# Indian Payments API Documentation

# 1. How to get API Key

The user logs in to the cash register -> Developer Center -> API Key -> Create API key. API Key has a separate configuration page and is bound to a fixed IP address ("0.0.0.0" means no IP interception and filtering, and any IP can be accessed), and different API Keys can be configured to meet different needs. Please do not disclose your Access Key and Secret Key to avoid asset loss. After the Secret Key is generated, it cannot be viewed again. Please save it in time. If you forget the Secret Key, please recycle the key pair in the backstage of the merchant and apply for a new key pair.

# 1.1 How to create an API KEY

img

• Click Developer Center - API Key

• 1 Choose whether to enable the debug mode (after enabling the debug mode, if you have any errors, there will be a standard prompt message and log viewing address)

img

• 2Select API Key permissions

• 3Enter the whitelist address (0.0.0.0 means that any IP address can be accessed)

Note: (When entering the whitelist domain name, you should pay attention to using "," to isolate multiple IPs.)

• 4 click create to generate API KEY

(After the API KEY is generated, you can copy, view, edit, and delete it in the My API KEY list below. Note that the Secret key only appears once when it is generated. Please save it properly. If you forget the Secret Key, please recycle it key pair and apply for a new key pair.)

img

• Click Edit to close or open [Start Debugging] and modify API Key permissions and whitelist addresses. After modification, click Save

Note: Please wait patiently for 90 seconds for the API Key to take effect after creating or editing the API Key

# 2. How to use API Key

The current API Key is to add a parameter list in the header of the request

parameter name Parameter Description type Is it necessary
access_key Api Key access key (eg: TPhoa7ZQ) String yes
timestamp Millisecond time stamp (13 digits such as: 1679669488472) String yes
nonce UUID (36 bits such as: 02f7a04f-53cc-47d4-bb3f-fae69dab49ac) The five parts are 8 characters, 4 characters, 4 characters, 4 characters, and 12 characters, separated by "-" String yes
sign Parameter signature (eg: GXx2wYUD6UVr+zcmeCSFFPzcBLA=) String yes

# 3. Technical side parameter access process

img

# 4. How to sign the interface

# Signature instructions

API requests are very likely to be tampered with during transmission over the internet. In order to ensure that the request has not been changed, all private interfaces except the public interface (basic information, market data, etc.) must use your API Key for signature authentication to verify Check whether the parameter or parameter value has changed in transit.

A legitimate request consists of the following parts:

  • access_key: API access key;
  • secret_key: the key used for signature encryption (only visible once when applying for an API Key in the background, please copy and save it in a safe place, and cannot disclose it);
  • timestamp: The time (UTC time) when you made the request. Such as: 1632811287325 (13 digits). Including this value in a query request helps prevent third parties from intercepting your request;
  • nonce: random UUID string. Such as: 053a1b81-48a0-4bb1-96b2-60f6e509d911 (36 bits);
  • sign: The value calculated by the signature, which is used to ensure that the signature is valid and has not been tampered with;
  • All interfaces need to pass the above public parameters except secret_key in the http request header (header) . The public parameters include (access_key, timestamp, nonce, sign) and other signature parameters are subject to the API interface description.

# Signature steps

​ 1. Define a Map dictionary type object, and put the parameters in the request into it in the form of key-value

​ 2. Put access_key, timestamp, and nonce into the Map defined in the first step

​ 3. Sort the attributes in the Map in ascending order (lexicographic order) according to the ASCII code and convert the Map to a string in the form of "key1=value1&key2=value2"

​ 4. Encrypt the character string converted in the previous step with secret_key by HMAC_SHA1 and perform Base64 transcoding to obtain the value of the sign parameter. secret_key is the information in the apikey created on the cashier platform

