Service usage specifications
The APIs exposed by XPay support the HTTP protocol with channel encryption and use the JSON format for the request and response.
Here are the technical details for invoking the services.
The TLSv1.2 and TLSv1.3 protocols are supported. Below are the ciphers:
Below are the details of the certificate installed in the test and production environment:
|GlobalSign Root R3
|GlobalSign RSA Organization Validation CA - 2018
Here are some examples of requests to XPay services in different programming languages:
Specifications for outcome notification
Payment notifications for asynchronous services are sent by the XPay gateway in server-to-server mode with the POST method, in JSON format. They have the following user agent:
The notification is optional, it is sent if the "notificationUrl" parameter is set in the APIs:
- POST /orders/hpp (Hosted Payment Page)
- POST/orders/paybylink (Pay-By-Link)
- POST /orders/build (XPay Build)
Below are the IP addresses of the Gateway from which notifications are sent: