NobabPay Payment Gateway
API Documentation

{
  "status": 0,
  "message": "This website is not allowed to use this API key."
}

curl -X POST https://pay.nobabpay.top/api/payment/create \
  -H "API-KEY: your_brand_api_key" \
  -H "Content-Type: application/json" \
  -d '{
    "amount": 500,
    "success_url": "https://your-site.com/payment/success",
    "cancel_url": "https://your-site.com/payment/cancel",
    "webhook_url": "https://your-site.com/payment/webhook",
    "metadata": {"order_id": 1024, "user_id": 55},
    "cus_name": "Rahim Uddin",
    "cus_email": "rahim@example.com"
  }'

{
  "status": 1,
  "message": "Payment Link",
  "payment_url": "https://pay.nobabpay.top/api/execute/a1b2c3d4e5f6...",
  "transaction_id": "SN9GOP758751"
}

curl -X POST https://pay.nobabpay.top/api/payment/verify \
  -H "API-KEY: your_brand_api_key" \
  -H "Content-Type: application/json" \
  -d '{"transaction_id": "SXF80K119297"}'

{
  "cus_name": "Rahim Uddin",
  "cus_email": "rahim@example.com",
  "amount": "500.000",
  "transaction_id": "SXF80K119297",
  "metadata": {"order_id": 1024, "user_id": 55},
  "payment_method": "bkash",
  "status": "COMPLETED"
}

{
  "status": 0,
  "message": "failed"
}

curl -X POST https://pay.nobabpay.top/api/payment/create \
  -H "API-KEY: your_brand_api_key" \
  -d "amount=100" \
  -d "cus_name=Telegram user" \
  -d "metadata={\"telegram_id\":123456,\"bot_url\":\"https://t.me/yourbot\"}"

repeat every 5-10 seconds (up to about 10 minutes):
    POST https://pay.nobabpay.top/api/payment/verify
    body: {"transaction_id": "SN9GOP758751"}

    status COMPLETED  ->  deliver the order, stop
    status ERROR      ->  tell the customer it failed, stop
    status PENDING    ->  wait and repeat
{"status":0,"message":"failed"}  ->  unknown ID, do not deliver

<?php
// 1. Create the payment
function nobabpay_create_payment($amount, $metadata) {
    $payload = [
        'amount'      => $amount,
        'success_url' => 'https://your-site.com/payment/success',
        'cancel_url'  => 'https://your-site.com/payment/cancel',
        'webhook_url' => 'https://your-site.com/payment/webhook',
        'metadata'    => $metadata,
    ];

    $ch = curl_init('https://pay.nobabpay.top/api/payment/create');
    curl_setopt_array($ch, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_POST           => true,
        CURLOPT_POSTFIELDS     => json_encode($payload),
        CURLOPT_HTTPHEADER     => [
            'API-KEY: YOUR_API_KEY',
            'Content-Type: application/json',
        ],
    ]);
    $response = curl_exec($ch);
    curl_close($ch);

    return json_decode($response, true);
}

// 2. Redirect the customer
$result = nobabpay_create_payment(500, ['order_id' => 1024]);
header('Location: ' . $result['payment_url']);
exit;

<?php
// Receive the webhook from NobabPay
$transaction_id = $_POST['transactionId'] ?? '';

// Always verify with the API before trusting the webhook
$ch = curl_init('https://pay.nobabpay.top/api/payment/verify');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_POSTFIELDS     => json_encode(['transaction_id' => $transaction_id]),
    CURLOPT_HTTPHEADER     => ['API-KEY: YOUR_API_KEY', 'Content-Type: application/json'],
]);
$verified = json_decode(curl_exec($ch), true);
curl_close($ch);

if (!empty($verified['status']) && $verified['status'] === 'COMPLETED') {
    $meta = json_decode($verified['metadata'] ?? '{}', true);
    // Mark order $meta['order_id'] as paid with $verified['transaction_id']
}

http_response_code(200);
echo 'OK';

import requests, json

API = "https://pay.nobabpay.top/api"
HEADERS = {"API-KEY": "YOUR_API_KEY", "Content-Type": "application/json"}

# Create payment
r = requests.post(f"{API}/payment/create", json={
    "amount": 500,
    "success_url": "https://your-site.com/payment/success",
    "cancel_url": "https://your-site.com/payment/cancel",
    "webhook_url": "https://your-site.com/payment/webhook",
    "metadata": {"order_id": 1024},
}, headers=HEADERS)
payment = r.json()
# redirect customer: payment["payment_url"]

# Verify payment
r = requests.post(f{API}/payment/verify", json={
    "transaction_id": "SXF80K119297"
}, headers=HEADERS)
print(r.json())

const API = 'https://pay.nobabpay.top/api';
const HEADERS = { 'API-KEY': 'YOUR_API_KEY', 'Content-Type': 'application/json' };

// Create payment
const res = await fetch(`${API}/payment/create`, {
  method: 'POST',
  headers: HEADERS,
  body: JSON.stringify({
    amount: 500,
    success_url: 'https://your-site.com/payment/success',
    cancel_url: 'https://your-site.com/payment/cancel',
    webhook_url: 'https://your-site.com/payment/webhook',
    metadata: { order_id: 1024 },
  }),
});
const { payment_url } = await res.json();
// redirect customer to payment_url

// Verify payment
const v = await fetch(`${API}/payment/verify`, {
  method: 'POST',
  headers: HEADERS,
  body: JSON.stringify({ transaction_id: 'SXF80K119297' }),
});
console.log(await v.json());

{ "status": 0, "message": "API key missing. Send it in the API-KEY header." }