NagorPay API Documentation

<?php
/**
 * NagorPay Advanced Security Implementation
 */
$merchant_id = "YOUR_MERCHANT_ID";
$secret_key  = "YOUR_32_CHAR_SECRET_KEY"; 
$hmac_key    = "YOUR_HMAC_INTEGRITY_KEY"; 

$data = [
    'user_id'   => $merchant_id,
    'domain'    => 'yourwebsite.com',
    'amount'    => '100.00',
    'order_id'  => 'INV-' . time(),
    'success_url' => 'https://yourwebsite.com/success.php',
    'timestamp'   => time(),
    'nonce'       => bin2hex(random_bytes(16))
];

// ১. AES-256-GCM এনক্রিপশন
$payload   = json_encode($data);
$iv        = random_bytes(12); // Random IV
$encrypted = openssl_encrypt($payload, "aes-256-gcm", $secret_key, OPENSSL_RAW_DATA, $iv, $tag);

// ২. HMAC-SHA256 সিগনেচার
$signature = hash_hmac('sha256', $iv . $tag . $encrypted, $hmac_key);

// ৩. সিকিউর টোকেন (IV::TAG::HMAC::DATA)
$token = bin2hex($iv . "::" . $tag . "::" . $signature . "::" . $encrypted);

$redirect_url = "https://www.nagorpay.codebabu.top/api/api_process?token=" . $token;

header("Location: " . $redirect_url);
exit();
?>

<?php
/**
 * পেমেন্ট স্ট্যাটাস ভেরিফাই করার এপিআই কল
 */
$api_url = "https://www.nagorpay.codebabu.top/api/api_process";
$post_data = [
    'action'  => 'verify',
    'user_id' => 'YOUR_MERCHANT_ID',
    'api_key' => 'YOUR_SECRET_KEY',
    'trx_id'  => $_GET['trx_id'] // সাকসেস লিঙ্ক থেকে আসা TRX ID
];

$ch = curl_init($api_url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, $post_data);
$response = curl_exec($ch);
$result = json_decode($response, true);

if($result && $result['payment_status'] == 'success') {
    echo "Payment Verified! Amount: " . $result['amount'];
}
?>