<\/p>\n\ub124\uc784\uc2a4\ud398\uc774\uc2a4 \uc6f9 \uc0ac\uc6a9.
\n\ub124\uc784\uc2a4\ud398\uc774\uc2a4 http \uc0ac\uc6a9.
\n\ub124\uc784\uc2a4\ud398\uc774\uc2a4 http::experimental::\ub9ac\uc2a4\ub108\ub97c \uc0ac\uc6a9\ud569\ub2c8\ub2e4;<\/p>\n
void handle_post(http_request request) {
\n if (request.method() == methods::POST) {
\n request.extract_json().then([=](json::value payload) {
\n \/\/ \ud398\uc774\ub85c\ub4dc\uc5d0\uc11c \uacb0\uc81c \uc0c1\ud0dc \ud655\uc778<\/p>\n
json::value \uc751\ub2f5;
\n \uc751\ub2f5[\"\uc0c1\ud0dc\"] = json::value(\"\uc131\uacf5\");<\/p>\n
request.reply(status_codes::OK, response);
\n });
\n }
\n}
\n“`<\/p>\n
\ud30c\uc774\uc36c \uc7a5\uace0 \ubdf0 \ucc98\ub9ac \uc608\uc81c<\/p>\n
\"`python
\ndjango.http\uc5d0\uc11c JsonResponse\ub97c \uac00\uc838\uc635\ub2c8\ub2e4.<\/p>\n
def payment_webhook(request).
\n if request.method == 'POST':
\n # \ud5e4\ub354\uc5d0\uc11c \uc11c\uba85 \ud655\uc778<\/p>\n
# \uacb0\uc81c \ucc98\ub9ac \uc54c\ub9bc<\/p>\n
\ubc18\ud658 JsonResponse({'status': 'received'})<\/p>\n
\ubc18\ud658 JsonResponse({'error': 'Invalid method'}, status=400)
\n“`<\/p>\n
Java \uc2a4\ud504\ub9c1 \ubd80\ud2b8 \ucee8\ud2b8\ub864\ub7ec \uc608\uc81c<\/p>\n
\"`java
\nRestController @RequestMapping(\"\/payment\")
\npublic \ud074\ub798\uc2a4 PaymentController {<\/p>\n
@PostMapping(\"\/\ucf5c\ubc31\")
\n \uacf5\uc6a9 \uc751\ub2f5 \uc5d4\ud2f0\ud2f0 \ud578\ub4e4\ucf5c\ubc31(@RequestBody \uacb0\uc81c \uc54c\ub9bc \uc54c\ub9bc,
\n HttpServletRequest \uc694\uccad) {<\/p>\n
\/\/ \ucf5c\ubc31\uc774 \uc815\ud488\uc778\uc9c0 \ud655\uc778<\/p>\n
\uc751\ub2f5 \uc5d4\ud2f0\ud2f0.ok(Map.of(\"status\", \"success\"))\ub97c \ubc18\ud658\ud569\ub2c8\ub2e4;
\n }
\n}
\n“`<\/p>\n
—<\/p>\n
\ud78c\ud2b8*: API \uc138\ubd80 \uc0ac\ud56d\uc740 \uc2dc\uac04\uc774 \uc9c0\ub0a8\uc5d0 \ub530\ub77c \ubcc0\uacbd\ub418\ubbc0\ub85c \uc2e4\uc81c \uad6c\ud604\uc744 \uc704\ud574\uc11c\ub294 \ud56d\uc0c1 \uc120\ud0dd\ud55c \uacb0\uc81c \uc11c\ube44\uc2a4 \uc81c\uacf5\uc5c5\uccb4\uc758 \ucd5c\uc2e0 \uacf5\uc2dd \ubb38\uc11c\ub97c \ucc38\uc870\ud558\uc138\uc694. \ub300\ubd80\ubd84\uc758 \uc8fc\uc694 \uacf5\uae09\uc5c5\uccb4\ub294 \uc790\uc138\ud55c \uac1c\ubc1c\uc790 \ud3ec\ud138\uacfc SDK\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4.# \ub9d0\ub808\uc774\uc2dc\uc544 \uacb0\uc81c \uac8c\uc774\ud2b8\uc6e8\uc774 \ud1b5\ud569 \uace0\uae09 \uac00\uc774\ub4dc<\/p>\n
3. \ubcf4\uc548 \ubc0f \uaddc\uc815 \uc900\uc218 \uace0\ub824 \uc0ac\ud56d<\/p>\n
A. PCI DSS \uc900\uc218
\n- \uc2e0\uc6a9 \uce74\ub4dc \ucc98\ub9ac: \uc2e0\uc6a9 \uce74\ub4dc\uac00 \uad00\ub828\ub41c \uacbd\uc6b0 PCI \uaddc\uc815 \uc900\uc218 \ud655\uc778
\n- \ubbfc\uac10\ud55c \ub370\uc774\ud130: \uce74\ub4dc \ubc88\ud638\/CVV\ub97c \uc9c1\uc811 \uc800\uc7a5\ud558\uc9c0 \ub9d0\uace0 \ud1a0\ud070\ud654 \uae30\uc220\uc744 \uc0ac\uc6a9\ud558\uc138\uc694.