​ 5. Add the sign value and other required parameters to the request header, and send the request to the target interface

img

# Signature Debugging Tool

  • SignUtil: The user logs in to the cash register -> Developer Center -> API Documentation -> Signature Tool to open the signature tool page (the access_key in the tool must use a valid access_key and please set the IP whitelist that allows this access_key access to 0.0.0.0, we It is strongly recommended to discard the used access_key after debugging)

  • img

    img

  • img

# 5. Interface list

# 5.1 Test interface connectivity

request method

Get

Request URL

/ping

response data

{ "version" : "1.0.1" , "timestamp" : 1688116827306 }

Response parameter description

Param type Desc
version String If this parameter is returned, all interfaces in this document can be requested normally
timestamp int64 Unix timestamp

# 5.2 Create a new collection order

request method

post

Request URL

/api/v3/ind/createCollectingOrder

request type

Header: { 'Content-Type': 'application/json;charset=utf-8'}

request header

Param Desc Sample
access_key Merchant background acquisition pFqV75X3
timestamp Unix timestamp 13 digit milliseconds 1679724896223
nonce UUID V4 794c26b0-d33c-4394-b2bb-c485eca16d9e
sign computed signature kAXyh+eerqrefyaF8dyFB0M4FVo=

request parameters

{
    "amount" : "40.20" ,
    "channelType" : "BANK" ,
    "externalOrderId" : "716134866255702461" ,
    "notifyUrl" : "http://192.168.1.135:30001/" ,
    "remark" : "123" ,
    "returnUrl" : "http://192.168.1.135:30001"
}

Description of request parameters

Param Desc Sample require
amount Receipt amount, the decimal point cannot exceed 2 digits (String) 40.20 required
channelType Payment type (String) oneof=BANK BANK required
externalOrderId Merchant order number max=64 (String) 716134866255702461 required
notifyUrl Notification URL (String, URL) http://192.168.1.135:30001 optional
remark Note max=255 (String) 123 optional
returnUrl returnAddress(String, URL) http://192.168.1.135:30001 optional

