Callback and Redirect Url

Redirect URL (redirect_url)

Merchant/partner can set redirect_url during sending payment POST parameters. Redirect URL is browser to browser communication. After the bank transaction from the browser. The user will be redirected to this URL, merchant can set their own page. Information will be posted (POST method) to the URL. By default user will be redirected to SecurePay status page if the redirect URL is nil.

Callback URL (callback_url)

Merchant/partner can set callback_url during sending payment POST parameters. Callback URL is server to server communication. SecurePay server sends the transaction status to the merchant callback server (based on callback URL). It's very important, if error occur on the redirect URL.

Parameter from redirect and callback URL

This parameters will be sent the URL by using POST method.

gatweway_type	The payment method used to complete a transaction, such as FPX or DuitNow.	FPX
payment	Transaction details, including amount, status, gateway used, environment, and reference identifiers for tracking	"payment": { "amount": "3.00", "status": "successful", "net_amount": "0.00", "environment": "sandbox", "intent_uuid": "019aedd0-1805-7d7f-af1d-80d10e548540", "record_uuid": "f19332ac-e0e8-42df-b958-e4cdf7198906", "gateway_type": "fpx", "gateway_uuid": "f618a0ea-3806-4283-aee9-a4cfd467b11a", "reference_number": "20251205092029258" }
currency	Currency used for the payment.	"currency": "MYR"
order_number	Custom order number that is generated by merchant	"order_number": "PAY-6932A3DCAB7AC-1764926428"
seller_order_number	Seller order no is generated by SecurePay Platform	"fpx_seller_order_no": "20251205092029258",
exchange_number	Exchange order no is generated by SecurePay Platform	"fpx_seller_ex_order_no": "PYMTRCDJSVFQ20251205092034508"
buyer_name	Buyer name	"fpx_buyer_name" => "Akmal"
fpx_debit _auth_code	00 success, 99 - pending approval, other codes - unsuccessful .. If perform B2B1, there will be code 99, after approval the server will send callback with code 00.	"fpx_debit_auth_code": "00"

Checksum is use to verify message that are received by SecurePay Platform for redirect and callback. The verification will be done on the merchant/partner side. (the string also need to include uid).

Guide to generate checksum

Compulsory to use function that automatically sort the key and later replace with the value. Params will keep updating time to time.

Example

Ruby on Rails

example::

#Compulsory to use function that automatically sort the key and later replace with the value. Params will keep updating time to time.
#Token: df8aa0d55308ee762d2a5ce675cb9cfb4f85a59e41723573010e9c3f99f5457b
#Data: {:source=>"FPX", :fpx_name=>"N@ME()/ .-&BUYER", :fpx_bank=>"SBI BANK A", :fpx_transaction_id=>"2106141733330972", :fpx_status=>true, :fpx_status_message=>"Transaction Approved", :fpx_transaction_time=>"20210614173333", :fpx_model=>"B2C", :fpx_debit_auth_code=>"00", :payment_status=>true, :payment_method=>"fpx_online_banking", :payment_mode=>"customer", :transaction_fee=>"1.50", :currency=>"MYR", :amount=>"25.64", :order_number=>"20210614173332470", :merchant_reference_number=>nil, :exchange_number=>"MHQWK1623663213", :buyer_name=>"MOHD KHAIRI MOHD ADNAN", :buyer_phone=>"[phone]", :buyer_email=>"[email protected]", :payment_stage=>"payment_successful", :merchant_name=>"Muslimah Next Store", :merchant_co_number=>"x111222122y", :payment_id=>5747, :client_ip=>"60.53.196.69", :uid=>"c111e3bc3c9c22d572dc", :status_url=>"https://sandbox.securepay.my/api/v1/status/MHQWK1623663213?uid=c111e3bc3c9c22d572dc", :retry_url=>nil, :receipt_url=>"https://sandbox.securepay.my/api/v1/receipt/MHQWK1623663213.pdf?uid=c111e3bc3c9c22d572dc", :params=>nil, :created_at=>Mon, 14 Jun 2021 17:33:48 +08 +08:00, :created_at_unixtime=>"1623663228", :token=>"6mtetdxEvzj6KJ9htyTy"}

def CheckSum.generate(token = "no_token", **data)
	  
	  data_sort_asc = data.sort_by {|k, v| k}

	  data_string = data_sort_asc.map {|k,v| v}.join("|")
	  
    generate_checksum = OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new('sha256'), token, data_string)
      
    return generate_checksum