Banka Havalesi API Dökümantasyonu

const crypto = require('crypto');

function createSecureDepositUrl(merchantConfig, depositData) {
  const SECRET_KEY = merchantConfig.secretKey; // Keep this secret!
  
  // Prepare deposit parameters
  const params = {
    sid: merchantConfig.siteId,
    username: depositData.username,
    userID: depositData.userId,
    fullname: depositData.fullname,
    amount: depositData.amount,
    trx: `DEP-${Date.now()}`
  };
  
  // Step 1: Sort keys alphabetically
  const sortedKeys = Object.keys(params).sort();
  
  // Step 2: Create sign string
  const signString = sortedKeys
    .map(key => `${key}=${params[key]}`)
    .join('&');
  
  // Step 3: Generate HMAC SHA256 signature
  const signature = crypto
    .createHmac('sha256', SECRET_KEY)
    .update(signString)
    .digest('hex');
  
  // Step 4: Add signature to params
  params.signature = signature;
  
  // Step 5: Create secure URL
  const queryString = new URLSearchParams(params).toString();
  const secureUrl = `https://api.parax.tech/Methods/BankTransfer/V2/?${queryString}`;
  
  return secureUrl;
}

// Usage Example
const merchantConfig = {
  siteId: 'YOUR_SITE_ID',
  secretKey: 'sk_live_YOUR_SECRET_KEY' // NEVER expose this!
};

const depositData = {
  username: 'john_doe',
  userId: '12345',
  fullname: 'John Doe',
  amount: '250.00'
};

const secureUrl = createSecureDepositUrl(merchantConfig, depositData);
// Redirect user to this secure URL
res.redirect(secureUrl);

{
  "status": 1,
  "code": 200,
  "title": "Başarılı!",
  "message": "Banka transferi başlatıldı!",
  "type": "success",
  "data": {
    "iban": "TR330006100519786457841326",
    "account_holder": "ParaX Ödeme Hizmetleri A.Ş.",
    "reference_code": "REF-1234567890",
    "transaction_id": "TD10001",
    "amount": 250.00,
    "currency": "TRY"
  }
}

{
  "trx": "DEP-1738588800000",
  "transaction_id": "TD10001",
  "amount": 250.00,
  "status": "success",
  "currency": "TRY"
}

// Webhook endpoint'i
app.post('/webhook/parax', express.json(), (req, res) => {
  const { trx, transaction_id, amount, status, currency } = req.body;

  // IP whitelist kontrolü (opsiyonel ama önerilir)
  const allowedIP = '176.31.10.152';
  if (req.ip !== allowedIP) {
    return res.status(403).json({ error: 'Forbidden' });
  }

  if (status === 'success') {
    // Ödeme başarılı - bakiye ekle
    console.log(`İşlem başarılı: TRX=${trx}, Tutar=${amount} ${currency}`);
    
    // Veritabanı işlemleri...
    // await addBalanceToUser(trx, amount);
    
    return res.json({ 
      success: true, 
      message: 'Webhook alındı ve işlendi' 
    });
  } 
  
  if (status === 'failed') {
    // Ödeme başarısız
    console.log(`İşlem başarısız: TRX=${trx}`);
    
    return res.json({ 
      success: true, 
      message: 'Webhook alındı' 
    });
  }

  if (status === 'pending') {
    // Ödeme beklemede
    console.log(`İşlem beklemede: TRX=${trx}`);
    
    return res.json({ 
      success: true, 
      message: 'Webhook alındı' 
    });
  }
});

{
  "sid": 1001,
  "key": "Fp2407kzXgHUrZB9LAuwD3S3N8c19EMabih254Ge1863YyxP5269",
  "transaction_id": "TD10001"
}

{
  "code": 200,
  "status": "success",
  "data": {
    "transaction_id": "TD10001",
    "amount": "1000.00",
    "currency": "TRY",
    "method": "BankTransfer",
    "status": "completed",
    "created_at": "2026-02-03 14:30:00",
    "completed_at": "2026-02-03 14:35:00",
    "user_id": "44843155",
    "username": "ahmetyilmaz"
  }
}

const checkTransactionStatus = async (transactionId) => {
  const response = await fetch('https://api.parax.live/Transaction/Status/', {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json',
      'Accept': 'application/json'
    },
    body: JSON.stringify({
      sid: process.env.PARAX_SID,
      key: process.env.PARAX_KEY,
      transaction_id: transactionId
    })
  });

  const result = await response.json();
  
  if (result.code === 200) {
    console.log('İşlem Durumu:', result.data.status);
    return result.data;
  } else {
    console.error('Hata:', result.message);
    return null;
  }
};

// Kullanım
checkTransactionStatus('TD10001');