مستندات API درگاه کارت به کارت تی‌نت‌پی (برای سایت‌های اختصاصی)

curl -X POST 'https://tnetpay.com/api/v1/c2c/payments' \
  -H 'Content-Type: application/json' \
  -H 'X-API-Key: YOUR_API_KEY' \
  -H 'Idempotency-Key: order-1001' \
  -d '{
    "amount": 250000,
    "orderId": "1001",
    "callbackUrl": "https://shop.example/tnetpay/webhook",
    "returnUrl": "https://shop.example/order/1001",
    "description": "Order #1001"
  }'

{
  "id": "c2c_01M68MJSCW2YKGWSFCD89MJS1T",
  "status": "pending",
  "amount": "250000",
  "payAmount": "250037",
  "payAmountRial": "2500370",
  "uniqueSuffix": "37",
  "fee": "...",
  "card": { "bank": "...", "bankName": "...", "holderName": "...", "number": "6037 .... .... 1234", "last4": "1234" },
  "paymentUrl": "https://tnetpay.com/pay/c2c/c2c_01M68MJSCW2YKGWSFCD89MJS1T",
  "expiresAt": "2026-10-31T09:47:49.000Z",
  "mode": "live"
}

curl -X POST 'https://tnetpay.com/api/v1/c2c/payments/c2c_01M68MJSCW2YKGWSFCD89MJS1T/verify' \
  -H 'X-API-Key: YOUR_API_KEY'

{
  "status": "paid",
  "paid": true,
  "amount": "250000",
  "payAmount": "250037",
  "paidAt": "2026-10-31T09:30:12.000Z",
  "orderId": "1001"
}

curl 'https://tnetpay.com/api/pay/c2c/c2c_01M68MJSCW2YKGWSFCD89MJS1T/status'
# {"id":"c2c_...","status":"pending","final":false,"expiresAt":"...","paidAt":null,"serverTime":"..."}

{
  "event": "c2c.payment.paid",
  "id": "c2c_01M68MJSCW2YKGWSFCD89MJS1T",
  "status": "paid",
  "orderId": "1001",
  "amount": "250000",
  "payAmount": "250037",
  "payAmountRial": "2500370",
  "fee": "...",
  "paidAt": "2026-10-31T09:30:12.000Z",
  "timestamp": "2026-10-31T09:30:13.000Z"
}

<?php
// 1) Create a payment and redirect the buyer
const TNETPAY_API = 'https://tnetpay.com/api/v1/c2c';
$apiKey = getenv('TNETPAY_API_KEY');

function tnetpay_request(string $method, string $path, ?array $body = null, array $extraHeaders = []): array {
    global $apiKey;
    $ch = curl_init(TNETPAY_API . $path);
    $headers = array_merge(['X-API-Key: ' . $apiKey, 'Accept: application/json'], $extraHeaders);
    $opts = [CURLOPT_CUSTOMREQUEST => $method, CURLOPT_RETURNTRANSFER => true, CURLOPT_TIMEOUT => 20];
    if ($body !== null) {
        $headers[] = 'Content-Type: application/json';
        $opts[CURLOPT_POSTFIELDS] = json_encode($body);
    }
    $opts[CURLOPT_HTTPHEADER] = $headers;
    curl_setopt_array($ch, $opts);
    $raw = curl_exec($ch);
    $code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);
    $data = json_decode((string) $raw, true) ?: [];
    if ($code >= 400 || isset($data['error'])) {
        throw new RuntimeException('TNetPay error: ' . ($data['error']['code'] ?? $code));
    }
    return $data;
}

$orderId = '1001';
$payment = tnetpay_request('POST', '/payments', [
    'amount'      => 250000,               // toman, integer
    'orderId'     => $orderId,
    'callbackUrl' => 'https://shop.example/tnetpay/webhook.php',
    'returnUrl'   => 'https://shop.example/order.php?id=' . $orderId,
], ['Idempotency-Key: order-' . $orderId]);
// save $payment['id'] on your order, then:
header('Location: ' . $payment['paymentUrl']);
exit;

// 2) webhook.php — never trust the body alone; re-check with verify
$event = json_decode(file_get_contents('php://input'), true);
$check = tnetpay_request('POST', '/payments/' . rawurlencode($event['id']) . '/verify');
if ($check['paid'] === true && $check['orderId'] === $orderId /* your stored order */) {
    // mark the order paid (only once)
}
http_response_code(200);

// Node.js 18+ (global fetch)
const API = 'https://tnetpay.com/api/v1/c2c';
const KEY = process.env.TNETPAY_API_KEY;

async function tnetpay(method, path, body, headers = {}) {
  const res = await fetch(API + path, {
    method,
    headers: { 'X-API-Key': KEY, 'Content-Type': 'application/json', ...headers },
    body: body ? JSON.stringify(body) : undefined,
  });
  const data = await res.json();
  if (!res.ok || data.error) throw new Error('TNetPay: ' + (data.error?.code || res.status));
  return data;
}

// create + redirect (Express)
app.post('/checkout/:orderId', async (req, res) => {
  const p = await tnetpay('POST', '/payments', {
    amount: 250000,
    orderId: req.params.orderId,
    callbackUrl: 'https://shop.example/tnetpay/webhook',
    returnUrl: 'https://shop.example/order/' + req.params.orderId,
  }, { 'Idempotency-Key': 'order-' + req.params.orderId });
  // store p.id on the order
  res.redirect(p.paymentUrl);
});

// webhook: confirm with verify before fulfilling
app.post('/tnetpay/webhook', express.json(), async (req, res) => {
  const v = await tnetpay('POST', '/payments/' + encodeURIComponent(req.body.id) + '/verify');
  if (v.paid) { /* mark order v.orderId as paid, idempotently */ }
  res.sendStatus(200);
});

import os, requests

API = "https://tnetpay.com/api/v1/c2c"
HEADERS = {"X-API-Key": os.environ["TNETPAY_API_KEY"]}

def tnetpay(method, path, json=None, extra=None):
    r = requests.request(method, API + path, json=json, headers={**HEADERS, **(extra or {})}, timeout=20)
    data = r.json()
    if r.status_code >= 400 or "error" in data:
        raise RuntimeError("TNetPay: %s" % (data.get("error", {}).get("code") or r.status_code))
    return data

# create + redirect
p = tnetpay("POST", "/payments", {
    "amount": 250000,
    "orderId": "1001",
    "callbackUrl": "https://shop.example/tnetpay/webhook",
    "returnUrl": "https://shop.example/order/1001",
}, {"Idempotency-Key": "order-1001"})
redirect_to = p["paymentUrl"]

# webhook handler (Flask)
@app.post("/tnetpay/webhook")
def webhook():
    event = request.get_json(force=True)
    v = tnetpay("POST", "/payments/%s/verify" % event["id"])
    if v["paid"]:
        pass  # mark order v["orderId"] paid, once
    return "", 200