Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...

{
  "email": "your@email.com",
  "password": "your-password"
}

{
  "success": true,
  "token": "eyJhbGci...",
  "user": { "id": 42, "email": "your@email.com", "role": "advertiser" }
}

X-Api-Key: adtks_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxx
# or
Authorization: Bearer adtks_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxx

# Step 1 — get secret + QR
curl -X POST https://adverteks.com/api/auth/mfa/setup \
  -H "Authorization: Bearer YOUR_JWT" \
  -H "Content-Type: application/json"
# → returns: {"secret":"BASE32SECRET","qr":"otpauth://totp/..."}

# Step 2 — confirm with first TOTP code to activate
curl -X POST https://adverteks.com/api/auth/mfa/verify \
  -H "Content-Type: application/json" \
  -d '{"email":"you@example.com","mfa_code":"123456"}'

const crypto = require('crypto');
const https  = require('https');

const API_KEY     = 'adtks_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxx';
const HMAC_SECRET = 'your-hmac-secret-from-onboarding';
const HOST        = 'adverteks.com';

function buildSignatureHeaders(bodyString, apiKey, secret) {
  const sig = crypto
    .createHmac('sha256', secret)
    .update(bodyString, 'utf8')
    .digest('hex');
  return {
    'Content-Type':       'application/json',
    'X-Api-Key':          apiKey,
    'X-OpenRTB-Version':  '2.5',
    'X-Signature-SHA256': `sha256=${sig}`,
  };
}

async function sendBidRequest(bidRequest) {
  const body    = JSON.stringify(bidRequest);
  const headers = buildSignatureHeaders(body, API_KEY, HMAC_SECRET);

  const res = await fetch(`https://${HOST}/api/rtb/bid`, {
    method:  'POST',
    headers,
    body,
  });

  if (res.status === 204) return null;           // no-bid
  return res.json();
}

import hmac
import hashlib
import json
import urllib.request

API_KEY     = 'adtks_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxx'
HMAC_SECRET = 'your-hmac-secret-from-onboarding'
ENDPOINT    = 'https://adverteks.com/api/rtb/bid'

def build_signature_headers(body_bytes: bytes, api_key: str, secret: str) -> dict:
    sig = hmac.new(
        secret.encode('utf-8'),
        body_bytes,
        hashlib.sha256
    ).hexdigest()
    return {
        'Content-Type':       'application/json',
        'X-Api-Key':          api_key,
        'X-OpenRTB-Version':  '2.5',
        'X-Signature-SHA256': f'sha256={sig}',
    }

def send_bid_request(bid_request: dict):
    body    = json.dumps(bid_request).encode('utf-8')
    headers = build_signature_headers(body, API_KEY, HMAC_SECRET)

    req = urllib.request.Request(ENDPOINT, data=body, headers=headers, method='POST')
    try:
        with urllib.request.urlopen(req, timeout=0.2) as resp:
            if resp.status == 200:
                return json.loads(resp.read())
            return None  # 204 no-bid
    except urllib.error.HTTPError as e:
        if e.code == 204:
            return None  # no-bid
        raise

# Build Prebid.js bundle including the Adverteks adapter:
gulp build --modules=adverteksBidAdapter

# Or use the pre-built bundle from Adverteks CDN:
# https://adverteks.com/sdk/adverteksBidAdapter.js

const adUnits = [{
  code: 'div-header-banner',
  mediaTypes: {
    banner: { sizes: [[728, 90], [300, 250]] }
  },
  bids: [{
    bidder: 'adverteks',
    params: {
      publisherId: 42,        // Your Adverteks publisher user ID (required)
      siteId: 'site-001',     // Optional: your registered site ID
      floorCpm: 0.50          // Optional: minimum CPM you'll accept
    }
  }]
}];

pbjs.addAdUnits(adUnits);
pbjs.requestBids({ bidsBackHandler: sendAdServerRequest, timeout: 1000 });

https://adverteks.com/sdk/adverteksBidAdapter.js

{ bidder: 'adverteks', params: { publisherId: 42 } }

<!-- Adverteks Ad Unit -->
<div id="adtks-zone-YOUR_ZONE_KEY"></div>
<script src="https://adverteks.com/ad.js?z=YOUR_ZONE_KEY" async></script>

<!-- 300x250 Medium Rectangle -->
<div id="adtks-zone-zk_a3f9b2c1" style="width:300px;height:250px;overflow:hidden;"></div>
<script src="https://adverteks.com/ad.js?z=zk_a3f9b2c1" async></script>

