dana-python 2.1.8__tar.gz → 2.1.9__tar.gz

{dana_python-2.1.8/dana_python.egg-info → dana_python-2.1.9}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dana-python
-Version: 2.1.8
+Version: 2.1.9
 Summary: API Client (SDK) for DANA APIs based on https://dashboard.dana.id/api-docs
 Author-email: DANA Package Manager  <package-manager@dana.id>
 Maintainer-email: DANA Package Manager  <package-manager@dana.id>

{dana_python-2.1.8 → dana_python-2.1.9}/dana/webhook/shop_info.py

@@ -36,7 +36,7 @@ class ShopInfo(BaseModel, BaseSdkModel):
     shop_id: Optional[Annotated[str, Field(strict=True, max_length=64)]] = Field(default=None, description="Information of shop identifier. Required if externalShopId is blank")
     external_shop_id: Optional[Annotated[str, Field(strict=True, max_length=64)]] = Field(default=None, description="Information of external shop identifier. Required if shopId is blank")
     operator_id: Optional[Annotated[str, Field(strict=True, max_length=32)]] = Field(default=None, description="Information of operator identifier")
-    shop_address: Optional[Annotated[str, Field(strict=True, max_length=256)]] = Field(default=None, description="Information of shop address")
+    shop_address: Optional[str] = Field(default=None, description="Information of shop address")
     division_id: Optional[Annotated[str, Field(strict=True, max_length=64)]] = Field(default=None, description="Information of division identifier")
     external_division_id: Optional[Annotated[str, Field(strict=True, max_length=64)]] = Field(default=None, description="Information of external division identifier")
     division_type: Optional[Annotated[str, Field(strict=True, max_length=32)]] = Field(default=None, description="Information of division type")

{dana_python-2.1.8 → dana_python-2.1.9}/dana/webhook/webhook.py

@@ -141,6 +141,27 @@ class WebhookParser:
         except Exception as e:
             return "", Exception(f"MinifyJSON: failed to marshal JSON for minification: {e}")
 
+    @staticmethod
+    def _has_triple_escaped_json_string_field(json_str: str) -> bool:
+        return '":"{\\\\\\"' in json_str
+
+    @staticmethod
+    def _process_over_escaped_minified_json(json_str: str) -> str:
+        normalized = json_str.replace('\\\\"', '"')
+        return WebhookParser._process_nested_json_fields(normalized)
+
+    @staticmethod
+    def _process_nested_json_fields(json_str: str) -> str:
+        normalized_str = json_str.replace('\\\\"', '\\"')
+
+        def replace_func(match):
+            field_name = match.group(1)
+            json_value = match.group(2)
+            escaped_value = json_value.replace('"', '\\"')
+            return f'"{field_name}":"{escaped_value}"'
+
+        return re.sub(r'"(\w+)":"(\{.*?\})"', replace_func, normalized_str)
+
     @staticmethod
     def _ensure_minified_json(json_str: str) -> tuple[str, Exception]:
         """
@@ -148,27 +169,109 @@ class WebhookParser:
         Returns tuple of (minified_json, error)
         """
         try:
-            normalized_str = json_str.replace('\\"', '"')
-            
-            pattern = r'"(\w+)":"(\{.*?\})"'
-            def replace_func(match):
-                field_name = match.group(1)
-                json_value = match.group(2)
-                escaped_value = json_value.replace('"', '\\"')
-                return f'"{field_name}":"{escaped_value}"'
-            
-            processed_str = re.sub(pattern, replace_func, normalized_str)
-            
+            if WebhookParser._is_json_minified(json_str) and not WebhookParser._has_triple_escaped_json_string_field(json_str):
+                return json_str, None
+
+            if WebhookParser._is_json_minified(json_str):
+                return WebhookParser._process_over_escaped_minified_json(json_str), None
+
+            normalized_str = json_str.replace('\\\\"', '\\"')
+            processed_str = WebhookParser._process_nested_json_fields(normalized_str)
+
             if WebhookParser._is_json_minified(processed_str):
                 return processed_str, None
-            
+
             return WebhookParser._minify_json(processed_str)
-            
+
         except json.JSONDecodeError as e:
             return "", Exception(f"EnsureMinifiedJSON: failed to unmarshal JSON: {e}")
         except Exception as e:
             return "", Exception(f"EnsureMinifiedJSON: failed to marshal JSON for minification: {e}")
 
+    @staticmethod
+    def _is_valid_json(json_str: str) -> bool:
+        try:
+            json.loads(json_str)
+            return True
+        except json.JSONDecodeError:
+            return False
+
+    @staticmethod
+    def _collapse_triple_backslash_quotes(s: str) -> str:
+        if '\\\\\\"' not in s:
+            return s
+        return s.replace('\\\\\\"', '\\"')
+
+    @staticmethod
+    def _collapse_double_backslash_quotes(s: str) -> str:
+        if '\\\\"' not in s:
+            return s
+        return s.replace('\\\\"', '"')
+
+    @staticmethod
+    def _remove_colon_space_before_quoted_value(s: str) -> str:
+        if ': \\"' not in s:
+            return s
+        return s.replace(': \\"', ':\\"')
+
+    @staticmethod
+    def _normalize_over_escaped_quotes(s: str) -> str:
+        if '\\\\"' in s:
+            return s.replace('\\\\"', '\\"')
+        return s
+
+    @staticmethod
+    def _body_forms_for_signature(request_body: str) -> list[str]:
+        seen: set[str] = set()
+        forms: list[str] = []
+
+        def add(form: str) -> None:
+            if form and form not in seen:
+                seen.add(form)
+                forms.append(form)
+
+        collapsed = WebhookParser._collapse_triple_backslash_quotes(request_body)
+        if collapsed != request_body and WebhookParser._is_valid_json(collapsed):
+            add(collapsed)
+
