BusinessDocument — Peppol UBL invoice

: "${BIZZLINK_API_TOKEN:?BIZZLINK_API_TOKEN not set}"
: "${BIZZLINK_HMAC_SECRET:?BIZZLINK_HMAC_SECRET not set}"

TIMESTAMP=$(date +%s)
PATH_AND_QUERY="/bizzlink/api/v1/documents/business-documents"
BODY=$(cat <<'EOF'
{
  "data": {
    "type": "business-documents",
    "attributes": {
      "@type": "InvoiceDocument",
      "documentId": "INV-2026-00042",
      "issueDate": "2026-05-05",
      "typeCode": "COMMERCIAL_INVOICE",
      "currency": "EUR",
      "dueDate": "2026-06-04",
      "buyerReference": "PO-7788",
      "paymentTermsText": "Net 30 days",
      "seller": {
        "name": "Vigasoft S.à r.l.-S.",
        "vatId": "LU12345678",
        "electronicAddress": "LU12345678",
        "electronicAddressSchemeId": "9938",
        "address": {
          "street1": "9, rue Marcel Schintgen",
          "city": "Lamadelaine",
          "postCode": "L-4889",
          "countryCode": "LU"
        }
      },
      "buyer": {
        "name": "ACME Belgium SA",
        "vatId": "BE0123456789",
        "electronicAddress": "BE0123456789",
        "electronicAddressSchemeId": "9925",
        "address": {
          "street1": "Avenue Louise 100",
          "city": "Bruxelles",
          "postCode": "1050",
          "countryCode": "BE"
        }
      },
      "payment": {
        "paymentMeansCode": "SEPA_CREDIT_TRANSFER",
        "remittanceInformation": "INV-2026-00042",
        "accounts": [
          { "iban": "LU000000000000000000", "bic": "BCEELULL", "accountName": "Vigasoft" }
        ]
      },
      "taxBreakdown": [
        { "categoryCode": "S", "rate": 21.00,
          "taxableAmount": { "amount": 1000.00, "currency": "EUR" } }
      ],
      "lines": [
        { "id": "1", "quantity": 10, "unitCode": "C62",
          "netUnitPrice": { "amount": 100.00, "currency": "EUR" },
          "vatCategoryCode": "S", "vatRate": 21.00,
          "itemName": "Widget" }
      ]
    }
  }
}
EOF
)

BODY_HASH=$(printf '%s' "${BODY}" | openssl dgst -sha256 -hex | sed 's/^.* //')
SIGNATURE=$(printf '%s' "${TIMESTAMP}.POST.${PATH_AND_QUERY}.${BODY_HASH}" | \
  openssl dgst -sha256 -hmac "${BIZZLINK_HMAC_SECRET}" | sed 's/^.* //')

curl -X POST "https://gateway.vigasoft.lu${PATH_AND_QUERY}" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer ${BIZZLINK_API_TOKEN}" \
  -H "X-Bizzlink-Signature: t=${TIMESTAMP},v1=${SIGNATURE}" \
  -d "${BODY}"

// Maven: lu.vigasoft:bizzlink-sdk-java:0.3.1
// The SDK adds the JSON:API envelope and the "@type" discriminator for you.
import lu.vigasoft.bizzlink.sdk.BizzlinkClient;
import lu.vigasoft.bizzlink.sdk.requests.CreateAndSendBusinessDocumentRequest;
import lu.vigasoft.bizzlink.api.DocumentApi;
import lu.vigasoft.bizzlink.model.*;
import java.time.LocalDate;
import java.math.BigDecimal;

try (BizzlinkClient client = BizzlinkClient.builder()
        .apiToken(System.getenv("BIZZLINK_API_TOKEN"))
        .hmacSecret(System.getenv("BIZZLINK_HMAC_SECRET"))
        .build()) {

