Integrasi Pembayaran OtoPay

Authorization: Bearer YOUR_API_KEY
Content-Type: application/json

// Endpoint di bawah adalah endpoint backend website Anda,
// bukan endpoint OtoPay. Backend sudah menyimpan invoice_id.

const response = await fetch('/api/orders/ORDER-20260615-001/payment-url', {
  credentials: 'same-origin'
});
const data = await response.json();

if (!response.ok || !data.payment_url) {
  throw new Error(data.error || 'Payment URL tidak tersedia');
}

window.location.assign(data.payment_url);

{
  "success": true,
  "data": {
    "invoice_id": 42,
    "status": "PAID",
    "amount": 150000,
    "paid_at": "2026-06-15T10:05:30.000Z"
  }
}

// Jalankan dari backend/worker, jangan menaruh API key di browser.
const API_BASE = process.env.OTOPAY_BASE_URL;
const API_KEY = process.env.OTOPAY_API_KEY;

const response = await fetch(API_BASE + '/api/v1/check-status', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer ' + API_KEY,
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({ invoice_id: 42 })
});

const result = await response.json();
if (result.success && result.data.status === 'PAID') {
  // baru fulfils order di sistem Anda
  await markOrderAsPaid(result.data.invoice_id, result.data.paid_at);
}

{
  "event": "invoice.paid",
  "data": {
    "invoice_id": 42,
    "external_id": "ORDER-20260615-001",
    "amount": 150000,
    "paid_at": "2026-06-15T10:05:30.000Z"
  }
}

<?php
// Endpoint ini harus ada di backend Anda.
// Contoh: https://website-anda.com/webhooks/otopay

$payload = json_decode(file_get_contents('php://input'), true);

if (($payload['event'] ?? '') !== 'invoice.paid') {
    http_response_code(200);
    exit;
}

$invoiceId = (int) ($payload['data']['invoice_id'] ?? 0);
$externalId = (string) ($payload['data']['external_id'] ?? '');

if ($invoiceId < 1 || $externalId === '') {
    http_response_code(400);
    exit;
}

// Verifikasi kembali ke OtoPay sebelum akhirnya fulfill order.
// Ganti helper ini dengan request POST /api/v1/check-status di backend Anda.
// Pastikan proses ini idempotent berdasarkan invoice_id / external_id.
verifyInvoiceWithOtoPay($invoiceId);

// Balas 2xx segera agar webhook tidak dianggap gagal.
http_response_code(200);
echo 'OK';

<?php
$apiBase = 'http://otopay.click';
$apiKey  = getenv('OTOPAY_API_KEY') ?: 'YOUR_API_KEY';

$ch = curl_init($apiBase . '/api/v1/create-invoice');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'Authorization: Bearer ' . $apiKey,
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode([
        'amount' => 150000,
        'description' => 'Premium Membership',
        'external_id' => 'ORDER-' . time(),
        'customer_name' => 'Budi Santoso',
    ]),
]);

$result = json_decode(curl_exec($ch), true);
curl_close($ch);

if (empty($result['success'])) {
    http_response_code(502);
    exit(json_encode(['error' => $result['error'] ?? 'Gagal membuat invoice']));
}

// Simpan invoice_id di database Anda, lalu kirim payment_url ke browser.
echo json_encode([
    'invoice_id' => $result['data']['invoice_id'],
    'payment_url' => $result['data']['payment_url'],
]);

const API_BASE = process.env.OTOPAY_BASE_URL || 'http://otopay.click';
const API_KEY = process.env.OTOPAY_API_KEY;

const response = await fetch(API_BASE + '/api/v1/create-invoice', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer ' + API_KEY,
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    amount: 150000,
    description: 'Premium Membership',
    external_id: 'ORDER-' + Date.now(),
    customer_name: 'Budi Santoso'
  })
});

const result = await response.json();
if (!response.ok || !result.success) {
  throw new Error(result.error || 'Gagal membuat invoice');
}

// Kirim payment_url ini ke frontend Anda.
console.log(result.data.invoice_id, result.data.payment_url);