<!-- 728x90 Leaderboard -->
<div id="adtks-zone-zk_b8e1d4f2" style="width:728px;height:90px;overflow:hidden;"></div>
<script src="https://adverteks.com/ad.js?z=zk_b8e1d4f2" async></script>

<!-- 320x50 Mobile Banner -->
<div id="adtks-zone-zk_c5a7e3b9" style="width:320px;height:50px;overflow:hidden;"></div>
<script src="https://adverteks.com/ad.js?z=zk_c5a7e3b9" async></script>

<!-- Header leaderboard -->
<div id="adtks-zone-zk_b8e1d4f2" style="width:728px;height:90px;"></div>
<script src="https://adverteks.com/ad.js?z=zk_b8e1d4f2" async></script>

<!-- Sidebar 300x250 -->
<div id="adtks-zone-zk_a3f9b2c1" style="width:300px;height:250px;"></div>
<script src="https://adverteks.com/ad.js?z=zk_a3f9b2c1" async></script>

<!-- Mobile sticky (hidden on desktop via CSS) -->
<div id="adtks-zone-zk_c5a7e3b9" style="width:320px;height:50px;"></div>
<script src="https://adverteks.com/ad.js?z=zk_c5a7e3b9" async></script>

<div id="adtks-zone-zk_a3f9b2c1" style="width:300px;height:250px;"></div>

<script>
(function() {
  var container = document.getElementById('adtks-zone-zk_a3f9b2c1');
  var observer  = new IntersectionObserver(function(entries) {
    if (entries[0].isIntersecting) {
      var s    = document.createElement('script');
      s.src    = 'https://adverteks.com/ad.js?z=zk_a3f9b2c1';
      s.async  = true;
      document.body.appendChild(s);
      observer.disconnect();
    }
  }, { rootMargin: '200px' });
  observer.observe(container);
})();
</script>

<div style="max-width:728px; width:100%; text-align:center; margin:0 auto;">
  <div id="adtks-zone-zk_b8e1d4f2" style="width:728px;height:90px;display:inline-block;"></div>
  <script src="https://adverteks.com/ad.js?z=zk_b8e1d4f2" async></script>
</div>

curl -s https://adverteks.com/api/publisher/ad-tags \
  -H "Authorization: Bearer YOUR_JWT_TOKEN" | jq '.ad_tags[] | {zone_key, ad_format}'

[
  { "zone_key": "zk_a3f9b2c1", "ad_format": "300x250" },
  { "zone_key": "zk_b8e1d4f2", "ad_format": "728x90" },
  { "zone_key": "zk_c5a7e3b9", "ad_format": "320x50" }
]

Content-Security-Policy:
  script-src 'self' https://adverteks.com;
  frame-src  'self' https://adverteks.com;
  img-src    'self' https://adverteks.com data:;

{
  "success": true,
  "tools": {
    "referral_url": "https://adverteks.com/?ref=ADTK-abc123",
    "banners": [
      {"size": "728x90", "html": "<a href='...'><img src='...'></a>"}
    ],
    "text_links": [
      {"label": "Monetize your traffic with Adverteks", "url": "https://adverteks.com/?ref=ADTK-abc123"}
    ]
  }
}

{
  "event": "impression",
  "timestamp": 1742656000000,
  "data": {
    "impression_id": "imp-9f3c2a1b",
    "auction_id":   "7f3d2a11-c4b8-4e9a-b2f1-a3c9e8d72f01",
    "campaign_id":   101,
    "creative_id":   "cr-4d9a2f",
    "ad_format":     "300x250",
    "clearing_price": 1.42
  }
}

const crypto = require('crypto');

function verifyWebhook(rawBody, signature, secret) {
  const expected = crypto
    .createHmac('sha256', secret)
    .update(rawBody)
    .digest('hex');
  return crypto.timingSafeEqual(
    Buffer.from(expected),
    Buffer.from(signature)
  );
}

const crypto = require('crypto');
const express = require('express');
const app = express();

// Raw body needed for HMAC verification
app.use('/webhooks/adverteks', express.raw({ type: 'application/json' }));

app.post('/webhooks/adverteks', (req, res) => {
  const sig = req.headers['x-adverteks-signature'];
  const secret = process.env.ADVERTEKS_WEBHOOK_SECRET;

  const expected = crypto
    .createHmac('sha256', secret)
    .update(req.body)
    .digest('hex');

  if (!crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(sig))) {
    return res.status(401).send('Invalid signature');
  }

  const event = JSON.parse(req.body);
  console.log(`Received ${event.event}:`, event.data);