    var response = client.api(DocumentApi::new).createAndSendBusinessDocument(
        CreateAndSendBusinessDocumentRequest.forInvoice(inv -> inv
            .documentId("INV-2026-00042")
            .issueDate(LocalDate.of(2026, 5, 5))
            .typeCode(InvoiceDocument.TypeCodeEnum.COMMERCIAL_INVOICE)
            .currency(CurrencyCode.EUR)
            .dueDate(LocalDate.of(2026, 6, 4))
            .buyerReference("PO-7788")
            .paymentTermsText("Net 30 days")
            .seller(new Party()
                .name("Vigasoft S.à r.l.-S.")
                .vatId("LU12345678")
                .electronicAddress("LU12345678")
                .electronicAddressSchemeId(EndpointSchemeId.LU_VAT)
                .address(new Address()
                    .street1("9, rue Marcel Schintgen")
                    .city("Lamadelaine")
                    .postCode("L-4889")
                    .countryCode(CountryCode.LU)))
            .buyer(new Party()
                .name("ACME Belgium SA")
                .vatId("BE0123456789")
                .electronicAddress("BE0123456789")
                .electronicAddressSchemeId(EndpointSchemeId.BE_VAT)
                .address(new Address()
                    .street1("Avenue Louise 100").city("Bruxelles")
                    .postCode("1050")
                    .countryCode(CountryCode.BE)))
            .payment(new PaymentInfo()
                .paymentMeansCode(PaymentMeansCode.SEPA_CREDIT_TRANSFER)
                .remittanceInformation("INV-2026-00042")
                .addAccountsItem(new BankAccount()
                    .iban("LU000000000000000000")
                    .bic("BCEELULL")
                    .accountName("Vigasoft")))
            .addTaxBreakdownItem(new TaxBreakdown()
                .categoryCode(VatCategoryCode.S)
                .rate(new BigDecimal("21.00"))
                .taxableAmount(new Money().amount(new BigDecimal("1000.00")).currency(CurrencyCode.EUR)))
            .addLinesItem(new LineItem()
                .id("1")
                .quantity(new BigDecimal("10"))
                .unitCode(UnitCode.C62)
                .netUnitPrice(new Money().amount(new BigDecimal("100.00")).currency(CurrencyCode.EUR))
                .vatCategoryCode(VatCategoryCode.S)
                .vatRate(new BigDecimal("21.00"))
                .itemName("Widget"))));

    System.out.println("Document ID: " + response.getData().getId());
}

import hashlib
import hmac
import json
import os
import time
import requests

API_BASE       = "https://gateway.vigasoft.lu"
PATH_AND_QUERY = "/bizzlink/api/v1/documents/business-documents"
API_TOKEN      = os.environ["BIZZLINK_API_TOKEN"]
HMAC_SECRET    = os.environ["BIZZLINK_HMAC_SECRET"]

invoice = {
    "data": {
        "type": "business-documents",
        "attributes": {
            "@type": "InvoiceDocument",
            "documentId": "INV-2026-00042",
            "issueDate":  "2026-05-05",
            "typeCode":   "COMMERCIAL_INVOICE",
            "currency":   "EUR",
            "dueDate":    "2026-06-04",
            "buyerReference":    "PO-7788",
            "paymentTermsText":  "Net 30 days",
            "seller": {
                "name":  "Vigasoft S.à r.l.-S.",
                "vatId": "LU12345678",
                "electronicAddress":         "LU12345678",
                "electronicAddressSchemeId": "9938",
                "address": {
                    "street1": "9, rue Marcel Schintgen",
                    "city":    "Lamadelaine",
                    "postCode":    "L-4889",
                    "countryCode": "LU",
                },
            },
            "buyer": {
                "name":  "ACME Belgium SA",
                "vatId": "BE0123456789",
                "electronicAddress":         "BE0123456789",
                "electronicAddressSchemeId": "9925",
                "address": {
                    "street1": "Avenue Louise 100",
                    "city":    "Bruxelles",
                    "postCode": "1050",
                    "countryCode": "BE",
                },
            },
            "payment": {
                "paymentMeansCode":      "SEPA_CREDIT_TRANSFER",
                "remittanceInformation": "INV-2026-00042",
                "accounts": [
                    {"iban": "LU000000000000000000", "bic": "BCEELULL", "accountName": "Vigasoft"},
                ],
            },
            "taxBreakdown": [{
                "categoryCode": "S",
                "rate":         21.00,
                "taxableAmount": {"amount": 1000.00, "currency": "EUR"},
            }],
            "lines": [{
                "id":       "1",
                "quantity": 10,
                "unitCode": "C62",
                "netUnitPrice":    {"amount": 100.00, "currency": "EUR"},
                "vatCategoryCode": "S",
                "vatRate":         21.00,
                "itemName":        "Widget",
            }],
        },
    },
}

