Error 500 using Java

[Chokrii]

Hello Team,
please i'm using this doc http://docs.icepay.com for getpaymentmethods it work well but the other function i'm always getting error 500 (by the way i'm using java not C# as i can;t find any topic related to java this is why i'm posting here)

this is my function curl for vaultcheckout example

`
public String Curl(String uurl,String merchantid) throws Exception
{
URL url;
HttpURLConnection connection = null;
//Create connection
url = new URL(uurl);
connection = (HttpURLConnection)url.openConnection();
connection.setRequestMethod("POST");
connection.setRequestProperty("User-Agent", USER_AGENT);
connection.setRequestProperty("Content-Type", "application/json");
connection.setRequestProperty("Accept",
"application/json");
connection.setRequestProperty("MerchantID", merchantid);

      connection.setUseCaches (false);
      connection.setDoInput(true);
      connection.setDoOutput(true);

      JSONObject j = new JSONObject();
		j.put("Timestamp", Constant.TimeStp());
		j.put("Amount ", "100");
		j.put("Country ", "GB");
		j.put("Currency", "GBP");
		j.put("URLPostback", "http://bixipay.co.uk");
		j.put("Description", "Bill #12222");
		j.put("Issuer", "VISA");
		j.put("Language", "EN");
		j.put("OrderID ", "9541");
		j.put("PaymentMethod", "creditcard");
		j.put("Reference", "12222");
		j.put("URLCompleted", "http://bixipay.co.uk");
		j.put("URLError", "http://bixipay.co.uk");
		j.put("EndUserIP ", "84.241.211.47");
		j.put("ConsumerID", "1524");
      String base = uurl+"/POST"+merchantid+apikey+j.toString();
      System.out.println(base);
      String hex = Constant.sha256(base);
      
      connection.setRequestProperty("Checksum", hex);
      //Send request
      DataOutputStream wr = new DataOutputStream (
                  connection.getOutputStream ());
      
      wr.writeBytes (j.toString());
      wr.flush ();
      wr.close ();

      //Get Response	
      InputStream is = connection.getInputStream();
      BufferedReader rd = new BufferedReader(new InputStreamReader(is));
      String line;
      StringBuffer response = new StringBuffer(); 
      while((line = rd.readLine()) != null) {
        response.append(line);
        response.append('\r');
      }
      rd.close();
      JSONObject resp = new JSONObject(response.toString());
      System.out.println(connection.getResponseCode() +response.toString());
      return response.toString();
	
}

`

and this is to calculate sha-256 and timestamp
`
public class Constant {

public static String TimeStp()
{
	Date now = new Date();
	SimpleDateFormat formatter = new SimpleDateFormat("yyyy-MM-dd'T'HH-mm-ss");
	System.out.println(formatter.format(now));
	return formatter.format(now) ;
}

public static String sha256(String base) 
{
    try{
        MessageDigest digest = MessageDigest.getInstance("SHA-256");
        byte[] hash = digest.digest(base.getBytes("UTF-8"));
        StringBuffer hexString = new StringBuffer();

        for (int i = 0; i < hash.length; i++) {
            String hex = Integer.toHexString(0xff & hash[i]);
            if(hex.length() == 1) hexString.append('0');
            hexString.append(hex);
        }
        return hexString.toString();
    } catch(Exception ex){
       throw new RuntimeException(ex);
    }
}

}
`

any help please

[tsygankov]

Hi Chokrii,

I'm responsible only for PHP modules, but as I have worked with ICEPAY APIs a lot, I have some ideas that can help.

I know that recurring payments are not available by default:

Note that you must be specifically approved for using recurring payment functions by ICEPAY before you can use these functions.

We had a similar request in REST-API-PHP project some time ago; however, in this case, ICEPAY API replied with an error message. I don't know what was the HTTP response code, but I assume it was 500 because the last comment in the topic thread is:

Docs are ambiguous and should be fixed (as should the error - sth like an http/403 would be more logical...)

So it can be that VaultCheckout is disabled due to compliance reasons.

icepaynl commented on May 4, 2017:

Due to compliance reasons this product, Recurring Billing, is upon request only.

VaultCheckout

This operation is called when you need to vault consumer information like a credit card or bank account number in order to perform an automatic checkout or Funds Transfer in the future.

Hi Chokrii,

For issues with our API you are recommended to contact ICEPAY's support platform from your account (portal.icepay.com).

I had a look at your issues. In our logs I could find a few requests made yesterday (10/10/2018) that seem to originate from you. Without an exact timestamp it is hard to know for sure.

For all these requests I see the following response:
{"Message":"ERR_0007: Checksum for request to /webservice/api/v1/payment/vaultcheckout is invalid"}
This is the way our API handles issues like this: it returns 500 with the error message in the JSON body.

It is always difficult to 'debug' checksum issues. In your code I do notice a slash added here:
uurl+"/POST"

You should concatenate the URL and the HTTP Method as is. As far as I know, this means that if you post to https://connect.icepay.com/webservice/api/v1/payment/checkout you should have no slash between checkout and POST for the checksum.
If you post to https://connect.icepay.com/webservice/api/v1/payment/checkout/ you should have a slash between checkout and POST for the checksum.

I hope this helps you in resolving the issue.

