Winpay

https://docs.winpay.id
Admin
Winpay is a payment integration platform that simplifies online payment processing and enables...
Tokens:40,785
Snippets:215
Trust Score:7.5
Update:3 months ago
Show doc for...
Tokens:
Raw
### Success Response Example

Source: https://docs.winpay.id/api/checkout-page/update-invoice

Example of a successful 200 OK response when an invoice is found and updated.

```json
{
  "responseCode": "2000300",
  "responseMessage": "Invoice Found",
  "responseDate": "2023-09-05T10:00:16+07:00",
  "responseData": {
    "id": "4282f340-51a8-40a2-a0e6-f3c95543ab6f",
    "ref": "invoice-0000001",
    "created_at": "2023-09-05 09:52:53",
    "redirect_url": "https://sandbox-checkout.winpay.id/g5jh1k55lv9",
    "back_url": "https://google.com",
    "status": "UNPAID",
    "customer": {
      "name": "Delina Prasetya",
      "email": "someone@email.com",
      "phone": "082342861666"
    },
    "products": [
      {
        "uuid": "f55cd7c4-b4b0-45b3-b2ff-102e8dd8f122",
        "name": "Keripik Singkong",
        "qty": 20,
        "price": 20000
      },
      {
        "uuid": "3d3d40b8-1a05-408e-ae98-1c7257cec2ed",
        "name": "Jasa Kirim",
        "qty": 1,
        "price": 5000
      }
    ]
  }
}
```

--------------------------------

### Invoice Response Sample

Source: https://docs.winpay.id/payments/checkout-page/find-invoice-byMerchantRef

Example of the JSON body returned upon a successful invoice lookup.

```json
{
  "responseCode": "2000300",
  "responseMessage": "Invoice Found",
  "responseDate": "2022-04-11T15:27:43+07:00",
  "responseData": {
    "id": "a3ef3f93-7fcb-439a-889e-14976a46492e",
    "ref": "01002676201405,201406,201407,201408,201409,201410",
    "created_at": "2022-04-11 11:41:45",
    "redirect_url": "https://sandbox-checkout.winpay.id/HJHKvf1chmn",
    "back_url": "https://your-invoice-url.com",
    "status": "PAID",
    "customer": {
      "name": "PERM. BUMI CITRA FAJ",
      "email": "customer@pdam-sby.winpay.id",
      "phone": "01002676"
    },
    "products": [
      {
        "uuid": "0b81e4b1-a1c7-4d96-985f-b24b7ed80b67",
        "name": "01002676",
        "qty": 1,
        "price": "305300"
      }
    ],
    "payment": {
      "uuid": "6b67178b-0378-4bee-b4ac-87945890ca0f",
      "channel": "BSI",
      "code": "164965211642",
      "payment_ref": "10460",
      "paid_amount": "306300",
      "fee": "1000",
      "nett": "305300",
      "created_at": "2022-04-11T04:43:03.000000Z",
      "updated_at": "2022-04-11T04:43:03.000000Z"
    }
  }
}
```

