Payment Callbacks & Webhooks

const axios = require('axios');

const paymentData = {
    amount: 50000,
    order_id: 'ORDER-12345',
    customer_name: 'John Doe',
    customer_email: 'john@example.com',
    customer_phone: '+62812345678',
    callback_url: 'https://yourdomain.com/payment-callback'
};

axios.post('https://cicis.online/api/qris/initiate', paymentData, {
    headers: {
        'Authorization': `Bearer YOUR_ACCESS_TOKEN`,
        'Content-Type': 'application/json'
    }
})
.then(response => {
    console.log('Payment initiated:', response.data);
})
.catch(error => {
    console.error('Error:', error.response.data);
});

$curl = curl_init();

$payload = json_encode([
    'amount' => 50000,
    'order_id' => 'ORDER-12345',
    'customer_name' => 'John Doe',
    'customer_email' => 'john@example.com',
    'customer_phone' => '+62812345678',
    'callback_url' => 'https://yourdomain.com/payment-callback'
]);

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://cicis.online/api/qris/initiate',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST => true,
    CURLOPT_POSTFIELDS => $payload,
    CURLOPT_HTTPHEADER => [
        'Authorization: Bearer YOUR_ACCESS_TOKEN',
        'Content-Type: application/json'
    ]
]);

$response = curl_exec($curl);
$httpCode = curl_getinfo($curl, CURLINFO_HTTP_CODE);
curl_close($curl);

echo json_decode($response, true);

import requests

url = 'https://cicis.online/api/qris/initiate'

payload = {
    'amount': 50000,
    'order_id': 'ORDER-12345',
    'customer_name': 'John Doe',
    'customer_email': 'john@example.com',
    'customer_phone': '+62812345678',
    'callback_url': 'https://yourdomain.com/payment-callback'
}

headers = {
    'Authorization': 'Bearer YOUR_ACCESS_TOKEN',
    'Content-Type': 'application/json'
}

response = requests.post(url, json=payload, headers=headers)
print(response.json())

// routes/payment.js
const express = require('express');
const router = express.Router();
const PaymentController = require('../controllers/PaymentController');

router.post('/callback', PaymentController.handleCallback);

module.exports = router;

// controllers/PaymentController.js
const Order = require('../models/Order');

exports.handleCallback = async (req, res) => {
    try {
        const payload = req.body;
        
        // Validate required fields
        if (!payload.order_id || !payload.status || !payload.amount) {
            return res.status(400).json({ error: 'Missing required fields' });
        }
        
        // Find order (idempotency check)
        let order = await Order.findOne({ order_id: payload.order_id });
        
        if (!order) {
            return res.status(404).json({ error: 'Order not found' });
        }
        
        // Check if already processed
        if (order.payment_status === payload.status) {
            return res.status(200).send('OK');
        }
        
        // Update order
        order.payment_status = payload.status;
        order.transaction_id = payload.transaction_id;
        order.payment_date = new Date();
        await order.save();
        
        // Handle successful payment
        if (payload.status === 'SUCCESS') {
            // Send confirmation
            sendPaymentConfirmation(order);
            
            // Process order
            processOrder(order);
        }
        
        res.status(200).send('OK');
        
    } catch (error) {
        console.error('Callback error:', error);
        // Return 200 to prevent retries
        res.status(200).send('OK');
    }
};

# urls.py
from django.urls import path
from . import views

urlpatterns = [
    path('payment-callback/', views.payment_callback, name='payment_callback'),
]

# views.py
from django.http import HttpResponse
from django.views.decorators.http import require_http_methods
from django.views.decorators.csrf import csrf_exempt
import json
from .models import Order
from .tasks import process_order

@csrf_exempt
@require_http_methods(["POST"])
def payment_callback(request):
    try:
        # Parse JSON payload
        payload = json.loads(request.body)
        
        # Validate required fields
        required_fields = ['order_id', 'status', 'amount']
        if not all(field in payload for field in required_fields):
            return HttpResponse('OK', status=200)
        
        # Find order
        try:
            order = Order.objects.get(order_id=payload['order_id'])
        except Order.DoesNotExist:
            return HttpResponse('OK', status=200)
        
        # Check if already processed (idempotency)
        if order.payment_status == payload['status']:
            return HttpResponse('OK', status=200)
        
        # Update order
        order.payment_status = payload['status']
        order.transaction_id = payload['transaction_id']
        order.payment_date = timezone.now()
        order.save()
        
        # Handle successful payment
        if payload['status'] == 'SUCCESS':
            send_payment_confirmation(order)
            process_order.delay(order.id)
        
        return HttpResponse('OK', status=200)
        
    except Exception as e:
        print(f'Callback error: {str(e)}')
        return HttpResponse('OK', status=200)