[Chokrii]

Thanks Guys for your answer !
icepaynl tried to delete "/" and no success plus timestamp is working fine when i call getpaymentmethods ! but not for the other maybe i have an issues in my json pramas ?

Can you show the full data that you are posting: payload, url, checksum.
!!LEAVE OUT THE SECRET.
I see many different requests from your side so hard to see what's what. Also, we don't log the checksum on our end.

Side notes:
-You have some parameters with a space to the end of the parameter name (Amount, Country, Currency & others). Please remove them.
-It seems you are trying VaultCheckout. I would always first focus on the standard Checkout. VaultCheckout is for recurring payments that are only available for select customers (you may be eligible but not automatically as it is considered high risk)

[Chokrii]

ok now i'm trying checkout and it's same problem

Headers to be send
connection.setRequestProperty("User-Agent", USER_AGENT); connection.setRequestProperty("Content-Type", "application/json"); connection.setRequestProperty("Accept", "application/json"); connection.setRequestProperty("MerchantID", merchantid); connection.setRequestProperty("Checksum", hex);

here my json params
JSONObject j = new JSONObject(); j.put("Timestamp", Constant.TimeStp()); j.put("Amount ", "100"); j.put("Country ", "GB"); j.put("Currency", "GBP"); j.put("URLPostback", "http://bixipay.co.uk"); j.put("Description", "Bill#12222"); j.put("Issuer", "VISA"); j.put("Language", "EN"); j.put("OrderID ", "9541"); j.put("PaymentMethod", "creditcard"); j.put("Reference", "12222"); j.put("URLCompleted", "http://bixipay.co.uk"); j.put("URLError", "http://bixipay.co.uk"); j.put("EndUserIP ", "84.241.211.47"); j.put("ConsumerID", "1524");

this is how i calculate checksum
`public static String sha256(String base)
{
try{
MessageDigest digest = MessageDigest.getInstance("SHA-256");
byte[] hash = digest.digest(base.getBytes("UTF-8"));
StringBuffer hexString = new StringBuffer();

        for (int i = 0; i < hash.length; i++) {
            String hex = Integer.toHexString(0xff & hash[i]);
            if(hex.length() == 1) hexString.append('0');
            hexString.append(hex);
        }
        return hexString.toString();
    } catch(Exception ex){
       throw new RuntimeException(ex);
    }
}`

This is my timestamp
public static String TimeStp() { Date now = new Date(); SimpleDateFormat formatter = new SimpleDateFormat("yyyy-MM-dd'T'HH-mm-ss"); // Tried to use SimpleDateFormat("yyyy-MM-dd'T'HH-mm-ss'Z'") and it's not working too System.out.println(formatter.format(now)); return formatter.format(now) ; }

Can you show the full data that you are posting: payload, url, checksum?
Now you are showing me the code you used but it is very hard for me to try and run java code. Please post the results of the code and the full URL you are posting to.

[Chokrii]

This is the url
https://connect.icepay.com/webservice/api/v1/payment/checkout

this is time stamp format
2018-10-12T11-02-28Z & 2018-10-12T11-02-28 tried both same error

this is an example of my payload before encoding

https://connect.icepay.com/webservice/api/v1/payment/checkoutPOST+id+key{"Amount ":"1000","URLCompleted":"http://bixipay.co.uk","Description":"Bill#12222","Issuer":"VISA","Reference":"12222","Country ":"GB","EndUserIP ":"84.241.211.47","URLError":"http://bixipay.co.uk","Timestamp":"2018-10-12T11-02-29+0100","URLPostback":"http://bixipay.co.uk","Language":"EN","Currency":"GBP","ConsumerID":"1524","PaymentMethod":"creditcard","OrderID ":"9541"}

Checksum
58e62c482268e69f5e2ea33e4b3ef4503849395e564b5340c177799f1afba297

i spke to icepay support and they told me this is a checksum problem it's Error_007

PLEASE REMOVE YOUR SECRET FROM YOUR POST ABOVE
I couldn't find the request in our logs?
The checksum seems fine to me so there may be an issue with the way you encode the data.

[Chokrii]

i've removed it thanks !
even me trying to find where is mistake but i couldn't :/
this is how i encode SHA256
`public static String sha256(String base)
{
try{
MessageDigest digest = MessageDigest.getInstance("SHA-256");
byte[] hash = digest.digest(base.getBytes("UTF-8"));
StringBuffer hexString = new StringBuffer();

        for (int i = 0; i < hash.length; i++) {
            String hex = Integer.toHexString(0xff & hash[i]);
            if(hex.length() == 1) hexString.append('0');
            hexString.append(hex);
        }
        return hexString.toString();
    } catch(Exception ex){
       throw new RuntimeException(ex);
    }
}` 

my code working fine when i execute getpaymentmethods which mean my encoding is correct but other function i got Error 500
it's driving me mad

Are you actually paying attention to the response we send back?

Yesterday at 2018-10-11 10:57:31.867 & 2018-10-11 11:01:08.673 & 2018-10-11 12:42:31.450 you get ERR_0007, indicating a Checksum issue.
However, I see many attempts from your side with different error messages. The last ones have error
{"Message":"ERR_0001: Request error in field(s) URLPostback"}
Note that URLPostback is an array, you post it as a string in your sample.

I see some cases that seem to indicate the Checksum was actually valid.
Also note that you last request still has at least one field with a space after the fieldname (OrderID)