Membangun Integrasi Pembayaran
dengan RCB Pay API

<?php
// rcb-create-payment.php

// 1. Konfigurasi Kunci
$apiKey = "rcb_sandbox_test_55a12f990ac841bc82b5"; // Ganti dengan API Key Live di produksi
$apiUrl = "https://api.ragaciptabersama.web.id/api/gateway/create";

// 2. Payload Data Transaksi
$payload = [
    "amount" => 50000,
    "item_name" => "Topup Diamond Free Fire",
    "customer_name" => "Rian Hidayat",
    "customer_email" => "rian@gmail.com",
    "external_id" => "ORDER-10029" // ID invoice dari database Anda
];

// 3. Kirim Request via cURL
$ch = curl_init($apiUrl);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($payload));
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    "Content-Type: application/json",
    "x-api-key: " . $apiKey
]);

$response = curl_exec($ch);
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

// 4. Proses Hasil Response
if ($httpCode === 200 || $httpCode === 201) {
    $result = json_decode($response, true);
    if ($result['success']) {
        $paymentUrl = $result['data']['payment_url'];
        $orderId = $result['data']['order_id'];
        
        // CONTOH MEMBATASI METODE PEMBAYARAN (QRIS ONLY atau USDT ONLY)
        // Cukup tambahkan parameter &methods=qris atau &methods=usdt pada URL pembayaran
        $qrisOnlyUrl = $paymentUrl . "&methods=qris";
        $usdtOnlyUrl = $paymentUrl . "&methods=usdt";
        
        echo "Sukses Membuat Invoice!
";
        echo "Order ID RCB: " . $orderId . "
";
        echo "Standard Link: <a href='$paymentUrl' target='_blank'>Bayar Sekarang</a>
";
        echo "QRIS Only Link: <a href='$qrisOnlyUrl' target='_blank'>Bayar via QRIS Saja</a>
";
        echo "USDT Only Link: <a href='$usdtOnlyUrl' target='_blank'>Bayar via USDT Saja</a>
";
    } else {
        echo "Gagal: " . $result['message'];
    }
} else {
    echo "Gagal HTTP Request dengan status code: " . $httpCode;
    echo " Response: " . $response;
}
?>

<?php
// rcb-callback-handler.php

// Kunci API Key yang sama dengan saat pembuatan tagihan
$apiKey = "rcb_sandbox_test_55a12f990ac841bc82b5";

// 1. Ambil payload JSON dari server RCB
$rawPayload = file_get_contents('php://input');
$data = json_decode($rawPayload, true);

if (!$data) {
    http_response_code(400);
    echo "Invalid JSON payload";
    exit;
}

$orderId = $data['order_id'];
$externalId = $data['external_id'];
$status = $data['status'];
$signatureReceived = $data['signature'];

// 2. Hitung signature pembanding
// Rumus: SHA256(order_id + status + api_key)
$signatureLocal = hash('sha256', $orderId . $status . $apiKey);

// 3. Cocokkan Signature
if ($signatureReceived === $signatureLocal) {
    // Signature Valid!
    if ($status === 'PAID') {
        // Jalankan logika lunas di database Anda
        // Contoh: update_order_status_to_paid($externalId);
        
        // BERIKAN RESPONSE 200 OK UNTUK MENCEGAH RETRY WEBHOOK
        http_response_code(200);
        echo "OK";
    } else {
        echo "Status pending atau gagal: " . $status;
    }
} else {
    // Signature salah! Kemungkinan palsu / manipulasi data
    http_response_code(403);
    echo "Forbidden: Signature Mismatch";
}