1. 2. Signature
Starpay Merchant Disbursement API
  • 1. Revision History
  • 2. Signature
    • 2.1 API connection check
    • 2.2 Signing a message
    • 2.3 Use the SHA256WithRSA algorithm to calculate the To-Be-Signed String
    • 2.4 Sample
    • 2.5 Method of Signature
  • 3. Procedure Diagram
  • 4. API List
  • 5. Disbursement
    • 5.1 Fund Disbursement List
      POST
    • 5.2 Fund Disbursement
      POST
    • 5.3 Fund Disbursement (Starpay to Starpay Fund Transfer)
      POST
    • 5.4 Fund Disbursement Query
      POST
    • 5.5 Disbursement State Notification
      POST
    • 5.6 Disbursement Balance Query
      POST
    • 5.7 Scan QR
      POST
    • 5.8 Fund Disbursement (Pay P2M QR)
      POST
    • 5.9 Fund Disbursement (Pay P2P QR)
      POST
  • 6. Repayment
    • 6.1 Repayment
      POST
    • 6.2 Repayment State Query
      POST
    • 6.3 Repayment State Notification
      POST
    • 6.4 Repayment Static Qr Generate
      POST
    • 6.5 Repayment Static Qr Order Notify
      POST
    • 6.6 Repayment Balance Query
      POST
    • 6.7 Edit Repayment Static QR Status
      POST
    • 6.8 Repayment transaction Query through RefNo
      POST
    • 6.9 Repayment Cancel
      POST
  • 7. Error code list
  • 8. 3rd Party Error Code List
  • 9.Instapay Error Code List
  • 10. Appendix
    • 10.1 Test demo
  1. 2. Signature

2.4 Sample

Note: Do not Format JSON message. This sample message is only Formatted for display.
{
"request": {
        "msgId": "161415460871",
        "mchId": "105510000001",
        "acctNo": "Recipient acctNo",
        "acctName": "Recipient account name xx",
        "acctMiddleName": "Recipient first name", 
        "acctLastName": "Recipient last name",
        "receivingBank": "Sun Savings Bank, Inc.",
        "trxAmount": "1000",
        "currency": "PHP",
        "service": "pay.starpay.instapay.disburse",
        "attach": "Disbursement"
    },
"signature":"ZQseku2snn4eYdmEeuhvh7DsJH2luXkJqki/iU686/7ygQpkSAsQFlp+t5AT4kZdeIOAkqRI/jdNkYqUslbgQ4C8u0N3EcWihuvoG3BkKG9TCabaS9GJSD5z5oOZMIckP21rITNKDxmAJOCH9mSjJZw/PtE9Z52h05zge2IoxIxFlnrNlh5DWsWLbkYizccHSc1ZkQka4Rx/7cdXSrdo8sqeV61oTzdM3s9VoVRwMyh4BeM46LE1hDgEKo/cjGUGj3fYIaKqxQmG/DLlkKvP4RnrPV0mB2nzRSkLbzsJ+tvBuz8CGb4MkRIu5ohI6TQFgpd5nRTNtMzEhq9FVvKbBw=="    
}
An JAVA example shows how to verify a signature is provided on the Appendix part of this document.
Message verification:
Getting the To-Be-Signed string (the string value of json Field (a json string named "response") from response message.
Use SHA256WithRSA algorithm to verify the To-Be-signed String and the signature value in the response message
Previous
2.3 Use the SHA256WithRSA algorithm to calculate the To-Be-Signed String
Next
2.5 Method of Signature
Built with