@crediblemark/buayar 0.1.2 → 0.1.4

package/README.md

@@ -0,0 +1,241 @@
+# 💳 @crediblemark/buayar
+
+[![npm version](https://img.shields.io/npm/v/@crediblemark/buayar.svg?style=flat-square&color=amber)](https://www.npmjs.com/package/@crediblemark/buayar)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg?style=flat-square)](https://opensource.org/licenses/MIT)
+
+**`@crediblemark/buayar`** adalah Unified Payment Gateway SDK yang dirancang khusus untuk mempermudah integrasi berbagai gerbang pembayaran (Payment Gateway) pada platform dan situs berbasis **CredBuild**.
+
+Dengan SDK ini, Anda cukup menulis kode satu kali menggunakan struktur API yang seragam untuk mengelola pembuatan invoice/transaksi serta verifikasi callback webhook dari berbagai penyedia layanan payment gateway.
+
+---
+
+## 🚀 Fitur Utama
+
+- 🔄 **Unified API**: Satu antarmuka (interface) terpadu untuk semua provider payment gateway.
+- 🛡️ **Tipe Data Kuat (TypeScript)**: Dilengkapi dengan deklarasi tipe data lengkap untuk mencegah *runtime error*.
+- 🇮🇩 **Dukungan Lokal**: Siap digunakan untuk transaksi di Indonesia (seperti Duitku).
+- ⚙️ **Modular & Dapat Diperluas**: Memungkinkan penambahan provider baru dengan mewarisi kelas base yang disediakan.
+- 🔒 **Otomatisasi Signature**: Keamanan transaksi terjamin dengan pembuatan *hash* signature (MD5, SHA-256) otomatis secara internal.
+
+---
+
+## 📦 Instalasi
+
+Instal package menggunakan manajer paket pilihan Anda:
+
+```bash
+# Menggunakan Bun (Sangat Direkomendasikan)
+bun add @crediblemark/buayar
+
+# Menggunakan NPM
+npm install @crediblemark/buayar
+
+# Menggunakan Yarn
+yarn add @crediblemark/buayar
+
+# Menggunakan PNPM
+pnpm add @crediblemark/buayar
+```
+
+---
+
+## 🗺️ Alur Proses Pembayaran
+
+```mermaid
+sequenceDiagram
+    autonumber
+    actor Customer as 👤 Pelanggan
+    participant App as 💻 Aplikasi Anda (Backend)
+    participant SDK as 💳 @crediblemark/buayar
+    participant PG as 🏛️ Payment Gateway (e.g. Duitku)
+
+    Customer->>App: 1. Checkout Order
+    App->>SDK: 2. createInvoice(provider, params, config)
+    SDK->>SDK: 3. Kalkulasi & Generate Signature
+    SDK->>PG: 4. Inquiry Request (API)
+    PG-->>SDK: 5. Kembalikan Payment URL & Ref
+    SDK-->>App: 6. Response (InvoiceResponse)
+    App-->>Customer: 7. Redirect ke Halaman Pembayaran (Payment URL)
+    Customer->>PG: 8. Selesaikan Pembayaran
+    PG->>App: 9. Webhook Callback (Notifikasi Pembayaran)
+    App->>SDK: 10. verifyCallback(provider, body, config)
+    SDK-->>App: 11. Kembalikan Status Terverifikasi (paid/failed)
+    App-->>PG: 12. Response OK ke Payment Gateway
+```
+
+---
+
+## 🛠️ Integrasi & Penggunaan
+
+### 1. Inisialisasi & Membuat Transaksi (Invoice)
+
+Berikut adalah contoh pembuatan transaksi menggunakan provider **Duitku**:
+
+```typescript
+import { paymentManager } from "@crediblemark/buayar";
+
+const providerName = "duitku";
+
+// Konfigurasi Kredensial Provider
+const providerConfig = {
+  merchantCode: "DXXXX",         // Merchant Code dari Duitku
+  apiKey: "xxxxxxxxxxxxxxxx",    // API Key / Merchant Key Anda
+  sandbox: true,                 // Set true untuk development / testing
+};
+
+// Parameter Invoice / Pembayaran
+const invoiceParams = {
+  orderId: "ORDER-100249",
+  amount: 150000,                // Nominal transaksi (Rupiah)
+  productDetails: "Pembelian Template Landing Page Premium",
+  customer: {
+    name: "Rasyiqi Crediblemark",
+    email: "rasyiqi@crediblemark.com",
+    phone: "081234567890",       // Opsional
+  },
+  returnUrl: "https://situsbisnis.com/payment/success",
+  callbackUrl: "https://api.situsbisnis.com/v1/payment/callback",
+};
+
+async function handleCheckout() {
+  try {
+    const result = await paymentManager.createInvoice(
+      providerName,
+      invoiceParams,
