Non-Secure Payment with Hidden Card
Testing
Testing Env
https://provisioning.sipay.com.tr
Testing Env
https://provisioning.sipay.com.tr
POST
/ccpayment/api/payByCardTokenNonSecure
payByCardTokenNonSecure endpoint enables merchants to initiate payment transactions using a previously stored card token within the Sipay payment integration system.This flow allows orders to be processed without requiring the re-entry of sensitive card details.
The hash key must be send in the request.
An example of the hash algorithm is included in the request.
Hash Parameters
The parameters and their order to be used for the hash algorithmare as follows.total installment currency_code merchant_key invoice_id app_secret
Request
Body Params application/jsonRequired
Responses
Request Request Example
Shell
JavaScript
Java
Swift
#!/usr/bin/env bash
generate_hash_key() {
local total="$1"
local installment="$2"
local currency_code="$3"
local merchant_key="$4"
local invoice_id="$5"
local app_secret="$6"
local data="${total}|${installment}|${currency_code}|${merchant_key}|${invoice_id}"
local rand1
rand1=$(openssl rand -hex 16)
local iv
iv=$(printf "%s" "$rand1" | openssl sha1 | awk '{print $2}' | cut -c1-16)
local password
password=$(printf "%s" "$app_secret" | openssl sha1 | awk '{print $2}')
local rand2
rand2=$(openssl rand -hex 16)
local salt
salt=$(printf "%s" "$rand2" | openssl sha1 | awk '{print $2}' | cut -c1-4)
local salt_with_password
salt_with_password=$(printf "%s" "${password}${salt}" | openssl sha256 | awk '{print $2}' | cut -c1-32)
# Python kodunda key ve iv doğrudan ASCII byte olarak veriliyor.
local key_hex
key_hex=$(printf "%s" "$salt_with_password" | xxd -p -c 256)
local iv_hex
iv_hex=$(printf "%s" "$iv" | xxd -p -c 256)
local encrypted_base64
encrypted_base64=$(printf "%s" "$data" | openssl enc -aes-256-cbc -K "$key_hex" -iv "$iv_hex" -base64)
local msg_encrypted_bundle="${iv}:${salt}:${encrypted_base64}"
msg_encrypted_bundle="${msg_encrypted_bundle//\//__}"
echo "$msg_encrypted_bundle"
}
total="100"
installment="1"
currency_code="TRY"
merchant_key="merchant_key"
invoice_id="invoice_id"
app_secret="app_secret"
result=$(generate_hash_key "$total" "$installment" "$currency_code" "$merchant_key" "$invoice_id" "$app_secret")
echo "$result"Response Response Example
200 - Success
{
"status_code": 100,
"status_description": "Payment process successful",
"data": {
"sipay_status": 1,
"order_no": "VP17697618245351216",
"order_id": "VP17697618245351216",
"invoice_id": "565655656556465456465465444",
"sipay_payment_method": 1,
"credit_card_no": "450803****4509",
"transaction_type": "Auth",
"payment_status": 1,
"payment_method": 1,
"error_code": 100,
"error": "",
"auth_code": "P48905",
"merchant_commission": 0.1,
"user_commission": 0,
"merchant_commission_percentage": 2,
"merchant_commission_fixed": 0,
"installment": 1,
"amount": 5,
"payment_reason_code": "",
"payment_reason_code_detail": "",
"hash_key": "a006758962dc3aae:e360:C91EOLvl__WRy__kccvBNIWhbeVT26WViFh4839NdkfgoyO1uXnV3o2+g+Mf__jU72JGCmu3cHIUkms8Q2OU611gQ==",
"original_bank_error_code": "",
"original_bank_error_description": "",
"host_reference_id": "603000435621"
}
}Modified at 2026-04-17 12:40:28