+        collapsed_spaced = WebhookParser._remove_colon_space_before_quoted_value(collapsed)
+        if collapsed_spaced != request_body and WebhookParser._is_valid_json(collapsed_spaced):
+            add(collapsed_spaced)
+
+        collapsed = WebhookParser._collapse_double_backslash_quotes(request_body)
+        if collapsed != request_body and WebhookParser._is_valid_json(collapsed):
+            add(collapsed)
+
+        spaced = WebhookParser._remove_colon_space_before_quoted_value(request_body)
+        if spaced != request_body and WebhookParser._is_valid_json(spaced):
+            add(spaced)
+
+        collapsed = WebhookParser._collapse_triple_backslash_quotes(spaced)
+        if collapsed != request_body and WebhookParser._is_valid_json(collapsed):
+            add(collapsed)
+
+        if WebhookParser._is_valid_json(request_body):
+            add(request_body)
+
+        normalized = WebhookParser._normalize_over_escaped_quotes(request_body)
+        if normalized != request_body and WebhookParser._is_json_minified(normalized) and WebhookParser._is_valid_json(normalized):
+            add(normalized)
+
+        nested_processed = WebhookParser._process_nested_json_fields(request_body)
+        if nested_processed != request_body:
+            add(nested_processed)
+
+        minified, err = WebhookParser._ensure_minified_json(request_body)
+        if err:
+            if not forms:
+                raise ValueError("failed to prepare any signature body form") from err
+        else:
+            add(minified)
+
+        if not forms:
+            raise ValueError("failed to prepare any signature body form")
+        return forms
+
     @staticmethod
     def _sha256_lower_hex(data: str) -> str:
         return hashlib.sha256(data.encode("utf-8")).hexdigest()
@@ -179,13 +282,38 @@ class WebhookParser:
         relative_path_url: str,
         body: str,
         x_timestamp: str
-    ) -> tuple[str, Exception]:
-        processed_body, err = self._ensure_minified_json(body)
-        if err:
-            return "", Exception(f"_construct_string_to_verify: failed to ensure JSON is minified: {err}")
-        
-        body_hash = self._sha256_lower_hex(processed_body)
-        return f"{http_method}:{relative_path_url}:{body_hash}:{x_timestamp}", None
+    ) -> str:
+        path = relative_path_url if relative_path_url.startswith("/") else f"/{relative_path_url}"
+        body_hash = self._sha256_lower_hex(body)
+        return f"{http_method.upper()}:{path}:{body_hash}:{x_timestamp}"
+
+    def _verify_signature(
+        self,
+        http_method: str,
+        relative_path_url: str,
+        body: str,
+        x_timestamp: str,
+        x_signature: str,
+    ) -> None:
+        body_forms = self._body_forms_for_signature(body)
+        signature_bytes = base64.b64decode(x_signature)
+
+        for body_form in body_forms:
+            string_to_verify = self._construct_string_to_verify(
+                http_method, relative_path_url, body_form, x_timestamp
+            )
+            try:
+                self.public_key.verify(
+                    signature_bytes,
+                    string_to_verify.encode("utf-8"),
+                    padding.PKCS1v15(),
+                    hashes.SHA256(),
+                )
+                return
+            except InvalidSignature:
+                continue
+
+        raise ValueError("Signature verification failed.")
 
     def parse_webhook(
         self,
@@ -200,33 +328,33 @@ class WebhookParser:
         if not x_signature or not x_timestamp:
             raise ValueError("Missing X-SIGNATURE or X-TIMESTAMP header.")
 
-        string_to_verify, err = self._construct_string_to_verify(
-            http_method=http_method,
-            relative_path_url=relative_path_url,
-            body=body,
-            x_timestamp=x_timestamp
-        )
-        if err:
-            raise ValueError(str(err))
-        signature_bytes = base64.b64decode(x_signature)
-        try:
-            self.public_key.verify(
-                signature_bytes,
-                string_to_verify.encode('utf-8'),
-                padding.PKCS1v15(),
-                hashes.SHA256()
-            )
-        except InvalidSignature:
-            raise ValueError("Signature verification failed.")
+        self._verify_signature(http_method, relative_path_url, body, x_timestamp, x_signature)
+
+        # Try multiple body transformations for parsing in order of likelihood:
+        # 1. Collapsed triple-backslash form (handles over-escaped \\\" → \")
+        # 2. Process nested JSON fields (handles bare-quote inner JSON like "field":"{...}")
+        # 3. ensureMinifiedJson fallback for pretty-printed bodies
+        payload_dict = None
+        for candidate in [
+            self._collapse_triple_backslash_quotes(body),
+            self._process_nested_json_fields(body),
+        ]:
+            try:
+                payload_dict = json.loads(candidate)
+                break
+            except json.JSONDecodeError:
+                continue
+
+        if payload_dict is None:
+            processed_body, err = self._ensure_minified_json(body)
+            if err:
+                raise ValueError(f"Failed to process JSON body: {err}")
+            try:
+                payload_dict = json.loads(processed_body)
+            except json.JSONDecodeError:
+                raise ValueError("Invalid JSON in request body.")
 
-        processed_body, err = self._ensure_minified_json(body)
-        if err:
-            raise ValueError(f"Failed to process JSON body: {err}")
-            
         try:
-            payload_dict = json.loads(processed_body)
             return FinishNotifyRequest.from_dict(payload_dict)
-        except json.JSONDecodeError:
-            raise ValueError("Invalid JSON in request body.")