--------------------------------

### Virtual Account Signature Validation

Source: https://docs.winpay.id/payments/snap-api/signature-callback-validation

Implementation examples for verifying callback signatures in PHP and Node.js.

```php
$path = '/sandbox_prod/url_listener.php/v1.0/transfer-va/payment';  
$timestamp = '2024-01-11T08:57:55+07:00'; //ambil dari header X-Timestamp  
$signature = 'Zng8tJgtK2lPd8CP89KyO1OGEKXn1tFfXevTGIn5IhHYDpobp7+4uvuczP5HwldghO5mzkh03v6wnggoZev8M2RyKegbrRaIr66KbAgr6sfKfH9MfkXFcEKpF/am8QMr4oExKPdYTdGEr6pq6m1CzUjFQsyu9z6JuMGrjXrxFXU='; //ambil dari header X-Signature  
$httpMethod = 'POST';  
$partnerId = '170041'; //ambil dari header X-Partner-Id  
$body = [  
        "partnerServiceId"=> "    9042",  
        "customerNo"=> "00000009",  
        "virtualAccountNo"=> "    904200000009",  
        "virtualAccountName"=> "WINPAY - fiandi",  
        "trxId"=> "INV-000000023220",  
        "paymentRequestId"=> "45539",  
        "paidAmount"=> [  
          "value"=> "10000.00",  
          "currency"=> "IDR"  
        ],  
        "trxDateTime"=> "2024-01-11T08:57:55+07:00",  
        "additionalInfo"=> [  
          "contractId"=> "si1cd5671d-2ffe-4cca-aff0-b8ee9bc1c041",  
          "channel"=> "BSI"  
        ]  
];  
  
$payload = json_encode($body, JSON_UNESCAPED_SLASHES);  
  
$stringToSignArr = [  
    $httpMethod,  
    $path,  
    strtolower(bin2hex(hash('sha256', $payload, true))),  
    $timestamp  
];  
  
$stringToSign = implode(':', $stringToSignArr);  
  
try {  
    $publicKey = openssl_get_publickey($publicKey);  
    $verify = openssl_verify($stringToSign, base64_decode($signature), $publicKey, OPENSSL_ALGO_SHA256);  
  
    if($verify !== 1){  
        $response = [  
            'message' => 'Cannot verify signature'  
        ];  
  
        print_r($response);  
    } else {  
        $response = [  
            'responseCode' => '2002500',  
            'responseMessage' => 'Successful'  
        ];  
  
        print_r($response);  
    }  
  
  
} catch(Exception $e) {  
    $response = [  
        'message' => 'Invalid signature {'.$e->getMessage().'}'  
    ];  
  
    print_r($response);  
}
```

```javascript
const path = "/sandbox_prod/url_listener.php/v1.0/transfer-va/payment";  
const timestamp = "2024-01-11T08:57:55+07:00"; //ambil dari header X-Timestamp  
const signature =  
  "Zng8tJgtK2lPd8CP89KyO1OGEKXn1tFfXevTGIn5IhHYDpobp7+4uvuczP5HwldghO5mzkh03v6wnggoZev8M2RyKegbrRaIr66KbAgr6sfKfH9MfkXFcEKpF/am8QMr4oExKPdYTdGEr6pq6m1CzUjFQsyu9z6JuMGrjXrxFXU="; //ambil dari header X-Signature  
const httpMethod = "POST";  
const partnerId = "170041"; //ambil dari header X-Partner-Id  
const body = {  
  partnerServiceId: "    9042",  
  customerNo: "00000009",  
  virtualAccountNo: "    904200000009",  
  virtualAccountName: "WINPAY - fiandi",  
  trxId: "INV-000000023220",  
  paymentRequestId: "45539",  
  paidAmount: {  
    value: "10000.00",  
    currency: "IDR",  
  },  
  trxDateTime: "2024-01-11T08:57:55+07:00",  
  additionalInfo: {  
    contractId: "si1cd5671d-2ffe-4cca-aff0-b8ee9bc1c041",  
    channel: "BSI",  
  },  
};  
const payload = JSON.stringify(body);  
const stringToSignArr = [  
  httpMethod,  
  path,  
  crypto.createHash("sha256").update(payload).digest("hex"),  
  timestamp,  
];  
const stringToSign = stringToSignArr.join(":");  
try {  
  const publicKey = fs.readFileSync("publicKey.pem");  
  const verify = crypto  
    .createVerify("sha256")  
    .update(stringToSign)  
    .verify(publicKey, Buffer.from(signature, "base64"));  
  if (!verify) {  
    const response = {  
      message: "Cannot verify signature",  
    };  
    console.log(response);  
  } else {  
    const response = {  
      responseCode: "2002500",  
      responseMessage: "Successful",  
    };  
    console.log(response);  
  }  
} catch (error) {  
  const response = {  
    message: "Invalid signature {" + error.message + "}",  
  };  
  console.log(response);  
}
```

--------------------------------

### Bad Request Response Example

Source: https://docs.winpay.id/api/checkout-page/update-invoice

Example of a 400 Bad Request response, typically returned when an invoice has already been paid.

```json
{
  "responseCode": "4000302",
  "responseMessage": "Invoice already paid",
  "responseDate": "2023-09-05T10:24:16+07:00",
  "responseData": []
}
```

--------------------------------

### Create eWallet Payment Response

Source: https://docs.winpay.id/payments/snap-api/ewallet

Example response returned after a successful eWallet payment creation request.

```json
{
  "responseCode": "2005400",
  "responseMessage": "Success",
  "partnerReferenceNo": "000000000056",
  "appRedirectUrl": "",
  "webRedirectUrl": "https://pay.uat.airpay.co.id/h5pay/pay?type=start&medium_index=dFhkbmR1bTBIamhWwwGYax2gqqaG0bwCV3nlkmQLDsIkIhz-8m0VHcHV0nVvrpd3jK_DCulreFD1J5whxFwzXw&order_key=dabvhWOGQdcTs-dR3s_sFR69_X188lg92nPv2v0-uT1zpS7nWhxcDJuuOzUln7Z1PPVTPc6MyF6Vrw&source=web&token=dFhkbmR1bTBIamhWwwGYax2gqqaG0bwCV3nlkmQLDsIkIhz-8m0VHcHV0nVvrpd3jK_DCulreFD1J5whxFwzXw",
  "additionalInfo": {
    "contractId": "so4c0a61fa-5ad4-4fee-99ed-2a7b06b30c4b",
    "expiredTime": "2023-09-05T17:10:11+07:00",
    "channel": "SPAY",
    "instructions": []
  }
}
```

