Shadow Pay API

<?php
$apiKey    = "YOUR_API_KEY";
$apiSecret = "YOUR_API_SECRET";
$accountId = 17;
$baseUrl   = "https://shadow-pay.top/api/v2";

function payflowPost(string $url, string $key, string $secret, array $body): array {
    $ch = curl_init($url);
    curl_setopt_array($ch, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_POST           => true,
        CURLOPT_POSTFIELDS     => json_encode($body),
        CURLOPT_HTTPHEADER     => [
            "X-API-Key: $key",
            "X-API-Secret: $secret",
            "Content-Type: application/json",
        ],
        CURLOPT_CONNECTTIMEOUT => 10,
        CURLOPT_TIMEOUT        => 30,
    ]);
    $response = curl_exec($ch);
    curl_close($ch);
    return json_decode($response, true) ?? [];
}

// 1. Send STK Push
$result = payflowPost(
    "$baseUrl/stkpush.php", $apiKey, $apiSecret,
    [
        "payment_account_id" => $accountId,
        "phone"              => "0700100211",
        "amount"             => 100,
        "reference"          => "ORDER123",
        "description"        => "Payment for order #123",
    ]
);

if (!$result["success"]) {
    die("STK Push error: " . $result["message"]);
}

$checkoutId = $result["checkout_request_id"];
echo "STK Push sent — Checkout ID: $checkoutId\n";

// 2. Poll for completion (every 5 s, up to 2 min)
for ($i = 0; $i < 24; $i++) {
    sleep(5);
    $status = payflowPost(
        "$baseUrl/status.php", $apiKey, $apiSecret,
        ["checkout_request_id" => $checkoutId]
    );
    echo "Attempt " . ($i + 1) . ": " . $status["status"] . "\n";

    if ($status["status"] === "completed") {
        echo "Payment confirmed! Code: " . $status["transaction_code"] . "\n";
        break;
    } elseif (in_array($status["status"], ["failed", "cancelled", "expired"])) {
        echo "Payment " . $status["status"] . ".\n";
        break;
    }
}
?>

import requests
import time

API_KEY    = "YOUR_API_KEY"
API_SECRET = "YOUR_API_SECRET"
ACCOUNT_ID = 17
BASE_URL   = "https://shadow-pay.top/api/v2"

HEADERS = {
    "X-API-Key":    API_KEY,
    "X-API-Secret": API_SECRET,
    "Content-Type": "application/json",
}

# 1. Send STK Push
resp = requests.post(
    f"{BASE_URL}/stkpush.php",
    headers=HEADERS,
    json={
        "payment_account_id": ACCOUNT_ID,
        "phone":              "0700100211",
        "amount":             100,
        "reference":          "ORDER123",
        "description":        "Payment for order #123",
    },
    timeout=30,
)
result = resp.json()

if not result.get("success"):
    raise SystemExit(f"STK Push error: {result.get('message')}")

checkout_id = result["checkout_request_id"]
print(f"STK Push sent — Checkout ID: {checkout_id}")

# 2. Poll for completion (every 5 s, up to 2 min)
for attempt in range(1, 25):
    time.sleep(5)
    status_resp = requests.post(
        f"{BASE_URL}/status.php",
        headers=HEADERS,
        json={"checkout_request_id": checkout_id},
        timeout=30,
    )
    data = status_resp.json()
    print(f"Attempt {attempt}: {data.get('status')}")

    if data.get("status") == "completed":
        print(f"Payment confirmed! Code: {data.get('transaction_code')}")
        break
    elif data.get("status") in ("failed", "cancelled", "expired"):
        print(f"Payment {data.get('status')}.")
        break

// Browser JavaScript (fetch API)
const API_KEY    = "YOUR_API_KEY";
const API_SECRET = "YOUR_API_SECRET";
const ACCOUNT_ID = 17;
const BASE_URL   = "https://shadow-pay.top/api/v2";

const headers = {
    "X-API-Key":    API_KEY,
    "X-API-Secret": API_SECRET,
    "Content-Type": "application/json",
};

async function initiatePayment(phone, amount, reference, description) {
    const resp = await fetch(`${BASE_URL}/stkpush.php`, {
        method:  "POST",
        headers: headers,
        body:    JSON.stringify({
            payment_account_id: ACCOUNT_ID,
            phone, amount, reference, description,
        }),
    });
    return resp.json();
}

async function checkStatus(checkoutRequestId) {
    const resp = await fetch(`${BASE_URL}/status.php`, {
        method:  "POST",
        headers: headers,
        body:    JSON.stringify({ checkout_request_id: checkoutRequestId }),
    });
    return resp.json();
}

// Usage
(async () => {
    const result = await initiatePayment("0700100211", 100, "ORDER123", "Order payment");
    if (!result.success) { console.error("Error:", result.message); return; }

    console.log("STK Push sent:", result.checkout_request_id);

    // Poll every 5 s, up to 24 attempts
    for (let i = 0; i < 24; i++) {
        await new Promise(r => setTimeout(r, 5000));
        const status = await checkStatus(result.checkout_request_id);
        console.log(`Attempt ${i + 1}: ${status.status}`);

        if (status.status === "completed") {
            console.log("Confirmed! Code:", status.transaction_code);
            break;
        } else if (["failed", "cancelled", "expired"].includes(status.status)) {
            console.log("Payment", status.status);
            break;
        }
    }
})();