         except Exception as e:
             raise ValueError(f"Failed to parse body into FinishNotifyRequest: {e}")

{dana_python-2.1.8 → dana_python-2.1.9/dana_python.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dana-python
-Version: 2.1.8
+Version: 2.1.9
 Summary: API Client (SDK) for DANA APIs based on https://dashboard.dana.id/api-docs
 Author-email: DANA Package Manager  <package-manager@dana.id>
 Maintainer-email: DANA Package Manager  <package-manager@dana.id>

{dana_python-2.1.8 → dana_python-2.1.9}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "dana-python"
-version = "2.1.8"
+version = "2.1.9"
 readme = "README.md"
 description = "API Client (SDK) for DANA APIs based on https://dashboard.dana.id/api-docs"
 license = "Apache-2.0"

dana_python-2.1.9/tests/test_webhook.py

@@ -0,0 +1,275 @@
+# Copyright 2025 PT Espay Debit Indonesia Koe
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+import json
+import os
+from dana.webhook.finish_notify_request import FinishNotifyRequest
+from dana.webhook import WebhookParser
+from dana.utils.snap_header import SnapHeader
+# Import fixtures directly from their modules to avoid circular imports
+from tests.fixtures.api_client import api_instance_payment_gateway
+from tests.fixtures.payment_gateway import webhook_key_pair
+
+class TestWebhookParser:
+    def test_webhook_signature_and_parsing_success(self):
+        # Load keys from environment variables
+        public_key = os.getenv("WEBHOOK_PUBLIC_KEY")
+        
+        webhook_http_method = "POST"
+        webhook_relative_url = "/api/v2/test-notif/dana"
+        
+        webhook_body_str = '{"amount":{"currency":"IDR","value":"100000.00"},"originalReferenceNo":"20250916111230999500166191900293793","merchantId":"216620080007039826152","latestTransactionStatus":"00","additionalInfo":{"paidTime":"1757998714761","paymentInfo":{"payOptionInfos":[{"transAmount":{"currency":"IDR","value":"100000.00"},"payAmount":{"currency":"IDR","value":"100000.00"},"payMethod":"NETWORK_PAY","payOption":"NETWORK_PAY_PG_LINKAJA"}],"extendInfo":"{\"externalPromoInfos\":[]}"}},"originalPartnerReferenceNo":"LINKIT25091757998646","createdTime":"1757998647000","finishedTime":"1757998714761","transactionStatusDesc":"SUCCESS"}'
+        
+        x_timestamp = "2025-09-16T12:11:30+07:00"
+        signature = "d/7mle7A+FCl4zvBZ2dMr3s7TVbbaK+toMtZwoev4OmLhn6Ctz/ynMaL3m3vHjAmV3UL3Fq5xp9thZFsO8BY74Vehqr1N9LQblV6i3TfMwT6lMvvhzWr0Fjbasyj23c5nFu1MOxpBiZFMMDNh8GQNLBAehHbjOmNldXSL6OQYRrK/TN9tdDyYFK6ltnKf4BN6bZa2ViAlI/np/U3QBW2LnDL82+8ZK7tYVF5bZyLLUSLXeWXBGQFTSDWqN+JdUHSnxGdQr3hZ7Y9Vqm/7G6rj6NrCxLPiEJYq1DQO3DjokMsORA2lOxzuo53bwqmhmD1mFhJKWF1JmyJuFdo2HB9JA=="
+        
+        headers = {
+            "Channel-Id": "DANA",
+            "Charset": "UTF-8",
+            "Content-Type": "application/json",
+            "User-Agent": "Jakarta Commons-HttpClient/3.1",
+            "X-External-Id": "cFQ0PK5yS9wkMTMOVem4fIoUuyuA28jg",
+            "X-Partner-Id": "2025090110410957288340",
+            "X-Signature": signature,
+            "X-Timestamp": x_timestamp
+        }
+        
+        # Create the parser with the public key
+        parser = WebhookParser(public_key=public_key)
+        
+        # Verify and parse
+        result = parser.parse_webhook(
+            http_method=webhook_http_method,
+            relative_path_url=webhook_relative_url,
+            headers=headers,
+            body=webhook_body_str
+        )
+        
+        # Verify specific fields like in the Go test
+        assert result is not None
+        assert result.original_partner_reference_no == "LINKIT25091757998646"
+        assert result.original_reference_no == "20250916111230999500166191900293793"
+        assert result.merchant_id == "216620080007039826152"
+        assert result.amount.value == "100000.00"
+        assert result.amount.currency == "IDR"
+        assert result.latest_transaction_status == "00"
+
+    def test_webhook_with_double_escaped_quotes(self):
+        """Test webhook parsing with double-escaped quotes in JSON (like PHP test)"""
+        # Load keys from environment variables
+        public_key = os.getenv("WEBHOOK_PUBLIC_KEY")
+        
+        webhook_http_method = "POST"
+        webhook_relative_url = "/d34021fa-7599-413b-8743-ddab605fea49"
+        
+        # This webhook body contains double-escaped quotes in extendInfo field
+        webhook_body_str = '{"amount":{"currency":"IDR","value":"50000.00"},"originalReferenceNo":"20251010111230999500166931000229476","merchantId":"216620090016041032029","latestTransactionStatus":"00","additionalInfo":{"paidTime":"2025-10-10T16:16:33+07:00","paymentInfo":{"payOptionInfos":[{"transAmount":{"currency":"IDR","value":"50000.00"},"payAmount":{"currency":"IDR","value":"50000.00"},"payMethod":"VIRTUAL_ACCOUNT","payOption":"VIRTUAL_ACCOUNT_BRI"}],"extendInfo":"{\\"externalPromoInfos\\":[]}"}},"originalPartnerReferenceNo":"ORDER-1760087736146","createdTime":"2025-10-10T16:15:37+07:00","finishedTime":"2025-10-10T16:16:33+07:00","transactionStatusDesc":"SUCCESS"}'
+        
+        x_timestamp = "2025-10-13T13:43:30+07:00"
+        signature = "fqrQPxlzEN4ZGW9vYt3PokmIrbG2HQtlbdj6krjf9HFW1qS3ilZjSR+9Z4XZNYxQIxyHHqXmjEiBU4ui/JrknSXlCpPQe7DztB/Ye+yLxIHYBnwdeCXn2zGGAV51nQki+eD2aL8Z6d6MyWz9hoytwE+jtWKUC0KtU7wQfoB0XjdEXzU3/4Ao/rWQbt97UONaaf7i5l3+M/ICP187PYw9iRHLUFh7WRPs8JKpZyO0kcJqEJbeOUjHMmIsLQImOlYVbQTM/1v89Ou1WcVAo0cXNE5yrvosB4pQROeI8KY2X1FNTuB1pdFtQTIyUcd/t1wuIxqHqqFKjrFdcQxlZOIyRg=="
+        
+        headers = {
+            "Channel-Id": "DANA",
+            "Charset": "UTF-8",
+            "Content-Type": "application/json",
+            "User-Agent": "Jakarta Commons-HttpClient/3.1",
+            "X-External-Id": "nXPTWcwt7lgCOy01wWGKDerEMlKwV5wc",
+            "X-Partner-Id": "2025091611385324660336",
+            "X-Signature": signature,
+            "X-Timestamp": x_timestamp
+        }
+        
+        # Create the parser with the public key
+        parser = WebhookParser(public_key=public_key)
+        
+        # Verify and parse - this should work with the JSON normalization
+        result = parser.parse_webhook(
+            http_method=webhook_http_method,
+            relative_path_url=webhook_relative_url,
+            headers=headers,
+            body=webhook_body_str
+        )
+        
+        # Verify specific fields like in the PHP test
+        assert result is not None
+        assert result.original_partner_reference_no == "ORDER-1760087736146"
+        assert result.original_reference_no == "20251010111230999500166931000229476"
+        assert result.merchant_id == "216620090016041032029"
+        assert result.amount.value == "50000.00"
+        assert result.amount.currency == "IDR"
+        assert result.latest_transaction_status == "00"
+
+    def test_over_escaped_extend_info(self):
+        """extendInfo contains triple-backslash-escaped quotes (\\\\\\\" instead of \\\") as
+        received through a proxy/gateway log that over-escapes nested JSON."""
