Build payments with Yeti API.

YETI_PUBLIC_KEY=your_public_key
YETI_SECRET_KEY=your_secret_key
YETI_MODE=test

<?php

$publicKey = getenv('YETI_PUBLIC_KEY');
$secretKey = getenv('YETI_SECRET_KEY');

$payload = [
    'public_key'  => $publicKey,
    'secret_key'  => $secretKey,
    'identifier'  => 'ORDER-' . time(),
    'currency'    => 'NPR',
    'amount'      => 500.00,
    'details'     => 'Payment for customer order',
    'ipn_url'     => 'https://example.com/yeti/ipn.php',
    'success_url' => 'https://example.com/payment/success.php',
    'cancel_url'  => 'https://example.com/payment/cancel.php',
    'site_name'   => 'Example Store',
    'customer'    => [
        'first_name' => 'Ram',
        'last_name'  => 'Karki',
        'email'      => 'customer@example.com',
        'mobile'     => '9800000000',
    ],
];

$ch = curl_init(
    'https://client.yetiapi.com/test/payment/initiate'
);

curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_POSTFIELDS     => http_build_query($payload),
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT        => 30,
    CURLOPT_HTTPHEADER     => [
        'Accept: application/json',
        'Content-Type: application/x-www-form-urlencoded',
    ],
]);

$response = curl_exec($ch);

if ($response === false) {
    throw new RuntimeException(curl_error($ch));
}

curl_close($ch);

$result = json_decode($response, true);

if (
    is_array($result) &&
    ($result['status'] ?? '') === 'success' &&
    !empty($result['redirect_url'])
) {
    header('Location: ' . $result['redirect_url']);
    exit;
}

header('Content-Type: application/json');
echo json_encode($result, JSON_PRETTY_PRINT);

{
  "status": "success",
  "message": [
    "Payment initiated"
  ],
  "trx_number": "yeti_trx_...",
  "redirect_url": "https://client.yetiapi.com/pay/yeti_trx_...",
  "sdk_url": "https://client.yetiapi.com/pay/yeti_trx_...",
  "qr": {
    "qr_string": "000201010212...",
    "qr_image_base64": "data:image/png;base64,..."
  }
}

$status     = $request->input('status');
$identifier = $request->input('identifier');
$signature  = $request->input('signature');
$data       = $request->input('data', []);

$signaturePayload = ($data['amount'] ?? '') . $identifier;
$expectedSignature = strtoupper(hash_hmac(
    'sha256',
    $signaturePayload,
    config('services.yeti.secret_key')
));

if (
    $status === 'success' &&
    hash_equals($expectedSignature, $signature)
) {
    // Mark the matching order as paid once.
}

{
  "status": "success",
  "data": {
    "trx_number": "encrypted_transaction_reference",
    "payment_status": "Success",
    "amount": "500.00",
    "currency": "NPR"
  }
}

{
  "status": "error",
  "message": [
    "Invalid API key"
  ]
}