Migs Two Party

Last month, I have one freelance project need to do the payment integration with MasterCard. I just realised there are multiple type of integration model for MasterCard such as 2-Party, 2.5 Party and 3-Party Model.

Since, the documentation is so shit, I even can’t find how to do the integration for 2-Party Integration. Even, stackoverflow don’t have many question for this use case.

After several code inspection from multiple public repository, I found a way to implement it.

2-Party Integration

Create transaction

URL [POST] https://migs.mastercard.com.au/vpcdps

Body - x-www-form-urlencoded

    vpc_Version: 1
    vpc_Command: pay
    vpc_AccessCode: // get from mastercard
    vpc_vpc_MerchTxnRef: 123456
    vpc_Merchant: // get from mastercard
    vpc_OrderInfo: 'Purchase Books'
    vpc_Amount: 100 // RM1
    vpc_CardNum: 424242424242
    vpc_CardExp: 1203 // YYMM
    vpc_CardSecurityCode: 123

Void Transaction

URL [POST] https://migs.mastercard.com.au/vpcdps

Body

x-www-form-urlencoded

    vpc_Version: 1
    vpc_Command: voidPurchase
    vpc_AccessCode: 123457 // get from mastercard
    vpc_vpc_MerchTxnRef: 123456
    vpc_Merchant: 123456 // get from mastercard
    vpc_OrderInfo: 'Purchase Books'
    vpc_User: jakzaizzat // your MIGS username,
    vpc_Password: 123456 // MIGS password,

How to implement in Laravel

Create Transaction

    public function create(Request $request) {
    
            $transaction =  Transaction::create([
                'uuid' => utf8_encode((string) Uuid::generate()), // For utf8
                'name' => $request->detail,
                'amount' => $request->amount,
                'user_id' => $request->user()->id,
                'merchant_id' => $request->user()->merchant_id
            ]);
    
            $http = new \GuzzleHttp\Client;
            try {
                $response = $http->request('post', 'https://migs.mastercard.com.au/vpcdps', [
                    'form_params' => [
                        'vpc_Version' => '1',
                        'vpc_Command' => 'pay',
                        'vpc_AccessCode' => env('MIGS_ACCESSCODE'),
                        'vpc_MerchTxnRef' => $transaction->uuid,
                        'vpc_Merchant' => env('MIGS_MERCHANT_ID'),
                        'vpc_OrderInfo' => $request->detail,
                        'vpc_Amount' => $request->amount,
                        'vpc_CardNum' => $request->cc_number,
                        'vpc_CardExp' => $request->cc_exp,
                        'vpc_CardSecurityCode' => $request->cc_cvv
                    ]
                ]);
                $result = (string) $response->getBody();
                $result = 'http://senangpay.my?' . $result;
    
                $query_str = parse_url($result, PHP_URL_QUERY);
                parse_str($query_str, $query_params);
                $transaction->migs_id = $query_params["vpc_TransactionNo"];
                if($query_params["vpc_TxnResponseCode"] == 0) {
                    $transaction->status = "successful";
                    $transaction->save();
                    return Response::json(array(
                        'status'      =>  1,
                        'transaction_reference'   =>  $transaction->uuid,
                        'amount_paid' => $transaction->amount,
                        'msg' => 'Payment_was_successful'
                    ), 200);
                } else {
                    $transaction->status = "cancelled";
                    $transaction->save();
                    return Response::json(array(
                        'status'      =>  0,
                        'transaction_reference'   =>  $transaction->uuid,
                        'amount_paid' => $transaction->amount,
                        'msg' => $query_params["vpc_Message"]
                    ), 200);
                }
    
            } catch (\GuzzleHttp\Exception\BadResponseException $e) {
                if ($e->getCode() === 400) {
                    return response()->json('Invalid Request. Please enter a username or a password.', $e->getCode());
                } else if ($e->getCode() === 401) {
                    return response()->json('Your credentials are incorrect. Please try again', $e->getCode());
                }
                return response()->json('Something went wrong on the server.', $e->getCode());
            }
        }

Void Transaction

    public function delete(Request $request) {
            $transaction = Transaction::where('uuid', $request->transaction_reference)->first();
    
            $http = new \GuzzleHttp\Client;
            try {
                $response = $http->request('post', 'https://migs.mastercard.com.au/vpcdps', [
                    'form_params' => [
                        'vpc_Version' => '1',
                        'vpc_Command' => 'voidPurchase',
                        'vpc_AccessCode' => env('MIGS_ACCESSCODE'),
                        'vpc_MerchTxnRef' => $request->transaction_reference,
                        'vpc_Merchant' => env('MIGS_MERCHANT_ID'),
                        'vpc_User' => env('MIGS_USERNAME'),
                        'vpc_Password' => env('MIGS_PASSWORD'),
                        'vpc_TransNo' => $transaction->migs_id
                    ]
                ]);
                $result = (string) $response->getBody();
                $result = 'http://senangpay.my?' . $result;
    
                $query_str = parse_url($result, PHP_URL_QUERY);
                parse_str($query_str, $query_params);
                if($query_params["vpc_TxnResponseCode"] == 0) {
                    $transaction->status = "refund";
                    $transaction->save();
                    return Response::json(array(
                        'status'      =>  1,
                        'msg' => 'Transaction void successfully'
                    ), 200);
                } else {
                    return Response::json(array(
                        'status'      =>  0,
                        'transaction_reference'   =>  $transaction->uuid,
                        'amount_paid' => $transaction->amount,
                        'msg' => $query_params["vpc_Message"]
                    ), 200);
                }
    
            } catch (\GuzzleHttp\Exception\BadResponseException $e) {
                if ($e->getCode() === 400) {
                    return response()->json('Invalid Request. Please enter a username or a password.', $e->getCode());
                } else if ($e->getCode() === 401) {
                    return response()->json('Your credentials are incorrect. Please try again', $e->getCode());
                }
                return response()->json('Something went wrong on the server.', $e->getCode());
            }
        }