+        public_key = os.getenv("WEBHOOK_PUBLIC_KEY")
+
+        webhook_http_method = "POST"
+        webhook_relative_url = "/d34021fa-7599-413b-8743-ddab605fea49"
+
+        webhook_body_str = '{"amount":{"currency":"IDR","value":"50000.00"},"originalReferenceNo":"20251010111230999500166931000229476","merchantId":"216620090016041032029","latestTransactionStatus":"00","additionalInfo":{"paidTime":"2025-10-10T16:16:33+07:00","paymentInfo":{"payOptionInfos":[{"transAmount":{"currency":"IDR","value":"50000.00"},"payAmount":{"currency":"IDR","value":"50000.00"},"payMethod":"VIRTUAL_ACCOUNT","payOption":"VIRTUAL_ACCOUNT_BRI"}],"extendInfo":"{\\\\\\"externalPromoInfos\\\\\\":[]}"}},"originalPartnerReferenceNo":"ORDER-1760087736146","createdTime":"2025-10-10T16:15:37+07:00","finishedTime":"2025-10-10T16:16:33+07:00","transactionStatusDesc":"SUCCESS"}'
+
+        x_timestamp = "2025-10-13T13:43:30+07:00"
+        signature = "fqrQPxlzEN4ZGW9vYt3PokmIrbG2HQtlbdj6krjf9HFW1qS3ilZjSR+9Z4XZNYxQIxyHHqXmjEiBU4ui/JrknSXlCpPQe7DztB/Ye+yLxIHYBnwdeCXn2zGGAV51nQki+eD2aL8Z6d6MyWz9hoytwE+jtWKUC0KtU7wQfoB0XjdEXzU3/4Ao/rWQbt97UONaaf7i5l3+M/ICP187PYw9iRHLUFh7WRPs8JKpZyO0kcJqEJbeOUjHMmIsLQImOlYVbQTM/1v89Ou1WcVAo0cXNE5yrvosB4pQROeI8KY2X1FNTuB1pdFtQTIyUcd/t1wuIxqHqqFKjrFdcQxlZOIyRg=="
+
+        headers = {
+            "Channel-Id": "DANA",
+            "Charset": "UTF-8",
+            "Content-Type": "application/json",
+            "User-Agent": "Jakarta Commons-HttpClient/3.1",
+            "X-External-Id": "dA8h1wYA5doFvTUZaIVabp3EQBXTfb01",
+            "X-Partner-Id": "2025091611385324660336",
+            "X-Signature": signature,
+            "X-Timestamp": x_timestamp,
+        }
+
+        parser = WebhookParser(public_key=public_key)
+        result = parser.parse_webhook(
+            http_method=webhook_http_method,
+            relative_path_url=webhook_relative_url,
+            headers=headers,
+            body=webhook_body_str,
+        )
+
+        assert result is not None
+        assert result.original_partner_reference_no == "ORDER-1760087736146"
+        assert result.original_reference_no == "20251010111230999500166931000229476"
+        assert result.merchant_id == "216620090016041032029"
+        assert result.amount.value == "50000.00"
+        assert result.amount.currency == "IDR"
+        assert result.latest_transaction_status == "00"
+        assert result.transaction_status_desc == "SUCCESS"
+
+    def test_production_qris_wire_bytes(self):
+        """Exact wire bytes as sent by the DANA gateway (no extra escaping).
+        Python raw string r'...' is equivalent to JS String.raw."""
+        public_key = os.getenv("WEBHOOK_PUBLIC_KEY")
+
+        webhook_http_method = "POST"
+        webhook_relative_url = "/v2/dana/callback-qris"
+
+        webhook_body_str = r'{"amount":{"currency":"IDR","value":"1000.00"},"originalReferenceNo":"20260521111212800100166771803184279","merchantId":"216620040007047069653","latestTransactionStatus":"00","additionalInfo":{"shopInfo":{"externalShopId":"a9ab9ac5","shopName":"PT REKA MIKRO MOBILITAS","shopId":"216660000003346861448","shopAddress":"{\"address1\":\"a9ab9ac5\",\"address2\":\"a9ab9ac5\",\"area\":\"Abiansemal\",\"city\":\"Kab. Badung\",\"contactAddressId\":\"120100000003577990444\",\"contactAddressType\":\"OFFICE_ADD\",\"country\":\"Indonesia\",\"defaultAddress\":false,\"province\":\"Bali\",\"verified\":true,\"zipcode\":\"80351\"}"},"tipsAmount":{"amount":"0.0","centFactor":"100","cent":"0","currencyValue":"360","currency":"IDR","currencyCode":"IDR"},"extendInfo":"{\"payment_scene\":\"C_SCAN_B\",\"QR_TYPE\":\"QR_DYNAMIC\",\"externalShopId\":\"a9ab9ac5\",\"osType\":\"android\",\"sourcePlatform\":\"MAIN_APP\",\"billNumber\":\"TRX20260521847fe0\"}","paymentInfo":{"payOptionInfos":[{"transAmount":{"currency":"IDR","value":"1000.00"},"payAmount":{"currency":"IDR","value":"1000.00"},"payMethod":"BALANCE","chargeAmount":{"currency":"IDR","value":"0.00"},"extendInfo":"{}","payOptionBillExtendInfo":"{}"}],"cashierRequestId":"4c0aaad0748e393d528fab8fc7b76599","paidTime":"2026-05-21T11:35:32+07:00","payRequestExtendInfo":"{\"payment_scene\":\"C_SCAN_B\",\"supportNewCashierFlow\":\"false\",\"EMVCO_CODE_INFO\":\"{\\\"acquiringBankName\\\":\\\"DANA\\\",\\\"additionalInfo\\\":{\\\"billNumber\\\":\\\"TRX20260521847fe0\\\",\\\"terminalLabel\\\":\\\"MER2026042717424830271473\\\"},\\\"countryCode\\\":\\\"ID\\\",\\\"creditAccountInfos\\\":[],\\\"extendInfo\\\":{},\\\"externalSerialNo\\\":\\\"771803184279\\\",\\\"gpnMerchantId\\\":\\\"216660000003346861448-a9ab9ac5\\\",\\\"instId\\\":\\\"DANA\\\",\\\"merchantCity\\\":\\\"Kab. Badung\\\",\\\"merchantNameLocation\\\":\\\"PT REKA MIKRO MOBILITAS\\\",\\\"merchantPan\\\":\\\"936009150002729888\\\",\\\"merchantPanLuhn\\\":\\\"9360091500027298882\\\",\\\"merchantType\\\":\\\"PSO\\\",\\\"onUs\\\":true,\\\"postalCode\\\":\\\"80351\\\",\\\"qrInfoCacheIndex\\\":\\\"MO_EMVCO_PARSE_CACHEGZ009B9B87A57BFF4170819754F3C0033863danabizpluginGZ001779338127709\\\",\\\"trxCode\\\":\\\"Payment