+      providerConfig
+    );
+
+    if (result.success) {
+      console.log("Invoice Berhasil Dibuat! 🎉");
+      console.log("URL Pembayaran:", result.paymentUrl);
+      console.log("Referensi Gateway:", result.reference);
+      
+      // Redirect pelanggan ke paymentUrl
+      // response.redirect(result.paymentUrl);
+    } else {
+      console.error("Gagal membuat invoice:", result.error);
+    }
+  } catch (error) {
+    console.error("Terjadi kesalahan:", error);
+  }
+}
+
+handleCheckout();
+```
+
+### 2. Verifikasi Callback / Webhook Notifikasi
+
+Gunakan fungsi ini di endpoint API callback/webhook untuk memastikan data notifikasi yang dikirim oleh Payment Gateway valid dan tidak dimanipulasi:
+
+```typescript
+import { paymentManager } from "@crediblemark/buayar";
+
+// Endpoint API Webhook Handler
+async function handlePaymentCallback(req: any, res: any) {
+  const providerName = "duitku";
+  const callbackPayload = req.body; // Payload POST dari gateway
+  
+  const providerConfig = {
+    merchantCode: "DXXXX",
+    apiKey: "xxxxxxxxxxxxxxxx",
+    sandbox: true,
+  };
+
+  try {
+    const verification = await paymentManager.verifyCallback(
+      providerName,
+      callbackPayload,
+      providerConfig
+    );
+
+    if (verification.isValid) {
+      console.log(`Signature valid untuk Order: ${verification.orderId}`);
+      
+      if (verification.status === "paid") {
+        console.log("Status: PEMBAYARAN SELESAI & LUNAS! ✅");
+        // Update database Anda: ubah status order menjadi LUNAS
+      } else if (verification.status === "failed") {
+        console.log("Status: PEMBAYARAN GAGAL ❌");
+        // Update database: ubah status order menjadi GAGAL
+      }
+      
+      // Kirim respon sukses ke Payment Gateway (Duitku meminta respon plaintext OK)
+      res.status(200).send("OK");
+    } else {
+      console.warn("Peringatan: Signature callback tidak valid! Potensi manipulasi data.");
+      res.status(400).send("Bad Signature");
+    }
+  } catch (error) {
+    console.error("Gagal memproses callback:", error);
+    res.status(500).send("Internal Server Error");
+  }
+}
+```
+
+---
+
+## 🗂️ Referensi API
+
+### `PaymentManager`
+
+#### `createInvoice(providerName, params, config)`
+Membuat transaksi baru ke gerbang pembayaran tertentu.
+- **`providerName`**: `string` - Nama provider payment gateway (contoh: `'duitku'`).
+- **`params`**: `CreateInvoiceParams` - Data invoice dan detail pelanggan.
+- **`config`**: `ProviderConfig` - Kredensial merchant dan API key.
+- **Return**: `Promise<InvoiceResponse>`
+
+#### `verifyCallback(providerName, body, config)`
+Memvalidasi signature webhook callback dari payment gateway.
+- **`providerName`**: `string` - Nama provider payment gateway (contoh: `'duitku'`).
+- **`body`**: `any` - Payload callback mentah dari request body.
+- **`config`**: `ProviderConfig` - Kredensial merchant dan API key.
+- **Return**: `Promise<VerifyCallbackResult>`
+
+---
+
+## 📐 Spesifikasi Interface (TypeScript)
+
+### `CreateInvoiceParams`
+```typescript
+interface CreateInvoiceParams {
+  orderId: string;
+  amount: number;
+  productDetails: string;
+  customer: {
+    name: string;
+    email: string;
+    phone?: string;
+  };
+  returnUrl: string;
+  callbackUrl: string;
+}
+```
+
+### `InvoiceResponse`
+```typescript
+interface InvoiceResponse {
+  success: boolean;
+  paymentUrl?: string;
+  reference?: string;
+  rawResponse: any;
+  error?: string;
+}
+```
+
+### `VerifyCallbackResult`
+```typescript
+interface VerifyCallbackResult {
+  isValid: boolean;
+  orderId: string;
+  amount: number;
+  status: "paid" | "pending" | "failed";
+  rawPayload: any;
+}
+```
+
+---
+
+## 📄 Lisensi
+
+Proyek ini dilisensikan di bawah **MIT License**. Hak Cipta © 2026 Rasyiqi Crediblemark.

