Home
Softono
midtrans-mobile-merchant-server--php-sample-

midtrans-mobile-merchant-server--php-sample-

Open source PHP
Website GitHub
17
Stars
29
Forks
1
Issues
3
Watchers
6 years
Last Commit
Payment & Checkout

About midtrans-mobile-merchant-server--php-sample-

This is a PHP-based sample implementation of a backend server designed to support Midtrans mobile SDKs for iOS and Android. Its primary purpose is to securely handle payment transactions by generating HTTP Authorization headers using your secret Server Key. This ensures that sensitive credentials never reside on the mobile client, which could be reverse-engineered. The server acts as a secure proxy, forwarding client requests to the Midtrans Snap API and returning the response token or redirect URL. The core functionality is contained within a single endpoint, POST /charge/. Deployment requires editing the configuration file to insert your specific Server Key and hosting it on a web server accessible by the mobile application. The provided URL should be set as the merchant base URL in the mobile SDK configuration. This reference code is intended for implementation guidance and basic testing via tools like CURL or Postman. For production environments, users are advised to enhance security measures beyond this

Platforms

Web Self-hosted

Languages

PHP

Links

Website Source Code
r
Published by
rizdaprasetya
Visit View Profile

README.md

View on GitHub

Simple Merchant Server Implementation Reference for Mobile SDK (PHP version).

Also available in other Language Implementation:

Description

This is a example mobile SDK server for Midtrans's iOS and Android SDK, as an implementation reference to use the mobile sdk. Please read more in Documentation of Midtrans mobile SDK.

Purpose

The main idea why this server implementation needed is: To securely add HTTP Authorization Header from server side. This auth header is generated from server key (from your Midtrans account), this server key is secret, and should only be kept in server side, not client side (mobile app can be easily reverse engineered to extract any secret).

Additionally, it allows you to tweak JSON request parameter as needed from server side.

Endpoints

There is only one endpoint that are required to use Midtrans mobile SDK:

POST /charge/

This endpoint will proxy (forward) client request to Midtrans Snap API 'https://app.midtrans.com/snap/v1/transactions' (or 'https://app.sandbox.midtrans.com/snap/v1/transactions' for sandbox) with HTTP Authorization Header generated based on your Midtrans Server Key.

The response of API will be printed/returned to client as is. Example response that will be printed

{
    "token": "413ae932-471d-4c41-bfb4-e558cc271dcc",
    "redirect_url": "https://app.sandbox.midtrans.com/snap/v2/vtweb/413ae932-471d-4c41-bfb4-e558cc271dcc"
}

Usage

Edit file charge/index.php, insert your Midtrans Account Server Key to '<server key>'. Upload these to your host, and make sure the url <url where you host this>/charge/index.php can be accessed from the mobile app.

Set <url where you host this>/charge/index.php as merchant base url in mobile SDK. (refer to Midtrans mobile SDK doc)

Advanced Tips: You can also configure your HTTP server to route <url where you host this>/charge/ url to /charge/index.php file. So the merchant base url can be just configured as <url where you host this>/(without charge/index.php, because SDK will automatically convert it to <url where you host this>/charge/ then your server will route to /charge/index.php/).

Testing

You can mock client's request by executing this CURL command to the /charge/index.php endpoint:

curl -X POST -d '{  
   "transaction_details":{  
      "order_id":"mobile-12345",
      "gross_amount":280000
   },
   "item_details":[  
      {  
         "id":"A01",
         "price":280000,
         "quantity":1,
         "name":"Mie Ayam Komplit"
      }
   ],
   "customer_details":[  
      {  
         "email":"[email protected]",
         "first_name":"Budi",
         "last_name":"Khannedy",
         "phone":"628112341234"
      }
   ]
}' "https://<your url>/charge/index.php/"

Note: dont forget to change "http://<your url>/charge/index.php/" to your url where you hosted the /charge/index.php.

You can also import that curl command to Postman.

Notes

This is just for very basic implementation reference, in production, you should implement your backend more securely.

Troubleshooting

When request sent to the url https://<your url>/charge/index.php fail, try to change the url to https://<your url>/charge/

Get help