Credit\\\",\\\"trxFeeAmount\\\":{\\\"amount\\\":0.00,\\\"cent\\\":0,\\\"centFactor\\\":100,\\\"currency\\\":\\\"IDR\\\",\\\"currencyCode\\\":\\\"IDR\\\",\\\"currencyValue\\\":\\\"360\\\"}}\",\"isClientSupportFaceAuth\":\"false\",\"callbackClientVersion\":\"2.1\",\"passThroughToPromotion\":\"{\\\"ORDER_TITLE\\\":\\\"Pay to PT REKA MIKRO MOBILITAS\\\",\\\"gpnMerchantId\\\":\\\"216660000003346861448-a9ab9ac5\\\",\\\"CLIENT_ID\\\":\\\"2026042717424830271473\\\",\\\"SHOP_INFO\\\":\\\"{\\\\\\\"externalShopId\\\\\\\":\\\\\\\"a9ab9ac5\\\\\\\",\\\\\\\"mccCodes\\\\\\\":[\\\\\\\"4789\\\\\\\"],\\\\\\\"shopAddress\\\\\\\":\\\\\\\"{\\\\\\\\\\\\\\\"address1\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"a9ab9ac5\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"address2\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"a9ab9ac5\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"area\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"Abiansemal\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"city\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"Kab. Badung\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"contactAddressId\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"120100000003577990444\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"contactAddressType\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"OFFICE_ADD\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"country\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"Indonesia\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"defaultAddress\\\\\\\\\\\\\\\":false,\\\\\\\\\\\\\\\"province\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"Bali\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"verified\\\\\\\\\\\\\\\":true,\\\\\\\\\\\\\\\"zipcode\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"80351\\\\\\\\\\\\\\\"}\\\\\\\",\\\\\\\"shopId\\\\\\\":\\\\\\\"216660000003346861448\\\\\\\",\\\\\\\"shopName\\\\\\\":\\\\\\\"PT REKA MIKRO MOBILITAS\\\\\\\"}\\\"}\",\"orderStatus\":\"INIT\",\"SERVICE_INFO\":\"null\",\"isFrictionless\":\"false\",\"passToFluxnet\":\"{\\\"onUs\\\":\\\"true\\\",\\\"merchantName\\\":\\\"PT REKA MIKRO MOBILITAS\\\"}\",\"CHARGE_USER_FEE_INFO\":\"[]\",\"merchantCategoryCode\":\"4789\",\"externalShopId\":\"a9ab9ac5\",\"merchantCategoryName\":\"TRANSPORTATION SERVICES (NOT ELSEWHERE CLASSIFIED)\",\"needAmlCheck\":\"false\",\"billNumber\":\"TRX20260521847fe0\",\"passThroughToRisk\":\"{\\\"isModifySmartpay\\\":\\\"false\\\",\\\"passkeys\\\":\\\"false\\\",\\\"isPasskeysSupported\\\":\\\"false\\\",\\\"isSupportWAOtp\\\":\\\"true\\\",\\\"isFrictionless\\\":\\\"false\\\",\\\"payerTypingChallenge\\\":\\\"false\\\"}\",\"SUPPORT_FRICTIONLESS\":\"false\"}","extendInfo":"{\"topupAndPay\":\"false\",\"paymentStatus\":\"SUCCESS\"}"}},"externalStoreID":"a9ab9ac5","originalPartnerReferenceNo":"TRX20260521847fe0","finishedTime":"2026-05-21T11:35:32+07:00","createdTime":"2026-05-21T11:35:27+07:00","transactionStatusDesc":"SUCCESS"}'
+
+        x_timestamp = "2026-05-25T15:03:30+07:00"
+        signature = "dF/ljaqWsl4j93/z0yXGzbh/LBCg+XVi9bDshz4pKbdbRVP923Gb0mHx0ouMpbV0MWLOZdRlumSs9zMdmdsgCN7ED1kRoZV2f61TXb14aEMtWwEW7sLFSSMOTFq1nCn1lzYEKvuzPgMuypBg2CJzECrRenIjC2R3Paj6NfbM1PfQAA5Gqz1vTNsYlX7P5DAxZasG5miTY7WqCACl+o9MAwHxHf9RNiE2vVn9uy9mc1PTMWByEW9eVYY8PX6/sjceQz2HeXNmYuxkA1lP1y5UUwmdxxiWdyGJeJkSL+HYpaNRwAEO+7WgTmvTX1oM1MxNkFm2mbgYQoyW8K0rXZmcKQ=="
+
+        headers = {
+            "Channel-Id": "DANA",
+            "Charset": "UTF-8",
+            "Content-Type": "application/json",
+            "User-Agent": "Jakarta Commons-HttpClient/3.1",
+            "X-External-Id": "yA07YWHKqVsCFEk8ivCzAz16nmtj51iF",
+            "X-Partner-Id": "2026042717424830271473",
+            "X-Signature": signature,
+            "X-Timestamp": x_timestamp,
+        }
+
+        parser = WebhookParser(public_key=public_key)
+        result = parser.parse_webhook(
+            http_method=webhook_http_method,
+            relative_path_url=webhook_relative_url,
+            headers=headers,
+            body=webhook_body_str,
+        )
+
+        assert result is not None
+        assert result.original_partner_reference_no == "TRX20260521847fe0"
+        assert result.original_reference_no == "20260521111212800100166771803184279"
+        assert result.merchant_id == "216620040007047069653"
+        assert result.amount.value == "1000.00"
+        assert result.amount.currency == "IDR"
+        assert result.latest_transaction_status == "00"
+        assert result.transaction_status_desc == "SUCCESS"
+
+    def test_production_qris_js_escaped_body(self):
+        """Same production QRIS payload but received as a JS-style escaped string.
+        Python and JS single-quoted strings use the same escape rules for \\\\ sequences."""
