Nexzoneo Pay API Documentation

X-Site-Key: your_site_key_here
Authorization: your_security_token_here
Content-Type: application/json

{
  "order_id": "ORD-12345",
  "total": "99.99",
  "currency": "USD",
  "payment_status": "completed",
  "session_status": "completed",
  "transaction_ref": "TXN-789",
  "customer_email": "customer@example.com",
  "timestamp": "1705320900",
  "signature": "abc123def456..."
}

// Partial refund example
{
  "order_id": "ORD-12345",
  "total": "99.99",
  "currency": "USD",
  "payment_status": "partially_refunded",
  "session_status": "partially_refunded",
  "transaction_ref": "TXN-789",
  "customer_email": "customer@example.com",
  "timestamp": "1705320900",
  "signature": "def789abc123..."
}

// Full refund example
{
  "order_id": "ORD-12345",
  "total": "99.99",
  "currency": "USD",
  "payment_status": "fully_refunded",
  "session_status": "fully_refunded",
  "transaction_ref": "TXN-789",
  "customer_email": "customer@example.com",
  "timestamp": "1705320900",
  "signature": "ghi456def789..."
}

$data = $_POST;
$signature = $data['signature'];
unset($data['signature']);

ksort($data);
$expected_signature = hash_hmac('sha256', json_encode($data), $your_security_token);

if (hash_equals($expected_signature, $signature)) {
    // Webhook is authentic
} else {
    // Invalid webhook
}

function createPaymentSession($orderData) {
    $url = 'https://payment.nexzoneo.com/api/merchant/create_payment_session';
    
    $headers = [
        'Content-Type: application/json',
        'X-Site-Key: your_site_key_here',
        'Authorization: your_security_token_here'
    ];
    
    $ch = curl_init($url);
    curl_setopt_array($ch, [
        CURLOPT_POST => true,
        CURLOPT_POSTFIELDS => json_encode($orderData),
        CURLOPT_HTTPHEADER => $headers,
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_SSL_VERIFYPEER => true
    ]);
    
    $response = curl_exec($ch);
    $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);
    
    if ($httpCode === 200) {
        $data = json_decode($response, true);
        return $data['data'];
    } else {
        throw new Exception('API Error: ' . $response);
    }
}

// Usage
$orderData = [
    'order_id' => 'ORD-12345',
    'total' => 99.99,
    'currency' => 'USD',
    'customer_email' => 'customer@example.com'
];

$result = createPaymentSession($orderData);
echo $result['payment_url'];

// Create refund example
function createRefund($sessionId, $amount, $reason, $comment = null) {
    $url = 'https://payment.nexzoneo.com/api/merchant/create_refund';
    
    $refundData = [
        'session_id' => $sessionId,
        'amount' => $amount,
        'reason' => $reason
    ];
    
    if ($comment) {
        $refundData['comment'] = $comment;
    }
    
    $headers = [
        'Content-Type: application/json',
        'X-Site-Key: your_site_key_here',
        'Authorization: your_security_token_here'
    ];
    
    $ch = curl_init($url);
    curl_setopt_array($ch, [
        CURLOPT_POST => true,
        CURLOPT_POSTFIELDS => json_encode($refundData),
        CURLOPT_HTTPHEADER => $headers,
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_SSL_VERIFYPEER => true
    ]);
    
    $response = curl_exec($ch);
    $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);
    
    if ($httpCode === 200) {
        $data = json_decode($response, true);
        return $data['data'];
    } else {
        throw new Exception('Refund Error: ' . $response);
    }
}

// Usage
$refundResult = createRefund(12345, 29.99, 'requested_by_customer', 'Customer cancelled order');
echo 'Refund ID: ' . $refundResult['refund_id'];

// Server-side Node.js example
const express = require('express');
const fetch = require('node-fetch');

app.post('/create-payment', async (req, res) => {
    try {
        const orderData = req.body;
        
        const response = await fetch('https://payment.nexzoneo.com/api/merchant/create_payment_session', {
            method: 'POST',
            headers: {
                'Content-Type': 'application/json',
                'X-Site-Key': process.env.NEXZONEO_SITE_KEY,
                'Authorization': process.env.NEXZONEO_SECURITY_TOKEN
            },
            body: JSON.stringify(orderData)
        });
        
        if (response.ok) {
            const data = await response.json();
            res.json(data.data);
        } else {
            throw new Error(`API Error: ${response.status}`);
        }
    } catch (error) {
        res.status(500).json({ error: error.message });
    }
});

// Client-side JavaScript example
async function createPayment(orderData) {
    // Call YOUR server endpoint, not Nexzoneo directly
    const response = await fetch('/create-payment', {
        method: 'POST',
        headers: {
            'Content-Type': 'application/json'
        },
        body: JSON.stringify(orderData)
    });
    
    if (response.ok) {
        const data = await response.json();
        // Redirect user to payment URL
        window.location.href = data.payment_url;
    } else {
        throw new Error('Payment creation failed');
    }
}

import requests
import json

def create_payment_session(order_data):
    url = 'https://payment.nexzoneo.com/api/merchant/create_payment_session'
    
    headers = {
        'Content-Type': 'application/json',
        'X-Site-Key': 'your_site_key_here',
        'Authorization': 'your_security_token_here'
    }
    
    response = requests.post(url, headers=headers, json=order_data)
    
    if response.status_code == 200:
        return response.json()['data']
    else:
        raise Exception(f'API Error: {response.text}')

# Usage
order_data = {
    'order_id': 'ORD-12345',
    'total': 99.99,
    'currency': 'USD',
    'customer_email': 'customer@example.com'
}

result = create_payment_session(order_data)
print(f"Payment URL: {result['payment_url']}")