Integra Hojas de Ruta en tu oficina

curl --request GET \
  https://hojasderuta.com/api/v1/account \
  --header "Authorization: Bearer hdr_live_YOUR_KEY"

curl --request POST \
  https://hojasderuta.com/api/v1/route-sheets \
  --header "Authorization: Bearer hdr_live_YOUR_KEY" \
  --header "Content-Type: application/json" \
  --header "Idempotency-Key: 4f266965-0b3c-4d7a-a4c0-418cf3955236" \
  --data '{
    "externalId": "ERP-2026-184",
    "companyName": "Autocares Sierra",
    "companyNif": "B12345674",
    "contractorName": "Asociación Cultural Norte",
    "contractorNif": "G87654323",
    "origin": "Madrid",
    "destination": "Toledo",
    "serviceDate": "2026-10-05",
    "serviceStartTime": "08:30",
    "busPlate": "8246LRV",
    "driverId": "driver_01J..."
  }'

{
  "data": {
    "id": "hr_01J...",
    "externalId": "ERP-2026-184",
    "status": "ready",
    "pdfVersion": 1,
    "pdfUrl": "/api/v1/route-sheets/hr_01J.../pdf",
    "qrUrl": "https://hojasderuta.com/deca/...",
    "createdAt": "2026-10-05T06:12:44Z"
  },
  "meta": {
    "requestId": "req_01J..."
  }
}

curl --request POST \
  https://hojasderuta.com/api/v1/drivers \
  --header "Authorization: Bearer hdr_live_YOUR_KEY" \
  --header "Content-Type: application/json" \
  --header "Idempotency-Key: driver-ERP-1042-v1" \
  --data '{
    "externalId": "ERP-DRIVER-1042",
    "name": "Ana García López",
    "email": "ana.garcia@example.com",
    "driverNif": "12345678Z",
    "phone": "600 123 456",
    "password": "contraseña-inicial-segura",
    "permissions": {
      "editRouteSheets": true,
      "editRouteSheetCompany": false,
      "editRouteSheetVehicle": true,
      "editRouteSheetContractor": true,
      "manageCompanies": false,
      "manageDrivers": false,
      "manageVehicles": false,
      "viewAllRouteSheets": false,
      "manageAllRouteSheets": false
    }
  }'

HTTP/1.1 201 Created
Content-Type: application/json
ETag: "V8y4hX2mQ0cR7fP1kL9sAw"

{
  "data": {
    "id": "user_01J...",
    "externalId": "ERP-DRIVER-1042",
    "name": "Ana García López",
    "hasAccount": true,
    "email": "ana.garcia@example.com",
    "driverNif": "12345678Z",
    "phone": "+34600123456",
    "permissions": {
      "editRouteSheets": true,
      "editRouteSheetCompany": false,
      "editRouteSheetVehicle": true,
      "editRouteSheetContractor": true,
      "manageCompanies": false,
      "manageDrivers": false,
      "manageVehicles": false,
      "viewAllRouteSheets": false,
      "manageAllRouteSheets": false
    },
    "createdAt": "2026-07-28T10:15:30.000Z",
    "updatedAt": "2026-07-28T10:15:30.000Z"
  },
  "meta": {
    "requestId": "req_01J..."
  }
}

curl --request PATCH \
  https://hojasderuta.com/api/v1/drivers/user_01J... \
  --header "Authorization: Bearer hdr_live_YOUR_KEY" \
  --header "Content-Type: application/json" \
  --header 'If-Match: "V8y4hX2mQ0cR7fP1kL9sAw"' \
  --data '{
    "phone": "+34 611 222 333",
    "permissions": {
      "editRouteSheets": false,
      "manageCompanies": true,
      "manageDrivers": false,
      "manageVehicles": true,
      "viewAllRouteSheets": false,
      "manageAllRouteSheets": false
    }
  }'

curl --request POST \
  https://hojasderuta.com/api/v1/drivers/user_01J.../password \
  --header "Authorization: Bearer hdr_live_YOUR_KEY" \
  --header "Content-Type: application/json" \
  --header 'If-Match: "NEW_ETAG_FROM_PREVIOUS_RESPONSE"' \
  --data '{
    "password": "nueva-contraseña-segura"
  }'

curl --get \
  https://hojasderuta.com/api/v1/drivers \
  --header "Authorization: Bearer hdr_live_YOUR_KEY" \
  --data-urlencode "updatedAfter=2026-07-28T10:00:00.000Z" \
  --data-urlencode "limit=100"

{
  "data": [
    {
      "id": "user_01J...",
      "externalId": "ERP-DRIVER-1042",
      "name": "Ana García López",
      "updatedAt": "2026-07-28T10:15:30.000Z"
    }
  ],
  "meta": {
    "requestId": "req_01J...",
    "count": 1,
    "hasMore": false
  }
}

{
  "type": "https://hojasderuta.com/problems/plan-route-sheet-monthly-limit-reached",
  "title": "Acceso no permitido",
  "status": 403,
  "code": "plan_route_sheet_monthly_limit_reached",
  "detail": "La cuenta ha agotado las hojas disponibles este mes.",
  "requestId": "req_01J...",
  "limit": 5,
  "used": 5,
  "resetsAt": "2026-11-01T00:00:00Z"
}

curl --request POST \
  https://hojasderuta.com/api/v1/webhooks \
  --header "Authorization: Bearer hdr_live_YOUR_KEY" \
  --header "Content-Type: application/json" \
  --data '{
    "name": "ERP producción",
    "url": "https://erp.example.com/webhooks/hojas-de-ruta",
    "events": ["route_sheet.created", "route_sheet.deleted"]
  }'

{
  "id": "evt_01J...",
  "type": "route_sheet.created",
  "createdAt": "2026-10-05T09:42:18Z",
  "organizationId": "org_01J...",
  "data": {
    "id": "hr_01J...",
    "externalId": "ERP-2026-184",
    "pdfVersion": 1,
    "status": "ready"
  }
}

import { createHmac, timingSafeEqual } from "node:crypto";

export function verifyHojasWebhook(rawBody, timestamp, signatureHeader, secret) {
  const received = signatureHeader.split("v1=")[1] || "";
  const expected = createHmac("sha256", secret)
    .update(timestamp + "." + rawBody)
    .digest("hex");
  const left = Buffer.from(received, "hex");
  const right = Buffer.from(expected, "hex");
  return left.length === right.length && timingSafeEqual(left, right);
}