": "49.00",
            "sadzba_dph": "23"
        }
    ]
}
JSON;
$ch = curl_init('https://www.billex.sk/api/v1/doklady');
curl_setopt_array($ch, [CURLOPT_CUSTOMREQUEST => 'POST', CURLOPT_HTTPHEADER => $headers, CURLOPT_RETURNTRANSFER => true, CURLOPT_TIMEOUT => 30, CURLOPT_POSTFIELDS => $body]);
$response = curl_exec($ch);
if ($response === false) { throw new RuntimeException(curl_error($ch)); }
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
if ($status >= 400) { throw new RuntimeException('HTTP '.$status.': '.$response); }
$data = json_decode($response, true, flags: JSON_THROW_ON_ERROR);
print_r($data);

// Node.js s natívnym fetch; spúšťajte na serveri.
const response = await fetch('https://www.billex.sk/api/v1/doklady', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.BILLEX_API_KEY}`,
    Accept: 'application/json',
    'Content-Type': 'application/json',
    'Idempotency-Key': process.env.BILLEX_IDEMPOTENCY_KEY,
  },
  body: JSON.stringify({
    "typ": "faktura",
    "datum_vystavenia": "2026-10-03",
    "datum_dodania": "2026-10-03",
    "datum_splatnosti": "2026-10-17",
    "mena": "EUR",
    "sposob_uhrady": "prevod",
    "odberatel": {
        "nazov": "Demo odberateľ, s.r.o.",
        "ico": "12345678",
        "email": "integracia@example.test",
        "ulica": "Testovacia 1",
        "psc": "81101",
        "mesto": "Bratislava",
        "krajina": "Slovensko"
    },
    "polozky": [
        {
            "nazov": "Webhosting",
            "mnozstvo": "1",
            "jednotka": "mesiac",
            "cena_bez_dph": "49.00",
            "sadzba_dph": "23"
        }
    ]
}),
});
if (!response.ok) throw new Error(`HTTP ${response.status}: ${await response.text()}`);
console.log(await response.json());

import os, json
from urllib.request import Request, urlopen
from urllib.error import HTTPError

headers = {'Authorization': 'Bearer ' + os.environ['BILLEX_API_KEY'], 'Accept': 'application/json'}
body = json.loads('''{"typ":"faktura","datum_vystavenia":"2026-10-03","datum_dodania":"2026-10-03","datum_splatnosti":"2026-10-17","mena":"EUR","sposob_uhrady":"prevod","odberatel":{"nazov":"Demo odberateľ, s.r.o.","ico":"12345678","email":"integracia@example.test","ulica":"Testovacia 1","psc":"81101","mesto":"Bratislava","krajina":"Slovensko"},"polozky":[{"nazov":"Webhosting","mnozstvo":"1","jednotka":"mesiac","cena_bez_dph":"49.00","sadzba_dph":"23"}]}''')
headers.update({'Content-Type': 'application/json', 'Idempotency-Key': os.environ['BILLEX_IDEMPOTENCY_KEY']})
request = Request('https://www.billex.sk/api/v1/doklady', method='POST', headers=headers, data=json.dumps(body).encode('utf-8'))
try:
    with urlopen(request, timeout=30) as response:
        print(json.load(response))
except HTTPError as error:
    raise RuntimeError(f'HTTP {error.code}: {error.read().decode()}') from error

curl --fail-with-body --request GET "https://www.billex.sk/api/v1/doklady?typ=faktura&stav=vystaveny&limit=50" \
  --header "Authorization: Bearer $BILLEX_API_KEY" \
  --header 'Accept: application/json'

<?php
$headers = ['Authorization: Bearer '.getenv('BILLEX_API_KEY'), 'Accept: application/json'];
$ch = curl_init('https://www.billex.sk/api/v1/doklady?typ=faktura&stav=vystaveny&limit=50');
curl_setopt_array($ch, [CURLOPT_CUSTOMREQUEST => 'GET', CURLOPT_HTTPHEADER => $headers, CURLOPT_RETURNTRANSFER => true, CURLOPT_TIMEOUT => 30]);
$response = curl_exec($ch);
if ($response === false) { throw new RuntimeException(curl_error($ch)); }
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
if ($status >= 400) { throw new RuntimeException('HTTP '.$status.': '.$response); }
$data = json_decode($response, true, flags: JSON_THROW_ON_ERROR);
print_r($data);