# Serialize once — same bytes are hashed and sent
body = json.dumps(invoice, separators=(",", ":")).encode()

timestamp = int(time.time())
body_hash = hashlib.sha256(body).hexdigest()
payload   = f"{timestamp}.POST.{PATH_AND_QUERY}.{body_hash}".encode()
signature = hmac.new(HMAC_SECRET.encode(), payload, hashlib.sha256).hexdigest()

response = requests.post(
    f"{API_BASE}{PATH_AND_QUERY}",
    headers={
        "Content-Type":         "application/json",
        "Authorization":        f"Bearer {API_TOKEN}",
        "X-Bizzlink-Signature": f"t={timestamp},v1={signature}",
    },
    data=body,
)
print(response.json())

// Node.js 18+ (built-in fetch + crypto)
import crypto from 'node:crypto';

const API_BASE       = 'https://gateway.vigasoft.lu';
const PATH_AND_QUERY = '/bizzlink/api/v1/documents/business-documents';
const API_TOKEN      = process.env.BIZZLINK_API_TOKEN;
const HMAC_SECRET    = process.env.BIZZLINK_HMAC_SECRET;

const invoice = {
  data: {
    type: 'business-documents',
    attributes: {
      '@type': 'InvoiceDocument',
      documentId: 'INV-2026-00042',
      issueDate:  '2026-05-05',
      typeCode:   'COMMERCIAL_INVOICE',
      currency:   'EUR',
      dueDate:    '2026-06-04',
      buyerReference:   'PO-7788',
      paymentTermsText: 'Net 30 days',
      seller: {
        name:  'Vigasoft S.à r.l.-S.',
        vatId: 'LU12345678',
        electronicAddress:         'LU12345678',
        electronicAddressSchemeId: '9938',
        address: {
          street1: '9, rue Marcel Schintgen',
          city: 'Lamadelaine',
          postCode: 'L-4889',
          countryCode: 'LU',
        },
      },
      buyer: {
        name:  'ACME Belgium SA',
        vatId: 'BE0123456789',
        electronicAddress:         'BE0123456789',
        electronicAddressSchemeId: '9925',
        address: {
          street1: 'Avenue Louise 100', city: 'Bruxelles',
          postCode: '1050',
          countryCode: 'BE',
        },
      },
      payment: {
        paymentMeansCode: 'SEPA_CREDIT_TRANSFER',
        remittanceInformation: 'INV-2026-00042',
        accounts: [
          { iban: 'LU000000000000000000', bic: 'BCEELULL', accountName: 'Vigasoft' },
        ],
      },
      taxBreakdown: [{
        categoryCode: 'S',
        rate: 21.00,
        taxableAmount: { amount: 1000.00, currency: 'EUR' },
      }],
      lines: [{
        id: '1',
        quantity: 10,
        unitCode: 'C62',
        netUnitPrice: { amount: 100.00, currency: 'EUR' },
        vatCategoryCode: 'S',
        vatRate: 21.00,
        itemName: 'Widget',
      }],
    },
  },
};

