curl -X POST https://api.elyonpay.org/api/request-to-pay/payment/link \
  -H "Authorization: Bearer <your_jwt_token>" \
  -H "Content-Type: application/json" \
  -H "language: fr" \
  -d '{
    "amount": 15000,
    "user_lang": "fr",
    "msisdn": "+237600000000",
    "success": "https://yoursite.com/success",
    "error": "https://yoursite.com/error"
  }'

curl -X POST https://api.elyonpay.org/api/login \
  -H "Content-Type: application/json" \
  -d '{
    "username": "you@example.com",
    "password": "***",
    "role": "ROLE_MERCHANT_ADMIN"
  }'

{
  "token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9...."
}

Authorization: Bearer <your_jwt_token>

{
  "success": true,
  "data": {
    "id": "pay_1A2B3C4D5E6F",
    "status": "pending",
    "amount": 15000,
    "currency": "XAF"
  },
  "meta": {
    "request_id": "req_xxxxxxx",
    "timestamp": "2024-03-24T10:15:00Z"
  }
}

{
  "url": "https://app.elyonpay.org/t/CI032667e43abf11?success=https://www.success.com&error=https://www.error.com"
}

curl -X POST https://api.elyonpay.org/api/request-to-pay/payment/link \
  -H "Authorization: Bearer <your_jwt_token>" \
  -H "Content-Type: application/json" \
  -H "language: fr" \
  -d '{
    "amount": 15000,
    "user_lang": "fr",
    "msisdn": "+237600000001",
    "success": "https://yoursite.com/success",
    "error": "https://yoursite.com/error",
    "webhook": "https://yoursite.com/webhooks/elyonpay"
  }'

const response = await fetch('https://api.elyonpay.org/api/request-to-pay/payment/link', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer ' + token,
    'Content-Type': 'application/json',
    'language': 'fr'
  },
  body: JSON.stringify({
    amount: 15000,
    user_lang: 'fr',
    msisdn: '+237600000001',
    success: 'https://yoursite.com/success',
    error: 'https://yoursite.com/error',
    webhook: 'https://yoursite.com/webhooks/elyonpay'
  })
});

const data = await response.json();
console.log(data.url); // Payment link to redirect the customer

$ch = curl_init('https://api.elyonpay.org/api/request-to-pay/payment/link');
curl_setopt_array($ch, [
  CURLOPT_POST => true,
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_HTTPHEADER => [
    'Authorization: Bearer ' . $token,
    'Content-Type: application/json',
    'language: fr'
  ],
  CURLOPT_POSTFIELDS => json_encode([
    'amount'    => 15000,
    'user_lang' => 'fr',
    'msisdn'    => '+237600000001',
    'success'   => 'https://yoursite.com/success',
    'error'     => 'https://yoursite.com/error',
    'webhook'   => 'https://yoursite.com/webhooks/elyonpay'
  ])
]);

$response = json_decode(curl_exec($ch), true);
echo $response['url']; // Payment link

curl -X GET https://api.elyonpay.org/api/transactions/1553 \
  -H "Authorization: Bearer <your_jwt_token>" \
  -H "Accept: application/json"

{
  "id": 1553,
  "PSPid": "FR033169cbd9c1f1",
  "uuid": "FR033169cbd9c1f1",
  "creation_date": "2026-03-31T14:27:13+00:00",
  "validation_date": null,
  "delivery_date": null,
  "amount": 100,
  "totalCustomer": 100,
  "state": "CREATED",
  "ticket_type": "SMS_EMAIL",
  "operation_code": "03",
  "payer_phone_number": "+33782112127",
  "beneficiary_phone_number": "+33782112127",
  "payer_currency": "EUR",
  "beneficiary_currency": "EUR",
  "payer_country": "FR",
  "beneficiary_country": "FR",
  "payment": {
    "name": "MOLLIE"
  },
  "customer": {
    "phoneNumber": "+33782112127",
    "email": "client@example.com"
  },
  "merchant": {
    "id": 258,
    "name": "Ma Boutique",
    "city": "Paris",
    "address": "10 Rue de la Paix",
    "zipCode": "75002",
    "type": "individual",
    "country_code": "FR",
    "country": "France"
  },
  "transactionStates": [
    {
      "state": "CREATED",
      "date": "2026-03-31T14:27:14+00:00"
    }
  ],
  "commission_operateur": 0,
  "commission_marchand": 0,
  "commission_pays": 0,
  "commission_customer": 0,
  "deliveryPrice": 0
}

