Payment Proxy API Documentation

EP-{16 random uppercase characters}

EP-BBZZD1PC5OCRBPTE

X-API-Key: YOUR_API_KEY_HERE

https://payment.elfadigital.my.id

Content-Type: application/json
X-API-Key: YOUR_API_KEY

curl -X POST https://payment.elfadigital.my.id/api/payment/create \
  -H "Content-Type: application/json" \
  -H "X-API-Key: EP-BBZZD1PC5OCRBPTE" \
  -d '{
    "webstoreOrderId": "WS-2025-001",
    "paymentAmount": 250000,
    "productDetails": "Premium Package - 1 Month Subscription",
    "email": "customer@example.com",
    "phoneNumber": "081234567890",
    "returnUrl": "https://mywebstore.com/payment/success",
    "expiryPeriod": 30,
    "itemDetails": [
      {
        "name": "Premium Package",
        "price": 250000,
        "quantity": 1
      }
    ],
    "customerDetail": {
      "firstName": "Budi",
      "lastName": "Santoso",
      "email": "customer@example.com",
      "phoneNumber": "081234567890",
      "billingAddress": {
        "firstName": "Budi",
        "lastName": "Santoso",
        "address": "Jl. Sudirman No. 45",
        "city": "Jakarta",
        "postalCode": "12190",
        "phone": "081234567890",
        "countryCode": "ID"
      },
      "shippingAddress": {
        "firstName": "Budi",
        "lastName": "Santoso",
        "address": "Jl. Sudirman No. 45",
        "city": "Jakarta",
        "postalCode": "12190",
        "phone": "081234567890",
        "countryCode": "ID"
      }
    }
  }'

{
  "success": true,
  "message": "Payment created successfully",
  "data": {
    "reference": "DK2025112200001",
    "payment_url": "https://app-sandbox.duitku.com/payment/DK2025112200001",
    "merchant_order_id": "ELFA-22112025-0001",
    "webstore_order_id": "WS-2025-001"
  }
}

curl -X GET https://payment.elfadigital.my.id/api/payment/status/WS-2025-001 \
  -H "X-API-Key: EP-BBZZD1PC5OCRBPTE"

{
  "success": true,
  "data": {
    "webstore_order_id": "WS-2025-001",
    "merchant_order_id": "ELFA-22112025-0001",
    "status": "success",
    "payment_amount": 250000,
    "duitku_status": {
      "merchantCode": "DS12345",
      "amount": "250000",
      "merchantOrderId": "ELFA-22112025-0001",
      "statusCode": "00",
      "statusMessage": "SUCCESS"
    }
  }
}

public function handlePaymentCallback(Request $request)
{
    Log::info('Payment callback received', $request->all());
    
    $order = Order::where('id', $request->webstore_order_id)->first();
    
    if (!$order) {
        return response()->json(['success' => false], 404);
    }
    
    // Idempotency check
    if ($order->payment_status === 'success') {
        return response()->json(['success' => true, 'message' => 'Already processed']);
    }
    
    $order->update([
        'payment_status' => $request->status,
        'payment_reference' => $request->duitku_reference,
        'payment_method' => $request->payment_method,
        'paid_at' => $request->status === 'success' ? now() : null,
    ]);
    
    if ($request->status === 'success') {
        SendOrderConfirmationEmail::dispatch($order);
    }
    
    return response()->json(['success' => true], 200);
}

const express = require('express');
const app = express();

app.use(express.urlencoded({ extended: true }));

app.post('/callback/payment', async (req, res) => {
    const { webstore_order_id, status, duitku_reference } = req.body;
    
    const order = await Order.findOne({ _id: webstore_order_id });
    
    if (!order) {
        return res.status(404).json({ success: false });
    }
    
    if (order.payment_status === 'success') {
        return res.json({ success: true, message: 'Already processed' });
    }
    
    order.payment_status = status;
    order.payment_reference = duitku_reference;
    if (status === 'success') {
        order.paid_at = new Date();
    }
    await order.save();
    
    res.json({ success: true });
});

from django.views.decorators.csrf import csrf_exempt

@csrf_exempt
@require_POST
def payment_callback(request):
    webstore_order_id = request.POST.get('webstore_order_id')
    status = request.POST.get('status')
    
    try:
        order = Order.objects.get(id=webstore_order_id)
    except Order.DoesNotExist:
        return JsonResponse({'success': False}, status=404)
    
    if order.payment_status == 'success':
        return JsonResponse({'success': True, 'message': 'Already processed'})
    
    order.payment_status = status
    if status == 'success':
        order.paid_at = timezone.now()
    order.save()
    
    return JsonResponse({'success': True})

{
  "success": false,
  "message": "Error description",
  "errors": {
    "field_name": ["Error message"]
  }
}

curl -X POST https://payment.elfadigital.my.id/api/payment/create \
  -H "Content-Type: application/json" \
  -H "X-API-Key: EP-BBZZD1PC5OCRBPTE" \
  -d '{
    "webstoreOrderId": "TEST-001",
    "paymentAmount": 50000,
    "productDetails": "Test Product",
    "email": "test@example.com",
    "phoneNumber": "081234567890",
    "returnUrl": "https://webstore.com/return",
    "expiryPeriod": 15,
    "itemDetails": [{"name": "Test Product", "price": 50000, "quantity": 1}],
    "customerDetail": {
      "firstName": "Test",
      "lastName": "User",
      "email": "test@example.com",
      "phoneNumber": "081234567890",
      "billingAddress": {...},
      "shippingAddress": {...}
    }
  }'

curl -X GET https://payment.elfadigital.my.id/api/payment/status/TEST-001 \
  -H "X-API-Key: EP-BBZZD1PC5OCRBPTE"

curl -X POST https://yourwebstore.com/callback/payment \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "webstore_order_id=TEST-001" \
  -d "merchant_order_id=ELFA-22112025-0001" \
  -d "payment_amount=100000" \
  -d "status=success" \
  -d "result_code=00" \
  -d "duitku_reference=DK2025110001" \
  -d "payment_method=BCA"