@njia/cli
v0.1.0
Published
Njia CLI — stream mobile money events and forward signed webhooks to localhost. No ngrok.
Maintainers
Readme
@njia/cli
Stream mobile money events and forward signed webhooks to localhost. No ngrok.
npm install -g @njia/cli
export NJIA_API_KEY=sk_test_njia_...
njia listen --forward-to http://localhost:3000/webhooksnjia listen holds an SSE connection to the Njia API and replays every event
to your local server as a signed webhook POST, printing each delivery's status
and latency. Your handler verifies the signature exactly as it would in
production, so the code path you test is the code path you ship.
Commands
| | |
|---|---|
| njia listen --forward-to <url> | Stream events and forward them locally |
| njia trigger [phone] | Create a test payment (defaults to the always-succeeds number) |
| njia payments | List recent payments |
Magic test numbers
Pass one to njia trigger to exercise a specific failure:
| Phone | Behaviour |
|---|---|
| 254700000000 | Succeeds after ~2s |
| 254700000001 | User cancels the STK prompt (code 1032) |
| 254700000002 | DS timeout after ~8s (code 1037) |
| 254700000003 | Insufficient funds (code 1) |
| 254700000004 | Succeeds slowly (~10s) — tests your polling patience |
| 254700000005 | Succeeds, webhook delivered twice — tests your idempotent consumer |
Verifying forwarded events
Deliveries are signed Stripe-style:
Njia-Signature: t=1784281914,v1=ca7116… HMAC-SHA256 of "t.body"Locally the CLI signs with NJIA_LOCAL_WEBHOOK_SECRET (default
whsec_local_dev) so you can verify without a registered endpoint:
import { verifyWebhookSignature } from "@njia/sdk";
const ok = verifyWebhookSignature({
payload: rawBody, // the raw string, not the parsed object
header: req.headers["njia-signature"],
secret: process.env.NJIA_LOCAL_WEBHOOK_SECRET ?? "whsec_local_dev",
});Environment
| Variable | Default | |
|---|---|---|
| NJIA_API_KEY | — | Required. Your sk_test_… or sk_live_… key |
| NJIA_BASE_URL | https://api.njia.dev | Point at http://localhost:4400 when self-hosting |
| NJIA_LOCAL_WEBHOOK_SECRET | whsec_local_dev | Secret used to sign forwarded events |
Links
- Documentation
@njia/sdk— the typed client- Source
MIT