response type

Header: { 'Content-Type': 'application/json;charset=utf-8'}

response data

{
    "code" : "200" ,
    "success" : true ,
    "msg" : "Success" ,
    "msgEn" : "SUCCESS" ,
    "data" : {
        "cashierUrl" :"http://192.168.1.74:88/OCURRPAID202308220659471692687587416DOCK02OO0000000200003651?data=yMzA4MjIxNzAyNjFMWHZEWU0iLCJwYXlUeXBlIjoxMDIsInBheVR5cGVOYW1lIjoiQkFOSyIsInBheVVybCI6Imh0dHBzOi8vcmFycGF5LnRlc3QucmFycGF5LmNvbS9pbmRleC9wYXkv bWNodGVzdHBhZ2UvdHAvZGQvb3JkZXJudW0vMjMwODIyMTcwMjYxTFh2RFlNIiwidHJhZGVOb3RlIjoiMTIzIn0sImlzQ3JlYXRlT3JkZXIiOnRydWUsIm1lcmNoYW50SWQiOjE2NjMzN zEzOTk3MTAyMTYxOTQsInBheVR5cGUiOjEwMiwicmV0dXJuVXJsIjoiaHR0cDovLzE5Mi4xNjguMS4xMzU6MzAwMDEiLCJ2ZXJzaW9uIjoidjEifQ==\u0026pm=W3siY3VycmVuY3lUeXBlIjoiTVhOIi wicGF5VHlwZXMiOlt7ImNvZGUiOjEwMiwidmFsdWUiOiJCQU5LIn1dfSx7ImN1cnJlbmN5VHlwZSI6IlBFTiIsInBheVR5cGVzIjpbeyJjb2RlIjoxMDIsInZhbHVlIjoiQkFOSyJ9XX0se yJjdXJyZW5jeVR5cGUiOiJJTlIiLCJwYXlUeXBlcyI6W3siY29kZSI6MTAyLCJ2YWx1ZSI6IkJBTksifV19LHsiY3VycmVuY3lUeXBlIjoiQlJMIiwicGF5VHlwZXMiOlt7ImNvZGUiOjEw MSwidmFsdWUiOiJQSVgifV19XQ=="5LnRlc3QucmFycGF5LmNvbS9pbmRleC9wYXkvbWNodGVzdHBhZ2UvdHAvZGQvb3JkZXJudW0vMjMwODIyMTcwMjYxTFh2RFlNIiwidHJhZGVOb3RlIjoiMTIzIn0sIzzQ3JlYmlXRlT3 JkZXIiOnRydWUsIm1lcmNoYW50SWQiOjE2NjMzNzEzOTk3MTAyMTYxOTQsInBheVR5cGUiOjEwMiwicmV0dXJuVXJsIjoiaHR0cDovLzE5Mi4xNjguMS4xMzU6MzAwMDEiLCJ2ZXJzaW9uIjoidjEif Q==\u0026pm=W3siY3VycmVuY3lUeXBlIjoiTVhOIiwicGF5VHlwZXMiOlt7ImNvZGUiOjEwMiwidmFsdWUiOiJCQU5LIn1dfSx7ImN1cnJlbmN5VHlwZSI6IlBFTiIsInBheVR5cGVzIjp beyJjb2RlIjoxMDIsInZhbHVlIjoiQkFOSyJ9XX0seyJjdXJyZW5jeVR5cGUiOiJJTlIiLCJwYXlUeXBlcyI6W3siY29kZSI6MTAyLCJ2YWx1ZSI6IkJBTksifV19LHsiY3VycmVuY3lUeX BlIjoiQlJMIiwicGF5VHlwZXMiOlt7ImNvZGUiOjEwMSwidmFsdWUiOiJQSVgifV19XQ=="5LnRlc3QucmFycGF5LmNvbS9pbmRleC9wYXkvbWNodGVzdHBhZ2UvdHAvZGQvb3JkZXJudW0vMjMwODIyMTcwMjYxTFh2RFlNIiwidHJhZGVOb3RlIjoiMTIzIn0sIzzQ3JlYmlXRlT3 JkZXIiOnRydWUsIm1lcmNoYW50SWQiOjE2NjMzNzEzOTk3MTAyMTYxOTQsInBheVR5cGUiOjEwMiwicmV0dXJuVXJsIjoiaHR0cDovLzE5Mi4xNjguMS4xMzU6MzAwMDEiLCJ2ZXJzaW9uIjoidjEif Q==\u0026pm=W3siY3VycmVuY3lUeXBlIjoiTVhOIiwicGF5VHlwZXMiOlt7ImNvZGUiOjEwMiwidmFsdWUiOiJCQU5LIn1dfSx7ImN1cnJlbmN5VHlwZSI6IlBFTiIsInBheVR5cGVzIjp beyJjb2RlIjoxMDIsInZhbHVlIjoiQkFOSyJ9XX0seyJjdXJyZW5jeVR5cGUiOiJJTlIiLCJwYXlUeXBlcyI6W3siY29kZSI6MTAyLCJ2YWx1ZSI6IkJBTksifV19LHsiY3VycmVuY3lUeX BlIjoiQlJMIiwicGF5VHlwZXMiOlt7ImNvZGUiOjEwMSwidmFsdWUiOiJQSVgifV19XQ=="iOjEwMiwicmV0dXJuVXJsIjoiaHR0cDovLzE5Mi4xNjguMS4xMzU6MzAwMDEiLCJ2ZXJzaW9uIjoidjEifQ==\u0026pm=W3siY3VycmVuY3lUeXBlIjoiTVhOIiwicGF5VHlwZXMiOlt7ImNvZGUi OjEwMiwidmFsdWUiOiJCQU5LIn1dfSx7ImN1cnJlbmN5VHlwZSI6IlBFTiIsInBheVR5cGVzIjpbeyJjb2RlIjoxMDIsInZhbHVlIjoiQkFOSyJ9XX0seyJjdXJyZW5jeVR5cGUiOiJJ TlIiLCJwYXlUeXBlcyI6W3siY29kZSI6MTAyLCJ2YWx1ZSI6IkJBTksifV19LHsiY3VycmVuY3lUeXBlIjoiQlJMIiwicGF5VHlwZXMiOlt7ImNvZGUiOjEwMSwidmFsdWUiOiJQSVgifV19XQ =="iOjEwMiwicmV0dXJuVXJsIjoiaHR0cDovLzE5Mi4xNjguMS4xMzU6MzAwMDEiLCJ2ZXJzaW9uIjoidjEifQ==\u0026pm=W3siY3VycmVuY3lUeXBlIjoiTVhOIiwicGF5VHlwZXMiOlt7ImNvZGUi OjEwMiwidmFsdWUiOiJCQU5LIn1dfSx7ImN1cnJlbmN5VHlwZSI6IlBFTiIsInBheVR5cGVzIjpbeyJjb2RlIjoxMDIsInZhbHVlIjoiQkFOSyJ9XX0seyJjdXJyZW5jeVR5cGUiOiJJ TlIiLCJwYXlUeXBlcyI6W3siY29kZSI6MTAyLCJ2YWx1ZSI6IkJBTksifV19LHsiY3VycmVuY3lUeXBlIjoiQlJMIiwicGF5VHlwZXMiOlt7ImNvZGUiOjEwMSwidmFsdWUiOiJQSVgifV19XQ =="FsdWUiOiJQSVgifV19XQ=="FsdWUiOiJQSVgifV19XQ==",
        "currency" : "INR" ,
        "currencyOrderVo" : {
            "orderId" : "OCURRPAID202308220659471692687587691DOCK02OO0000000400003652" ,
            "externalOrderId" : "716134866255702461" ,
            "currency" : "INR" ,
            "amount" : "40.2" ,
            "tradeNote" : "123"
        }
    }
}

