To'lovlarni qabul qiling — bir necha daqiqada

<?php
$curl = curl_init();
curl_setopt_array($curl, [
  CURLOPT_URL            => 'https://inpay.uz/api/v1/authorization/?merchant_id=1353&merchant_token=...',
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_HTTPHEADER     => ['Accept: application/json'],
]);
$res = json_decode(curl_exec($curl), true);
curl_close($curl);

// Tokenni keshda saqlang (24 soat)
apcu_store('inpay_token', $res['bearer_token'], 86400);

import requests

r = requests.get(
    "https://inpay.uz/api/v1/authorization/",
    params={"merchant_id": 1353, "merchant_token": "..."},
    headers={"Accept": "application/json"},
    timeout=10,
)
token = r.json()["bearer_token"]
# Save token to cache for 24 hours

<?php
$payload = [
  'merchant_id'    => '1353',
  'token'          => '6a7bf375b302cfcda6692e6f60402cb3',
  'amount'         => 15000,
  'description'    => 'Order #12345',
  'payment_method' => 'click',
  'phone'          => '998901234567',
  'client_ip'      => '203.0.113.10',
  'callback_url'   => 'https://merchant.uz/payment/callback',
];

$ch = curl_init('https://inpay.uz/api/v1/create/');
curl_setopt_array($ch, [
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_POST           => true,
  CURLOPT_POSTFIELDS     => json_encode($payload),
  CURLOPT_HTTPHEADER     => [
    'Content-Type: application/json',
    'Authorization: Bearer ' . $bearerToken,
  ],
]);
$res = json_decode(curl_exec($ch), true);
curl_close($ch);

if ($res['success']) {
  header('Location: ' . $res['pay_url']);
  exit;
}

const axios = require('axios');

const { data } = await axios.post('https://inpay.uz/api/v1/create/', {
  merchant_id:    '1353',
  token:          '6a7bf375b302cfcda6692e6f60402cb3',
  amount:         15000,
  description:    'Order #12345',
  payment_method: 'click',
  phone:          '998901234567',
  client_ip:      '203.0.113.10',
  callback_url:   'https://merchant.uz/payment/callback',
}, {
  headers: {
    'Content-Type':  'application/json',
    'Authorization': `Bearer ${bearerToken}`,
  },
});

console.log('order_id:', data.order_id);
console.log('pay_url: ', data.pay_url);

import requests

payload = {
    "merchant_id":    "1353",
    "token":          "6a7bf375b302cfcda6692e6f60402cb3",
    "amount":         15000,
    "description":    "Order #12345",
    "payment_method": "click",
    "phone":          "998901234567",
    "client_ip":      "203.0.113.10",
    "callback_url":   "https://merchant.uz/payment/callback",
}
r = requests.post(
    "https://inpay.uz/api/v1/create/",
    json=payload,
    headers={"Authorization": f"Bearer {bearer_token}"},
    timeout=15,
)
data = r.json()
print(data["pay_url"])

<?php
$orderId = '1ff2f5a6d66f6e9c';
$ch = curl_init();
curl_setopt_array($ch, [
  CURLOPT_URL            => "https://inpay.uz/api/v1/transactions/?order_id={$orderId}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_HTTPHEADER     => ['Accept: application/json'],
]);
$data = json_decode(curl_exec($ch), true);
curl_close($ch);

// $data['status'] => pending | success | failed | cancelled

const express = require('express');
const app = express();
app.use(express.json());

app.post('/payment/callback', async (req, res) => {
  const { amount, status, order_id, transaction_id } = req.body;

  if (status === 'success') {
    await db.query(
      'UPDATE orders SET status = ? WHERE order_id = ?',
      ['paid', order_id]
    );
  }

  res.status(200).send('OK');
});

from flask import Flask, request

app = Flask(__name__)

@app.route("/payment/callback", methods=["POST"])
def callback():
    data = request.get_json(silent=True) or {}

    if data.get("status") == "success":
        # update DB
        mark_paid(data["order_id"])

    return "OK", 200

import time, json, hmac, hashlib, secrets, requests

def inpay_cards(action, body, key_id, secret):
    path  = f'/api/v1/cards/{action}'
    raw   = json.dumps(body, ensure_ascii=False)
    ts    = str(int(time.time()))
    nonce = secrets.token_hex(12)
    base  = f"POST\n{path}\n{ts}\n{nonce}\n" + hashlib.sha256(raw.encode()).hexdigest()
    sig   = hmac.new(secret.encode(), base.encode(), hashlib.sha256).hexdigest()
    return requests.post(
        f"https://inpay.uz{path}", data=raw.encode(),
        headers={'Content-Type': 'application/json', 'X-Inpay-Key': key_id,
                 'X-Inpay-Timestamp': ts, 'X-Inpay-Nonce': nonce,
                 'X-Inpay-Signature': sig}, timeout=30).json()

const crypto = require('crypto');

async function inpayCards(action, body, keyId, secret) {
  const path  = `/api/v1/cards/${action}`;
  const raw   = JSON.stringify(body);
  const ts    = Math.floor(Date.now() / 1000).toString();
  const nonce = crypto.randomBytes(12).toString('hex');
  const hash  = crypto.createHash('sha256').update(raw).digest('hex');
  const sig   = crypto.createHmac('sha256', secret)
                      .update(`POST\n${path}\n${ts}\n${nonce}\n${hash}`).digest('hex');

  const r = await fetch(`https://inpay.uz${path}`, {
    method: 'POST', body: raw,
    headers: {
      'Content-Type': 'application/json', 'X-Inpay-Key': keyId,
      'X-Inpay-Timestamp': ts, 'X-Inpay-Nonce': nonce, 'X-Inpay-Signature': sig,
    },
  });
  return r.json();
}