Stored in this browser only — never sent to Payonclick. The samples below fill in as you type.
API_KEY="poc_live_your_key_here"
TS=$(date +%s)
BODY='{ "status": true, "message": "Transaction Successful", "response_code": "00", "rrn": "528112345678", "provider_txn_id": "MACA1234567890", "card_number": "XXXXXXXXXXXX4321", "card_type": "RUPAY", "bank_name": "State Bank of India", "balance": 15230.45, "terminal_id": "FP123456", "device": "MOREFUN" }'
HASH=$(printf %s "$BODY" | openssl dgst -sha256 | awk '{print $NF}')
SIG=$(printf '%s\n%s\n%s\n%s' 'POST' '/ext/v1/matm/transaction/MAPI1789012345678/result' "$TS" "$HASH" \
| openssl dgst -sha256 -hmac "$API_KEY" | awk '{print $NF}')
curl -X POST 'https://payonclick.in/ext/v1/matm/transaction/MAPI1789012345678/result' \
-H "Authorization: Bearer $API_KEY" \
-H "X-Timestamp: $TS" \
-H "X-Signature: $SIG" \
-H 'Content-Type: application/json' \
-d "$BODY"
import hashlib, hmac, json, time, requests
API_KEY = "poc_live_your_key_here"
PATH = "/ext/v1/matm/transaction/MAPI1789012345678/result"
BODY = json.dumps({
"status": True,
"message": "Transaction Successful",
"response_code": "00",
"rrn": "528112345678",
"provider_txn_id": "MACA1234567890",
"card_number": "XXXXXXXXXXXX4321",
"card_type": "RUPAY",
"bank_name": "State Bank of India",
"balance": 15230.45,
"terminal_id": "FP123456",
"device": "MOREFUN"
}).encode()
ts = str(int(time.time()))
msg = f"POST\n{PATH}\n{ts}\n{hashlib.sha256(BODY).hexdigest()}"
sig = hmac.new(API_KEY.encode(), msg.encode(), hashlib.sha256).hexdigest()
r = requests.request(
"POST", "https://payonclick.in" + PATH + "", data=BODY,
headers={
"Authorization": f"Bearer {API_KEY}",
"X-Timestamp": ts,
"X-Signature": sig,
"Content-Type": "application/json",
}, timeout=90)
print(r.json())
const crypto = require('crypto');
const API_KEY = 'poc_live_your_key_here';
const path = '/ext/v1/matm/transaction/MAPI1789012345678/result';
const body = JSON.stringify({ "status": true, "message": "Transaction Successful", "response_code": "00", "rrn": "528112345678", "provider_txn_id": "MACA1234567890", "card_number": "XXXXXXXXXXXX4321", "card_type": "RUPAY", "bank_name": "State Bank of India", "balance": 15230.45, "terminal_id": "FP123456", "device": "MOREFUN" });
const ts = Math.floor(Date.now() / 1000).toString();
const hash = crypto.createHash('sha256').update(body).digest('hex');
const msg = `POST\n${path}\n${ts}\n${hash}`;
const sig = crypto.createHmac('sha256', API_KEY).update(msg).digest('hex');
async function main() {
const res = await fetch('https://payonclick.in' + path + '', {
method: 'POST',
headers: {
Authorization: `Bearer ${API_KEY}`,
'X-Timestamp': ts,
'X-Signature': sig,
'Content-Type': 'application/json',
},
body,
signal: AbortSignal.timeout(90000),
});
console.log(JSON.stringify(await res.json(), null, 2));
}
main();
<?php
$apiKey = 'poc_live_your_key_here';
$path = '/ext/v1/matm/transaction/MAPI1789012345678/result';
$body = '{ "status": true, "message": "Transaction Successful", "response_code": "00", "rrn": "528112345678", "provider_txn_id": "MACA1234567890", "card_number": "XXXXXXXXXXXX4321", "card_type": "RUPAY", "bank_name": "State Bank of India", "balance": 15230.45, "terminal_id": "FP123456", "device": "MOREFUN" }';
$ts = (string) time();
$msg = "POST\n{$path}\n{$ts}\n" . hash('sha256', $body);
$sig = hash_hmac('sha256', $msg, $apiKey);
$headers = [
"Authorization: Bearer {$apiKey}",
"X-Timestamp: {$ts}",
"X-Signature: {$sig}",
'Content-Type: application/json',
];
$ch = curl_init('https://payonclick.in' . $path . '');
curl_setopt_array($ch, [
CURLOPT_RETURNTRANSFER => true,
CURLOPT_TIMEOUT => 90,
CURLOPT_CUSTOMREQUEST => 'POST',
CURLOPT_POSTFIELDS => $body,
CURLOPT_HTTPHEADER => $headers,
]);
echo curl_exec($ch);
import java.net.URI;
import java.net.http.*;
import java.nio.charset.StandardCharsets;
import java.security.MessageDigest;
import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
public class PayonclickExample {
static final String HOST = "https://payonclick.in";
static final String API_KEY = "poc_live_your_key_here";
public static void main(String[] args) throws Exception {
String path = "/ext/v1/matm/transaction/MAPI1789012345678/result";
String body = "{ \"status\": true, \"message\": \"Transaction Successful\", \"response_code\": \"00\", \"rrn\": \"528112345678\", \"provider_txn_id\": \"MACA1234567890\", \"card_number\": \"XXXXXXXXXXXX4321\", \"card_type\": \"RUPAY\", \"bank_name\": \"State Bank of India\", \"balance\": 15230.45, \"terminal_id\": \"FP123456\", \"device\": \"MOREFUN\" }";
String ts = String.valueOf(System.currentTimeMillis() / 1000);
HttpRequest.Builder req = HttpRequest.newBuilder(URI.create(HOST + path + ""))
.timeout(java.time.Duration.ofSeconds(90))
.header("Authorization", "Bearer " + API_KEY)
.header("X-Timestamp", ts);
String hash = hex(MessageDigest.getInstance("SHA-256")
.digest(body.getBytes(StandardCharsets.UTF_8)));
String msg = "POST\n" + path + "\n" + ts + "\n" + hash;
Mac mac = Mac.getInstance("HmacSHA256");
mac.init(new SecretKeySpec(
API_KEY.getBytes(StandardCharsets.UTF_8), "HmacSHA256"));
req.header("X-Signature",
hex(mac.doFinal(msg.getBytes(StandardCharsets.UTF_8))));
req.header("Content-Type", "application/json")
.method("POST", HttpRequest.BodyPublishers.ofString(
body, StandardCharsets.UTF_8));
HttpResponse<String> res = HttpClient.newHttpClient()
.send(req.build(), HttpResponse.BodyHandlers.ofString());
System.out.println(res.body());
}
static String hex(byte[] bytes) {
StringBuilder sb = new StringBuilder();
for (byte b : bytes) sb.append(String.format("%02x", b));
return sb.toString();
}
}