Response parameter description

Param type Desc
cashierUrl String Cashier link
orderId String System Order ID
externalOrderId String Merchant order ID
currency String currency code
amount String Receipt amount
tradeNote String Remark

# 5.3 Create a new transfer order

request method

post

Request URL

/api/v3/ind/createTransferOrder

request type

Header: { 'Content-Type': 'application/json;charset=utf-8'}

request header

Param Desc Sample
access_key Merchant background acquisition pFqV75X3
timestamp Unix timestamp 13 digit milliseconds 1679724896223
nonce UUID V4 794c26b0-d33c-4394-b2bb-c485eca16d9e
sign computed signature kAXyh+eerqrefyaF8dyFB0M4FVo=

request parameters

{
	"currencyAmount": "40.20",
	"channelType": "BANK",
	"externalOrderId": "826169739606698345",
	"accountId": "13178968534",
	"bankName": "AndhraBank",
	"accountType": "BANK",
	"ifSC": "ANDB",
    "userInfoName":"test",
	"notifyUrl": "http://192.168.1.135:30001",
	"remark": "123"
}

Description of request parameters

Param Desc Sample require
currencyAmount The decimal of the payment amount cannot be greater than 2 digits (String) 40.20 required
channelType Payment Type oneof = BANK(String) BANK required
externalOrderId Merchant order number max=64 (String) 687279463984441035 required
accountId Bank account number (String) 13178968584 required
accountType Bank account type oneof=INR (String) INR required
ifSC Bank Code (String) YESB According to the actual situation required
bankName Bank name (String) YesBank According to the actual situation optional
userInfoName User Information(String) test According to the actual situation optional
remark Note max=255 (String) 123 optional
notifyUrl Notification URL (String) http://192.168.1.135:30001 optional

response type

Header: { 'Content-Type': 'application/json;charset=utf-8'}

response data

{
    "code" : "200" ,
    "success" : true ,
    "msg" : "Success" ,
    "msgEn" : "SUCCESS" ,
    "data" : {
        "orderId" : "OCURRDRAW202308220659491692687589549DOCK02OO0000000200003653" ,
        "orderStatus" : "Accepted" ,
        "externalOrderId" : "826169739606698345" ,
        "currencyType" : "INR"
    }
}