  // Handle by type
  if (event.event === 'bid.win') {
    // Track win in your system
  } else if (event.event === 'budget.depleted') {
    // Trigger budget top-up alert
  }

  res.status(200).send('OK');
});

app.listen(3000);

import hmac
import hashlib
import json
from flask import Flask, request, jsonify

app = Flask(__name__)

def verify_signature(payload: bytes, signature: str, secret: str) -> bool:
    """Verify HMAC-SHA256 signature from X-Adverteks-Signature header"""
    expected = hmac.new(
        secret.encode('utf-8'),
        payload,
        hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(expected, signature)

@app.route('/webhooks/adverteks', methods=['POST'])
def handle_webhook():
    # Get signature from header (format: sha256=...)
    signature = request.headers.get('X-Adverteks-Signature', '')
    if signature.startswith('sha256='):
        signature = signature[7:]  # Remove 'sha256=' prefix

    secret = request.headers.get('X-Webhook-Secret') or 'your_secret_here'
    raw_body = request.get_data()

    # Verify signature if secret is configured
    if signature and not verify_signature(raw_body, signature, secret):
        return jsonify({'error': 'Invalid signature'}), 401

    event = json.loads(raw_body)
    event_type = event.get('event')
    data = event.get('data', {})

    print(f"Received {event_type}:", data)

    # Handle by event type
    if event_type == 'impression.served':
        # Track impression - data contains impression.id, ad_unit_id, campaign_id
        pass
    elif event_type == 'click.tracked':
        # Track click - data contains click.id, impression_id, url
        pass
    elif event_type == 'conversion.recorded':
        # Track conversion - data contains conversion.id, value, currency
        pass
    elif event_type == 'campaign.budget_exhausted':
        # Alert: campaign needs more budget
        pass
    elif event_type == 'payout.completed':
        # Payment sent to publisher
        pass
    elif event_type == 'publisher.site_approved':
        # Site is now live
        pass

    return jsonify({'status': 'ok'}), 200

if __name__ == '__main__':
    app.run(port=3000, debug=False)

<?php
namespace App\Http\Controllers;

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Log;
use Illuminate\Support\Facades\Hash;

class WebhookController extends Controller
{
    /**
     * Handle incoming Adverteks webhook
     */
    public function handleAdverteks(Request $request)
    {
        // Get signature from header (format: sha256=...)
        $signature = $request->header('X-Adverteks-Signature', '');
        if (str_starts_with($signature, 'sha256=')) {
            $signature = substr($signature, 7);
        }

        // Get raw body for signature verification
        $rawBody = $request->getContent();
        $secret = config('services.adverteks.webhook_secret');

        // Verify HMAC-SHA256 signature
        if ($signature && $secret) {
            $expected = hash_hmac('sha256', $rawBody, $secret);
            if (!hash_equals($expected, $signature)) {
                return response()->json(['error' => 'Invalid signature'], 401);
            }
        }

        $event = json_decode($rawBody, true);
        $eventType = $event['event'] ?? null;
        $data = $event['data'] ?? [];

        Log::info("Adverteks webhook: {$eventType}", $data);

        // Handle by event type
        match ($eventType) {
            'impression.served' => $this->handleImpression($data),
            'click.tracked' => $this->handleClick($data),
            'conversion.recorded' => $this->handleConversion($data),
            'campaign.budget_exhausted' => $this->handleBudgetExhausted($data),
            'payout.completed' => $this->handlePayout($data),
            'publisher.site_approved' => $this->handleSiteApproved($data),
            default => null,
        };

        return response()->json(['status' => 'ok']);
    }

    private function handleImpression(array $data): void
    {
        // $data['impression']['id'], $data['impression']['campaign_id'], etc.
    }

    private function handleClick(array $data): void
    {
        // $data['click']['id'], $data['click']['url'], etc.
    }

    private function handleConversion(array $data): void
    {
        // $data['conversion']['value'], $data['conversion']['currency'], etc.
    }

    private function handleBudgetExhausted(array $data): void
    {
        // Notify advertiser to add funds
    }

    private function handlePayout(array $data): void
    {
        // Update publisher balance
    }

    private function handleSiteApproved(array $data): void
    {
        // Site is now live, start serving ads
    }
}

