signature

Payment Signature

Signatures are HMAC-SHA1s of payment data, generated using your "merchant secret key" as the cryptographic key. In the payment flow, there are 2 signatures: the one you generate and send to CitrusPay as part of the "make payment" request to start the payment flow (the request signature), the one CitrusPay generates and send to you as part of the response to your "return URL" at the end of the payment flow (the response signature).

Request signature

merchantAccessKey=<access_key>&transactionId=<order_id>&amount=<order_amount>

Response signature

<TxId><TxStatus><amount><pgTxnNo><issuerRefNo><authIdCode><firstName><lastName><pgRespCode><addressZip>