Dokumentasi API QrisP2P

// Polling status di browser pembeli setiap 3 detik
setInterval(async () => {
    const res = await fetch('https://qrisp2p.com/payment.php?inv=ORDER-9921&check=1');
    const json = await res.json();
    if (json.status === 'success') {
        window.location.href = '/payment-success.php?order=ORDER-9921';
    }
}, 3000);

<?php
// 1. Ambil Webhook Secret dari Dashboard Merchant
$webhookSecret = 'whsec_live_abcdef123456...';

// 2. Ambil raw JSON body & header signature
$rawPayload = file_get_contents('php://input');
$signatureHeader = $_SERVER['HTTP_X_SIGNATURE'] ?? '';

// 3. Bersihkan prefix "sha256=" jika ada
$receivedSignature = str_replace('sha256=', '', $signatureHeader);

// 4. Hitung HMAC-SHA256 dari raw payload (Stripe / GitHub Standard)
$expectedSignature = hash_hmac('sha256', $rawPayload, $webhookSecret);

// 5. Validasi timing-attack safe
if (hash_equals($expectedSignature, $receivedSignature)) {
    $data = json_decode($rawPayload, true);
    $orderId = $data['reference'];
    $status  = $data['status']; // 'success'
    
    if ($status === 'success') {
        // UPDATE STATUS PESANAN ANDA MENJADI LUNAS DI SINI
    }
    
    http_response_code(200);
    echo json_encode(['status' => 'success', 'message' => 'Webhook processed']);
} else {
    http_response_code(401);
    echo json_encode(['status' => 'unauthorized', 'message' => 'Invalid signature']);
}

<?php
require_once 'QrisP2PClient.php';

$client = new QrisP2PClient(
    'https://qrisp2p.com',
    'iak_live_xxxxxxxxxxxxxxxxxxxxxxxx',
    'whsec_live_abcdef123456...'
);

// 1. Buat Pembayaran QRIS Dinamis
$invoice = $client->createPayment(25000, 'ORDER-9921', 'Budi Santoso');
$qrisString = $invoice['data']['qris_string'];
$qrImage    = $invoice['data']['qr_image'];

// 2. Cek Status Transaksi
$status = $client->checkStatus('ORDER-9921');

// 3. Batalkan Tagihan Pending
$cancel = $client->cancelPayment('ORDER-9921');

// 4. Validasi Webhook Callback (Otomatis & Aman)
$webhook = $client->verifyWebhook();
if ($webhook['isValid']) {
    $orderId = $webhook['data']['reference'];
    $status  = $webhook['data']['status']; // 'success'
    
    if ($status === 'success') {
        // UPDATE STATUS PESANAN ANDA MENJADI LUNAS DI SINI
    }

    QrisP2PClient::respondWebhook(true, 'Payment recorded');
} else {
    QrisP2PClient::respondWebhook(false, $webhook['error'], 401);
}