--------------------------------

### Create Virtual Account Response Payload

Source: https://docs.winpay.id/payments/snap-api/virtual-account

Example of a successful response returned after creating a Virtual Account.

```json
{
  "responseCode": "2002700",
  "responseMessage": "Success",
  "virtualAccountData": {
    "partnerServiceId": "   22691",
    "customerNo": "41693898987",
    "virtualAccountNo": "   2269141693898987",
    "virtualAccountName": "Chus Pandi",
    "trxId": "INV-000000023212x2221",
    "totalAmount": {
      "value": "25000.00",
      "currency": "IDR"
    },
    "virtualAccountTrxType": "c",
    "expiredDate": "2023-09-05T19:30:14+07:00",
    "additionalInfo": {
      "channel": "CIMB",
      "contractId": "cia80bff69-1073-4811-b1e1-13b738784d8b"
    }
  }
}
```

--------------------------------

### Create QRIS Payment Response

Source: https://docs.winpay.id/payments/snap-api/qris

Example JSON response returned after a successful QRIS generation request.

```json
{
  "responseCode": "2004700",
  "responseMessage": "Success",
  "partnerReferenceNo": "ref00000000001",
  "qrContent": null,
  "qrUrl": "https://sandbox-payment.winpay.id/scqr/get_image_qr?payid=1309cd8ceef30410ed1664c8c8c0bb76",
  "terminalId": "TERM GIGIH",
  "additionalInfo": {
    "contractId": "qr2300a3fe-68b8-414b-bf00-8f44ce1cf5d3",
    "expiredAt": "2023-09-06T23:08:56+07:00",
    "isStatic": false
  }
}
```

--------------------------------

### Callback Request Sample

Source: https://docs.winpay.id/payments/checkout-page/callback

Example of the JSON body sent by Winpay to the merchant's listener URL upon payment completion.

```json
{
  "uuid": "40777df1-ad3d-4572-b0a3-6c90574330fa",
  "created_at": "2022-11-14T10:48:00+07:00",
  "ref": "21125",
  "channel": "BSI",
  "amount": 18940,
  "fee": 0,
  "nett_amount": 18940,
  "products": [
    {
      "name": "1172164",
      "qty": 1,
      "price": 18940
    }
  ],
  "invoice": {
    "uuid": "f6bd0574-56ca-4926-849c-8c332694966c",
    "ref": "1172164-1668397659",
    "url": "https://checkout.winpay.id/ilhwj3z75x5",
    "customer": {
      "name": "TUTIANxxxxxx",
      "email": "customer@pdam-sby.winpay.id",
      "phone": "1172164"
    }
  }
}
```

--------------------------------

### QRIS Callback Response Example

Source: https://docs.winpay.id/payments/snap-api/qris

The required JSON response format that the merchant must return to acknowledge receipt of the callback.

```json
{
  "responseCode": "2005200",
  "responseMessage": "success"
}
```

--------------------------------

### Callback Payload Structure

Source: https://docs.winpay.id/payments/snap-api/creditcard

Example of the JSON payload sent by Winpay to the merchant's notification service.

```json
{
  "originalPartnerReferenceNo": "0000000000577",
  "originalReferenceNo": "36289",
  "merchantId": "170041",
  "amount": {
    "value": "1000",
    "currency": "IDR"
  },
  "latestTransactionStatus": "00",
  "additionalInfo": {
    "channel": "CC",
    "contractId": "cc1baf2f8b-451b-44f0-80fb-fb68325e9c8b"
  }
}
```

--------------------------------

### Balance Inquiry Response Payload

Source: https://docs.winpay.id/payments/snap-api/report

Example of a successful response containing account balance details for the requested types.

```json
{
  "responseCode": "2001100",
  "responseMessage": "Request has been processed successfully",
  "referenceNo": "BWPRzPwFixh8sbXviruY3MnYdUxvC3Kvirvir",
  "partnerReferenceNo": "2020102900000000000005",
  "accountNo": "172188",
  "name": "WINPAY",
  "accountInfos": [
    {
      "balanceType": "Transaction",
      "amount": {
        "value": "10000.00",
        "currency": "IDR"
      },
      "status": "0001"
    },
    {
      "balanceType": "Settlement",
      "amount": {
        "value": "10000.00",
        "currency": "IDR"
      },
      "status": "0001"
    }
  ]
}
```

--------------------------------

### Query Payment Response Structure

Source: https://docs.winpay.id/payments/snap-api/qris

Example response returned by the query service, indicating the transaction status and payment details.

```json
{
  "responseCode": "2005100",
  "responseMessage": "Success",
  "originalPartnerReferenceNo": "gigih-00000081",
  "serviceCode": "47",
  "latestTransactionStatus": "00",
  "transactionStatusDesc": "Success",
  "paidTime": "2023-08-24T17:03:33+07:00",
  "amount": {
    "value": "2000.00",
    "currency": "IDR"
  },
  "feeAmount": {
    "value": "14.00",
    "currency": "IDR"
  },
  "terminalId": "",
  "additionalInfo": {
    "issuer": "Dana",
    "rrn": "810534941939",
    "buyerReff": "Winpay"
  }
}
```

