Quick Start

# Variables — replace with your actual values
CLIENT_KEY="your-client-key"
TIMESTAMP="$(date -u +%Y-%m-%dT%H:%M:%SZ)"  # Current time, ISO 8601 with offset
SIGNATURE="your-generated-signature"
BASE_URL="https://your-assigned-base-url.com"

curl -X POST "${BASE_URL}/api/create/qris" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json" \
  -H "X-PARTNER-ID: ${CLIENT_KEY}" \
  -H "X-TIMESTAMP: ${TIMESTAMP}" \
  -H "X-SIGNATURE: ${SIGNATURE}" \
  -d '{
    "merchant_transaction_id": "ORDER-001",
    "amount": "50000",
    "currency": "IDR",
    "customer_name": "John Doe",
    "product_name": "Test Order"
  }'

const crypto = require('crypto');
const fs = require('fs');
const https = require('https');

const CLIENT_KEY = 'your-client-key';
const BASE_URL = 'https://your-assigned-base-url.com';
const ENDPOINT = '/api/create/qris';
const timestamp = new Date().toISOString();

const body = JSON.stringify({
  merchant_transaction_id: 'ORDER-001',
  amount: '50000',
  currency: 'IDR',
  customer_name: 'John Doe',
  product_name: 'Test Order'
});

// Generate signature
const payloadHash = crypto.createHash('sha256').update(body).digest('hex').toLowerCase();
const stringToSign = `POST:${ENDPOINT}:${payloadHash}:${timestamp}`;
const privateKey = fs.readFileSync('./private_key.pem');
const sign = crypto.createSign('RSA-SHA256');
sign.update(stringToSign);
const signature = sign.sign(privateKey, 'base64');

// Make request
const options = {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Accept': 'application/json',
    'X-PARTNER-ID': CLIENT_KEY,
    'X-TIMESTAMP': timestamp,
    'X-SIGNATURE': signature
  }
};

const req = https.request(`${BASE_URL}${ENDPOINT}`, options, (res) => {
  let data = '';
  res.on('data', chunk => data += chunk);
  res.on('end', () => console.log(JSON.parse(data)));
});
req.write(body);
req.end();

<?php
$clientKey = 'your-client-key';
$baseUrl = 'https://your-assigned-base-url.com';
$endpoint = '/api/create/qris';
$timestamp = date('c'); // ISO 8601

$body = json_encode([
    'merchant_transaction_id' => 'ORDER-001',
    'amount' => '50000',
    'currency' => 'IDR',
    'customer_name' => 'John Doe',
    'product_name' => 'Test Order',
]);

// Generate signature
$payloadHash = strtolower(bin2hex(hash('sha256', $body, true)));
$stringToSign = "POST:{$endpoint}:{$payloadHash}:{$timestamp}";
$privateKey = openssl_pkey_get_private('file://./private_key.pem');
openssl_sign($stringToSign, $signature, $privateKey, OPENSSL_ALGO_SHA256);
$signatureB64 = base64_encode($signature);

// Make request
$ch = curl_init("{$baseUrl}{$endpoint}");
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_POSTFIELDS => $body,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'Content-Type: application/json',
        'Accept: application/json',
        "X-PARTNER-ID: {$clientKey}",
        "X-TIMESTAMP: {$timestamp}",
        "X-SIGNATURE: {$signatureB64}",
    ],
]);

$response = curl_exec($ch);
curl_close($ch);
echo $response;