Duitku API

https://docs.duitku.com/api/id/
Admin
Duitku API is a payment gateway platform that enables merchants to receive online payments from...
Tokens:11,282
Snippets:69
Trust Score:9.2
Update:1 month ago
Show doc for...
Tokens:
Raw
### Simulate Callback with cURL

Source: https://docs.duitku.com/api/id

Example cURL command to simulate a POST request to your callback endpoint.

```bash
curl --location --request POST 'http://example.com/callback' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'merchantOrderId=abcde12345' \
--data-urlencode 'amount=150000' \
--data-urlencode 'merchantCode=DXXXX' \
--data-urlencode 'productDetails=Pembayaran untuk Toko Contoh' \
--data-urlencode 'additionalParam=contoh param' \
--data-urlencode 'paymentCode=VA' \
--data-urlencode 'resultCode=00' \
--data-urlencode 'merchantUserId=test@example.com' \
--data-urlencode 'reference=DXXXXCX80TXXX5Q70QCI' \
--data-urlencode 'signature=d842db69f70501fe69487b3d957611c2d4e47335f390a5895b0a762a1bf1f1a0'\
--data-urlencode 'publisherOrderId=MGUHWKJX3M1KMSQN5'\
--data-urlencode 'spUserHash=xxxyyyzzz'\
--data-urlencode 'settlementDate=2023-07-25'\
--data-urlencode 'issuerCode=93600523'\
--data-urlencode 'customerName=Bam**** Maul***'
```

--------------------------------

### Initiate Transaction Request via cURL

Source: https://docs.duitku.com/api/id

Example of a POST request to the Duitku sandbox inquiry endpoint with required transaction details.

```bash
curl --location --request POST 'https://sandbox.duitku.com/webapi/api/merchant/v2/inquiry' \
--header 'Content-Type: application/json' \
--data 
'{ 
   "merchantCode":"DXXXX",
   "paymentAmount":40000,
   "paymentMethod":"VC",
   "merchantOrderId":"abcde12345",
   "productDetails":"Pembayaran untuk Toko Contoh",
   "additionalParam":"",
   "merchantUserInfo":"",
   "customerVaName":"John Doe",
   "email":"test@test.com",
   "phoneNumber":"08123456789",
   "itemDetails":[ 
      { 
         "name":"Test Item 1",
         "price":10000,
         "quantity":1
      },
      { 
         "name":"Test Item 2",
         "price":30000,
         "quantity":3
      }
   ],
   "customerDetail":{ 
      "firstName":"John",
      "lastName":"Doe",
      "email":"test@test.com",
      "phoneNumber":"08123456789",
      "billingAddress":{ 
         "firstName":"John",
         "lastName":"Doe",
         "address":"Jl. Kembangan Raya",
         "city":"Jakarta",
         "postalCode":"11530",
         "phone":"08123456789",
         "countryCode":"ID"
      },
      "shippingAddress":{ 
         "firstName":"John",
         "lastName":"Doe",
         "address":"Jl. Kembangan Raya",
         "city":"Jakarta",
         "postalCode":"11530",
         "phone":"08123456789",
         "countryCode":"ID"
      }
   },
   "callbackUrl":"http:\/\/example.com\/callback",
   "returnUrl":"http:\/\/example.com\/return",
   "signature":"d842db69f70501fe69487b3d957611c2d4e47335f390a5895b0a762a1bf1f1a0",
   "expiryPeriod":10
}'
```

--------------------------------

### Request Payment Method via cURL

Source: https://docs.duitku.com/api/id

Example of a POST request to the sandbox environment using cURL.

```bash
curl -X POST https://sandbox.duitku.com/webapi/api/merchant/paymentmethod/getpaymentmethod
-H "Content-Type: application/json"
-d "{
    \"merchantcode\": \"DXXXX\",
    \"amount\": \"10000\",
    \"datetime\": \"2022-01-25 16:23:08\",
    \"signature\": \"497fbf783f6d17d4b1e1ef468917bdc8\"
    }"
```

--------------------------------

### GET Redirect Callback

Source: https://docs.duitku.com/api/id

Describes the GET request sent by Duitku to the merchant's returnUrl after a transaction attempt.

```APIDOC
## GET [returnUrl]

### Description
After a transaction is processed, Duitku redirects the customer back to the merchant's site using the provided returnUrl with transaction status parameters.

### Method
GET

### Parameters
#### Query Parameters
- **merchantOrderId** (string) - Required - The merchant's unique transaction order ID.
- **reference** (string) - Required - The Duitku transaction reference number.
- **resultCode** (string) - Required - The transaction result code (00: Success, 01: Pending, 02: Canceled).

### Request Example
GET: http://www.merchantweb.com/redirect.php?merchantOrderId=abcde12345&resultCode=00&reference=DXXXXCX80TXXX5Q70QCI
```