+        public_key = os.getenv("WEBHOOK_PUBLIC_KEY")
+
+        webhook_http_method = "POST"
+        webhook_relative_url = "/v2/dana/callback-qris"
+
+        webhook_body_str = '{"amount":{"currency":"IDR","value":"1000.00"},"originalReferenceNo":"20260521111212800100166771803184279","merchantId":"216620040007047069653","latestTransactionStatus":"00","additionalInfo":{"shopInfo":{"externalShopId":"a9ab9ac5","shopName":"PT REKA MIKRO MOBILITAS","shopId":"216660000003346861448","shopAddress":"{\\"address1\\":\\"a9ab9ac5\\",\\"address2\\":\\"a9ab9ac5\\",\\"area\\":\\"Abiansemal\\",\\"city\\":\\"Kab. Badung\\",\\"contactAddressId\\":\\"120100000003577990444\\",\\"contactAddressType\\":\\"OFFICE_ADD\\",\\"country\\":\\"Indonesia\\",\\"defaultAddress\\":false,\\"province\\":\\"Bali\\",\\"verified\\":true,\\"zipcode\\":\\"80351\\"}"},"tipsAmount":{"amount":"0.0","centFactor":"100","cent":"0","currencyValue":"360","currency":"IDR","currencyCode":"IDR"},"extendInfo":"{\\"payment_scene\\":\\"C_SCAN_B\\",\\"QR_TYPE\\":\\"QR_DYNAMIC\\",\\"externalShopId\\":\\"a9ab9ac5\\",\\"osType\\":\\"android\\",\\"sourcePlatform\\":\\"MAIN_APP\\",\\"billNumber\\":\\"TRX20260521847fe0\\"}","paymentInfo":{"payOptionInfos":[{"transAmount":{"currency":"IDR","value":"1000.00"},"payAmount":{"currency":"IDR","value":"1000.00"},"payMethod":"BALANCE","chargeAmount":{"currency":"IDR","value":"0.00"},"extendInfo":"{}","payOptionBillExtendInfo":"{}"}],"cashierRequestId":"4c0aaad0748e393d528fab8fc7b76599","paidTime":"2026-05-21T11:35:32+07:00","payRequestExtendInfo":"{\\"payment_scene\\":\\"C_SCAN_B\\",\\"supportNewCashierFlow\\":\\"false\\",\\"EMVCO_CODE_INFO\\":\\"{\\\\\\"acquiringBankName\\\\\\":\\\\\\"DANA\\\\\\",\\\\\\"additionalInfo\\\\\\":{\\\\\\"billNumber\\\\\\":\\\\\\"TRX20260521847fe0\\\\\\",\\\\\\"terminalLabel\\\\\\":\\\\\\"MER2026042717424830271473\\\\\\"},\\\\\\"countryCode\\\\\\":\\\\\\"ID\\\\\\",\\\\\\"creditAccountInfos\\\\\\":[],\\\\\\"extendInfo\\\\\\":{},\\\\\\"externalSerialNo\\\\\\":\\\\\\"771803184279\\\\\\",\\\\\\"gpnMerchantId\\\\\\":\\\\\\"216660000003346861448-a9ab9ac5\\\\\\",\\\\\\"instId\\\\\\":\\\\\\"DANA\\\\\\",\\\\\\"merchantCity\\\\\\":\\\\\\"Kab. Badung\\\\\\",\\\\\\"merchantNameLocation\\\\\\":\\\\\\"PT REKA MIKRO MOBILITAS\\\\\\",\\\\\\"merchantPan\\\\\\":\\\\\\"936009150002729888\\\\\\",\\\\\\"merchantPanLuhn\\\\\\":\\\\\\"9360091500027298882\\\\\\",\\\\\\"merchantType\\\\\\":\\\\\\"PSO\\\\\\",\\\\\\"onUs\\\\\\":true,\\\\\\"postalCode\\\\\\":\\\\\\"80351\\\\\\",\\\\\\"qrInfoCacheIndex\\\\\\":\\\\\\"MO_EMVCO_PARSE_CACHEGZ009B9B87A57BFF4170819754F3C0033863danabizpluginGZ001779338127709\\\\\\",\\\\\\"trxCode\\\\\\":\\\\\\"Payment Credit\\\\\\",\\\\\\"trxFeeAmount\\\\\\":{\\\\\\"amount\\\\\\":0.00,\\\\\\"cent\\\\\\":0,\\\\\\"centFactor\\\\\\":100,\\\\\\"currency\\\\\\":\\\\\\"IDR\\\\\\",\\\\\\"currencyCode\\\\\\":\\\\\\"IDR\\\\\\",\\\\\\"currencyValue\\\\\\":\\\\\\"360\\\\\\"}}\\",\\"isClientSupportFaceAuth\\":\\"false\\",\\"callbackClientVersion\\":\\"2.1\\",\\"passThroughToPromotion\\":\\"{\\\\\\"ORDER_TITLE\\\\\\":\\\\\\"Pay to PT REKA MIKRO MOBILITAS\\\\\\",\\\\\\"gpnMerchantId\\\\\\":\\\\\\"216660000003346861448-a9ab9ac5\\\\\\",\\\\\\"CLIENT_ID\\\\\\":\\\\\\"2026042717424830271473\\\\\\",\\\\\\"SHOP_INFO\\\\\\":\\\\\\"{\\\\\\\\\\\\\\"externalShopId\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"a9ab9ac5\\\\\\\\\\\\\\",\\\\\\\\\\\\\\"mccCodes\\\\\\\\\\\\\\":[\\\\\\\\\\\\\\"4789\\\\\\\\\\\\\\"],\\\\\\\\\\\\\\"shopAddress\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"{\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"address1\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"a9ab9ac5\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"address2\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"a9ab9ac5\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"area\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"Abiansemal\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"city\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"Kab. Badung\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"contactAddressId\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"120100000003577990444\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"contactAddressType\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"OFFICE_ADD\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"country\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"Indonesia\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"defaultAddress\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\":false,\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"province\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"Bali\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"verified\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\":true,\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"zipcode\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"80351\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\"}\\\\\\\\\\\\\\",\\\\\\\\\\\\\\"shopId\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"216660000003346861448\\\\\\\\\\\\\\",\\\\\\\\\\\\\\"shopName\\\\\\\\\\\\\\":\\\\\\\\\\\\\\"PT