{
  "payments": [
    {
      "name": "ORANGE_MONEY",
      "label": "Orange Money",
      "type": "MOBILE_MONEY",
      "available": true
    },
    {
      "name": "MTN_MONEY",
      "label": "MTN Mobile Money",
      "type": "MOBILE_MONEY",
      "available": true
    },
    {
      "name": "STRIPE",
      "label": "Carte bancaire (Visa / Mastercard)",
      "type": "CARD",
      "available": true
    }
  ]
}

curl https://api.elyonpay.org/api/public/configuration/payments/CM

curl -X POST https://api.elyonpay.org/api/mobile-money/payment/request \
  -H "Authorization: Bearer <your_jwt_token>" \
  -H "Content-Type: application/json" \
  -d '{
    "amount": 15000,
    "user_lang": "fr",
    "merchant_name": "Ma Boutique",
    "merchant_id": 207,
    "currency": "XAF",
    "country_name": "Cameroon",
    "payment_method": "ORANGE_MONEY",
    "msisdn": "+237690000001"
  }'

const response = await fetch('https://api.elyonpay.org/api/mobile-money/payment/request', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer ' + token,
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    amount: 15000,
    user_lang: 'fr',
    merchant_name: 'Ma Boutique',
    merchant_id: 207,
    currency: 'XAF',
    country_name: 'Cameroon',
    payment_method: 'ORANGE_MONEY',
    customer_msisdn: '+237690000001'
  })
});

const result = await response.json();
// Start polling result.data.uuid for status

$ch = curl_init('https://api.elyonpay.org/api/mobile-money/payment/request');
curl_setopt_array($ch, [
  CURLOPT_POST => true,
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_HTTPHEADER => [
    'Authorization: Bearer ' . $token,
    'Content-Type: application/json'
  ],
  CURLOPT_POSTFIELDS => json_encode([
    'amount'          => 15000,
    'user_lang'       => 'fr',
    'merchant_name'   => 'Ma Boutique',
    'merchant_id'     => 207,
    'currency'        => 'XAF',
    'country_name'    => 'Cameroon',
    'payment_method'  => 'ORANGE_MONEY',
    'customer_msisdn' => '+237690000001'
  ])
]);

$response = json_decode(curl_exec($ch), true);
// Start polling $response['data']['uuid'] for status

{
  "success": true,
  "data": {
    "PSPid": "tr_aHYQAw4rudrttLDwtdKTJ",
    "PSPnotifyId": "tr_aHYQAw4rudrttLDwtdKTJ",
    "PSPtxnId": "tr_aHYQAw4rudrttLDwtdKTJ",
    "url": "https://www.mollie.com/checkout/credit-card/session/aHYQAw4rudrttLDwtdKTJ",
    "uuid": "CM06306a438d0958",
    "PSPMessage": null,
    "PSPstatus": ""
  }
}

const express = require('express');
const app = express();
app.use(express.json());

const API = 'https://api.elyonpay.org/api';
let token = ''; // Obtained via POST /api/login

// Helper: poll transaction status
async function pollStatus(txId, maxMs = 120000, intervalMs = 4000) {
  const start = Date.now();
  while (Date.now() - start < maxMs) {
    const res = await fetch(`${API}/transactions/${txId}`, {
      headers: { 'Authorization': 'Bearer ' + token }
    });
    const tx = await res.json();
    const terminal = ['DELIVERED', 'FAILED', 'DECLINED', 'CANCELLED'];
    if (terminal.includes(tx.state)) return tx;
    await new Promise(r => setTimeout(r, intervalMs));
  }
  throw new Error('Polling timeout');
}

// Step 1 — Get payment methods for customer's country
app.get('/payment-methods/:country', async (req, res) => {
  const methods = await fetch(
    `${API}/public/configuration/payments/${req.params.country}`
  ).then(r => r.json());
  res.json(methods);
});

// Steps 2-3-4 — Customer picks method, initiate payment, poll result
app.post('/pay', async (req, res) => {
  const { payment_method, phone, merchant_id, amount } = req.body;

  // Step 3 — Initiate direct payment
  const payment = await fetch(`${API}/mobile-money/payment/request`, {
    method: 'POST',
    headers: {
      'Authorization': 'Bearer ' + token,
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({
      amount,
      user_lang: 'fr',
      merchant_name: 'Ma Boutique',
      merchant_id,
      currency: 'XAF',
      country_name: 'Cameroon',
      payment_method,
      customer_msisdn: phone
    })
  }).then(r => r.json());

  // Step 4 — Poll for terminal state
  try {
    const tx = await pollStatus(payment.data.uuid);
    if (tx.state === 'DELIVERED') {
      res.json({ success: true, transaction: tx });
    } else {
      res.json({ success: false, state: tx.state, transaction: tx });
    }
  } catch (err) {
    res.status(408).json({ success: false, error: 'Payment timeout' });
  }
});

app.listen(3000);