--------------------------------

### Transaction Response JSON Structure

Source: https://docs.duitku.com/api/id

Example of the JSON object returned by the Duitku server after a transaction request.

```json
{
  "merchantCode": "DXXXX",
  "reference": "DXXXXCX80TZJ85Q70QCI",
  "paymentUrl": "https://sandbox.duitku.com/topup/topupdirectv2.aspx?ref=BCA7WZ7EIDXXXXWEC",
  "vaNumber": "7007014001444348",
  "qrString": "00020101021226660014ID.DANA.WWW011893600911002151500102152006170915150010303UME51450015ID.OR.GPNQR.WWW02150000000000000000303UME520454995802ID5911Toko Jualan6013Jakarta Barat61051153062210117LQKI2LPMJQPKCIIS553033605405400006304502A",
  "AppUrl": "https://tokopedia.app.link/?$ios_deeplink_path=tokopedia%3A%2F%2Fdigital%2Fcart%3Fcategory_id%3dXXXX%26operator_id%3d33334%26product_id%3d77778%26client_number%3d1070026818117867&$android_deeplink_path=tokopedia%3A%2F%2Fdigital%2Fcart%3Fcategory_id%3dXXXX%26operator_id%3d33334%26product_id%3d77778%26client_number%3d1070026818117867&$desktop_url=https%3A%2F%2Fpulsa.tokopedia.com%3Faction%3dinit_data%26category_id%3dXXXX%26operator_id%3d33334%26product_id%3d77778%26client_number%3d1070026818117867",
  "amount": "40000",
  "statusCode": "00",
  "statusMessage": "SUCCESS"
}
```

--------------------------------

### Define Account Link Object

Source: https://docs.duitku.com/api/id

Required parameters for OVO and Shopee account link payment methods.

```json
"accountLink": {
    "credentialCode": "A0F22572-4AF1-E111-812C-B01224449936",
    "ovo": {
        "paymentDetails": [{
            "paymentType": "CASH",
            "amount": "10000"
        }]
    },
    "shopee": {
        "useCoin": false,
        "promoId": ""
    }
},
```

--------------------------------

### Request Cek Transaksi dengan cURL

Source: https://docs.duitku.com/api/id

Contoh perintah cURL untuk melakukan pengecekan status transaksi.

```bash
curl -X POST https://sandbox.duitku.com/webapi/api/merchant/transactionStatus
     -H "Content-Type: application/json" 
     -d "{\"merchantcode\": \"DXXXX\",
  \"merchantOrderId\": \"abcde12345\",
  \"signature\": \"497fbf783f6d17d4b1e1ef468917bdc8\"
  }"
```

--------------------------------

### POST /transaction

Source: https://docs.duitku.com/api/id

Initiates a new transaction request to the Duitku payment gateway.

```APIDOC
## POST /transaction

### Description
Initiates a transaction request by sending a JSON payload to the Duitku API.

### Method
POST

### Request Body
- **params_string** (string) - Required - The JSON-encoded string containing transaction parameters.

### Response
#### Success Response (200)
- **paymentUrl** (string) - The URL to redirect the user for payment.
- **merchantCode** (string) - The unique identifier for the merchant.
- **reference** (string) - The transaction reference number.
- **vaNumber** (string) - The virtual account number generated for the transaction.
- **amount** (number) - The transaction amount.
- **statusCode** (string) - The status code of the transaction request.
- **statusMessage** (string) - A descriptive message regarding the transaction status.
```