{
  "success": false,
  "message": "Human-readable error description",
  "code": "MACHINE_READABLE_CODE"
}

curl -X POST https://adverteks.com/api/rtb/bid \
  -H "Content-Type: application/json" \
  -H "X-Api-Key: adtks_test_your_sandbox_key" \
  -H "X-OpenRTB-Version: 2.5" \
  -d '{
    "id": "test-auction-001",
    "imp": [{"id": "1", "banner": {"w": 300, "h": 250}, "bidfloor": 0.50}],
    "tmax": 150
  }'

adverteks.com, pub-XXXXXXXXXXXXXXXX, DIRECT, f08c47fec0942fa0

https://adverteks.com/.well-known/sellers.json

adverteks.com, pub-XXXXXXXXXXXXXXXX, DIRECT, f08c47fec0942fa0

curl -s -X POST https://adverteks.com/api/rtb/bid \
  -H "Content-Type: application/json" \
  -H "X-Api-Key: adtks_live_YOUR_API_KEY" \
  -H "X-OpenRTB-Version: 2.5" \
  -d '{
    "id": "7f3d2a11-c4b8-4e9a-b2f1-a3c9e8d72f01",
    "imp": [{
      "id": "1",
      "banner": { "w": 300, "h": 250, "pos": 1 },
      "bidfloor": 0.50,
      "bidfloorcur": "USD"
    }],
    "site": {
      "page": "https://example.com/article",
      "domain": "example.com",
      "cat": ["IAB1"]
    },
    "device": {
      "geo": { "lat": 40.7128, "lon": -74.0060, "country": "USA", "city": "New York" },
      "ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)",
      "devicetype": 2
    },
    "user": { "id": "user-abc123" },
    "tmax": 150
  }'

#!/usr/bin/env bash
API_KEY="adtks_live_YOUR_API_KEY"
HMAC_SECRET="your-hmac-secret"
ENDPOINT="https://adverteks.com/api/rtb/bid"

BODY='{
  "id": "auction-12345",
  "imp": [{"id": "1", "banner": {"w": 728, "h": 90}, "bidfloor": 1.00}],
  "tmax": 150
}'

# Compute HMAC-SHA256 over the raw body
SIG=$(printf '%s' "$BODY" | openssl dgst -sha256 -hmac "$HMAC_SECRET" -hex | awk '{print "sha256="$2}')

curl -s -X POST "$ENDPOINT" \
  -H "Content-Type: application/json" \
  -H "X-Api-Key: $API_KEY" \
  -H "X-OpenRTB-Version: 2.5" \
  -H "X-Signature-SHA256: $SIG" \
  -d "$BODY"

curl -s -X POST "https://adverteks.com/api/rtb/win?aid=auction-12345&price=1.42" \
  -H "X-Api-Key: adtks_live_YOUR_API_KEY"

const crypto = require('crypto');

const CONFIG = {
  apiKey:     process.env.ADVERTEKS_API_KEY,
  hmacSecret: process.env.ADVERTEKS_HMAC_SECRET,
  host:       'adverteks.com',
};

// ── Build auth headers ──────────────────────────────────────────────────────
function authHeaders(bodyStr) {
  const sig = crypto
    .createHmac('sha256', CONFIG.hmacSecret)
    .update(bodyStr, 'utf8')
    .digest('hex');
  return {
    'Content-Type':       'application/json',
    'X-Api-Key':          CONFIG.apiKey,
    'X-OpenRTB-Version':  '2.5',
    'X-Signature-SHA256': `sha256=${sig}`,
  };
}

// ── Submit bid request ───────────────────────────────────────────────────────
async function bid(bidRequest) {
  const body = JSON.stringify(bidRequest);
  const res  = await fetch(`https://${CONFIG.host}/api/rtb/bid`, {
    method:  'POST',
    headers: authHeaders(body),
    body,
    signal:  AbortSignal.timeout(200),
  });
  if (res.status === 204) return null;
  if (!res.ok) throw new Error(`Bid error ${res.status}: ${await res.text()}`);
  return res.json();
}

// ── Send win notice ──────────────────────────────────────────────────────────
async function sendWin(auctionId, clearingPriceCpm) {
  const res = await fetch(
    `https://${CONFIG.host}/api/rtb/win?aid=${auctionId}&price=${clearingPriceCpm}`,
    { method: 'POST', headers: { 'X-Api-Key': CONFIG.apiKey } }
  );
  if (!res.ok) console.error('Win notice failed:', res.status);
}