REKA MIKRO MOBILITAS\\\\\\\\\\\\\\"}\\\\\\"}\\",\\"orderStatus\\":\\"INIT\\",\\"SERVICE_INFO\\":\\"null\\",\\"isFrictionless\\":\\"false\\",\\"passToFluxnet\\":\\"{\\\\\\"onUs\\\\\\":\\\\\\"true\\\\\\",\\\\\\"merchantName\\\\\\":\\\\\\"PT REKA MIKRO MOBILITAS\\\\\\"}\\",\\"CHARGE_USER_FEE_INFO\\":\\"[]\\",\\"merchantCategoryCode\\":\\"4789\\",\\"externalShopId\\":\\"a9ab9ac5\\",\\"merchantCategoryName\\":\\"TRANSPORTATION SERVICES (NOT ELSEWHERE CLASSIFIED)\\",\\"needAmlCheck\\":\\"false\\",\\"billNumber\\":\\"TRX20260521847fe0\\",\\"passThroughToRisk\\":\\"{\\\\\\"isModifySmartpay\\\\\\":\\\\\\"false\\\\\\",\\\\\\"passkeys\\\\\\":\\\\\\"false\\\\\\",\\\\\\"isPasskeysSupported\\\\\\":\\\\\\"false\\\\\\",\\\\\\"isSupportWAOtp\\\\\\":\\\\\\"true\\\\\\",\\\\\\"isFrictionless\\\\\\":\\\\\\"false\\\\\\",\\\\\\"payerTypingChallenge\\\\\\":\\\\\\"false\\\\\\"}\\",\\"SUPPORT_FRICTIONLESS\\":\\"false\\"}","extendInfo":"{\\"topupAndPay\\":\\"false\\",\\"paymentStatus\\":\\"SUCCESS\\"}"}},"externalStoreID":"a9ab9ac5","originalPartnerReferenceNo":"TRX20260521847fe0","finishedTime":"2026-05-21T11:35:32+07:00","createdTime":"2026-05-21T11:35:27+07:00","transactionStatusDesc":"SUCCESS"}'
+
+        x_timestamp = "2026-05-25T15:03:30+07:00"
+        signature = "dF/ljaqWsl4j93/z0yXGzbh/LBCg+XVi9bDshz4pKbdbRVP923Gb0mHx0ouMpbV0MWLOZdRlumSs9zMdmdsgCN7ED1kRoZV2f61TXb14aEMtWwEW7sLFSSMOTFq1nCn1lzYEKvuzPgMuypBg2CJzECrRenIjC2R3Paj6NfbM1PfQAA5Gqz1vTNsYlX7P5DAxZasG5miTY7WqCACl+o9MAwHxHf9RNiE2vVn9uy9mc1PTMWByEW9eVYY8PX6/sjceQz2HeXNmYuxkA1lP1y5UUwmdxxiWdyGJeJkSL+HYpaNRwAEO+7WgTmvTX1oM1MxNkFm2mbgYQoyW8K0rXZmcKQ=="
+
+        headers = {
+            "Channel-Id": "DANA",
+            "Charset": "UTF-8",
+            "Content-Type": "application/json",
+            "User-Agent": "Jakarta Commons-HttpClient/3.1",
+            "X-External-Id": "yA07YWHKqVsCFEk8ivCzAz16nmtj51iF",
+            "X-Partner-Id": "2026042717424830271473",
+            "X-Signature": signature,
+            "X-Timestamp": x_timestamp,
+        }
+
+        parser = WebhookParser(public_key=public_key)
+        result = parser.parse_webhook(
+            http_method=webhook_http_method,
+            relative_path_url=webhook_relative_url,
+            headers=headers,
+            body=webhook_body_str,
+        )
+
+        assert result is not None
+        assert result.original_partner_reference_no == "TRX20260521847fe0"
+        assert result.original_reference_no == "20260521111212800100166771803184279"
+        assert result.merchant_id == "216620040007047069653"
+        assert result.amount.value == "1000.00"
+        assert result.amount.currency == "IDR"
+        assert result.latest_transaction_status == "00"
+        assert result.transaction_status_desc == "SUCCESS"
+
+    def test_production_qris_finish_notify_wire_bytes(self):
+        """QRIS finish-notify webhook — exact wire bytes (raw string, no extra escaping).
+        Tests that the FinishNotify-style QRIS payload is correctly verified and parsed."""
+        public_key = os.getenv("WEBHOOK_PUBLIC_KEY")
+
+        webhook_http_method = "POST"
+        webhook_relative_url = "/v2/dana/callback-qris"
+
+        webhook_body_str = r'{"amount":{"currency":"IDR","value":"1000.00"},"originalReferenceNo":"20260521111212800100166771803184279","merchantId":"216620040007047069653","latestTransactionStatus":"00","additionalInfo":{"shopInfo":{"externalShopId":"a9ab9ac5","shopName":"PT REKA MIKRO MOBILITAS","shopId":"216660000003346861448","shopAddress":"{\"address1\":\"a9ab9ac5\",\"address2\":\"a9ab9ac5\",\"area\":\"Abiansemal\",\"city\":\"Kab. Badung\",\"contactAddressId\":\"120100000003577990444\",\"contactAddressType\":\"OFFICE_ADD\",\"country\":\"Indonesia\",\"defaultAddress\":false,\"province\":\"Bali\",\"verified\":true,\"zipcode\":\"80351\"}"},"tipsAmount":{"amount":"0.0","centFactor":"100","cent":"0","currencyValue":"360","currency":"IDR","currencyCode":"IDR"},"extendInfo":"{\"payment_scene\":\"C_SCAN_B\",\"QR_TYPE\":\"QR_DYNAMIC\",\"externalShopId\":\"a9ab9ac5\",\"osType\":\"android\",\"sourcePlatform\":\"MAIN_APP\",\"billNumber\":\"TRX20260521847fe0\"}","paymentInfo":{"payOptionInfos":[{"transAmount":{"currency":"IDR","value":"1000.00"},"payAmount":{"currency":"IDR","value":"1000.00"},"payMethod":"BALANCE","chargeAmount":{"currency":"IDR","value":"0.00"},"extendInfo":"{}","payOptionBillExtendInfo":"{}"}],"cashierRequestId":"4c0aaad0748e393d528fab8fc7b76599","paidTime":"2026-05-21T11:35:32+07:00","payRequestExtendInfo":"{\"payment_scene\":\"C_SCAN_B\",\"supportNewCashierFlow\":\"false\",\"EMVCO_CODE_INFO\":\"{\\\"acquiringBankName\\\":\\\"DANA\\\",\\\"additionalInfo\\\":{\\\"billNumber\\\":\\\"TRX20260521847fe0\\\",\\\"terminalLabel\\\":\\\"MER2026042717424830271473\\\"},\\\"countryCode\\\":\\\"ID\\\",\\\"creditAccountInfos\\\":[],\\\"extendInfo\\\":{},\\\"externalSerialNo\\\":\\\"771803184279\\\",\\\"gpnMerchantId\\\":\\\"216660000003346861448-a9ab9ac5\\\",\\\"instId\\\":\\\"DANA\\\",\\\"merchantCity\\\":\\\"Kab. Badung\\\",\\\"merchantNameLocation\\\":\\\"PT