--------------------------------

### QRIS Callback Payload Example

Source: https://docs.winpay.id/payments/snap-api/qris

The JSON structure sent by Winpay to the merchant's callback URL upon transaction completion.

```json
{
  "originalReferenceNo": "38740",
  "originalPartnerReferenceNo": "1013225-1698047338",
  "latestTransactionStatus": "00",
  "amount": {
    "value": "35490",
    "currency": "IDR"
  },
  "additionalInfo": {
    "channel": "QRIS",
    "contractId": "qraa6e280d-2299-45ed-a040-783af3d4e80c",
    "brandName": "DANA",
    "rrn": "737659758297",
    "buyerRef": "PDAM",
    "terminalId": "A01"
  }
}
```

--------------------------------

### Update Invoice Response Body

Source: https://docs.winpay.id/payments/checkout-page/update-invoice

Example of the JSON response returned upon a successful invoice update.

```json
{
  "responseCode": "2000300",  
  "responseMessage": "Invoice Updated",  
  "responseDate": "2023-10-25T14:12:14+07:00",  
  "responseData": {  
    "id": "2edff262-6228-4da1-96d7-729bf9fc85f0",  
    "ref": "0000001792131232161",  
    "created_at": "2023-10-25 14:12:14",  
    "redirect_url": "https://checkout.winpay.id/upu90zxyid",  
    "back_url": "https://your-invoice-url.com",  
    "customer": {  
      "name": "Delina Prasetya",  
      "email": "gigih.putri@corp.bm.co.id",  
      "phone": "082342341"  
    },  
    "products": [  
      {  
        "uuid": "92cd6096-ab4a-4e79-be61-c4cdbeedd281",  
        "name": "01002676",  
        "qty": 1,  
        "price": 260000  
      }  
    ]  
  }  
}
```

--------------------------------

### Delete Invoice Not Found Response

Source: https://docs.winpay.id/api/checkout-page/delete-invoice

Example JSON response returned when the requested invoice ID does not exist.

```json
{
  "responseCode": "4040300",
  "responseMessage": "Invoice not found",
  "responseDate": "2023-09-05T10:00:16+07:00",
  "responseData": []
}
```

--------------------------------

### Virtual Account Inquiry Response Payload

Source: https://docs.winpay.id/payments/snap-api/virtual-account

Example of a successful response payload containing the virtual account transaction details and status.

```json
{
  "responseCode": "2002600",
  "responseMessage": "Successful",
  "virtualAccountData": {
    "virtualAccountNo": "2269141708949044",
    "virtualAccountName": "Valid 14",
    "paymentFlagStatus": "00",
    "transactionDate": "2024-02-26T19:04:51+00:00",
    "referenceNo": "50966",
    "totalAmount": {
      "value": "15000.00",
      "currency": "IDR"
    }
  },
  "additionalInfo": {
    "contractId": "ciaf1b982a-9d06-4e27-ba39-a6aefd9e813d",
    "channel": "CIMB",
    "trxId": "xxxxxxxxxxx13"
  }
}
```

--------------------------------

### Cancel Payment Response

Source: https://docs.winpay.id/payments/snap-api/ewallet

Example response confirming the cancellation of an eWallet transaction.

```json
{
  "responseCode": "2005700",
  "responseMessage": "Successful",
  "additionalInfo": {
    "contractId": "soe1f74b38-e689-4747-b4bd-5dd876928349"
  }
}
```

--------------------------------

### GET /api/find/{id}

Source: https://docs.winpay.id/payments/checkout-page/find-invoice

Retrieves invoice details based on the provided transaction ID.

```APIDOC
## GET /api/find/{id}

### Description
Retrieves invoice details based on the provided transaction ID.

### Method
GET

### Endpoint
/api/find/{id}

### Parameters
#### Path Parameters
- **id** (string) - Required - The unique identifier of the invoice.

#### Headers
- **X-Winpay-Timestamp** (string) - Required - Transaction date in YYYY-MM-DDTHH:mm:ss+07:00 format (GMT+7).
- **X-Winpay-Signature** (string) - Required - Signature generated by the merchant.
- **X-Winpay-Key** (string) - Required - Client key of the merchant.
- **Content-Type** (string) - Required - Must be application/json.

### Response
#### Success Response (200)
- **responseCode** (string) - Response code.
- **responseMessage** (string) - Response message.
- **responseDate** (date) - Response date.
- **responseData** (json) - Object containing invoice details including id, ref, created_at, back_url, status, customer, products, and payment information.

#### Response Example
{
  "responseCode": "2000300",
  "responseMessage": "Invoice Found",
  "responseDate": "2022-04-11T15:27:43+07:00",
  "responseData": {
    "id": "a3ef3f93-7fcb-439a-889e-14976a46492e",
    "ref": "01002676201405,201406,201407,201408,201409,201410",
    "created_at": "2022-04-11 11:41:45",
    "redirect_url": "https://sandbox-checkout.winpay.id/HJHKvf1chmn",
    "back_url": "https://your-invoice-url.com",
    "status": "PAID",
    "customer": {
      "name": "PERM. BUMI CITRA FAJ",
      "email": "customer@pdam-sby.winpay.id",
      "phone": "01002676"
    },
    "products": [
      {
        "uuid": "0b81e4b1-a1c7-4d96-985f-b24b7ed80b67",
        "name": "01002676",
        "qty": 1,
        "price": "305300"
      }
    ],
    "payment": {
      "uuid": "6b67178b-0378-4bee-b4ac-87945890ca0f",
      "channel": "BSI",
      "code": "164965211642",
      "payment_ref": "10460",
      "paid_amount": "306300",
      "fee": "1000",
      "nett": "305300",
      "created_at": "2022-04-11T04:43:03.000000Z",
      "updated_at": "2022-04-11T04:43:03.000000Z"
    }
  }
}
```

