The message level security is implemented by using signing and verification of the message.
Example: API Input (V-Signed)
{
"successRedirectURL": "https://SuccessRedirectURL.com/SuccessTransactionStatus",
"failedRedirectURL": "https://FailedRedirectURL.com/FailedTransactionStatus",
"callbackURL": "https://MerchantCallbackURL.com/StatusCallbackURL",
"currencyCode": "MYR",
"bankCode": "MBB",
"amount": 63.85,
"referCode": "REF1234509897",
"ownerBy": "BestTitan"
}
{
"amount": 63.85,
"bankCode": "MBB",
"callbackURL": "https://MerchantCallbackURL.com/StatusCallbackURL",
"currencyCode": "MYR",
"failedRedirectURL": "https://FailedRedirectURL.com/FailedTransactionStatus",
"ownerBy": "BestTitan",
"referCode": "REF1234509897",
"successRedirectURL": "https://SuccessRedirectURL.com/SuccessTransactionStatus"
}
acceding-input = 63.85+MBB+https://MerchantCallbackURL.com/StatusCallbackURLMYR
+https://FailedRedirectURL.com/FailedTransactionStatus+BestTitan+REF1234509897
+https://SuccessRedirectURL.com/SuccessTransactionStatusacceding-input
= 63.85MBBhttps://MerchantCallbackURL.com/StatusCallbackURLMYR
https://FailedRedirectURL.com/FailedTransactionStatusBestTitanREF1234509897
https://SuccessRedirectURL.com/SuccessTransactionStatus
V-Signed = hmac-sha256(63.85MBBhttps://MerchantCallbackURL.com/StatusCallbackURLMYR
https://FailedRedirectURL.com/FailedTransactionStatusBestTitanREF1234509897
https://SuccessRedirectURL.com/SuccessTransactionStatus , CkRFd5eJ8ZEIYqGo6Yqbq7JlwSUyIwpj)
V-Signed = df9624be1215d8b51add72a5bfd097565ca4bcb6d748c10c590e1f949225ac62