\n- SSL\/TLS: \ud544\uc218 HTTPS(TLS 1.2+)<\/p>\n
B. \ud604\uc9c0 \uaddc\uc81c \uc694\uac74
\n- BNM \uc694\uad6c \uc0ac\ud56d: \ub9d0\ub808\uc774\uc2dc\uc544 \uc740\ud589(BNM) \uc804\uc790\uacb0\uc81c \uaddc\uc815 \uc900\uc218
\n- GDPR\/PDPA: \ub9d0\ub808\uc774\uc2dc\uc544\uc758 \uac1c\uc778 \ub370\uc774\ud130 \ubcf4\ud638\ubc95(PDPA) \uc900\uc218<\/p>\n
4. \uc6f9\ud6c5 \uad6c\ud604 \ubaa8\ubc94 \uc0ac\ub840<\/p>\n
\"`javascript
\n\/\/ Node.js \uc6f9\ud6c5 \uc720\ud6a8\uc131 \uac80\uc0ac \uc608\uc81c(Boost\ub97c \uc608\ub85c \uc0ac\uc6a9)
\nconst crypto = require('crypto');<\/p>\n
\ud568\uc218 verifyBoostWebhook(req, secret) {
\n const signature = req.headers['x-boost-signature'];
\n const hmac = crypto.createHmac('sha256', secret);
\n const digest = hmac.update(JSON.stringify(req.body)).digest('hex');<\/p>\n
crypto.timingSafeEqual(
\n Buffer.from(\uc11c\uba85),
\n Buffer.from(digest)
\n );
\n}<\/p>\n
app.post('\/\uc6f9\ud6c5\/\ubd80\uc2a4\ud2b8', (req, res) => {
\n if (!verifyBoostWebhook(req, process.env.BOOST_SECRET)) {
\n res.status(403).send('\uc720\ud6a8\ud558\uc9c0 \uc54a\uc740 \uc11c\uba85')\ub97c \ubc18\ud658\ud569\ub2c8\ub2e4;
\n }<\/p>\n
\/\/ \uacb0\uc81c \uc774\ubca4\ud2b8 \ucc98\ub9ac...
\n});
\n“`<\/p>\n
React\/Vue \ud504\ub7f0\ud2b8\uc5d4\ub4dc \ud1b5\ud569 \uc608\uc2dc 5.<\/p>\n
\"`jsx
\n\/\/ React \ucef4\ud3ec\ub10c\ud2b8 \uc608\uc81c (\ud130\uce58 \uc564 \uace0)
\n'@tng-digital\/tng-sdk'\uc5d0\uc11c { loadTngSdk }\ub97c \uac00\uc838\uc635\ub2c8\ub2e4;<\/p>\n
\ud568\uc218 PaymentButton() {
\n const handlePayment = async () => {{
\n \uc2dc\ub3c4 {
\n await loadTngSdk({
\n merchantId: 'YOUR_MID',
\n \ud658\uacbd: 'production'
\n });<\/p>\n
window.TNG.pay({
\n \uae08\uc561: \ucd1d\uc561
\n \ucc38\uc870 ID: \uc8fc\ubb38 ID,
\n onSuccess: (\ub370\uc774\ud130) => console.log(\ub370\uc774\ud130),
\n onError: (err) => alert(err.message)
\n });
\n } catch (error) {
\n \ucf58\uc194 \uc624\ub958(\uc624\ub958);
\n }
\n };<\/p>\n
\ubc18\ud658