--------------------------------

### GET /api/findByRef/{merchantRef}

Source: https://docs.winpay.id/payments/checkout-page/find-invoice-byMerchantRef

Retrieves invoice information based on the provided merchant reference.

```APIDOC
## GET /api/findByRef/{merchantRef}

### Description
This endpoint is used to search for an invoice based on the merchant reference.

### Method
GET

### Endpoint
/api/findByRef/{merchantRef}

### Parameters
#### Path Parameters
- **merchantRef** (string) - Required - The merchant reference identifier for the invoice.

### Headers
- **X-Winpay-Timestamp** (string) - Required - Transaction date in YYYY-MM-DDTHH:mm:ss+07:00 format (GMT+7).
- **X-Winpay-Signature** (string) - Required - Signature generated by the merchant.
- **X-Winpay-Key** (string) - Required - Merchant client key.
- **Content-Type** (string) - Required - Must be application/json.

### Response
#### Success Response (200)
- **responseCode** (string) - Response code.
- **responseMessage** (string) - Response message.
- **responseDate** (date) - Response date.
- **responseData** (json) - Object containing invoice details including id, ref, created_at, back_url, status, customer, products, and payment information.

### Response Example
{
  "responseCode": "2000300",
  "responseMessage": "Invoice Found",
  "responseDate": "2022-04-11T15:27:43+07:00",
  "responseData": {
    "id": "a3ef3f93-7fcb-439a-889e-14976a46492e",
    "ref": "01002676201405,201406,201407,201408,201409,201410",
    "created_at": "2022-04-11 11:41:45",
    "redirect_url": "https://sandbox-checkout.winpay.id/HJHKvf1chmn",
    "back_url": "https://your-invoice-url.com",
    "status": "PAID",
    "customer": {
      "name": "PERM. BUMI CITRA FAJ",
      "email": "customer@pdam-sby.winpay.id",
      "phone": "01002676"
    },
    "products": [
      {
        "uuid": "0b81e4b1-a1c7-4d96-985f-b24b7ed80b67",
        "name": "01002676",
        "qty": 1,
        "price": "305300"
      }
    ],
    "payment": {
      "uuid": "6b67178b-0378-4bee-b4ac-87945890ca0f",
      "channel": "BSI",
      "code": "164965211642",
      "payment_ref": "10460",
      "paid_amount": "306300",
      "fee": "1000",
      "nett": "305300",
      "created_at": "2022-04-11T04:43:03.000000Z",
      "updated_at": "2022-04-11T04:43:03.000000Z"
    }
  }
}
```