--------------------------------

### POST /merchant/v2/inquiry

Source: https://docs.duitku.com/api/id

Initiates a new transaction inquiry with the Duitku payment gateway.

```APIDOC
## POST https://sandbox.duitku.com/webapi/api/merchant/v2/inquiry

### Description
Initiates a new transaction request to the Duitku payment gateway.

### Method
POST

### Endpoint
https://sandbox.duitku.com/webapi/api/merchant/v2/inquiry

### Request Body
- **merchantCode** (string) - Required - Kode merchant.
- **paymentAmount** (integer) - Required - Jumlah nominal transaksi.
- **merchantOrderId** (string) - Required - Nomor transaksi dari merchant.
- **productDetails** (string) - Required - Keterangan produk/jasa.
- **email** (string) - Required - Alamat email pelanggan.
- **paymentMethod** (string) - Required - Kode metode pembayaran.
- **customerVaName** (string) - Required - Nama pada halaman konfirmasi bank.
- **returnUrl** (string) - Required - Tautan setelah transaksi selesai.
- **callbackUrl** (string) - Required - Tautan untuk callback transaksi.
- **signature** (string) - Required - Kode identifikasi transaksi (HMAC_SHA256(merchantCode + merchantOrderId + paymentAmount, apiKey)).
- **additionalParam** (string) - Optional - Parameter tambahan.
- **merchantUserInfo** (string) - Optional - Username atau email pelanggan.
- **phoneNumber** (string) - Optional - Nomor telepon pelanggan.
- **itemDetails** (array) - Optional - Detail barang.
- **customerDetail** (object) - Optional - Detail pelanggan.
- **expiryPeriod** (int) - Optional - Masa berlaku transaksi dalam menit.

### Request Example
{
  "merchantCode": "DXXXX",
  "paymentAmount": 40000,
  "paymentMethod": "VC",
  "merchantOrderId": "abcde12345",
  "productDetails": "Pembayaran untuk Toko Contoh",
  "customerVaName": "John Doe",
  "email": "test@test.com",
  "returnUrl": "http://example.com/return",
  "callbackUrl": "http://example.com/callback",
  "signature": "d842db69f70501fe69487b3d957611c2d4e47335f390a5895b0a762a1bf1f1a0"
}
```

--------------------------------

### POST /callback

Source: https://docs.duitku.com/api/id/files/Duitku%20Payment%20Gateway.postman_collection.json

Handles the callback notification from Duitku to the merchant server after a payment transaction.

```APIDOC
## POST /callback

### Description
This endpoint receives payment status updates from Duitku. It is used to verify transaction results and update the merchant's order status.

### Method
POST

### Endpoint
/callback

### Request Body
- **merchantCode** (text) - Required - The unique merchant identifier.
- **amount** (text) - Required - The transaction amount.
- **merchantOrderId** (text) - Required - The unique order ID generated by the merchant.
- **productDetail** (text) - Optional - Description of the product or service.
- **additionalParam** (text) - Optional - Additional parameters passed during the transaction.
- **paymentMethod** (text) - Required - The payment method used.
- **resultCode** (text) - Required - The status code of the transaction.
- **merchantUserId** (text) - Required - The user email or ID associated with the transaction.
- **reference** (text) - Required - The Duitku reference number.
- **signature** (text) - Required - The security signature for verification.

### Request Example
{
  "merchantCode": "D9099",
  "amount": "20000",
  "merchantOrderId": "1646108045695",
  "productDetail": "Pembayaran untuk Toko Contoh",
  "paymentMethod": "BK",
  "resultCode": "00",
  "merchantUserId": "pelanggan_anda@email.com",
  "reference": "D909978PTO07DF10FGXS",
  "signature": "258f3e54b772a9bdaef6d274381780c0fd2eb0a9836d294875b0cce4b0421a65"
}

### Response
#### Success Response (200)
- **body** (string) - Returns "Success" upon successful processing.

#### Response Example
Success
```

--------------------------------

### Define Customer Detail Object

Source: https://docs.duitku.com/api/id

Contains customer contact information and associated billing and shipping addresses.

```json
"customerDetail": {
    "firstName": "John",
    "lastName": "Doe",
    "email": "pelanggan_anda@email.com",
    "phoneNumber": "08123456789",
    "billingAddress": {
      "firstName": "John",
      "lastName": "Doe",
      "address": "Jl. Kembangan Raya",
      "city": "Jakarta",
      "postalCode": "11530",
      "phone": "08123456789",
      "countryCode": "ID"
    },
    "shippingAddress": {
      "firstName": "John",
      "lastName": "Doe",
      "address": "Jl. Kembangan Raya",
      "city": "Jakarta",
      "postalCode": "11530",
      "phone": "08123456789",
      "countryCode": "ID"
    }
}
```

--------------------------------

### Define Item Details Object

Source: https://docs.duitku.com/api/id

Represents the list of items being purchased. The sum of all item prices must match the paymentAmount.

```json
"itemDetails": [{
    "price": 50000,
    "quantity": 2,
    "name": "Apel",
  }]
```

