Web offerwall API

// Node.js backend only. Never bundle this with browser code.
const { createHash } = require('node:crypto');

function offerwallUrl(authenticatedUserId, appId, appKey) {
  const payload = authenticatedUserId + '-' + appId;
  const checksum = createHash('md5')
    .update(payload + '-' + appKey).digest('hex');
  const uid = payload + '-' + checksum;
  return 'https://www.rapidoreach.com/ofw/?userId='
    + encodeURIComponent(uid);
}

// In your authenticated server route, pass the resulting URL
// to your page template. Render it as the iframe src:
// <iframe title="Earn rewards" src="SERVER_GENERATED_URL"
//   style="width:100%;min-height:700px;border:0"></iframe>

// Node.js 20+ backend only; keep the app key in server config.
// Resolve user.id from the session and profile fields with consent.
async function fetchSurveys(user, appId, appKey) {
  const response = await fetch('https://www.rapidoreach.com/getallsurveys-api', {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json',
      'X-RapidoReach-Api-Key': appKey,
    },
    body: JSON.stringify({
      UserId: user.id, AppId: appId, IpAddress: user.publicIp,
      City: user.city, CountryLanguageCode: user.locale,
    }),
    signal: AbortSignal.timeout(10000),
  });
  const result = await response.json();
  if (result.ErrorCode === 'NOT_FOUND') return [];
  if (!response.ok || result.ErrorCode !== 'SUCCESS') {
    throw new Error('Survey inventory unavailable');
  }
  return (result.Data || []).map(survey => ({
    url: survey.SurveyUrl, // Open unchanged; never use Link.
    reward: survey.Reward, minutes: survey.LOI,
    currency: survey.vc_name,
  }));
}