Deposit Flow

// 1. Create the order (signBody: see the Signature Generation Guide)
async function startDeposit(cart) {
  const payload = {
    orderType: 'Deposit',
    amount: cart.total,
    currency: 'PKR',
    walletType: 'JazzCash',
    merchantOrderRef: cart.id,
    customerReference: cart.customerId,
    callbackUrl: 'https://merchant.example.com/webhooks/c2c',
  };
  const res = await fetch(`${BASE_URL}/api/merchant/orders`, {
    method: 'POST',
    headers: {
      'C2C-API-Key': process.env.C2C_API_KEY,
      'Content-Type': 'application/json',
      'Idempotency-Key': `${cart.id}-deposit`,
    },
    body: JSON.stringify({ ...payload, signature: signBody(payload, process.env.C2C_SIGNING_SECRET) }),
  });
  if (!res.ok) throw new Error(`Create deposit failed: HTTP ${res.status} ${await res.text()}`);
  const { data } = await res.json();
  await db.carts.update(cart.id, { c2cOrderId: data.orderId, c2cStatus: data.status });
  return data.paymentPageUrl; // 2. redirect the customer here
}

// 4/5. On webhook or poll: fulfil only on Completed
async function onC2COrderUpdate(orderId) {
  const { status } = await getOrderStatus(orderId); // GET /api/merchant/orders/{id}/status
  const cart = await db.carts.findByC2COrderId(orderId);
  await db.carts.update(cart.id, { c2cStatus: status });
  if ((status === 'Completed' || status === 'Confirmed') && !cart.fulfilled) {
    await fulfil(cart);
  }
}

import os, requests

# sign_body(): see the Signature Generation Guide
def start_deposit(cart) -> str:
    payload = {
        "orderType": "Deposit",
        "amount": cart.total,
        "currency": "PKR",
        "walletType": "JazzCash",
        "merchantOrderRef": cart.id,
        "customerReference": cart.customer_id,
        "callbackUrl": "https://merchant.example.com/webhooks/c2c",
    }
    res = requests.post(
        f"{BASE_URL}/api/merchant/orders",
        json={**payload, "signature": sign_body(payload, os.environ["C2C_SIGNING_SECRET"])},
        headers={
            "C2C-API-Key": os.environ["C2C_API_KEY"],
            "Idempotency-Key": f"{cart.id}-deposit",
        },
    )
    res.raise_for_status()
    data = res.json()["data"]
    db.save_c2c_order(cart.id, data["orderId"], data["status"])
    return data["paymentPageUrl"]  # redirect the customer here


def on_c2c_order_update(order_id: str) -> None:
    status = get_order_status(order_id)["status"]
    cart = db.cart_by_c2c_order(order_id)
    db.set_c2c_status(cart.id, status)
    if status in ("Completed", "Confirmed") and not cart.fulfilled:
        fulfil(cart)