--------------------------------

### Handle Callback in PHP

Source: https://docs.duitku.com/api/id

Processes incoming POST data from Duitku, validates the signature using HMAC-SHA256, and updates transaction status accordingly.

```php
<?php
$apiKey = 'XXXXXXXXXX7968XXXXXXXXXFB05332AF'; // API key anda
$merchantCode = isset($_POST['merchantCode']) ? $_POST['merchantCode'] : null; 
$amount = isset($_POST['amount']) ? $_POST['amount'] : null; 
$merchantOrderId = isset($_POST['merchantOrderId']) ? $_POST['merchantOrderId'] : null; 
$productDetail = isset($_POST['productDetail']) ? $_POST['productDetail'] : null; 
$additionalParam = isset($_POST['additionalParam']) ? $_POST['additionalParam'] : null; 
$paymentMethod = isset($_POST['paymentCode']) ? $_POST['paymentCode'] : null; 
$resultCode = isset($_POST['resultCode']) ? $_POST['resultCode'] : null; 
$merchantUserId = isset($_POST['merchantUserId']) ? $_POST['merchantUserId'] : null; 
$reference = isset($_POST['reference']) ? $_POST['reference'] : null; 
$signature = isset($_POST['signature']) ? $_POST['signature'] : null; 
$publisherOrderId = isset($_POST['publisherOrderId']) ? $_POST['publisherOrderId'] : null; 
$spUserHash = isset($_POST['spUserHash']) ? $_POST['spUserHash'] : null; 
$settlementDate = isset($_POST['settlementDate']) ? $_POST['settlementDate'] : null; 
$issuerCode = isset($_POST['issuerCode']) ? $_POST['issuerCode'] : null; 
$customerName = isset($_POST['customerName']) ? $_POST['customerName'] : null; 

//log callback untuk debug 
// file_put_contents('callback.txt', "* Callback *\r\n", FILE_APPEND | LOCK_EX);

if(!empty($merchantCode) && !empty($amount) && !empty($merchantOrderId) && !empty($signature))
{
    // Generate signature
    $stringToSign = $merchantCode . $amount . $merchantOrderId;
    $calcSignature = hash_hmac('sha256', $stringToSign, $apiKey);

    if($signature == $calcSignature)
    {
        //Callback tervalidasi
        //Silahkan rubah status transaksi anda disini
        // file_put_contents('callback.txt', "* Success *\r\n\r\n", FILE_APPEND | LOCK_EX);

    }
    else
    {
        // file_put_contents('callback.txt', "* Bad Signature *\r\n\r\n", FILE_APPEND | LOCK_EX);
        throw new Exception('Bad Signature')
    }
}
else
{
    // file_put_contents('callback.txt', "* Bad Parameter *\r\n\r\n", FILE_APPEND | LOCK_EX);
    throw new Exception('Bad Parameter')
}
?>
```

--------------------------------

### Define Credit Card Detail Object

Source: https://docs.duitku.com/api/id

Optional parameters for configuring credit card transactions, including acquirer selection and BIN whitelisting.

```json
"creditCardDetail": {
  "acquirer":"014",
  "binWhitelist":["014","022", "400000"]
}
```

--------------------------------

### Define Shopee Detail Object

Source: https://docs.duitku.com/api/id

Specific payment details required for Shopee transactions.

```json
"shopee": {
  "promo_ids": "",
  "useCoin": false,
}
```

--------------------------------

### POST /webapi/api/merchant/v2/inquiry

Source: https://docs.duitku.com/api/id

Initiates a new payment transaction request to Duitku. This endpoint is used to generate payment instructions for customers.

```APIDOC
## POST /webapi/api/merchant/v2/inquiry

### Description
Initiates a payment transaction request. This endpoint creates a payment session for the customer, supporting various payment methods.

### Method
POST

### Endpoint
https://sandbox.duitku.com/webapi/api/merchant/v2/inquiry (Development)
https://passport.duitku.com/webapi/api/merchant/v2/inquiry (Production)

### Request Body
- **merchantCode** (string) - Required - Merchant identifier provided by Duitku
- **paymentAmount** (integer) - Required - Total amount to be paid
- **paymentMethod** (string) - Required - Payment method code (e.g., VC for Credit Card)
- **merchantOrderId** (string) - Required - Unique order ID generated by the merchant
- **productDetails** (string) - Required - Description of the transaction
- **email** (string) - Required - Customer email address
- **phoneNumber** (string) - Optional - Customer phone number
- **customerVaName** (string) - Required - Name displayed on bank confirmation
- **callbackUrl** (string) - Required - URL for transaction status updates
- **returnUrl** (string) - Required - URL to redirect the customer after payment
- **signature** (string) - Required - HMAC SHA256 signature of (merchantCode + merchantOrderId + paymentAmount)
- **expiryPeriod** (integer) - Required - Expiration time in minutes
- **customerDetail** (object) - Required - Object containing customer contact and address details
- **itemDetails** (array) - Required - List of items included in the transaction

### Response
#### Success Response (200)
- **reference** (string) - Duitku transaction reference
- **paymentUrl** (string) - URL to the payment page
- **vaNumber** (string) - Virtual account number (if applicable)
```

