실시간 지급대행 API

{ "amount":500, "orderId":"test_order_0", "orderName":"토스 티셔츠 외 2건", "customerName":"박토스", "bank":"신한" }

/** * @param target target object for signing (requestBody) * @param securityKey symmetric key from tosspayments * @return requestBody in JWS */ fun sign(target: Any, securityKey: String): String { val payload = objectMapper.writeValueAsString(target) val signer = MACSigner(securityKey) val jwsObject = JWSObject(JWSHeader((JWSAlgorithm.HS256)), Payload(payload)) jwsObject.sign(signer) return jwsObject.serialize() }

curl --location 'https://api-dev.tosspayments.com/v1/virtual-accounts' \ --header 'Authorization: Basic dGVzdF9za19aMFJuWVgydzUzMk5vdkJaN2tOM05leXFBcFFFOgo=' \ --header 'Content-Type: text/plain' \ --data 'eyJhbGciOiJIUzI1NiJ9.eyJhbW91bnQiOjUwMCwib3JkZXJJZCI6InRlc3Rfb3JkZXJfMTEyIiwib3JkZXJOYW1lIjoi7Yag7IqkIO2LsOyFlOy4oCDsmbggMuqxtCIsImN1c3RvbWVyTmFtZSI6Iuuwle2GoOyKpCIsImJhbmsiOiLsi6DtlZwifQ.J8V3_Os1gZeNFj9qv3XDEhXelXrtVg1JLgsChE9hhok'

eyJhbGciOiJIUzI1NiJ9.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.AjizuopO2ldsAuVxZf21Z0OhxR8PFB6gGq1-29wkMQw

/** * @param signedTarget verify target (signed responseBody from tosspayments) * @param securityKey symmetric key from tosspayments * @return JWS payload (plain responseBody in JSON) */ fun verify(signedTarget: String, securityKey: String): String { val jwsObject = JWSObject.parse(signedTarget) val verifier = MACVerifier(securityKey) jwsObject.verify(verifier) val verifiedJwsObject = if (jwsObject.state == JWSObject.State.VERIFIED) { jwsObject } else { throw JOSEException("Failed to verify") } return verifiedJwsObject.payload.toString() }

{ "amount":500, "orderId":"test_order_0", "orderName":"토스 티셔츠 외 2건", "customerName":"박토스", "bank":"신한" }

/** * @param target target object for encryption (requestBody) * @param securityKey symmetric key from tosspayments * @return requestBody in JWE */ fun encrypt(target: Any, securityKey: String): String { val payload = objectMapper.writeValueAsString(target) val key = Hex.decode(securityKey) val header = JWEHeader(JWEAlgorithm.DIR, EncryptionMethod.A256GCM) val jweObject = JWEObject(header, Payload(payload)) jweObject.encrypt(DirectEncrypter(key)) return jweObject.serialize() }

curl --location 'https://api-dev.tosspayments.com/v1/virtual-accounts' \ --header 'Authorization: Basic dGVzdF9za19aMFJuWVgydzUzMk5vdkJaN2tOM05leXFBcFFFOgo=' \ --header 'Content-Type: text/plain' \ --data 'eyJlbmMiOiJBMjU2R0NNIiwiYWxnIjoiZGlyIn0..OuOPmSkGR2CNk4XJ.0wt42ViuBt1bTwpCUJAllLkGtL3Wp0jIBYk2b2BzeA5fjy1I45C_4EEdkOGtHi2NZ5_Q-aVvfcziBM8UNeC8mgsBI5ypslDYXvRGOQ-Pf9jxs4qn6b6K1aNSCJR7Id2ePdVguQl7MW4S5-AYKkbboDKdPhLn1vx1zOSd9w.70SmVvXN8RHpxDhJRU3Ygw'