--------------------------------

### POST {your path callback}

Source: https://docs.winpay.id/payments/checkout-page/callback

Endpoint for receiving payment status notifications from Winpay.

```APIDOC
## POST {your path callback}

### Description
WinPay sends a POST request to the merchant's listener URL after a customer completes a payment. The merchant must respond with the string "ACCEPTED" to acknowledge receipt; otherwise, the request will be retried up to 3 times.

### Method
POST

### Endpoint
{your path callback}

### Request Body
- **uuid** (string) - Invoice UUID
- **created_at** (date time iso 8061) - Date time created invoice
- **ref** (string) - Invoice ref
- **channel** (string) - Invoice paid with
- **amount** (integer) - Invoice amount
- **fee** (integer) - Invoice fee
- **nett_amount** (integer) - Amount - fee
- **products** (array of object) - List of product
- **products[].name** (string) - Product name
- **products[].qty** (string) - Product quantity
- **products[].price** (string) - Product price
- **invoice** (object) - Invoice detail
- **invoice.uuid** (string) - Invoice UUID
- **invoice.ref** (string) - Invoice ref
- **invoice.url** (string) - Invoice page URL
- **invoice.customer** (object) - Invoice customer detail
- **invoice.customer.name** (string) - Invoice customer name
- **invoice.customer.email** (string) - Invoice customer email
- **invoice.customer.phone** (string) - Invoice customer phone

### Request Example
{
  "uuid": "40777df1-ad3d-4572-b0a3-6c90574330fa",
  "created_at": "2022-11-14T10:48:00+07:00",
  "ref": "21125",
  "channel": "BSI",
  "amount": 18940,
  "fee": 0,
  "nett_amount": 18940,
  "products": [
    {
      "name": "1172164",
      "qty": 1,
      "price": 18940
    }
  ],
  "invoice": {
    "uuid": "f6bd0574-56ca-4926-849c-8c332694966c",
    "ref": "1172164-1668397659",
    "url": "https://checkout.winpay.id/ilhwj3z75x5",
    "customer": {
      "name": "TUTIANxxxxxx",
      "email": "customer@pdam-sby.winpay.id",
      "phone": "1172164"
    }
  }
}

### Response
#### Success Response (200)
- **Response** (string) - Must return "ACCEPTED"

#### Response Example
ACCEPTED
```

--------------------------------

### Cancel Payment Response

Source: https://docs.winpay.id/payments/snap-api/creditcard

Example response payload confirming the cancellation of a credit card transaction.

```json
{
  "responseCode": "2005700",
  "responseMessage": "Successful",
  "additionalInfo": {
    "contractId": "cce1f74b38-e689-4747-b4bd-5dd876928349"
  }
}
```

--------------------------------

### Delete Invoice Success Response

Source: https://docs.winpay.id/api/checkout-page/delete-invoice

Example JSON response returned when an invoice is successfully deleted.

```json
{
  "responseCode": "2000300",
  "responseMessage": "Invoice has been deleted",
  "responseDate": "2023-09-05T10:00:16+07:00",
  "responseData": []
}
```

--------------------------------

### Validate QRIS Callback Signature in Go

Source: https://docs.winpay.id/payments/snap-api/signature-callback-validation

This implementation includes JSON minification, SHA-256 hashing, and RSA PKCS1v15 signature verification. Ensure the public key is correctly configured for your environment.

```go
package main  
  
import (  
    "bytes"  
    "crypto"  
    "crypto/rsa"  
    "crypto/sha256"  
    "crypto/x509"  
    "encoding/base64"  
    "encoding/hex"  
    "encoding/json"  
    "fmt"  
    "io"  
    "strings"  
)  
  
func main() {  
  
    path := "/sandbox_prod/url_listener.php/v1.0/qr/qr-mpm-notify"  
    tStamp := "2024-01-11T16:36:57+07:00" // ambil dari header X-Timestamp  
    method := "POST" // http method  
    signature := "Zeqi6FIJ1Po8JU2tc0yqfqEbiHNfBYkvesbKIcPIEomsBpqriWrD5cqMH2Tb8Ys8U5CSqBhSliM8KnQ0YIyk444mCEe4M4eKnGVYA3YVfE3Bg1IOviugqzCeNPKxU8kxARdaXVlCo7s+tA9roHt+fE5ZTRYeGkAEC3ChM8277aI=" // ambil dari header X-Signature  
  
    payloadStr := `{  
        "originalReferenceNo": "45584",  
        "originalPartnerReferenceNo": "abctoxfzxc",  
        "latestTransactionStatus": "00",  
        "amount": {  
          "value": "45000",  
          "currency": "IDR"  
        },  
        "additionalInfo": {  
          "channel": "QRIS",  
          "contractId": "qr748ad360-9755-40af-a201-e44b45c4568f",  
          "brandName": "DANA",  
          "rrn": "027364710019",  
          "buyerRef": "WINPAY",  
          "terminalId": null  
        }  
    }`  
  
    minifyBody, _ := Minify([]byte(payloadStr))  
    stringToSign := fmt.Sprintf("%s:%s:%s:%s", method, path, string(minifyBody), tStamp)  
  
    signatureOk := ValidateSignature(stringToSign, signature)  
    fmt.Println("Apakah signature valid?")  
    fmt.Println(signatureOk)  
  
}  
  
func Minify(body []byte) ([]byte, error) {  
    buff := new(bytes.Buffer)  
    errCompact := json.Compact(buff, body)  
    if errCompact != nil {  
        newErr := fmt.Errorf("failure encountered compacting json := %v", errCompact)  
        return nil, newErr  
    }  
    b, err := io.ReadAll(buff)  
    if err != nil {  
        readErr := fmt.Errorf("read buffer error encountered := %v", err)  
        return nil, readErr  
    }  
    // LowerCase(HexEncode(SHA-256(stringToMinify)))  
    hasher := sha256.New()  
    hasher.Write([]byte(b))  
    hash := hex.EncodeToString(hasher.Sum(nil))  
    return []byte(strings.ToLower(hash)), nil  
}  
  
func ValidateSignature(data string, signature string) bool {  
  
    // Ubah dengan public key dari WINPAY  
    publicKey := "MIGeMA0GCSqGSIb3DQEBAQUAA4GMADCBiAKBgHGK10J1oBbCD75Wy8P5rL8zzCz9lpHZ7OIHVaO4vlX0tjpKD887ldaTLl4Vdhc6I88OHscV/ijQ7OQ07IpWLAoSm7VKpuiUDt9xUx9dCHAIrH6DDNOI95z2b6jxwh81ZTC+LCDsEb5b797dmxa7Kv8kABjoNt8JR33E9p3d7uzrAgMBAAE="  
    pubKeyBytes, err := base64.StdEncoding.DecodeString(publicKey)  
    if err != nil {  
        panic(err)  
    }  
  
    parsedPubKey, err := x509.ParsePKIXPublicKey(pubKeyBytes)  
    if err != nil {  
        panic(err)  
    }  
  
    pubKey, ok := parsedPubKey.(*rsa.PublicKey)  
    if !ok {  
        panic("public key is not RSA")  
    }  
  
    hasher := sha256.New()  
    hasher.Write([]byte(data))  
  
    signatureBytes, err := base64.StdEncoding.DecodeString(signature)  
    if err != nil {  
        panic(err)  
    }  
  
    err = rsa.VerifyPKCS1v15(pubKey, crypto.SHA256, hasher.Sum(nil), signatureBytes)  
    if err != nil {  
        return false  
    }  
  
    return true  
}
```