Response parameter description

Param type Desc
orderId String System Order ID
orderStatus String Order Status
externalOrderId String merchant order id
currencyType String Fiat currency type

# 5.4 Query collection orders

request method

post

Request URL

/api/v3/ind/query/collectingOrder

request type

Header: { 'Content-Type': 'application/json;charset=utf-8'}

request header

Param Desc Sample
access_key Merchant background acquisition pFqV75X3
timestamp Unix timestamp 13 digit milliseconds 1679724896223
nonce UUID V4 794c26b0-d33c-4394-b2bb-c485eca16d9e
sign computed signature kAXyh+eerqrefyaF8dyFB0M4FVo=

request parameters

{
    "externalOrderId" : "241534072867503522" ,
    "orderId" : "OCURRPAID202308220659471692687587691DOCK02OO0000000400003652"
}


Description of request parameters

Param Desc require
externalOrderId Merchant order number max=64 (String) required
orderId System order number (String) required

response type

Header: { 'Content-Type': 'application/json;charset=utf-8'}

response data

{
    "code" : "200" ,
    "success" : true ,
    "msg" : "Success" ,
    "msgEn" : "SUCCESS" ,
    "data" : [{
        "orderId" : "OCURRPAID202308220659471692687587691DOCK02OO0000000400003652" ,
        "cashierId" : "OCURRPAID202308220659471692687587416DOCK02OO0000000200003651" ,
        "orderType" : 1 ,
        "orderResourceType" : 2 ,
        "userId" : "1663371399710216194" ,
        "orderStatus" : 1 ,
        "orderTime" : 1692687588000 ,
        "channelOrderId" : "230822170261LXvDYM" ,
        "externalOrderId" : "716134866255702461" ,
        "orderAmount" : "40.2" ,
        "orderActualAmount" : null ,
        "orderFee" : null ,
        "orderPayTime" : null ,
        "orderCompleteTime" : null ,
        "currencyType" : "INR" ,
        "payType" : 102 ,
        "tradeNote" : "123" ,
        "notifyUrl" : "http://192.168.1.135:30001/" ,
        "markStatus" : 0 ,
        "errorMsg" : "" ,
        "errorMsgEn" : "" ,
        "accountType" : "" ,
        "accountName" : "" ,
        "accountNo" : "" ,
        "orderTypeCode" : "Pay" ,
        "orderResourceTypeCode" : "Currency" ,
        "orderStatusCode" : "Accepted" ,
        "payTypeCode" : "BANK"
    }]
}

Response parameter description

Param type Desc
orderId String order ID
cashierId String Cashier ID
orderType int64 Order Type
1 - Collection
orderResourceType int64 The business type of the order
2-Fiat currency order
userId String User ID
orderStatus int64 Order status
1- pending payment
2- payment successful
orderTime int64 Order initiation time
channelOrderId String Order associated channel order ID
externalOrderId String Merchant order number
orderAmount String order amount
orderActualAmount String The actual amount of the order
order fee int64 Order handling fee
orderPayTime int64 order payment time
orderCompleteTime int64 order completion time
currencyType String currency type
payType int64 Payment type
102:BANK
202:BANK
tradeNote String Remark
notifyUrl String Callback URL
markStatus int64 mark status
errorMsg String error message
errorMsgEn String error message en
accountType String account type
accountName String account name
accountNo String account number
orderTypeCode String order type code
orderResourceTypeCode String The business type code to which the order belongs
orderStatusCode String orderStatusc description
payTypaCode String Payment type code reference payType

