Programmatic deposits and withdrawals

import hashlib
import hmac
import json
import os
import secrets
import time
from urllib.error import HTTPError
from urllib.request import Request, urlopen

BASE_URL = os.getenv("QFEX_FUNDING_URL", "https://banker.qfex.com")
PUBLIC_KEY = os.environ["QFEX_PUBLIC_KEY"]
SECRET_KEY = os.environ["QFEX_SECRET_KEY"]


def qfex_request(path, method="GET", body=None):
    nonce = secrets.token_hex(16)
    timestamp = str(int(time.time()))
    message = f"{nonce}:{timestamp}".encode()
    signature = hmac.new(
        SECRET_KEY.encode(), message, hashlib.sha256
    ).hexdigest()

    headers = {
        "accept": "application/json",
        "x-qfex-public-key": PUBLIC_KEY,
        "x-qfex-hmac-signature": signature,
        "x-qfex-nonce": nonce,
        "x-qfex-timestamp": timestamp,
    }
    data = None
    if body is not None:
        headers["content-type"] = "application/json"
        data = json.dumps(body).encode()

    request = Request(BASE_URL + path, data=data, headers=headers, method=method)
    try:
        with urlopen(request) as response:
            response_body = response.read()
            return json.loads(response_body) if response_body else None
    except HTTPError as error:
        detail = error.read().decode()
        raise RuntimeError(f"QFEX returned {error.code}: {detail}") from error

import crypto from "node:crypto";

const baseUrl = process.env.QFEX_FUNDING_URL ?? "https://banker.qfex.com";
const publicKey = process.env.QFEX_PUBLIC_KEY;
const secretKey = process.env.QFEX_SECRET_KEY;

if (!publicKey || !secretKey) {
  throw new Error("Set QFEX_PUBLIC_KEY and QFEX_SECRET_KEY");
}

async function qfexRequest(path, { method = "GET", body } = {}) {
  const nonce = crypto.randomBytes(16).toString("hex");
  const timestamp = Math.floor(Date.now() / 1000).toString();
  const signature = crypto
    .createHmac("sha256", secretKey)
    .update(`${nonce}:${timestamp}`)
    .digest("hex");

  const response = await fetch(`${baseUrl}${path}`, {
    method,
    headers: {
      accept: "application/json",
      ...(body === undefined ? {} : { "content-type": "application/json" }),
      "x-qfex-public-key": publicKey,
      "x-qfex-hmac-signature": signature,
      "x-qfex-nonce": nonce,
      "x-qfex-timestamp": timestamp,
    },
    body: body === undefined ? undefined : JSON.stringify(body),
  });

  const text = await response.text();
  if (!response.ok) {
    throw new Error(`QFEX returned ${response.status}: ${text}`);
  }
  return text ? JSON.parse(text) : undefined;
}