Payment Token API

Available upon request

Token API - Generate Token / Provisioning

For merchants to generate the payment token without payment authorization.PCI-DSS Attestation of Compliance (AoC) is required in order to unlock this API for merchant.


Request

URL: https://pay.fiuu.com/RMS/API/token/index.php


Method: POST


Response (JSON format)

Formula of signature

hash_hmac( 'SHA256',  {action}{billing_email}{billing_mobile}{billing_name}{custID}{detail}{merchantID}{token_type}, {verify_key} )

Example (in JSON format)

The following example might not be accurate and please only take it as a format reference.

{
    "status": true,
    “merchantID”: “merchantIDSB”,
    “billing_name”: “abc”,
    “billing_email”: “[email protected]”,
    “billing_mobile”: “012-3456789”,
    “token”: “1234567890”,
    “bin”: “123456”,
    “bin4”: “8901”,
    “expYear”: “2099”,
    “expMonth”: “12”,
    “token_type”: “T”,
}

Token API - Retrieve Token

For merchants to retrieve the token based on the buyer information.


Request

URL: https://pay.fiuu.com/RMS/API/token/index.php


Method: POST


Response (JSON format)

Formula of signature

hash_hmac( 'SHA256', {action}{billing_email}{billing_mobile}{billing_name}{merchantID}{token_type}, {verify_key} )

Example (in JSON format)

The following example might not be accurate and please only take it as a format reference.

{
    "status": true,
    "tokens": [
        {
            "token": "555111112315454545",
            "bin": "550690",
            "bin4": "0001",
            "expYear": "2030",
            "expMonth": "02",
            "token_type": "T",
            "card_brand": "MASTERCARD",
            "card_issuer": "AFFIN BANK",
            "card_type": "DEBIT"
        }
    ]
}

Token API - Retrieve Buyer Information

Available upon request. For merchants to retrieve the token information such as credit card first 6 and last 4 digit, credit card exp date, card type and the issuer information.


Request

URL: https://pay.fiuu.com/RMS/API/token/index.php


Method: POST


Response (JSON format)

Formula of signature

hash_hmac( 'SHA256', {action}{merchantID}{token}, {verify_key} )

Token API - Edit Token Details

Available upon request. For merchants to modify the token detail based on the generated active token.


Request

URL: https://pay.fiuu.com/RMS/API/token/index.php


Method: POST


Response (JSON format)

Formula of signature

hash_hmac( 'SHA256', {action}{billing_email}{billing_mobile}{billing_name}{detail}{merchantID}{token}, {secret_key} )

Token API - Delete Token

Available upon request. For merchants to delete the token based on buyer information.


Request

URL: https://pay.fiuu.com/RMS/API/token/index.php


Method: POST


Response (JSON format)

Formula of signature

hash_hmac( 'SHA256', {action}{billing_email}{billing_mobile}{billing_name}{merchantID}{token}, {secret_key} )

Token API - Error Handling


PG will respond the following in JSON format once error occurs (negative result).


Token Error Code & Description in JSON.


Token API - Detail

Merchants will include the following information while requesting the following token action.