REKA MIKRO MOBILITAS\\\",\\\"merchantPan\\\":\\\"936009150002729888\\\",\\\"merchantPanLuhn\\\":\\\"9360091500027298882\\\",\\\"merchantType\\\":\\\"PSO\\\",\\\"onUs\\\":true,\\\"postalCode\\\":\\\"80351\\\",\\\"qrInfoCacheIndex\\\":\\\"MO_EMVCO_PARSE_CACHEGZ009B9B87A57BFF4170819754F3C0033863danabizpluginGZ001779338127709\\\",\\\"trxCode\\\":\\\"Payment Credit\\\",\\\"trxFeeAmount\\\":{\\\"amount\\\":0.00,\\\"cent\\\":0,\\\"centFactor\\\":100,\\\"currency\\\":\\\"IDR\\\",\\\"currencyCode\\\":\\\"IDR\\\",\\\"currencyValue\\\":\\\"360\\\"}}\",\"isClientSupportFaceAuth\":\"false\",\"callbackClientVersion\":\"2.1\",\"passThroughToPromotion\":\"{\\\"ORDER_TITLE\\\":\\\"Pay to PT REKA MIKRO MOBILITAS\\\",\\\"gpnMerchantId\\\":\\\"216660000003346861448-a9ab9ac5\\\",\\\"CLIENT_ID\\\":\\\"2026042717424830271473\\\",\\\"SHOP_INFO\\\":\\\"{\\\\\\\"externalShopId\\\\\\\":\\\\\\\"a9ab9ac5\\\\\\\",\\\\\\\"mccCodes\\\\\\\":[\\\\\\\"4789\\\\\\\"],\\\\\\\"shopAddress\\\\\\\":\\\\\\\"{\\\\\\\\\\\\\\\"address1\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"a9ab9ac5\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"address2\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"a9ab9ac5\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"area\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"Abiansemal\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"city\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"Kab. Badung\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"contactAddressId\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"120100000003577990444\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"contactAddressType\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"OFFICE_ADD\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"country\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"Indonesia\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"defaultAddress\\\\\\\\\\\\\\\":false,\\\\\\\\\\\\\\\"province\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"Bali\\\\\\\\\\\\\\\",\\\\\\\\\\\\\\\"verified\\\\\\\\\\\\\\\":true,\\\\\\\\\\\\\\\"zipcode\\\\\\\\\\\\\\\":\\\\\\\\\\\\\\\"80351\\\\\\\\\\\\\\\"}\\\\\\\",\\\\\\\"shopId\\\\\\\":\\\\\\\"216660000003346861448\\\\\\\",\\\\\\\"shopName\\\\\\\":\\\\\\\"PT REKA MIKRO MOBILITAS\\\\\\\"}\\\"}\",\"orderStatus\":\"INIT\",\"SERVICE_INFO\":\"null\",\"isFrictionless\":\"false\",\"passToFluxnet\":\"{\\\"onUs\\\":\\\"true\\\",\\\"merchantName\\\":\\\"PT REKA MIKRO MOBILITAS\\\"}\",\"CHARGE_USER_FEE_INFO\":\"[]\",\"merchantCategoryCode\":\"4789\",\"externalShopId\":\"a9ab9ac5\",\"merchantCategoryName\":\"TRANSPORTATION SERVICES (NOT ELSEWHERE CLASSIFIED)\",\"needAmlCheck\":\"false\",\"billNumber\":\"TRX20260521847fe0\",\"passThroughToRisk\":\"{\\\"isModifySmartpay\\\":\\\"false\\\",\\\"passkeys\\\":\\\"false\\\",\\\"isPasskeysSupported\\\":\\\"false\\\",\\\"isSupportWAOtp\\\":\\\"true\\\",\\\"isFrictionless\\\":\\\"false\\\",\\\"payerTypingChallenge\\\":\\\"false\\\"}\",\"SUPPORT_FRICTIONLESS\":\"false\"}","extendInfo":"{\"topupAndPay\":\"false\",\"paymentStatus\":\"SUCCESS\"}"}},"externalStoreID":"a9ab9ac5","originalPartnerReferenceNo":"TRX20260521847fe0","finishedTime":"2026-05-21T11:35:32+07:00","createdTime":"2026-05-21T11:35:27+07:00","transactionStatusDesc":"SUCCESS"}'
+
+        x_timestamp = "2026-05-25T15:03:30+07:00"
+        signature = "dF/ljaqWsl4j93/z0yXGzbh/LBCg+XVi9bDshz4pKbdbRVP923Gb0mHx0ouMpbV0MWLOZdRlumSs9zMdmdsgCN7ED1kRoZV2f61TXb14aEMtWwEW7sLFSSMOTFq1nCn1lzYEKvuzPgMuypBg2CJzECrRenIjC2R3Paj6NfbM1PfQAA5Gqz1vTNsYlX7P5DAxZasG5miTY7WqCACl+o9MAwHxHf9RNiE2vVn9uy9mc1PTMWByEW9eVYY8PX6/sjceQz2HeXNmYuxkA1lP1y5UUwmdxxiWdyGJeJkSL+HYpaNRwAEO+7WgTmvTX1oM1MxNkFm2mbgYQoyW8K0rXZmcKQ=="
+
+        headers = {
+            "Channel-Id": "DANA",
+            "Charset": "UTF-8",
+            "Content-Type": "application/json",
+            "User-Agent": "Jakarta Commons-HttpClient/3.1",
+            "X-External-Id": "yA07YWHKqVsCFEk8ivCzAz16nmtj51iF",
+            "X-Partner-Id": "2026042717424830271473",
+            "X-Signature": signature,
+            "X-Timestamp": x_timestamp,
+        }
+
+        parser = WebhookParser(public_key=public_key)
+        result = parser.parse_webhook(
+            http_method=webhook_http_method,
+            relative_path_url=webhook_relative_url,
+            headers=headers,
+            body=webhook_body_str,
+        )
+
+        assert result is not None
+        assert result.original_partner_reference_no == "TRX20260521847fe0"
+        assert result.original_reference_no == "20260521111212800100166771803184279"
+        assert result.merchant_id == "216620040007047069653"
+        assert result.amount.value == "1000.00"
+        assert result.amount.currency == "IDR"
+        assert result.latest_transaction_status == "00"
+        assert result.transaction_status_desc == "SUCCESS"