bKash Payment API Documentation

<?php

$appKey    = 'your_app_key_here';
$secretKey = 'your_secret_key_here';
$url       = 'https://bdquickpay.com/api/bkash/v1/payment/create';

$payload = [
    'amount'             => 500,
    'customer_reference' => 'ORDER-001',
    'success_url'        => 'https://yoursite.com/success',
    'cancel_url'         => 'https://yoursite.com/cancel',
    'webhook_url'        => 'https://yoursite.com/webhook',
    'metadata'           => ['order_id' => 'ORD-1001'],
];

$ch = curl_init($url);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_POSTFIELDS     => json_encode($payload),
    CURLOPT_HTTPHEADER     => [
        'X-App-Key: '    . $appKey,
        'X-Secret-Key: ' . $secretKey,
        'Content-Type: application/json',
    ],
]);

$data = json_decode(curl_exec($ch), true);
curl_close($ch);

if ($data['status']) {
    header('Location: ' . $data['payment_url']);
    exit;
}

const response = await fetch('https://bdquickpay.com/api/bkash/v1/payment/create', {
    method: 'POST',
    headers: {
        'X-App-Key':    'your_app_key_here',
        'X-Secret-Key': 'your_secret_key_here',
        'Content-Type': 'application/json',
    },
    body: JSON.stringify({
        amount:             500,
        customer_reference: 'ORDER-001',
        success_url:        'https://yoursite.com/success',
        cancel_url:         'https://yoursite.com/cancel',
        webhook_url:        'https://yoursite.com/webhook',
    }),
});

const data = await response.json();

if (data.status) {
    window.location.href = data.payment_url;
}

import requests

url        = "https://bdquickpay.com/api/bkash/v1/payment/create"
app_key    = "your_app_key_here"
secret_key = "your_secret_key_here"

payload = {
    "amount":             500,
    "customer_reference": "ORDER-001",
    "success_url":        "https://yoursite.com/success",
    "cancel_url":         "https://yoursite.com/cancel",
    "webhook_url":        "https://yoursite.com/webhook",
}

headers = {
    "X-App-Key":    app_key,
    "X-Secret-Key": secret_key,
    "Content-Type": "application/json",
}

data = requests.post(url, json=payload, headers=headers).json()

if data["status"]:
    print("Redirect to:", data["payment_url"])

<?php

$appKey    = 'your_app_key_here';
$secretKey = 'your_secret_key_here';
$url       = 'https://bdquickpay.com/api/bkash/v1/payment/verify';
$invoiceId = 'GALQYVTGASTRGOISR1FO';

$ch = curl_init($url);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_POSTFIELDS     => json_encode(['invoice_id' => $invoiceId]),
    CURLOPT_HTTPHEADER     => [
        'X-App-Key: '    . $appKey,
        'X-Secret-Key: ' . $secretKey,
        'Content-Type: application/json',
    ],
]);

$data = json_decode(curl_exec($ch), true);
curl_close($ch);

if ($data['status'] && $data['data']['status'] === 'completed') {
    $trxId = $data['data']['transaction']['trx_id'];
    // fulfilOrder($invoiceId, $trxId);
}

use Illuminate\Support\Facades\Http;

$response = Http::withHeaders([
    'X-App-Key':    config('services.bkash.app_key'),
    'X-Secret-Key': config('services.bkash.secret_key'),
])->post('https://bdquickpay.com/api/bkash/v1/payment/verify', [
    'invoice_id' => $invoiceId,
]);

$data = $response->json();

if ($data['status'] && $data['data']['status'] === 'completed') {
    $trxId      = $data['data']['transaction']['trx_id'];
    $verifiedAt = $data['data']['transaction']['verified_at'];
    // fulfilOrder($invoiceId, $trxId);
}

const response = await fetch('https://bdquickpay.com/api/bkash/v1/payment/verify', {
    method:  'POST',
    headers: {
        'X-App-Key':    'your_app_key_here',
        'X-Secret-Key': 'your_secret_key_here',
        'Content-Type': 'application/json',
    },
    body: JSON.stringify({ invoice_id: 'GALQYVTGASTRGOISR1FO' }),
});

const data = await response.json();

if (data.status && data.data.status === 'completed') {
    const { trx_id, verified_at } = data.data.transaction;
    console.log(`Verified — Trx: ${trx_id}`);
}

// routes/api.php
Route::post('/webhook/bkash', [BkashWebhookController::class, 'handle'])
    ->withoutMiddleware(VerifyCsrfToken::class);

// app/Http/Controllers/BkashWebhookController.php
public function handle(Request $request)
{
    $event     = $request->input('event');
    $invoiceId = $request->input('invoice_id');
    $amount    = $request->input('amount');
    $custRef   = $request->input('customer_reference');

    match($event) {
        'payment.completed' => Order::markPaid($invoiceId, $amount),
        'payment.failed'    => Order::markFailed($invoiceId),
        default             => Log::info('Unknown bKash webhook: ' . $event),
    };

    return response()->json(['received' => true]);
}

const express = require('express');
const app     = express();
app.use(express.json());

app.post('/webhook/bkash', (req, res) => {
    const { event, invoice_id, amount, customer_reference } = req.body;

    if (event === 'payment.completed') {
        console.log(`bKash payment done: ${invoice_id} — ৳${amount}`);
        // await markOrderPaid(invoice_id, amount);

    } else if (event === 'payment.failed') {
        console.log(`bKash payment failed: ${invoice_id}`);
        // await markOrderFailed(invoice_id);
    }

    res.status(200).json({ received: true });
});