<\/p>\nusing namespace web;
\nusing namespace http;
\nusing namespace http::experimental::listener;<\/p>\n
void handle_post(http_request request) {
\n if (request.method() == methods::POST) {
\n request.extract_json().then([=](json::value payload) {
\n \/\/ Verify payment status from payload<\/p>\n
json::value response;
\n response[\u201cstatus\u201d] = json::value(\u201csuccess\u201d);<\/p>\n
request.reply(status_codes::OK, response);
\n });
\n }
\n}
\n“`<\/p>\n
Python Django\u89c6\u56fe\u5904\u7406\u793a\u4f8b<\/p>\n
\u201c`python
\nfrom django.http import JsonResponse<\/p>\n
def payment_webhook(request):
\n if request.method == \u2018POST\u2019:
\n # Verify signature from header<\/p>\n
# Process payment notification<\/p>\n
return JsonResponse({\u2018status\u2019: \u2018received\u2019})<\/p>\n
return JsonResponse({\u2018error\u2019: \u2018Invalid method\u2019}, status=400)
\n“`<\/p>\n
Java Spring Boot\u63a7\u5236\u5668\u793a\u4f8b<\/p>\n
\u201c`java
\n@RestController @RequestMapping(\u201c\/payment\u201d)
\npublic class PaymentController {<\/p>\n
@PostMapping(\u201c\/callback\u201d)
\n public ResponseEntity handleCallback(@RequestBody PaymentNotification notification,
\n HttpServletRequest request) {<\/p>\n
\/\/ Validate the callback is genuine<\/p>\n
return ResponseEntity.ok(Map.of(\u201cstatus\u201d, \u201csuccess\u201d));
\n }
\n}
\n“`<\/p>\n
—<\/p>\n
\ud83d\udca1 *\u63d0\u793a*\uff1a\u5b9e\u9645\u5b9e\u73b0\u65f6\u8bf7\u52a1\u5fc5\u53c2\u8003\u60a8\u9009\u62e9\u7684\u652f\u4ed8\u670d\u52a1\u5546\u7684\u6700\u65b0\u5b98\u65b9\u6587\u6863\uff0c\u56e0\u4e3aAPI\u7ec6\u8282\u4f1a\u968f\u65f6\u95f4\u53d8\u5316\u3002\u5927\u591a\u6570\u4e3b\u8981\u63d0\u4f9b\u5546\u90fd\u6709\u8be6\u7ec6\u7684\u5f00\u53d1\u8005\u95e8\u6237\u548cSDK\u53ef\u4f9b\u4f7f\u7528\u3002# \u9a6c\u6765\u897f\u4e9a\u652f\u4ed8\u7f51\u5173\u96c6\u6210\u8fdb\u9636\u6307\u5357<\/p>\n
3. \u5b89\u5168\u4e0e\u5408\u89c4\u6027\u8003\u8651<\/p>\n
A. PCI DSS\u5408\u89c4
\n\u2013 \u4fe1\u7528\u5361\u5904\u7406\uff1a\u5982\u679c\u6d89\u53ca\u4fe1\u7528\u5361\uff0c\u786e\u4fdd\u7b26\u5408PCI\u6807\u51c6
\n\u2013 \u654f\u611f\u6570\u636e\uff1a\u7edd\u4e0d\u76f4\u63a5\u5b58\u50a8\u5361\u53f7\/CVV\uff0c\u4f7f\u7528tokenization\u6280\u672f
\n\u2013 SSL\/TLS\uff1a\u5f3a\u5236HTTPS (TLS 1.2+)<\/p>\n
B. \u672c\u5730\u6cd5\u89c4\u8981\u6c42
\n\u2013 BNM\u89c4\u5b9a\uff1a\u9075\u5b88\u9a6c\u6765\u897f\u4e9a\u56fd\u5bb6\u94f6\u884c(BNM)\u7684\u7535\u5b50\u652f\u4ed8\u89c4\u5219
\n\u2013 GDPR\/PDPA\uff1a\u7b26\u5408\u9a6c\u6765\u897f\u4e9a\u4e2a\u4eba\u6570\u636e\u4fdd\u62a4\u6cd5(PDPA)<\/p>\n
4. Webhook\u5b9e\u73b0\u6700\u4f73\u5b9e\u8df5<\/p>\n
\u201c`javascript
\n\/\/ Node.js webhook\u9a8c\u8bc1\u793a\u4f8b(\u4ee5Boost\u4e3a\u4f8b)
\nconst crypto = require(\u2018crypto\u2019);<\/p>\n
function verifyBoostWebhook(req, secret) {
\n const signature = req.headers[\u2018x-boost-signature\u2019];
\n const hmac = crypto.createHmac(\u2018sha256\u2019, secret);
\n const digest = hmac.update(JSON.stringify(req.body)).digest(\u2018hex\u2019);<\/p>\n
return crypto.timingSafeEqual(
\n Buffer.from(signature),
\n Buffer.from(digest)
\n );
\n}<\/p>\n
app.post(\u2018\/webhooks\/boost\u2019, (req, res) => {
\n if (!verifyBoostWebhook(req, process.env.BOOST_SECRET)) {
\n return res.status(403).send(\u2018Invalid signature\u2019);
\n }<\/p>\n
\/\/ Process payment event\u2026
\n});
\n“`<\/p>\n
5. React\/Vue\u524d\u7aef\u96c6\u6210\u793a\u4f8b<\/p>\n
\u201c`jsx
\n\/\/ React\u7ec4\u4ef6\u793a\u4f8b(Touch \u2018n Go)
\nimport { loadTngSdk } from \u2018@tng-digital\/tng-sdk\u2019;<\/p>\n
function PaymentButton() {
\n const handlePayment = async () => {
\n try {
\n await loadTngSdk({
\n merchantId: \u2018YOUR_MID\u2019,
\n env: \u2018production\u2019
\n });<\/p>\n
window.TNG.pay({
\n amount: totalAmount,
\n referenceId: orderId,
\n onSuccess: (data) => console.log(data),
\n onError: (err) => alert(err.message)
\n });
\n } catch (error) {
\n console.error(error);
\n }
\n };<\/p>\n
return