# 5.5 Query transfer orders

request method

post

Request URL

/api/v3/ind/query/transferOrder

request type

Header: { 'Content-Type': 'application/json;charset=utf-8'}

request header

Param Desc Sample
access_key Merchant background acquisition pFqV75X3
timestamp Unix timestamp 13 digit milliseconds 1679724896223
nonce UUID V4 794c26b0-d33c-4394-b2bb-c485eca16d9e
sign computed signature kAXyh+eerqrefyaF8dyFB0M4FVo=

request parameters

{
    "externalOrderId" : "241534072867503522" ,
    "orderId" : "OCURRDRAW202308220659491692687589549DOCK02OO0000000200003653"
}

Description of request parameters

Param Desc require
externalOrderId Merchant order number max=64 (String) required
orderId System order number (String) required

response type

Header: { 'Content-Type': 'application/json;charset=utf-8'}

response data

{
    "code" : "200" ,
    "success" : true ,
    "msg" : "Success" ,
    "msgEn" : "SUCCESS" ,
    "data" : [{
        "orderId" : "OCURRDRAW202308220659491692687589549DOCK02OO0000000200003653" ,
        "cashierId" : "" ,
        "orderType" : 2 ,
        "orderResourceType" : 2 ,
        "userId" : "1663371399710216194" ,
        "orderStatus" : 1 ,
        "orderTime" : 1692687590000 ,
        "channelOrderId" : "" ,
        "externalOrderId" : "826169739606698345" ,
        "orderAmount" : "40.2" ,
        "orderActualAmount" : "41" ,
        "orderFee" : "0.8" ,
        "orderPayTime" : null ,
        "currencyType" : "INR" ,
        "payType" : 202 ,
        "tradeNote" : "123" ,
        "notifyUrl" : "http://192.168.1.135:30001" ,
        "markStatus" : 0 ,
        "errorMsg" : "" ,
        "errorMsgEn" : "" ,
        "accountType" : "" ,
        "accountName" : "AndhraBank" ,
        "accountNo" : "13178968534" ,
        "orderTypeCode" : "Transfer" ,
        "orderResourceTypeCode" : "Currency" ,
        "orderStatusCode" : "Accepted" ,
        "payTypeCode" : "BANK"
    }]
}

Response parameter description

Param type Desc
orderId String order ID
cashierId String Cashier ID
orderType int64 Order Type
2 - Pay on behalf
orderResourceType int64 The business type of the order 2-Fiat currency order
userId String User ID
orderStatus int64 Order status
1-accepted
2-bank processing
4-failed (not accepted by the bank)
8-success
16-failure
orderTime int64 Order initiation time
channelOrderId String Order associated channel order ID
externalOrderId String Merchant order number
orderAmount String order amount
orderActualAmount String The actual amount of the order
order fee int64 Order handling fee
orderPayTime int64 order payment time
currencyType String currency type
payType int64 Payment type
102:BANK
202:BANK
tradeNote String Remark
notifyUrl String Callback URL
markStatus int64 mark status
errorMsg String error message
errorMsgEn String error message en
accountType String account type
accountName String account name
accountNo String account number
orderTypeCode String order type code
orderResourceTypeCode String The business type code to which the order belongs
orderStatusCode String orderStatusDescription
payTypeCode String Payment type code reference payType

# 5.6 Query balance

request method

Get

Request URL

/api/v3/ind/query/balance

request type

Header: { 'Content-Type': 'application/json;charset=utf-8'}

request header

Param Desc Sample
access_key Merchant background acquisition pFqV75X3
timestamp Unix timestamp 13 digit milliseconds 1679724896223
nonce UUID V4 794c26b0-d33c-4394-b2bb-c485eca16d9e
sign computed signature kAXyh+eerqrefyaF8dyFB0M4FVo=

response type

Header: { 'Content-Type': 'application/json;charset=utf-8'}

response data

{
    "code" : "200" ,
    "success" : true ,
    "msg" : "Success" ,
    "msgEn" : "SUCCESS" ,
    "data" : [{
        "accountBalance" : "10026.1" ,
        "accountFreezeAmount" : "0" ,
        "accountStatusId" : 4 ,
        "accountWaitSettledAmount" : "0" ,
        "currencyType" : "INR" ,
        "accountStatus" : "InAndOut"
    }]
}