--------------------------------

### POST /api/create

Source: https://docs.winpay.id/payments/checkout-page/create-invoice

Creates a new invoice for the Winpay Checkout Page.

```APIDOC
## POST /api/create

### Description
Creates a new invoice request for the Winpay Checkout Page.

### Method
POST

### Endpoint
/api/create

### Headers
- **X-Winpay-Timestamp** (String) - Required - Transaction date in YYYY-MM-DDTHH:mm:ss+07:00 format (GMT+7).
- **X-Winpay-Signature** (String) - Required - Signature generated by the merchant.
- **X-Winpay-Key** (String) - Required - Merchant client key.
- **Content-Type** (String) - Required - Must be application/json.

### Request Body
- **customer** (JSON Object) - Required
  - **name** (String) - Required - Customer name.
  - **email** (String) - Optional - Customer email.
  - **phone** (String) - Required - Customer phone number.
- **invoice** (JSON Object) - Required
  - **ref** (String) - Required - Reference number for the transaction.
  - **products** (Array) - Required - List of products.
    - **name** (String) - Required - Product name.
    - **qty** (Integer) - Required - Product quantity.
    - **price** (Integer) - Required - Product price.
- **back_url** (String) - Required - URL to redirect after payment.
- **interval** (Integer) - Required - Expiration time in minutes.

### Request Example
{
  "customer": {
    "name": "Delina Prasetya",
    "email": "gigih.putri@corp.bm.co.id",
    "phone": "082342341"
  },
  "invoice": {
    "ref": "111130",
    "products": [
      {
        "name": "01002676",
        "qty": 1,
        "price": 260000
      }
    ]
  },
  "back_url": "https://your-invoice-url.com",
  "interval": 120
}

### Response
#### Success Response (200)
- **responseCode** (String) - Response code.
- **responseMessage** (String) - Response message.
- **responseDate** (Date) - Response date.
- **responseData** (JSON Object) - Transaction details including id, ref, created_at, redirect_url, and customer/product info.

#### Response Example
{
  "responseCode": "2010300",
  "responseMessage": "Invoice created",
  "responseDate": "2023-10-25T14:12:14+07:00",
  "responseData": {
    "id": "2edff262-6228-4da1-96d7-729bf9fc85f0",
    "ref": "0000001792131232161",
    "created_at": "2023-10-25 14:12:14",
    "redirect_url": "https://checkout.winpay.id/upu90zxyid",
    "back_url": "https://your-invoice-url.com",
    "customer": {
      "name": "Delina Prasetya",
      "email": "gigih.putri@corp.bm.co.id",
      "phone": "082342341"
    },
    "products": [
      {
        "uuid": "92cd6096-ab4a-4e79-be61-c4cdbeedd281",
        "name": "01002676",
        "qty": 1,
        "price": 260000
      }
    ]
  }
}
```

