Signing Requests

All requests must be sent using the POST method.

A request must be signed.

For signing requests with Content-Type: application/json, you need to use the MD5 hash of the request body, encoded in base64, concatenated with your API private key.

The JSON being sent must be sorted in alphabetical order.

For signing requests with a Content-Type different from application/json, you need to encode an empty string in base64 and concatenate it with your API private key.

Each request must include two parameters in the Header:

Parameter	Описание
Merchant	Merchant ID, which you can find in your merchant dashboard under the Integration section
Signature	The signed request body

Example of signing requests with Content-Type: application/json

JavaScript

const md5 = require('md5');

const API_KEY = '6b8dcc0cd0bf4e42986d6b4da7edbfd5';

const data = {
    "amount": "30000",
    "currency": "UZS",
    "order_id": "122251322334",
    "payment_type": "HUMOP2P",
    "additional_data": "example",
    "url_callback": "https://example.com/callback",
    "url_success": "https://example.com/url_success",
    "url_error": "https://example.com/url_error",
    "fingerprint": "f23b9d67-9cee-4096-b9d3-492efbf32471"
};

const getSortedObject = (obj) => {
  if (typeof obj !== "object" || Array.isArray(obj) || obj === null) return obj;
  const sortedObject = {};
  const keys = Object.keys(obj).sort();
  keys.forEach(key => sortedObject[key] = getSortedObject(obj[key]));
  
  return sortedObject;
 }
 
const sortedObject = getSortedObject(data);
const json = JSON.stringify(sortedObject).replace(/[']/g, '');

const signature = md5(`${Buffer.from(json).toString('base64')}${API_KEY}`);

PHP

GO

Python