--------------------------------

### Membuat Request Transaksi dengan PHP

Source: https://docs.duitku.com/api/id

Contoh implementasi pembuatan payload transaksi, signature, dan inisialisasi cURL untuk API Duitku.

```php
<?php
    $merchantCode = 'DXXXXX'; // dari duitku
    $apiKey = 'XXXXXXXXXX7968XXXXXXXXXFB05332AF'; // dari duitku
    $paymentAmount = 40000;
    $paymentMethod = 'VC'; // VC = Credit Card
    $merchantOrderId = time() . ''; // dari merchant, unik
    $productDetails = 'Tes pembayaran menggunakan Duitku';
    $email = 'test@test.com'; // email pelanggan anda
    $phoneNumber = '08123456789'; // nomor telepon pelanggan anda (opsional)
    $additionalParam = ''; // opsional
    $merchantUserInfo = ''; // opsional
    $customerVaName = 'John Doe'; // tampilan nama pada tampilan konfirmasi bank
    $callbackUrl = 'http://example.com/callback'; // url untuk callback
    $returnUrl = 'http://example.com/return'; // url untuk redirect
    $expiryPeriod = 10; // atur waktu kadaluarsa dalam hitungan menit

    $stringToSign = $merchantCode . $merchantOrderId . $paymentAmount;

    // Generate HMAC SHA256 (output hex lowercase)
    $signature = hash_hmac('sha256', $stringToSign, $apiKey);

    // Detail Pelanggan
    $firstName = "John";
    $lastName = "Doe";

    // Detail Alamat
    $alamat = "Jl. Kembangan Raya";
    $city = "Jakarta";
    $postalCode = "11530";
    $countryCode = "ID";

    $address = array(
        'firstName' => $firstName,
        'lastName' => $lastName,
        'address' => $alamat,
        'city' => $city,
        'postalCode' => $postalCode,
        'phone' => $phoneNumber,
        'countryCode' => $countryCode
    );

    $customerDetail = array(
        'firstName' => $firstName,
        'lastName' => $lastName,
        'email' => $email,
        'phoneNumber' => $phoneNumber,
        'billingAddress' => $address,
        'shippingAddress' => $address
    );

    $item1 = array(
        'name' => 'Test Item 1',
        'price' => 10000,
        'quantity' => 1);

    $item2 = array(
        'name' => 'Test Item 2',
        'price' => 30000,
        'quantity' => 3);

    $itemDetails = array(
        $item1, $item2
    );

    /*Khusus untuk metode pembayaran OL dan SL
    $accountLink = array (
        'credentialCode' => '7cXXXXX-XXXX-XXXX-9XXX-944XXXXXXX8',
        'ovo' => array (
            'paymentDetails' => array ( 
                0 => array (
                    'paymentType' => 'CASH',
                    'amount' => 40000,
                ),
            ),
        ),
        'shopee' => array (
            'useCoin' => false,
            'promoId' => '',
        ),
    );*/

    /*Khusus untuk metode pembayaran Kartu Kredit
    $creditCardDetail = array (
        'acquirer' => '014',
        'binWhitelist' => array (
            '014',
            '400000'
        )
    );*/

    $params = array(
        'merchantCode' => $merchantCode,
        'paymentAmount' => $paymentAmount,
        'paymentMethod' => $paymentMethod,
        'merchantOrderId' => $merchantOrderId,
        'productDetails' => $productDetails,
        'additionalParam' => $additionalParam,
        'merchantUserInfo' => $merchantUserInfo,
        'customerVaName' => $customerVaName,
        'email' => $email,
        'phoneNumber' => $phoneNumber,
        //'accountLink' => $accountLink,
        //'creditCardDetail' => $creditCardDetail,
        'itemDetails' => $itemDetails,
        'customerDetail' => $customerDetail,
        'callbackUrl' => $callbackUrl,
        'returnUrl' => $returnUrl,
        'signature' => $signature,
        'expiryPeriod' => $expiryPeriod
    );

    $params_string = json_encode($params);
    //echo $params_string;
    $url = 'https://sandbox.duitku.com/webapi/api/merchant/v2/inquiry'; // Sandbox
    // $url = 'https://passport.duitku.com/webapi/api/merchant/v2/inquiry'; // Production
    $ch = curl_init();
```

--------------------------------

### Define Address Object

Source: https://docs.duitku.com/api/id

Standard structure for billing or shipping address information.

```json
{
  "firstName": "John",
  "lastName": "Doe",
  "address": "Jl. Kembangan Raya",
  "city": "Jakarta",
  "postalCode": "11530",
  "phone": "08123456789",
  "countryCode": "ID"
}
```

