Glomopay S2S Integration - Technical Documentation

Copy

• Copy for LLM

  Copy page as Markdown for LLMs
• View as Markdown

  Open this page as Markdown
• Open in ChatGPT

  Get insights from ChatGPT
• Open in Claude

  Get insights from Claude

const express = require('express');
const crypto = require('crypto');
const router = express.Router();

// Your Glomopay secret key (store in environment variables)
const GLOMOPAY_SECRET_KEY = process.env.GLOMOPAY_SECRET_KEY;

/**
 * Generate HMAC SHA256 signature for verification
 */
function generateSignature(orderId, paymentId, status, secret) {
  const data = `${orderId}|${paymentId}|${status}`;
  return crypto.createHmac('sha256', secret).update(data).digest('hex');
}

/**
 * Glomopay Payment Callback Handler
 */
router.get('/payment/callback', (req, res) => {
  // Extract query parameters
  const { order_id, payment_id, status, signature } = req.query;

  // Generate signature for verification
  const calculatedSignature = generateSignature(order_id, payment_id, status, GLOMOPAY_SECRET_KEY);

  // Verify signature
  if (signature !== calculatedSignature) {
    console.error('Signature verification failed');
    return res.redirect(`/payment/error?message=Invalid signature`);
  }

  // Signature is valid - proceed based on payment status
  console.log('Payment verified successfully');

  // Redirect based on payment status
  if (status === 'success') {
    return res.redirect(`/payment/success?order_id=${order_id}&payment_id=${payment_id}`);
  } else if (status === 'failed') {
    return res.redirect(`/payment/failed?order_id=${order_id}`);
  } else {
    return res.redirect(`/payment/error?order_id=${order_id}`);
  }
});

module.exports = router;

<?php

/**
 * Generate HMAC SHA256 signature for verification
 */
function generateSignature($orderId, $paymentId, $status, $secret) {
    $data = "$orderId|$paymentId|$status";
    return hash_hmac('sha256', $data, $secret);
}

// Verify signature
$calculatedSignature = generateSignature($orderId, $paymentId, $status, $glomopaySecretKey);
if ($signature !== $calculatedSignature) {
    // Signature verification failed
}

require 'openssl'

# Generate HMAC SHA256 signature for verification
def generate_signature(order_id, payment_id, status, secret)
  data = "#{order_id}|#{payment_id}|#{status}"
  OpenSSL::HMAC.hexdigest('SHA256', secret, data)
end

# Verify signature
calculated_signature = generate_signature(order_id, payment_id, status, GLOMOPAY_SECRET_KEY)
if signature != calculated_signature
  # Signature verification failed
end

import (
    "crypto/hmac"
    "crypto/sha256"
    "encoding/hex"
    "fmt"
)

// generateSignature creates HMAC SHA256 signature for verification
func generateSignature(orderID, paymentID, status, secret string) string {
    data := fmt.Sprintf("%s|%s|%s", orderID, paymentID, status)

    h := hmac.New(sha256.New, []byte(secret))
    h.Write([]byte(data))

    return hex.EncodeToString(h.Sum(nil))
}

// Verify signature
calculatedSignature := generateSignature(orderID, paymentID, status, glomopaySecretKey)
if calculatedSignature != signature {
    // Signature verification failed
}

import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;

public static boolean verifySignature(String orderId, String paymentId, String status,
                                      String signature, String secret) {
    try {
        String data = orderId + "|" + paymentId + "|" + status;
        Mac mac = Mac.getInstance("HmacSHA256");
        mac.init(new SecretKeySpec(secret.getBytes(), "HmacSHA256"));

        byte[] hash = mac.doFinal(data.getBytes());
        StringBuilder hex = new StringBuilder();
        for (byte b : hash) hex.append(String.format("%02x", b));

        return hex.toString().equals(signature);
    } catch (Exception e) {
        return false;
    }
}