Number Masking Java Example

// Java 15+ (text blocks): plain HTTP with java.net.http. No SDK or Maven artifact to install.
import java.net.URI;
import java.net.http.*;
import java.nio.charset.StandardCharsets;
import java.security.MessageDigest;
import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;

public class EdesyMasking {
    static final String API = "https://voice-api.edesy.in/v1";

    // 1. Create a two-way masked session
    public static String createSession() throws Exception {
        String json = """
            {"party_a":"9876543210","party_b":"9123456789",
             "reference":"ORD-4821","expiry_minutes":60}""";
        HttpRequest req = HttpRequest.newBuilder(URI.create(API + "/masking/sessions"))
            .header("Authorization", "Bearer " + System.getenv("EDESY_API_KEY")) // vp_...
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString(json))
            .build();
        HttpResponse<String> res = HttpClient.newHttpClient()
            .send(req, HttpResponse.BodyHandlers.ofString());
        return res.body(); // {"data":{"virtual_number":"...", "session_id":"..."}}
    }

    // 2. Verify an event webhook: X-Edesy-Signature = "sha256=" + hex(HMAC-SHA256(rawBody))
    public static boolean verify(byte[] rawBody, String header, String secret) throws Exception {
        Mac mac = Mac.getInstance("HmacSHA256");
        mac.init(new SecretKeySpec(secret.getBytes(StandardCharsets.UTF_8), "HmacSHA256"));
        StringBuilder hex = new StringBuilder("sha256=");
        for (byte b : mac.doFinal(rawBody)) hex.append(String.format("%02x", b));
        return header != null && MessageDigest.isEqual(
            hex.toString().getBytes(StandardCharsets.UTF_8),
            header.getBytes(StandardCharsets.UTF_8));
    }
}