--------------------------------

### Request Cek Transaksi dengan PHP

Source: https://docs.duitku.com/api/id

Contoh implementasi pengecekan status transaksi menggunakan PHP dengan cURL.

```php
<?php
    $merchantCode = 'DXXXX'; // dari duitku
    $apiKey = 'XXXXXXXXXX7968XXXXXXXXXFB05332AF'; // dari duitku
    $merchantOrderId = 'abcde12345'; // dari anda (merchant), bersifat unik

    $stringToSign = $merchantCode . $merchantOrderId;

    // Generate HMAC SHA256 (output hex lowercase)
    $signature = hash_hmac('sha256', $stringToSign, $apiKey);

    $params = array(
        'merchantCode' => $merchantCode,
        'merchantOrderId' => $merchantOrderId,
        'signature' => $signature
    );

    $params_string = json_encode($params);
    $url = 'https://sandbox.duitku.com/webapi/api/merchant/transactionStatus';
    $ch = curl_init();

    curl_setopt($ch, CURLOPT_URL, $url); 
    curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "POST");                                                                     
    curl_setopt($ch, CURLOPT_POSTFIELDS, $params_string);                                                                  
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);                                                                      
    curl_setopt($ch, CURLOPT_HTTPHEADER, array(                                                                          
        'Content-Type: application/json',                                                                                
        'Content-Length: ' . strlen($params_string))                                                                       
    );   
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);

    //execute post
    $request = curl_exec($ch);
    $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);

    if($httpCode == 200)
    {
        $results = json_decode($request, true);
        print_r($results, false);
        // echo "merchantOrderId :". $results['merchantOrderId'] . "<br />";
        // echo "reference :". $results['reference'] . "<br />";
        // echo "amount :". $results['amount'] . "<br />";
        // echo "fee :". $results['fee'] . "<br />";
        // echo "statusCode :". $results['statusCode'] . "<br />";
        // echo "statusMessage :". $results['statusMessage'] . "<br />";
    }
    else
    {
        $request = json_decode($request);
        $error_message = "Server Error " . $httpCode ." ". $request->Message;
        echo $error_message;
    }
?>
```

--------------------------------

### Define OVO Detail Object

Source: https://docs.duitku.com/api/id

Specific payment details required for OVO transactions.

```json
"ovo": {
    "paymentDetails": [
        {
            "paymentType": "CASH",
            "amount": "10000"
        }
    ]
}
```

--------------------------------

### Settlement Date Format

Source: https://docs.duitku.com/api/id

The expected format for the settlement date parameter.

```text
YYYY-MM-DD
```

--------------------------------

### POST /webapi/api/merchant/paymentmethod/getpaymentmethod

Source: https://docs.duitku.com/api/id

Retrieves the list of active payment methods for the merchant.

```APIDOC
## POST /webapi/api/merchant/paymentmethod/getpaymentmethod

### Description
Retrieves the list of active payment methods for the merchant, including payment names, fees, and image URLs.

### Method
POST

### Endpoint
https://passport.duitku.com/webapi/api/merchant/paymentmethod/getpaymentmethod

### Parameters
#### Request Body
- **merchantcode** (string) - Required - Merchant code provided by Duitku.
- **amount** (integer) - Required - Transaction amount (no decimal points).
- **datetime** (date) - Required - Format: yyyy-MM-dd HH:mm:ss.
- **signature** (string) - Required - HMAC_SHA256(merchantcode + amount + datetime, apiKey).

### Request Example
{
    "merchantcode": "DXXXX",
    "amount": "10000",
    "datetime": "2022-01-25 16:23:08",
    "signature": "497fbf783f6d17d4b1e1ef468917bdc8"
}

### Response
#### Success Response (200)
- **paymentFee** (array) - List of available payment methods.
- **responseCode** (string) - Response status code.
- **responseMessage** (string) - Description of the response result.

#### Response Example
{
    "paymentFee": [
        {
            "paymentMethod": "VA",
            "paymentName": "MAYBANK VA",
            "paymentImage": "https://images.duitku.com/hotlink-ok/VA.PNG",
            "totalFee": "0"
        }
    ],
    "responseCode": "00",
    "responseMessage": "SUCCESS"
}
```