// Node.js s natívnym fetch; spúšťajte na serveri.
const response = await fetch('https://www.billex.sk/api/v1/doklady?typ=faktura&stav=vystaveny&limit=50', {
  method: 'GET',
  headers: {
    Authorization: `Bearer ${process.env.BILLEX_API_KEY}`,
    Accept: 'application/json',
  },
});
if (!response.ok) throw new Error(`HTTP ${response.status}: ${await response.text()}`);
console.log(await response.json());

import os, json
from urllib.request import Request, urlopen
from urllib.error import HTTPError

headers = {'Authorization': 'Bearer ' + os.environ['BILLEX_API_KEY'], 'Accept': 'application/json'}
request = Request('https://www.billex.sk/api/v1/doklady?typ=faktura&stav=vystaveny&limit=50', method='GET', headers=headers)
try:
    with urlopen(request, timeout=30) as response:
        print(json.load(response))
except HTTPError as error:
    raise RuntimeError(f'HTTP {error.code}: {error.read().decode()}') from error

curl --fail-with-body --request POST "https://www.billex.sk/api/v1/doklady/123/uhrady" \
  --header "Authorization: Bearer $BILLEX_API_KEY" \
  --header 'Accept: application/json' \
  --header 'Content-Type: application/json' \
  --header "Idempotency-Key: $BILLEX_IDEMPOTENCY_KEY" \
  --data-binary @- <<'JSON'
{
    "datum": "2026-10-10",
    "suma": "49.00",
    "sposob": "prevod",
    "poznamka": "Úhrada z integrácie"
}
JSON

<?php
$headers = ['Authorization: Bearer '.getenv('BILLEX_API_KEY'), 'Accept: application/json'];
$headers[] = 'Content-Type: application/json';
$headers[] = 'Idempotency-Key: '.getenv('BILLEX_IDEMPOTENCY_KEY');
$body = <<<'JSON'
{
    "datum": "2026-10-10",
    "suma": "49.00",
    "sposob": "prevod",
    "poznamka": "Úhrada z integrácie"
}
JSON;
$ch = curl_init('https://www.billex.sk/api/v1/doklady/123/uhrady');
curl_setopt_array($ch, [CURLOPT_CUSTOMREQUEST => 'POST', CURLOPT_HTTPHEADER => $headers, CURLOPT_RETURNTRANSFER => true, CURLOPT_TIMEOUT => 30, CURLOPT_POSTFIELDS => $body]);
$response = curl_exec($ch);
if ($response === false) { throw new RuntimeException(curl_error($ch)); }
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
if ($status >= 400) { throw new RuntimeException('HTTP '.$status.': '.$response); }
$data = json_decode($response, true, flags: JSON_THROW_ON_ERROR);
print_r($data);

// Node.js s natívnym fetch; spúšťajte na serveri.
const response = await fetch('https://www.billex.sk/api/v1/doklady/123/uhrady', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.BILLEX_API_KEY}`,
    Accept: 'application/json',
    'Content-Type': 'application/json',
    'Idempotency-Key': process.env.BILLEX_IDEMPOTENCY_KEY,
  },
  body: JSON.stringify({
    "datum": "2026-10-10",
    "suma": "49.00",
    "sposob": "prevod",
    "poznamka": "Úhrada z integrácie"
}),
});
if (!response.ok) throw new Error(`HTTP ${response.status}: ${await response.text()}`);
console.log(await response.json());

import os, json
from urllib.request import Request, urlopen
from urllib.error import HTTPError

headers = {'Authorization': 'Bearer ' + os.environ['BILLEX_API_KEY'], 'Accept': 'application/json'}
body = json.loads('''{"datum":"2026-10-10","suma":"49.00","sposob":"prevod","poznamka":"Úhrada z integrácie"}''')
headers.update({'Content-Type': 'application/json', 'Idempotency-Key': os.environ['BILLEX_IDEMPOTENCY_KEY']})
request = Request('https://www.billex.sk/api/v1/doklady/123/uhrady', method='POST', headers=headers, data=json.dumps(body).encode('utf-8'))
try:
    with urlopen(request, timeout=30) as response:
        print(json.load(response))
except HTTPError as error:
    raise RuntimeError(f'HTTP {error.code}: {error.read().decode()}') from error

# cURL neprijíma HTTP požiadavky. Toto je lokálny test vášho prijímača.
# WEBHOOK_URL nastavte na vlastný testovací prijímač, WEBHOOK_SECRET na jeho tajomstvo.
# Rovnaké pôvodné bajty musí prijímač overiť v PHP, Node.js alebo Pythone nižšie.
printf '%s' '{"event":"invoice.paid","document":{"id":123}}' > webhook.json
timestamp=$(date +%s)
export WEBHOOK_TIMESTAMP="$timestamp"
signature=$(php -r 'echo hash_hmac("sha256", getenv("WEBHOOK_TIMESTAMP").".".file_get_contents("webhook.json"), getenv("WEBHOOK_SECRET"));')
curl --fail-with-body "$WEBHOOK_URL" \
  --header 'Content-Type: application/json' \
  --header 'X-Webhook-Event: invoice.paid' \
  --header "X-Webhook-Timestamp: $timestamp" \
  --header "X-Webhook-Signature-V2: $signature" \
  --header 'X-Webhook-Delivery: 123' \
  --data-binary @webhook.json

