Dynamic Fonepay QR Integration in Next.js: A Beginner’s Guide

import { NextResponse } from "next/server";
import crypto from "crypto";

export async function POST(req: Request) {
  try {
    const { amount, orderId } = await req.json();

    const merchantCode = process.env.FONEPAY_MERCHANT_CODE || "FNPLTEST";
    const secretKey = process.env.FONEPAY_SECRET_KEY || "fonepay_test_key";
    
    // Format timestamp
    const dateStr = new Date().toISOString().replace(/[-:T.Z]/g, "").slice(0, 14);
    
    // Hash fields for Fonepay API signature
    const hashData = `${merchantCode},${orderId},${amount},${dateStr}`;
    const signature = crypto.createHmac("sha512", secretKey).update(hashData).digest("hex");

    // Call Fonepay Dynamic QR API
    const res = await fetch("https://dev-clientapi.fonepay.com/api/merchant/merchantDetailsForThirdParty/thirdPartyMerchantQR", {
      method: "POST",
      headers: { "Content-Type": "application/json" },
      body: JSON.stringify({
        merchantCode,
        amount,
        remarks1: `Order ${orderId}`,
        prn: orderId,
        date: dateStr,
        signature
      })
    });

    const data = await res.json();
    return NextResponse.json({ success: true, qrString: data.qrMessage });
  } catch (error) {
    return NextResponse.json({ error: "Failed to generate QR" }, { status: 500 });
  }
}