--------------------------------

### Transaction Response Parameters

Source: https://docs.duitku.com/api/id

Details the fields returned in the JSON response after a successful transaction request to Duitku.

```APIDOC
## Transaction Response

### Description
This object is returned by the Duitku server after a transaction request. It contains the necessary data to facilitate payment for the customer.

### Response Fields
- **merchantCode** (string) - Merchant code associated with the project.
- **reference** (string) - Unique reference ID from Duitku (must be stored).
- **paymentUrl** (string) - URL for the Duitku payment page.
- **vaNumber** (string) - Virtual account number for bank transfers.
- **qrString** (string) - QR string for QRIS payments.
- **appUrl** (string) - Deep link URL for e-commerce payment applications.
- **amount** (integer) - Payment nominal amount.
- **statusCode** (string) - Status code of the transaction.
- **statusMessage** (string) - Status message of the transaction.

### Response Example
{
  "merchantCode": "DXXXX",
  "reference": "DXXXXCX80TZJ85Q70QCI",
  "paymentUrl": "https://sandbox.duitku.com/topup/topupdirectv2.aspx?ref=BCA7WZ7EIDXXXXWEC",
  "vaNumber": "7007014001444348",
  "qrString": "00020101021226660014ID.DANA...",
  "AppUrl": "https://tokopedia.app.link/...",
  "amount": "40000",
  "statusCode": "00",
  "statusMessage": "SUCCESS"
}
```

--------------------------------

### Respon Cek Transaksi

Source: https://docs.duitku.com/api/id

Contoh format JSON dari respon API saat pengecekan transaksi berhasil.

```json
{
  "merchantOrderId": "abcde12345",
  "reference": "DXXXXCX80TZJ85Q70QCI",
  "amount": "100000",
  "fee":"0.00",
  "statusCode": "00",
  "statusMessage": "SUCCESS"
}
```

--------------------------------

### Execute Duitku Transaction Request with PHP cURL

Source: https://docs.duitku.com/api/id

Configures and executes a POST request to the Duitku API. Ensure the $url and $params_string variables are defined before execution.

```php
    curl_setopt($ch, CURLOPT_URL, $url); 
    curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "POST");                                                                     
    curl_setopt($ch, CURLOPT_POSTFIELDS, $params_string);                                                                  
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);                                                                      
    curl_setopt($ch, CURLOPT_HTTPHEADER, array(                                                                          
        'Content-Type: application/json',                                                                                
        'Content-Length: ' . strlen($params_string))                                                                       
    );   
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);

    //execute post
    $request = curl_exec($ch);
    $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);

    if($httpCode == 200)
    {
        $result = json_decode($request, true);
        //header('location: '. $result['paymentUrl']);
        echo "paymentUrl :". $result['paymentUrl'] . "<br />";
        echo "merchantCode :". $result['merchantCode'] . "<br />";
        echo "reference :". $result['reference'] . "<br />";
        echo "vaNumber :". $result['vaNumber'] . "<br />";
        echo "amount :". $result['amount'] . "<br />";
        echo "statusCode :". $result['statusCode'] . "<br />";
        echo "statusMessage :". $result['statusMessage'] . "<br />";
    }
    else
    {
        $request = json_decode($request);
        $error_message = "Server Error " . $httpCode ." ". $request->Message;
        echo $error_message;
    }
?>
```

--------------------------------

### Request Payment Method via PHP

Source: https://docs.duitku.com/api/id

Implementation of the payment method request using PHP, including HMAC SHA256 signature generation.

```php
<?php

    // Set kode merchant anda 
    $merchantCode = "DXXXX"; 
    // Set merchant key anda 
    $apiKey = "DXXXXCX80TZJ85Q70QCI";
    // catatan: environtment untuk sandbox dan passport berbeda 

    $datetime = date('Y-m-d H:i:s');  
    $paymentAmount = 10000;

    $stringToSign = $merchantCode . $paymentAmount . $datetime;

    // Generate HMAC SHA256 (output hex lowercase)
    $signature = hash_hmac('sha256', $stringToSign, $apiKey);

    $params = array(
        'merchantcode' => $merchantCode,
        'amount' => $paymentAmount,
        'datetime' => $datetime,
        'signature' => $signature
    );

    $params_string = json_encode($params);

    $url = 'https://sandbox.duitku.com/webapi/api/merchant/paymentmethod/getpaymentmethod'; 

    $ch = curl_init();

    curl_setopt($ch, CURLOPT_URL, $url); 
    curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "POST");                                                                     
    curl_setopt($ch, CURLOPT_POSTFIELDS, $params_string);                                                                  
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);                                                                      
    curl_setopt($ch, CURLOPT_HTTPHEADER, array(                                                                          
        'Content-Type: application/json',                                                                                
        'Content-Length: ' . strlen($params_string))                                                                       
    );   
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);

    //execute post
    $request = curl_exec($ch);
    $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);

    if($httpCode == 200)
    {
        $results = json_decode($request, true);
        print_r($results, false);
    }
    else{
        $request = json_decode($request);
        $error_message = "Server Error " . $httpCode ." ". $request->Message;
        echo $error_message;
    }
?>
```

