Laravel nhận VietQR, package PHP

composer require monapay/laravel

use MonaPay\MonaPay;

$monapay = new MonaPay(env('MONAPAY_CLIENT_ID'), env('MONAPAY_CLIENT_SECRET'));

$checkout = $monapay->checkouts()->create([
    'amount' => 50000,
    'order_code' => 'ORDER-123',
    'description' => 'Thanh toan don hang ORDER-123',
    'return_url' => route('payment.success')
]);

return redirect($checkout['checkout_url']);

namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Request;

class VerifyMonaPayWebhook
{
    public function handle(Request $request, Closure $next)
    {
        $timestamp = $request->header('X-Mona-Timestamp');
        $signature = $request->header('X-Mona-Signature');
        $rawBody = $request->getContent();

        if (abs(time() - (int)$timestamp) > 300) {
            return response()->json(['error' => 'Request expired'], 400);
        }

        $expected = 'sha256=' . hash_hmac('sha256', $timestamp . '.' . $rawBody, env('MONAPAY_WEBHOOK_SECRET'));
        if (!hash_equals($expected, $signature)) {
            return response()->json(['error' => 'Invalid signature'], 401);
        }

        return $next($request);
    }
}

Route::post('/api/webhooks/monapay', function (Request $request) {
    $data = $request->json()->all();
    
    // Chống trùng bằng transaction_code và đưa vào Queue
    ProcessMonaPayTransaction::dispatch($data['transaction_code'], $data);
    
    // Trả lời 200 ngay lập tức trong vòng 10 giây
    return response()->json(['status' => 'ok'], 200);
})->middleware(VerifyMonaPayWebhook::class);

$monapay->sandbox()->createTransaction([
    'amount' => 50000,
    'description' => 'ORDER-123'
]);