// Node.js (built-in fetch available in Node 18+)
const API_KEY    = "YOUR_API_KEY";
const API_SECRET = "YOUR_API_SECRET";
const ACCOUNT_ID = 17;
const BASE_URL   = "https://shadow-pay.top/api/v2";

const HEADERS = {
    "X-API-Key":    API_KEY,
    "X-API-Secret": API_SECRET,
    "Content-Type": "application/json",
};

async function apiPost(endpoint, body) {
    const res = await fetch(`${BASE_URL}/${endpoint}`, {
        method:  "POST",
        headers: HEADERS,
        body:    JSON.stringify(body),
    });
    return res.json();
}

function sleep(ms) { return new Promise(r => setTimeout(r, ms)); }

(async () => {
    // 1. Send STK Push
    const result = await apiPost("stkpush.php", {
        payment_account_id: ACCOUNT_ID,
        phone:              "0700100211",
        amount:             100,
        reference:          "ORDER123",
        description:        "Order payment",
    });

    if (!result.success) { console.error("STK Push failed:", result.message); return; }
    console.log("STK Push sent:", result.checkout_request_id);

    // 2. Poll for status
    for (let i = 0; i < 24; i++) {
        await sleep(5000);
        const data = await apiPost("status.php", {
            checkout_request_id: result.checkout_request_id,
        });
        console.log(`[${i + 1}] status: ${data.status}`);

        if (data.status === "completed") {
            console.log("Confirmed! Code:", data.transaction_code);
            break;
        }
        if (["failed", "cancelled", "expired"].includes(data.status)) {
            console.log("Payment ended:", data.status);
            break;
        }
    }
})();

import requests
import time

API_KEY       = "YOUR_API_KEY"
API_SECRET    = "YOUR_API_SECRET"
BASE_URL      = "https://shadow-pay.top/api/v2"
CHECKOUT_ID   = "ws_CO_20230101120000_abc123def456"
FINAL         = {"completed", "failed", "cancelled", "expired"}
MAX_ATTEMPTS  = 24   # 2 minutes at 5 s intervals

headers = {
    "X-API-Key":    API_KEY,
    "X-API-Secret": API_SECRET,
    "Content-Type": "application/json",
}

for attempt in range(1, MAX_ATTEMPTS + 1):
    time.sleep(5)
    resp = requests.post(
        f"{BASE_URL}/status.php",
        headers=headers,
        json={"checkout_request_id": CHECKOUT_ID},
        timeout=30,
    )
    data   = resp.json()
    status = data.get("status", "error")
    print(f"Attempt {attempt}: {status}")

    if status in FINAL:
        if status == "completed":
            print("Payment confirmed!")
            print("Transaction Code:", data.get("transaction_code"))
            print("M-Pesa Receipt: ", data.get("mpesa_receipt_number", "Awaiting"))
        else:
            print(f"Payment ended: {status}")
        break
else:
    print("Polling timed out.")

// Browser — poll with async/await
const API_KEY     = "YOUR_API_KEY";
const API_SECRET  = "YOUR_API_SECRET";
const BASE_URL    = "https://shadow-pay.top/api/v2";
const CHECKOUT_ID = "ws_CO_20230101120000_abc123def456";
const FINAL       = new Set(["completed", "failed", "cancelled", "expired"]);

const headers = {
    "X-API-Key":    API_KEY,
    "X-API-Secret": API_SECRET,
    "Content-Type": "application/json",
};

async function pollStatus(checkoutId, intervalMs = 5000, maxAttempts = 24) {
    for (let i = 1; i <= maxAttempts; i++) {
        await new Promise(r => setTimeout(r, intervalMs));
        const resp = await fetch(`${BASE_URL}/status.php`, {
            method: "POST", headers,
            body: JSON.stringify({ checkout_request_id: checkoutId }),
        });
        const data = await resp.json();
        console.log(`Attempt ${i}:`, data.status);

        if (FINAL.has(data.status)) {
            if (data.status === "completed") {
                console.log("Confirmed! Code:", data.transaction_code);
            } else {
                console.log("Payment", data.status);
            }
            return data;
        }
    }
    throw new Error("Polling timed out");
}

pollStatus(CHECKOUT_ID).catch(console.error);

// Node.js 18+ (built-in fetch)
const API_KEY     = "YOUR_API_KEY";
const API_SECRET  = "YOUR_API_SECRET";
const BASE_URL    = "https://shadow-pay.top/api/v2";
const CHECKOUT_ID = "ws_CO_20230101120000_abc123def456";
const FINAL       = new Set(["completed", "failed", "cancelled", "expired"]);

const HEADERS = {
    "X-API-Key":    API_KEY,
    "X-API-Secret": API_SECRET,
    "Content-Type": "application/json",
};

const sleep = ms => new Promise(r => setTimeout(r, ms));

async function pollStatus(checkoutId) {
    for (let i = 1; i <= 24; i++) {
        await sleep(5000);
        const res  = await fetch(`${BASE_URL}/status.php`, {
            method:  "POST",
            headers: HEADERS,
            body:    JSON.stringify({ checkout_request_id: checkoutId }),
        });
        const data = await res.json();
        console.log(`[${i}] ${data.status}`);

        if (FINAL.has(data.status)) {
            console.log(data.status === "completed"
                ? `Confirmed! Code: ${data.transaction_code}`
                : `Payment ${data.status}`);
            return data;
        }
    }
    throw new Error("Timeout");
}

pollStatus(CHECKOUT_ID).catch(console.error);