--------------------------------

### Define Payment Fee Object

Source: https://docs.duitku.com/api/id

Represents the payment method details and associated transaction fees.

```json
{
  "paymentMethod": "VA",
  "paymentName": "MAYBANK VA",
  "paymentImage": "https://images.duitku.com/hotlink-ok/VA.PNG",
  "totalFee": "0"
}
```

--------------------------------

### Signature Generation Formula

Source: https://docs.duitku.com/api/id

Formula for calculating the HMAC-SHA256 signature required for transaction authentication.

```text
stringToSign = merchantCode + merchantOrderId + paymentAmount
signature = HMAC_SHA256(stringToSign, apiKey)
```

--------------------------------

### Payment Method Response Format

Source: https://docs.duitku.com/api/id

JSON structure returned by the API containing the list of payment methods and response status.

```json
{
    "paymentFee": [        
        {
            "paymentMethod": "VA",
            "paymentName": "MAYBANK VA",
            "paymentImage": "https://images.duitku.com/hotlink-ok/VA.PNG",
            "totalFee": "0"
        },
        {
            "paymentMethod": "BT",
            "paymentName": "PERMATA VA",
            "paymentImage": "https://images.duitku.com/hotlink-ok/PERMATA.PNG",
            "totalFee": "0"
        },
    ],
    "responseCode": "00",
    "responseMessage": "SUCCESS"
}
```

--------------------------------

### HTTP Status Codes

Source: https://docs.duitku.com/api/id

A reference table of HTTP status codes and their corresponding error messages or success states for Duitku API requests.

```APIDOC
## HTTP Status Codes

| Code | Message | Description |
|---|---|---|
| 200 | SUCCESS | Proses anda berhasil. |
| 400 | Minimum Payment 10000 IDR | Pembayaran anda kurang dari ketentuan. |
| 400 | Maximum Payment exceeded | Pembayaran anda melebihi ketentuan. |
| 400 | paymentMethod is mandatory | Cek parameter `paymentMethod` anda. |
| 400 | merchantOrderId is mandatory | Cek parameter `merchantOrderId` anda. |
| 400 | length of merchantOrderId can't > 50 | Parameter `merchantOrderId` anda melebihi batas ketentuan. |
| 400 | Invalid Email Address | Cek parameter `email` anda. |
| 400 | length of email can't > 50 | Cek parameter `email` anda. |
| 400 | length of phoneNumber can't > 50 | Cek parameter `phoneNumber` anda. |
| 400 | Customer VA Name must not be empty for this payment channel | Cek parameter `customerVaName` anda. |
| 401 | Wrong signature | Cek parameter `signature` anda dan parameter lain yang berkaitan. |
| 404 | Merchant not found | Cek parameter _Merchant Code_ anda. |
| 404 | Payment channel not available | Metode pembayaran yang anda gunakan belum aktif. |
| 409 | Payment amount must be equal to all item price | Terdapat selisih pada `paymentAmount` dan total `price` dalam `itemDetails`. |
```

--------------------------------

### POST /webapi/api/merchant/transactionStatus

Source: https://docs.duitku.com/api/id

Retrieves the status of a transaction by providing the merchant code and order ID, signed with an HMAC SHA256 signature.

```APIDOC
## POST /webapi/api/merchant/transactionStatus

### Description
Checks the status of a transaction for a specific order ID. This can be used to verify transaction details or confirm payment status after receiving a callback.

### Method
POST

### Endpoint
https://sandbox.duitku.com/webapi/api/merchant/transactionStatus (Development)
https://passport.duitku.com/webapi/api/merchant/transactionStatus (Production)

### Parameters
#### Request Body
- **merchantCode** (string) - Required - The merchant code provided by Duitku.
- **merchantOrderId** (string) - Required - The unique transaction ID from the merchant.
- **signature** (string) - Required - HMAC SHA256 signature calculated as: HMAC_SHA256(merchantCode + merchantOrderId, apiKey).

### Request Example
{
  "merchantCode": "DXXXX",
  "merchantOrderId": "abcde12345",
  "signature": "497fbf783f6d17d4b1e1ef468917bdc8"
}

### Response
#### Success Response (200)
- **merchantOrderId** (string) - Order ID from the merchant.
- **reference** (string) - Duitku transaction reference.
- **amount** (string) - Transaction amount.
- **fee** (string) - Transaction fee.
- **statusCode** (string) - Transaction status code (00: Success, 01: Pending, 02: Canceled).
- **statusMessage** (string) - Payment status message.

#### Response Example
{
  "merchantOrderId": "abcde12345",
  "reference": "DXXXXCX80TZJ85Q70QCI",
  "amount": "100000",
  "fee": "0.00",
  "statusCode": "00",
  "statusMessage": "SUCCESS"
}
```
Tokens:
Raw