// ── Track impression ─────────────────────────────────────────────────────────
async function trackImpression(auctionId) {
  const body = JSON.stringify({ auction_id: auctionId, event_type: 'impression' });
  await fetch(`https://${CONFIG.host}/api/rtb/event`, {
    method: 'POST', headers: authHeaders(body), body,
  });
}

// ── Example usage ────────────────────────────────────────────────────────────
(async () => {
  const bidRequest = {
    id:  crypto.randomUUID(),
    imp: [{ id: '1', banner: { w: 300, h: 250 }, bidfloor: 0.5 }],
    site: { page: 'https://example.com/', domain: 'example.com' },
    device: { geo: { lat: 37.77, lon: -122.41, country: 'USA' } },
    user: { id: 'user-seg-xyz' },
    tmax: 150,
  };

  const response = await bid(bidRequest);
  if (!response) { console.log('No bid'); return; }

  const bidItem     = response.seatbid[0].bid[0];
  const clearingCpm = bidItem.price;
  console.log(`Won at $${clearingCpm} CPM | Creative: ${bidItem.crid}`);

  // Fire win notice and impression in parallel
  await Promise.all([
    sendWin(bidRequest.id, clearingCpm),
    trackImpression(bidRequest.id),
  ]);

  console.log('Win + impression logged');
})();

import hmac
import hashlib
import json
import os
import uuid
import urllib.request
import urllib.error
from typing import Optional

API_KEY     = os.environ['ADVERTEKS_API_KEY']
HMAC_SECRET = os.environ['ADVERTEKS_HMAC_SECRET']
BASE_URL    = 'https://adverteks.com'

# ── Build auth headers ──────────────────────────────────────────────────────
def auth_headers(body_bytes: bytes) -> dict:
    sig = hmac.new(HMAC_SECRET.encode(), body_bytes, hashlib.sha256).hexdigest()
    return {
        'Content-Type':       'application/json',
        'X-Api-Key':          API_KEY,
        'X-OpenRTB-Version':  '2.5',
        'X-Signature-SHA256': f'sha256={sig}',
    }

# ── Submit bid request ───────────────────────────────────────────────────────
def bid(bid_request: dict) -> Optional[dict]:
    body = json.dumps(bid_request, separators=(',', ':')).encode()
    req  = urllib.request.Request(
        f'{BASE_URL}/api/rtb/bid',
        data=body, headers=auth_headers(body), method='POST'
    )
    try:
        with urllib.request.urlopen(req, timeout=0.2) as r:
            return json.loads(r.read()) if r.status == 200 else None
    except urllib.error.HTTPError as e:
        if e.code == 204: return None
        raise

# ── Send win notice ──────────────────────────────────────────────────────────
def send_win(auction_id: str, clearing_price_cpm: float) -> None:
    url = f'{BASE_URL}/api/rtb/win?aid={auction_id}&price={clearing_price_cpm}'
    req = urllib.request.Request(url, method='POST',
                                 headers={'X-Api-Key': API_KEY})
    try:
        urllib.request.urlopen(req, timeout=1)
    except urllib.error.HTTPError as e:
        print(f'Win notice error: {e.code}')

# ── Track event ──────────────────────────────────────────────────────────────
def track_event(auction_id: str, event_type: str) -> None:
    body = json.dumps({'auction_id': auction_id, 'event_type': event_type}).encode()
    req  = urllib.request.Request(
        f'{BASE_URL}/api/rtb/event',
        data=body, headers=auth_headers(body), method='POST'
    )
    urllib.request.urlopen(req, timeout=1)

# ── Example usage ────────────────────────────────────────────────────────────
if __name__ == '__main__':
    bid_request = {
        'id':  str(uuid.uuid4()),
        'imp': [{'id': '1', 'banner': {'w': 300, 'h': 250}, 'bidfloor': 0.50}],
        'site': {'page': 'https://example.com/', 'domain': 'example.com'},
        'device': {'geo': {'lat': 37.77, 'lon': -122.41, 'country': 'USA'}},
        'user': {'id': 'user-xyz'},
        'tmax': 150,
    }

    response = bid(bid_request)
    if not response:
        print('No bid')
    else:
        bid_item     = response['seatbid'][0]['bid'][0]
        clearing_cpm = bid_item['price']
        print(f'Won at ${clearing_cpm:.3f} CPM | Creative: {bid_item["crid"]}')
        send_win(bid_request['id'], clearing_cpm)
        track_event(bid_request['id'], 'impression')
        print('Win + impression logged')