UnionMeta Merchant Payment API Documentation
  1. 2. Security & Encryption Rules
UnionMeta Merchant Payment API Documentation
  • 1. Revision History
  • 2. Security & Encryption Rules
    • 2.1 Purposes
    • 2.2 Request Encryption (AES)
    • 2.3 Signature Generation (MD5)
  • 3. API List
  • 4. API
    • 4.1 Payment Result Callback Notification (Online/Dynamic QR)
    • 4.2 Payment Result Callback (Static QR)
    • 4.3 Create Order API (Online Payment)
      POST
    • 4.4 Create Order API (Generate QR)
      POST
    • 4.5 Static QR Code Generate
      POST
    • 4.6 Query Order
      POST
    • 4.7 Merchant wallet Balance
      POST
    • 4.8 Cancel Order
      POST
    • 4.9 Activate/Deactivate Static QR Code
      POST
    • 4.10 Transaction History
      POST
  • Schemas
    • CreateOrderRespData
    • RespDataCreateOrderRespData
    • CreateOrderReqParams
    • ReqParamsCreateOrderReqParams
    • CreateQrOrderRespData
    • RespDataCreateQrOrderRespData
    • CreateQrOrderReqParams
    • ReqParamsCreateQrOrderReqParams
    • GenerateStaticQrRespData
    • RespDataGenerateStaticQrRespData
    • GenerateStaticQrParams
    • ReqParamsGenerateStaticQrParams
    • MapObject
    • QueryOrderRespData
    • RespDataQueryOrderRespData
    • ReqParams
    • QueryOrderReqParams
    • OpenApiReq
    • ReqParamsQueryOrderReqParams
    • MerchantBalanceRespData
    • RespDataMerchantBalanceRespData
    • MerchantBalanceReqParams
    • ReqParamsMerchantBalanceReqParams
    • CancelOrderRespData
    • TransactionHistoryRespData
    • RespDataCancelOrderRespData
    • RespDataTransactionHistoryRespData
    • CancelOrderReqParams
    • TransactionHistoryReqParams
    • ReqParamsCancelOrderReqParams
    • ReqParamsTransactionHistoryReqParams
    • StaticQrStateOptionRespData
    • RespDataStaticQrStateOptionRespData
    • StaticQrStateOptionReqParams
    • ReqParamsStaticQrStateOptionReqParams
  1. 2. Security & Encryption Rules

2.2 Request Encryption (AES)

All business parameters must be encrypted within the data field.
1.
Convert your request parameters into a JSON string.
2.
Encrypt the JSON string using AES algorithm (AES/ECB/PKCS5Padding) with your encryptKey.
3.
Encode the encrypted bytes into a Base64 string. This final string is the value for the data parameter.

Reference Log:#

Request URL:http://localhost:9000/pay/v1/purchase/createOrder;
API Parameters:{
"mchId": "3800068",
"msgId":"20251230101858880",
"apiCode": "UN1001",
"trxAmount": "146.22",
"purpose": "Vending Machine",
"expireIn": "3600",
"redirectSuccessUrl": "http://demo.doman.com/redirectSuccess",
"redirectFailureUrl": "http://demo.doman.com/redirectFailure",
"notifyUrl": "http://demo.doman.com/callback",
}

Request Body:#

{
  "data": "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",
  "mchId": "3800068",
  "sign": "8ae7946e9a5df620430b455a2b465894"
}

Request Result:#

{
  "code": "0",
  "message": "Request successful",
  "data": {
    "msgId": "20251230101858880",
    "orderNo": "2005825945779138561559",
    "trxState": "unpaid",
    "trxAmount": "146.22",
    "mdrAmount": "0",
    "codeUrl": "https://uat-payments.starpay.com.ph/9cdbcde04c0c0a4e04a025c1fb3fbddf/v1/login?uuid=401b6c25d7c64887a615b8bc3dd2bf61&orderReferenceNumber=OR%231SP91&amount=24.00&signature=JDJhJDEwJGlMZWkvUGJjU09INlJZQ0haaXpGSWU1b0c0M3B5ang1a1ZjRnVYa3FBaFg5aFRnUFRXN29X",
    "message": "Approved / Success."
  }
}

Reference Code:#

Modified at 2026-03-03 01:42:30
Previous
2.1 Purposes
Next
2.3 Signature Generation (MD5)