<?php
$secret = getenv('WEBHOOK_SECRET');
if (!$secret) { http_response_code(503); exit; }
$raw = file_get_contents('php://input');
$timestamp = $_SERVER['HTTP_X_WEBHOOK_TIMESTAMP'] ?? '';
$signature = $_SERVER['HTTP_X_WEBHOOK_SIGNATURE_V2'] ?? '';
if (!ctype_digit($timestamp) || abs(time() - (int)$timestamp) > 300
    || !preg_match('/\A[0-9a-f]{64}\z/', $signature)
    || !hash_equals(hash_hmac('sha256', $timestamp.'.'.$raw, $secret), $signature)) {
    http_response_code(401); exit;
}
try { $event = json_decode($raw, true, flags: JSON_THROW_ON_ERROR); }
catch (JsonException) { http_response_code(400); exit; }
// Pred 2xx uložte udalosť do trvalej fronty a atomicky odstráňte duplicity.
// Duplicity odstráňte podľa stabilného X-Webhook-Delivery; retry má nový timestamp.
// Ak V2 chýba alebo neplatí, neprepínajte na starší podpis.
http_response_code(503); // Nahraďte 204 až po úspešnom trvalom prijatí.

import { createServer } from 'node:http';
import { createHmac, timingSafeEqual } from 'node:crypto';
const secret = process.env.WEBHOOK_SECRET;
if (!secret) throw new Error('Chýba WEBHOOK_SECRET');
createServer(async (req, res) => {
  if (req.method !== 'POST') { res.writeHead(405).end(); return; }
  const chunks = [];
  for await (const chunk of req) chunks.push(chunk);
  const raw = Buffer.concat(chunks);
  const timestamp = req.headers['x-webhook-timestamp'];
  const signature = req.headers['x-webhook-signature-v2'];
  const expected = createHmac('sha256', secret).update(String(timestamp) + '.').update(raw).digest();
  if (typeof timestamp !== 'string' || !/^[0-9]+$/.test(timestamp)
      || Math.abs(Date.now() / 1000 - Number(timestamp)) > 300
      || typeof signature !== 'string' || !/^[0-9a-f]{64}$/.test(signature)
      || !timingSafeEqual(expected, Buffer.from(signature, 'hex'))) {
    res.writeHead(401).end(); return;
  }
  let event;
  try { event = JSON.parse(raw.toString('utf8')); }
  catch { res.writeHead(400).end(); return; }
  // Trvalo prijmite event a atomicky odstráňte duplicity podľa doménovej identity.
  res.writeHead(503).end(); // 204 až po úspešnom zápise do trvalej fronty.
}).listen(Number(process.env.WEBHOOK_PORT)); // Vlastný port za HTTPS proxy.

import os, json, hmac, hashlib, re, time
from http.server import BaseHTTPRequestHandler, HTTPServer
secret = os.environ['WEBHOOK_SECRET'].encode()
if not secret: raise RuntimeError('Chýba WEBHOOK_SECRET')
class Receiver(BaseHTTPRequestHandler):
    def do_POST(self):
        raw = self.rfile.read(int(self.headers.get('Content-Length', '0')))
        timestamp = self.headers.get('X-Webhook-Timestamp', '')
        signature = self.headers.get('X-Webhook-Signature-V2', '')
        expected = hmac.new(secret, timestamp.encode() + b'.' + raw, hashlib.sha256).hexdigest()
        if (not re.fullmatch(r'[0-9]+', timestamp) or abs(time.time() - int(timestamp)) > 300
                or not re.fullmatch(r'[0-9a-f]{64}', signature) or not hmac.compare_digest(expected, signature)):
            self.send_response(401); self.end_headers(); return
        try: event = json.loads(raw)
        except (ValueError, UnicodeDecodeError):
            self.send_response(400); self.end_headers(); return
        # Trvalo prijmite event a atomicky odstráňte duplicity podľa doménovej identity.
        self.send_response(503) # 204 až po úspešnom zápise do trvalej fronty.
        self.end_headers()
HTTPServer(('', int(os.environ['WEBHOOK_PORT'])), Receiver).serve_forever()
# Ukážka za HTTPS proxy; nastavte limity veľkosti tela a času požiadavky.