package/dist/index.js

@@ -52,8 +52,11 @@ var DuitkuProvider = class extends BasePaymentProvider {
     const { merchantCode, apiKey, sandbox } = config;
     const url = sandbox ? "https://api-sandbox.duitku.com/api/merchant/createInvoice" : "https://api-prod.duitku.com/api/merchant/createInvoice";
     const integerAmount = Math.round(amount);
-    const rawSignature = merchantCode + orderId + integerAmount.toString() + apiKey;
-    const signature = import_crypto.default.createHash("md5").update(rawSignature).digest("hex");
+    const rawPayloadSignature = merchantCode + orderId + integerAmount.toString() + apiKey;
+    const payloadSignature = import_crypto.default.createHash("md5").update(rawPayloadSignature).digest("hex");
+    const timestamp = Date.now().toString();
+    const rawHeaderSignature = merchantCode + timestamp + apiKey;
+    const headerSignature = import_crypto.default.createHash("sha256").update(rawHeaderSignature).digest("hex");
     const payload = {
       merchantCode,
       paymentAmount: integerAmount,
@@ -61,7 +64,7 @@ var DuitkuProvider = class extends BasePaymentProvider {
       productDetails,
       email: customer.email,
       phoneNumber: customer.phone || "",
-      signature,
+      signature: payloadSignature,
       callbackUrl,
       returnUrl,
       expiryPeriod: 1440
@@ -71,7 +74,11 @@ var DuitkuProvider = class extends BasePaymentProvider {
       const response = await fetch(url, {
         method: "POST",
         headers: {
-          "Content-Type": "application/json"
+          "Content-Type": "application/json",
+          "Accept": "application/json",
+          "x-duitku-signature": headerSignature,
+          "x-duitku-timestamp": timestamp,
+          "x-duitku-merchantcode": merchantCode
         },
         body: JSON.stringify(payload)
       });

package/dist/index.mjs

@@ -13,8 +13,11 @@ var DuitkuProvider = class extends BasePaymentProvider {
     const { merchantCode, apiKey, sandbox } = config;
     const url = sandbox ? "https://api-sandbox.duitku.com/api/merchant/createInvoice" : "https://api-prod.duitku.com/api/merchant/createInvoice";
     const integerAmount = Math.round(amount);
-    const rawSignature = merchantCode + orderId + integerAmount.toString() + apiKey;
-    const signature = crypto.createHash("md5").update(rawSignature).digest("hex");
+    const rawPayloadSignature = merchantCode + orderId + integerAmount.toString() + apiKey;
+    const payloadSignature = crypto.createHash("md5").update(rawPayloadSignature).digest("hex");
+    const timestamp = Date.now().toString();
+    const rawHeaderSignature = merchantCode + timestamp + apiKey;
+    const headerSignature = crypto.createHash("sha256").update(rawHeaderSignature).digest("hex");
     const payload = {
       merchantCode,
       paymentAmount: integerAmount,
@@ -22,7 +25,7 @@ var DuitkuProvider = class extends BasePaymentProvider {
       productDetails,
       email: customer.email,
       phoneNumber: customer.phone || "",
-      signature,
+      signature: payloadSignature,
       callbackUrl,
       returnUrl,
       expiryPeriod: 1440
@@ -32,7 +35,11 @@ var DuitkuProvider = class extends BasePaymentProvider {
       const response = await fetch(url, {
         method: "POST",
         headers: {
-          "Content-Type": "application/json"
+          "Content-Type": "application/json",
+          "Accept": "application/json",
+          "x-duitku-signature": headerSignature,
+          "x-duitku-timestamp": timestamp,
+          "x-duitku-merchantcode": merchantCode
         },
         body: JSON.stringify(payload)
       });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crediblemark/buayar",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "Unified Payment Gateway SDK for CredBuild platforms and sites",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",