// 1. Create payment link
app.post('/checkout', async (req, res) => {
  const response = await fetch('https://api.elyonpay.org/api/request-to-pay/payment/link', {
    method: 'POST',
    headers: {
      'Authorization': 'Bearer ' + token,
      'Content-Type': 'application/json',
      'language': 'fr'
    },
    body: JSON.stringify({
      amount: req.body.amount,
      user_lang: 'fr',
      msisdn: req.body.phone,
      success: 'https://yoursite.com/payment/done',
      error: 'https://yoursite.com/payment/error'
    })
  });
  const { url } = await response.json();
  res.redirect(url); // 2. Redirect customer to payment page
});

// 4 → 5. Handle redirect & verify status
app.get('/payment/done', async (req, res) => {
  // The transaction uuid is available from your order context
  const tx = await fetch(`https://api.elyonpay.org/api/transactions/${uuid}`, {
    headers: { 'Authorization': 'Bearer ' + token }
  }).then(r => r.json());

  if (tx.state === 'DELIVERED') {
    // 6. Show confirmation
    res.render('success', { transaction: tx });
  } else {
    res.render('pending', { transaction: tx });
  }
});

curl -X POST https://api.elyonpay.org/api/merchant/sub-merchants \
  -H "Authorization: Bearer <your_jwt_token>" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Boutique ABC",
    "country_code": "CM",
    "city": "Douala",
    "address": "123 Rue Commerce",
    "type": "RETAIL",
    "owner_email": "owner@boutique-abc.com",
    "owner_phone_number": "+237600000000",
    "owner_first_name": "Jean",
    "owner_last_name": "Dupont",
    "owner_password": "s3cur3-p4ssword",
    "default_marketplace_fee_percent": 5.00
  }'

{
  "merchant_id": 725,
  "uuid": "a1b2c3d4-...",
  "name": "Boutique ABC",
  "owner_email": "owner@boutique-abc.com",
  "owner_phone": "+237600000000",
  "kyb_required": true,
  "default_fee_percent": "5.00"
}

curl -X POST https://api.elyonpay.org/api/request-to-pay/payment/link \
  -H "Authorization: Bearer <your_jwt_token>" \
  -H "Content-Type: application/json" \
  -H "language: fr" \
  -d '{
    "amount": 15000,
    "user_lang": "fr",
    "msisdn": "+237600000001",
    "success": "https://yoursite.com/success",
    "error": "https://yoursite.com/error",
    "webhook": "https://yoursite.com/webhooks/elyonpay",
    "onbehalfof": 725
  }'

curl -X POST https://api.elyonpay.org/api/request-to-pay/payment/link \
  -H "Authorization: Bearer <your_jwt_token>" \
  -H "Content-Type: application/json" \
  -H "language: fr" \
  -d '{
    "amount": 15000,
    "user_lang": "fr",
    "msisdn": "+237600000000",
    "success": "https://yoursite.com/success",
    "error": "https://yoursite.com/error",
    "webhook": "https://yoursite.com/webhooks/elyonpay"
  }'

{
  "event": "transaction.delivered",
  "created_at": "2026-07-08T18:45:12+02:00",
  "data": {
    "transaction": "CI032667e43abf11",
    "state": "DELIVERED",
    "amount": 15000,
    "currency": "XAF",
    "operation_code": "OP-2026-000123",
    "merchant_id": 42,
    "creation_date": "2026-07-08T18:40:03+02:00",
    "validation_date": "2026-07-08T18:44:57+02:00",
    "delivery_date": "2026-07-08T18:45:10+02:00"
  }
}

app.post('/webhooks/elyonpay', express.json(), async (req, res) => {
  // 1. Acknowledge immediately — heavy processing must happen async
  res.sendStatus(200);

  const event = req.headers['x-mip-event'];       // e.g. "transaction.delivered"
  const deliveryId = req.headers['x-mip-delivery']; // unique per notification

  // 2. Deduplicate: the same delivery may be received more than once
  if (await alreadyProcessed(deliveryId)) return;

  // 3. Verify the state server-side before acting on it
  const { transaction } = req.body.data;
  const status = await fetch(
    'https://api.elyonpay.org/api/transactions/' + transaction,
    { headers: { Authorization: 'Bearer ' + token } }
  ).then((r) => r.json());

  if (status.state === 'DELIVERED') {
    await fulfillOrder(transaction);
  }
});

{
  "success": false,
  "error": {
    "code": "INSUFFICIENT_FUNDS",
    "message": "The customer's Mobile Money balance is insufficient.",
    "http_status": 402
  }
}