Response parameter description

Param type Desc
accountBalance String Account Available Balance
accountFreezeAmount String Account frozen amount
accountStatusId int64 account status id
accountWaitSettledAmount String Amount to be transferred from the account
currencyType String Fiat currency type
accountStatus String Account Status

# 5.7 Inquiry Bank

request method

POST

Request URL

/api/v3/ind/query/bank

request type

Header: { 'Content-Type': 'application/json;charset=utf-8'}

request header

Param Desc Sample
access_key Merchant background acquisition pFqV75X3
timestamp Unix timestamp 13 digit milliseconds 1679724896223
nonce UUID V4 794c26b0-d33c-4394-b2bb-c485eca16d9e
sign computed signature kAXyh+eerqrefyaF8dyFB0M4FVo=

request parameters

{ "bankName" : "Andhra Bank" }

If you need to query all bank values, pass an empty string, as follows:

{ "bankName" : "" }

Description of request parameters

Param Desc require
bankName Bank name (String) required

response type

Header: { 'Content-Type': 'application/json;charset=utf-8'}

response data

{
    "code" : "200" ,
    "success" : true ,
    "msg" : "Success" ,
    "msgEn" : "SUCCESS" ,
    "data" : [{
        "bankName" : "AndhraBank" ,
        "bankCode" : "ANDB" ,
        "currencyType" : "INR" ,
        "channelBankId" : "477" ,
        "channelId" : "1691333443419652098"
    }]
}

Response parameter description

Param type Desc
bankName String Bank name
bankCode String bank code
currencyType String currency type
channelBankId String Channel Bank ID
channelId String channel ID

# 5.8 Bank List

BankName BankName
Andhra Bank Bank of Baroda
Bandhan Bank Central Bank of India
Canara Bank DCB Bank
Federal Bank HDFCBank
ICICI Bank IDFCFirst
Indian Bank Indian Overseas Bank
Karnataka Bank Kotak Mahindra Bank
Karur Vysya Bank Punjab National Bank
State Bank of India Standard Chartered Bank
South Indian Bank Syndicate Bank
Union Bank of India UCO Bank
UPI Axis Bank
Yes Bank

# 6. Callback information

# 6.1 How to call back the interface for signature verification

# Signature verification instructions

​ API requests are likely to be tampered with during transmission over the internet. To ensure that callbacks have not been changed, you can set callback parameter signature authentication. The setting method is: log in to the cashier -> developer center -> callback address -> add.

# Signature verification steps

The overall process is roughly the same as the signature, except that the data used to verify the signature is different. The signature is to construct the data by itself, and the signature is to obtain the data (header, json)

  1. Take out the sign value in the header;
  2. Define a Map dictionary type object, and put the json parameters in the request into it in the form of key-value
  3. Take out the access_key, timestamp, and nonce in the header and put them into the Map defined in the previous step
  4. Sort the keys in the Map according to the ASCII code from small to large (lexicographic order) and convert the Map to a string in the form of "key1=value1&key2=value2";
  5. Encrypt the string converted in the previous step with secret_key by HMAC_SHA1 and transcode it with Base64, and verify the signed value with the sign extracted from the header in the first step. If they match, the signature verification will pass, otherwise, the signature verification will fail. The secret_key here needs to match the access_key when placing an order.

