Abstract

MOLPay has implemented a secret key (private key) to replace verification key (public key) in all API response from MOLPay and reversal API.

Who can ignore this?

If you are not MOLPay merchant, or if you are MOLPay merchant who does not publish any mobile APP and uses only server-to-server request can ignore this update.

Who is affected?

MOLPay has implemented a secret key (private key) to replace verification key (public key) in all API response from MOLPay and reversal API.

Action required

  • Download the latest MOLPay Official API (v13.3)
  • MOLPay merchant can first change the response hashstring to use the secret_key variable, which currently has the same value as verify_key;
  • MOLPay merchant PIC contact [email protected] and raise a change request to modify the secret key to a value different from verification key not later than 4pm on MOLPay business day
  • Once MOLPay support has created a new secret key, merchant should copy & paste the new value from MOLPay merchant portal and apply to the scripts immediately
  • Test and verify if everything works as expected!!

Files/APIs to be taken of

API Name File Parameter Request Response
Return URL merchant file skey  
S
Notification URL merchant file skey  
S
Callback URL merchant file skey  
S
Escrow escrow/index.php skey, VrfKey
V
S
Mass payout payee profile MassPayment/payee_profile.php skey, VrfKey
S
S
Mass payout SI MassPayment/SI_by_payee.php skey, VrfKey
S
S
Mass payout direct SI MassPayment/direct_SI.php skey, VrfKey
S
S
Mass payout Si requery MassPayment/requery_SI.php skey, VrfKey
V
S
Direct status requery gate-query/index.php skey, VrfKey
V
S
Query by TID q_by_tid.php skey, VrfKey
V
S
Query by OID query/q_by_oid.php skey, VrfKey
V
S
Query by OID in batch query/q_oid_batch.php skey, VrfKey
V
S
Query by multiple OID query/q_by_oids.php skey, VrfKey
V
S
Query by multiple TID query/q_by_tids.php skey, VrfKey
V
S
Daily transaction report PSQ/psq-daily.php skey
S
 
Settlement report settlement/report.php token
S
 
Capture capstxn/index.php skey, VrfKey
V
S
Reversal refundAPI/refund.php skey, VrfKey
S
S
Partial refund refundAPI/index.php Signature, Signature
S
S

S: secret key (private key)        V: verification key

Level of impact (based on number of merchants)

Most of the merchants  
Some merchants  
Fewer merchants  
No merchant