--------------------------------

### Validate Snap API Callback Signature in Go

Source: https://docs.winpay.id/payments/snap-api/signature-callback-validation

This implementation includes JSON body minification, SHA-256 hashing, and RSA PKCS1v15 signature verification. Ensure the public key is correctly sourced from the provider.

```go
package main  
  
import (  
    "bytes"  
    "crypto"  
    "crypto/rsa"  
    "crypto/sha256"  
    "crypto/x509"  
    "encoding/base64"  
    "encoding/hex"  
    "encoding/json"  
    "fmt"  
    "io"  
    "strings"  
)  
  
func main() {  
  
    path := "/sandbox_prod/url_listener.php/v1.0/transfer-va/payment"  
    tStamp := "2024-01-11T08:57:55+07:00" // ambil dari header X-Timestamp  
    method := "POST" // http method  
    signature := "Zng8tJgtK2lPd8CP89KyO1OGEKXn1tFfXevTGIn5IhHYDpobp7+4uvuczP5HwldghO5mzkh03v6wnggoZev8M2RyKegbrRaIr66KbAgr6sfKfH9MfkXFcEKpF/am8QMr4oExKPdYTdGEr6pq6m1CzUjFQsyu9z6JuMGrjXrxFXU=" // ambil dari header X-Signature  
  
    payloadStr := `{  
        "partnerServiceId" : "    9042",  
        "customerNo" : "00000009",  
        "virtualAccountNo" : "    904200000009",  
        "virtualAccountName" : "WINPAY - fiandi",  
        "trxId" : "INV-000000023220",  
        "paymentRequestId" : "45539",  
        "paidAmount" : {  
          "value" : "10000.00",  
          "currency" : "IDR"  
        },  
        "trxDateTime" : "2024-01-11T08:57:55+07:00",  
        "additionalInfo" : {  
          "contractId" : "si1cd5671d-2ffe-4cca-aff0-b8ee9bc1c041",  
          "channel" : "BSI"  
        }  
    }`  
  
    minifyBody, _ := Minify([]byte(payloadStr))  
    stringToSign := fmt.Sprintf("%s:%s:%s:%s", method, path, string(minifyBody), tStamp)  
  
    signatureOk := ValidateSignature(stringToSign, signature)  
    fmt.Println("Apakah signature valid?")  
    fmt.Println(signatureOk)  
  
}  
  
func Minify(body []byte) ([]byte, error) {  
    buff := new(bytes.Buffer)  
    errCompact := json.Compact(buff, body)  
    if errCompact != nil {  
        newErr := fmt.Errorf("failure encountered compacting json := %v", errCompact)  
        return nil, newErr  
    }  
    b, err := io.ReadAll(buff)  
    if err != nil {  
        readErr := fmt.Errorf("read buffer error encountered := %v", err)  
        return nil, readErr  
    }  
    // LowerCase(HexEncode(SHA-256(stringToMinify)))  
    hasher := sha256.New()  
    hasher.Write([]byte(b))  
    hash := hex.EncodeToString(hasher.Sum(nil))  
    return []byte(strings.ToLower(hash)), nil  
}  
  
func ValidateSignature(data string, signature string) bool {  
  
    // Ubah dengan public key dari WINPAY  
    publicKey := "MIGeMA0GCSqGSIb3DQEBAQUAA4GMADCBiAKBgHGK10J1oBbCD75Wy8P5rL8zzCz9lpHZ7OIHVaO4vlX0tjpKD887ldaTLl4Vdhc6I88OHscV/ijQ7OQ07IpWLAoSm7VKpuiUDt9xUx9dCHAIrH6DDNOI95z2b6jxwh81ZTC+LCDsEb5b797dmxa7Kv8kABjoNt8JR33E9p3d7uzrAgMBAAE="  
    pubKeyBytes, err := base64.StdEncoding.DecodeString(publicKey)  
    if err != nil {  
        panic(err)  
    }  
  
    parsedPubKey, err := x509.ParsePKIXPublicKey(pubKeyBytes)  
    if err != nil {  
        panic(err)  
    }  
  
    pubKey, ok := parsedPubKey.(*rsa.PublicKey)  
    if !ok {  
        panic("public key is not RSA")  
    }  
  
    hasher := sha256.New()  
    hasher.Write([]byte(data))  
  
    signatureBytes, err := base64.StdEncoding.DecodeString(signature)  
    if err != nil {  
        panic(err)  
    }  
  
    err = rsa.VerifyPKCS1v15(pubKey, crypto.SHA256, hasher.Sum(nil), signatureBytes)  
    if err != nil {  
        return false  
    }  
  
    return true  
}  
```

--------------------------------

### Delete Virtual Account Response Payload

Source: https://docs.winpay.id/payments/snap-api/virtual-account

Example response returned after a successful virtual account deletion request.

```json
{
  "responseCode": "2003100",
  "responseMessage": "Success",
  "virtualAccountData": {
    "trxId": "xxxxxxxxxxx20"
  },
  "additionalInfo": {
    "contractId": "si4390d6cb-5e9f-41fb-bfa3-51f6e7c9e4b4",
    "channel": "BSI"
  }
}
```

--------------------------------

### Create payment eWallet

Source: https://docs.winpay.id/api/snap/e-wallet

Initiates a new eWallet payment transaction.

```APIDOC
## Create payment eWallet

### Description
Initiates a new eWallet payment transaction.
```
Tokens:
Raw