Bán khoá học, ebook, file số: chuyển khoản xong tự mở quyền, tự gửi link

curl -s -X POST https://api.monapay.vn/api/v1/checkouts \
  -H "Authorization: Bearer $TOKEN" \
  -H "X-Client-Secret: $MONAPAY_CLIENT_SECRET" \
  -H "Idempotency-Key: checkout-KHOA-001" \
  -H 'Content-Type: application/json' \
  -d '{"amount":500000,"order_code":"KHOA-001","description":"Thanh toan Khoa hoc ABC","return_url":"https://shop.vn/payment/return","cancel_url":"https://shop.vn/checkout","payer_email":"[email protected]","expires_in":900}'

const express = require('express');
const crypto  = require('crypto');
const app = express();
const SECRET = process.env.MONA_WEBHOOK_SECRET;

app.post('/webhook/monapay', express.raw({ type: 'application/json' }), async (req, res) => {
  const timestamp = req.header('X-Mona-Timestamp') || '';
  const signature = req.header('X-Mona-Signature') || '';
  const rawBody = req.body.toString('utf8');

  if (Math.abs(Date.now() / 1000 - Number(timestamp)) > 300) {
    return res.status(400).send('timestamp qua han');
  }

  const expected = 'sha256=' + crypto.createHmac('sha256', SECRET).update(timestamp + '.' + rawBody).digest('hex');
  const hopLe = signature.length === expected.length && crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected));
  
  if (!hopLe) return res.status(401).send('sai chu ky');
  
  // Trả về 200/201/202 trong 10 giây đầu
  res.status(200).send('OK');

  const data = JSON.parse(rawBody);
  const event = data.event || data.event_type;
  
  if (event === 'CHECKOUT_PAID') {
      // Xử lý logic không block: chống trùng bằng transaction_code
      // 1. Cấp quyền khóa học
      // 2. Gửi email tài liệu tự động (MONA Mail)
      console.log('Thanh toán thành công cho đơn:', data.order_code);
  }
});

app.listen(3000, () => console.log('Webhook chạy cổng 3000'));

curl -X POST https://api.monapay.vn/api/v1/sandbox/transactions \
  -H "Authorization: Bearer $MONA_TOKEN" \
  -H "X-Client-Secret: $MONA_SECRET" \
  -H 'Content-Type: application/json' \
  -d '{"amount":500000,"description":"Thanh toan Khoa hoc ABC"}'