eyJlbmMiOiJBMjU2R0NNIiwiYWxnIjoiZGlyIn0..4A-Pv1Q3b1JZbAja._3WwBypBPPoa8pLylIEhR1sGFejI8fpFDNxs0it2Lp0i1LUky_K2eXuoH_ctcoaOJrvdKRA6QpHmZ5f-oV_pg9PZUoxRyBlWJq80JXQyP3LZZdm0TRrhWrj58vqlTQHBfaG76IAZVIS1vqSxfcidUcYy_w58o4E-X79u8HNDz4rA4JNQ7j7aJuZHf8EPWhYUq1pfPkdKNg-ojwBUT-Mqx7Vcwyz-PjYj0TDLq9oaiopXUvqCHzE-mNk-VEqI6wTEyaC7aU6nnPv_FNczmZS3EsxIuA1DfGontUnLvXIHClOchaH4nxg9oJ51ASjFsZHgHhJLiunSFB_IIKvNlgpiufQZSVP21e-t1Jl6pmPdPrvjUy5usEFSM25Qi0nMt52PxYTBJD6rNl9OKTW4urbLRZ6-wruPvb4b00IRBFNyQuNitqUd64W2l_czEaqCEvvFjopr14svmksKy8_2KiWoTMXGbBMhY-0Z5zUfQSz66ALaEHFR_19WCKNW4uCuapfdbDuLH4hI41wwNLmF9OluCmami2qJqhyAuRyCJTau6Ey-NuOra21OP6PjsL7ufRrm50EfJa75Gx5W9shLu59Z73mRjOmBaOY5aFdhoycGgAo-4FbaRuJp_Cc5GIDHABI79oD8rgYTgQJtY63NeFFf29a46XD6U07RPKC_uauj-7w3e_uHDq__qObOSlGxfL365oB7fmR5Pn8dNPLTERit7BS3KdQgGqW0cqkJqHRgnivfRN7vtiywi4wxnN1lJ7QA8juSUZ7lxdfVMWphYkHKahMEMCI5yTL84u1xj-cf0YXrebDJARLOZ4gaN6fpwNNVGC2xOxc_yCAAZgVGoUenRIxPLQyQEM1FQskDYr8vNKmLVfZWwYrRq4XpsAIO480Kf6URKS_C0gAm53tUzgmYooyQRJqi3BR20oHNdhPlVCYULEPjeUukLeVQfvn7FgUWViaCZM9LE1imaPeRMF2yLoWBzvlK57P3ce4d1QVXqjK2iHj3YbgAuFBBL0gU0pIZUbWPYwnYWwu2qdYmQjpd_cbgLd8goE6qOvEf5r1RMdBwL1xs3JFX6Z3BAlhrKNPvMvjGpyYjclW4VKkjuTEQtzm1844PWfZRsO-PHFP7nTTu0RtUzNzRS1MBcQBd-r7mWKl0NjTYztjPJCFD1-eirtF5l-9mjBXPrIE7aHvCepW46jpwKwMXTDtBqmGRuKvEWmwAgu_wGARCCiRbEgJnp70xJ1sfveqDlJlWLYtirgEeMDI4Xlik4L1y22mzLdnhsBULdecD1NJC2EGrK-wANBZhOuI8zsfQg0bvZ3u4KNVlJDSCRt4XCyALf3z58zs8Czam9hb0U3x1MB2TDMxE1InF7mE7hCvqzcmpf80evCuN5o-79QThUGrXgxD_IrTFOi-NnFiQVIe12dW5lDP4sVcus31GzDbSLoA3YW-qReEssP57H85XTV7Uej2ZznteYIe4JeTpFUjWTyyoYderdKjDeuP0GKILAwcJ1b5v2NGSbVGhnla3e0lRTpqiTYIt3Jbqm1z154A4jsIjqhO51h2s_PME0fmq3k6LH1aq7YP7olRAFy3K7Fg2mOoY_AUabqlShGv8ACh_GRU3VemtWwXAIxsQhv_4uKW5zaX_voDohWMd8WYGmq6k5-Joo5sMQM0zFasjn3FELTbDog8eVn4rF8uCxD5uDguPzV-mmJG-rbwqkqIjW9SM8Nduj9gvK80K_aaKVc_fHOaYrUADZ1c9Rw4Dblku.KDL-3asgKCW7kGkWVKjbuA

/** * @param encryptedTarget decrypt target (responseBody from tosspayments) * @param securityKey symmetric key from tosspayments * @return JWE payload (plain responseBody in JSON) */ fun decrypt(encryptedTarget: String, securityKey: String): String { val jweObject = JWEObject.parse(encryptedTarget) val key = Hex.decode(securityKey) jweObject.decrypt(DirectDecrypter(key)) val decryptedJweObject = if (jweObject.state == JWEObject.State.DECRYPTED) { jweObject } else { throw JOSEException("Failed to decrypt") } return decryptedJweObject.payload.toString() }