Introducing Secret Key in MOLPay API

Introducing Secret Key in MOLPay API

Abstract

MOLPay has implemented a secret key (private key) to replace verification key (public key) in all API response from MOLPay and reversal API.

Who can ignore this?

If you are not MOLPay merchant, or if you are MOLPay merchant who does not publish any mobile APP and uses only server-to-server request can ignore this update.

Who is affected?

MOLPay has implemented a secret key (private key) to replace verification key (public key) in all API response from MOLPay and reversal API.

Action required

  • Download the latest MOLPay Official API (v13.3)
  • MOLPay merchant can first change the response hashstring to use the secret_key variable, which currently has the same value as verify_key;
  • MOLPay merchant PIC contact [email protected] and raise a change request to modify the secret key to a value different from verification key not later than 4pm on MOLPay business day
  • Once MOLPay support has created a new secret key, merchant should copy & paste the new value from MOLPay merchant portal and apply to the scripts immediately
  • Test and verify if everything works as expected!!.

Files/APIs to be taken of

API NameFileParameterRequestResponse
Return URLmerchant fileskey
S
Notification URLmerchant fileskey
S
Callback URLmerchant fileskey
S
Escrowescrow/index.phpskey, VrfKey
V
S
Mass payout payee profileMassPayment/payee_profile.phpskey, VrfKey
S
S
Mass payout SIMassPayment/SI_by_payee.phpskey, VrfKey
S
S
Mass payout direct SIMassPayment/direct_SI.phpskey, VrfKey
S
S
Mass payout Si requeryMassPayment/requery_SI.phpskey, VrfKey
V
S
Direct status requerygate-query/index.phpskey, VrfKey
V
S
Query by TIDq_by_tid.phpskey, VrfKey
V
S
Query by OIDquery/q_by_oid.phpskey, VrfKey
V
S
Query by OID in batchquery/q_oid_batch.phpskey, VrfKey
V
S
Query by multiple OIDquery/q_by_oids.phpskey, VrfKey
V
S
Query by multiple TIDquery/q_by_tids.phpskey, VrfKey
V
S
Daily transaction reportPSQ/psq-daily.phpskey
S
Settlement reportsettlement/report.phptoken
S
Capturecapstxn/index.phpskey, VrfKey
V
S
ReversalrefundAPI/refund.phpskey, VrfKey
S
S
Partial refundrefundAPI/index.phpSignature, Signature
S
S

S: secret key (private key) | V: verification key

Level of impact (based on number of merchants)

Most of the merchants
Some merchants
Fewer merchants
No merchant