# 6.2 Payment callback

callback data

{
    "currencyType" : "INR" ,
    "orderAmount" : "40.2" ,
    "orderTime" : 1692687588000 ,
    "payType" : 102 ,
    "orderId" : "OCURRPAID202308220659471692687587691DOCK02OO0000000400003652" ,
    "orderStatusCode" : 1 ,
    "orderStatus" : "Wait pay" ,
    "markStatus" : 0 ,
    "payParam" : "https://rarpay.test.rarpay.com/index/pay/mchtestpage/tp/dd/ordernum/230822170261LXvDYM" ,
    "externalOrderId" : "716134866255702461" ,
    "tradeNote" : "123" ,
    "payTypeName" : "BANK"
}

Callback data description

Param type Desc
currencyType String Fiat currency type
orderAmount float64 Order Creation Amount
orderTime int64 Order creation time
payType int64 Payment Types
orderId String order ID
orderStatusCode int64 Order status code
1-pending payment
2- payment successful
orderStatus String orderStatusCode description
markStatus String mark status
payParam String Payment Types
externalOrderId String Merchant order ID
tradeNote String Remark
payTypeName String payment type name
errorMsg String error message
errorMsgEn String error message en

img

​ *At any time, the merchant can log in to the backstage of the merchant to manually trigger the callback* (it is not recommended to initiate a manual callback if the order is not in the final state). The status is not final, and the platform will still initiate a notification when the order becomes final, please pay attention to the redundant processing at the business level)

# 6.3 transfer callback

callback data

{
    "currencyType" : "INR" ,
    "userInfoNo" : "ANDB" ,
    "accountName" : "AndhraBank" ,
    "orderId" : "OCURRDRAW202308220659491692687589549DOCK02OO0000000200003653" ,
    "orderFee" : "0.8" ,
    "orderStatus" : "In bank processing" ,
    "externalOrderId" : "826169739606698345" ,
    "tradeNote" : "123" ,
    "payTypeName" : "BANK" ,
    "orderAmount" : "40.2" ,
    "orderTime" : 1692687590000 ,
    "payType" : 202 ,
    "accountNo" : "13178968534" ,
    "orderStatusCode" : 2 ,
    "markStatus" : 0
}

Callback data description

Param type Desc
currencyType String currency type
userInfoNo String User Credential Information
accountName String account name
orderId String order ID
order fee String Order handling fee
orderStatus String orderStatusCode description
externalOrderId int64 Merchant order ID
tradeNote String Remark
payTypeName float64 payment type name
orderAmount float64 Order Creation Amount
orderTime int64 Order creation time
payType int64 Payment type
accountNo String Remark
orderStatusCode String Order status code
1-accepted
2-bank processing
4-failure (not accepted by the bank)
8-success
16-failure
markStatus String User ID Type
errorMsg String error message
errorMsgEn String error message en

img

At any time, the merchant can log in to the backstage of the merchant to manually trigger the callback (it is not recommended to initiate a manual callback if the order is not in the final state). The status is not final, and the platform will still initiate a notification when the order becomes final, please pay attention to the redundant processing at the business level)

# 6.4 Callback response

Remarks: All callbacks include signature information. It is recommended that merchants do a callback signature verification. After receiving the callback information, the merchant will determine the final status of the order. Please respond to the website

Regarding the following information (content-type: application/json), if there is no normal response from the server, it will be within 30 minutes, with a total interval of three minutes, totaling 2

notice

{ "code" : 200 , "success" : true }

# 6.5 Callback Notification URL

img

Log in to the merchant background to configure a unified callback address (manually specify the callback UR address in the order, which has a higher priority than the uniformly configured callback address. For example, if the notifyUrl parameter is specified in the order, regardless of whether there is a unified configuration of the callback notification address, the URL in the order will be used. notifyUrl address)

Note that the http response status_code has the highest priority as long as the response status_code=200 is received and the response data is ignored

# 7. Public Response Code

filed type Default value and comment
code String Success "200" Other please refer to the failure code
success Bool Success is true, failure is false, and code is kept in sync
msg String The textual description returned by the first-level code
data object Refer to the interface list chapter

# 8. Failure code

Code Desc
200 normal
300 Parameter exception
301 IP has no authority
307 signature error
500 system error