// Serialize once — same bytes are hashed and sent
const body = JSON.stringify(invoice);

const timestamp = Math.floor(Date.now() / 1000);
const bodyHash  = crypto.createHash('sha256').update(body).digest('hex');
const payload   = `${timestamp}.POST.${PATH_AND_QUERY}.${bodyHash}`;
const signature = crypto.createHmac('sha256', HMAC_SECRET)
  .update(payload).digest('hex');

const response = await fetch(`${API_BASE}${PATH_AND_QUERY}`, {
  method: 'POST',
  headers: {
    'Content-Type':         'application/json',
    'Authorization':        `Bearer ${API_TOKEN}`,
    'X-Bizzlink-Signature': `t=${timestamp},v1=${signature}`,
  },
  body,
});
console.log(await response.json());

<?php
// composer require guzzlehttp/guzzle
use GuzzleHttp\Client;

$apiBase      = 'https://gateway.vigasoft.lu';
$pathAndQuery = '/bizzlink/api/v1/documents/business-documents';
$apiToken     = getenv('BIZZLINK_API_TOKEN');
$hmacSecret   = getenv('BIZZLINK_HMAC_SECRET');

$invoice = [
    'data' => [
        'type' => 'business-documents',
        'attributes' => [
            '@type'       => 'InvoiceDocument',
            'documentId'  => 'INV-2026-00042',
            'issueDate'   => '2026-05-05',
            'typeCode'    => 'COMMERCIAL_INVOICE',
            'currency'    => 'EUR',
            'dueDate'     => '2026-06-04',
            'buyerReference'   => 'PO-7788',
            'paymentTermsText' => 'Net 30 days',
            'seller' => [
                'name'  => 'Vigasoft S.à r.l.-S.',
                'vatId' => 'LU12345678',
                'electronicAddress'         => 'LU12345678',
                'electronicAddressSchemeId' => '9938',
                'address' => [
                    'street1' => '9, rue Marcel Schintgen',
                    'city'    => 'Lamadelaine',
                    'postCode'    => 'L-4889',
                    'countryCode' => 'LU',
                ],
            ],
            'buyer' => [
                'name'  => 'ACME Belgium SA',
                'vatId' => 'BE0123456789',
                'electronicAddress'         => 'BE0123456789',
                'electronicAddressSchemeId' => '9925',
                'address' => [
                    'street1' => 'Avenue Louise 100', 'city' => 'Bruxelles',
                    'postCode' => '1050',
                    'countryCode' => 'BE',
                ],
            ],
            'payment' => [
                'paymentMeansCode'      => 'SEPA_CREDIT_TRANSFER',
                'remittanceInformation' => 'INV-2026-00042',
                'accounts' => [
                    ['iban' => 'LU000000000000000000', 'bic' => 'BCEELULL', 'accountName' => 'Vigasoft'],
                ],
            ],
            'taxBreakdown' => [[
                'categoryCode'  => 'S',
                'rate'          => 21.00,
                'taxableAmount' => ['amount' => 1000.00, 'currency' => 'EUR'],
            ]],
            'lines' => [[
                'id'       => '1',
                'quantity' => 10,
                'unitCode' => 'C62',
                'netUnitPrice'    => ['amount' => 100.00, 'currency' => 'EUR'],
                'vatCategoryCode' => 'S',
                'vatRate'         => 21.00,
                'itemName'        => 'Widget',
            ]],
        ],
    ],
];

// Serialize once — same bytes are hashed and sent
$body = json_encode($invoice, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);

$timestamp = time();
$bodyHash  = hash('sha256', $body);
$payload   = "{$timestamp}.POST.{$pathAndQuery}.{$bodyHash}";
$signature = hash_hmac('sha256', $payload, $hmacSecret);

$client   = new Client();
$response = $client->post($apiBase . $pathAndQuery, [
    'headers' => [
        'Content-Type'         => 'application/json',
        'Authorization'        => "Bearer {$apiToken}",
        'X-Bizzlink-Signature' => "t={$timestamp},v1={$signature}",
    ],
    'body' => $body,
]);
echo $response->getBody();