Procobro

curl -X POST https://procobro.akua.la/oauth/token \
  -H "Content-Type: application/json" \
  -d '
{
  "client_id": "<CLIENT_ID>",
  "client_secret": "<CLIENT_SECRET>"
}
'

{
  "access_token": "eyJhbGciOi…",
  "token_type": "Bearer",
  "expires_in": 43200
}

curl -X POST https://procobro.akua.la/v1/payments \
  -H "Authorization: Bearer <ACCESS_TOKEN>" \
  -H "Content-Type: application/json" \
  -d '{ ... }'

curl -X POST https://procobro.akua.la/v1/payments \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '
{
  "amount": 1000,
  "currency": "COP",
  "order_id": "orden-83778",
  "description": "Orden 83778 - mitienda.com",
  "instrument_id": "ins-cu94vq1n8ql8u3v469gg",
  "encrypted_cvv": "<cifrado>"
}
'

{
  "id": "orden-83778-c-xxxx",
  "status": "APPROVED",
  "response_code": "00",
  "amount": "1000",
  "approval_code": "079662"
}

curl -X GET https://procobro.akua.la/v1/payments/{id} \
  -H "Authorization: Bearer $ACCESS_TOKEN"

{
  "status": "AUTHORIZED"
}

curl -X GET https://procobro.akua.la/v1/payments?limit=25 \
  -H "Authorization: Bearer $ACCESS_TOKEN"

{
  "data": [ { "id": "pay-…", "status": "APPROVED" } ],
  "has_more": false
}

curl -X POST https://procobro.akua.la/v1/refunds \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '
{
  "payment_id": "pay-cu94vq1n8ql8u3v469gg",
  "amount": 1000,
  "currency": "COP"
}
'

curl -X POST https://procobro.akua.la/v1/payments/{id}/cancel \
  -H "Authorization: Bearer $ACCESS_TOKEN"

curl -X POST https://procobro.akua.la/v1/payments/{id}/capture \
  -H "Authorization: Bearer $ACCESS_TOKEN"

curl -X GET https://procobro.akua.la/v1/chargebacks \
  -H "Authorization: Bearer $ACCESS_TOKEN"

{
  "data": [ { "id": "chb-…", "payment_id": "pay-…", "status": "OPEN" } ],
  "has_more": false
}

curl -X POST https://procobro.akua.la/v1/payments/intents \
  -H "Authorization: Bearer $ACCESS_TOKEN"

{
  "order_id": "orden-83790",
  "amount": 50000,
  "currency": "COP",
  "rail_id": "NEQUI",
  "rail_type": "WALLET",
  "description": "Orden 83790 - mitienda.com",
  "customer": { "phone_number": "3001234567" }
}

{
  "order_id": "orden-83791",
  "amount": 200000,
  "currency": "COP",
  "rail_id": "PSE",
  "rail_type": "BANK_TRANSFER",
  "return_url": "https://mitienda.com/pagos/resultado",
  "customer": {
    "bank_id": "1007",
    "document": "1234567890",
    "document_type": "CC",
    "first_name": "Juan",
    "last_name": "Pérez",
    "email": "juan@ejemplo.com"
  }
}

{
  "order_id": "orden-83792",
  "amount": 150000,
  "currency": "COP",
  "rail_id": "BRE_B",
  "rail_type": "BANK_TRANSFER"
}

{
  "payment_id": "pay-xxxxxxxxxxxx",
  "transaction": {
    "id": "trx-xxxxxxxxxxxx",
    "type": "PURCHASE",
    "status": "IN_PROGRESS",
    "status_detail": "PENDING",
    "amount": 200000
  },
  "rail": {
    "id": "PSE",
    "payment_link": "https://pse.onepay.com/pay/session-abc123"
  }
}

{
  "payment_id": "pay-xxxxxxxxxxxx",
  "transaction": { "status": "IN_PROGRESS", "status_detail": "PENDING", "amount": 150000 },
  "rail": {
    "id": "BRE_B",
    "alias": "@STORE7X",
    "qr": { "image": "data:image/png;base64,...", "content": "00020101021226..." },
    "payment_link": "https://pay.breb.com.co/t/abc123"
  }
}

{
  "id": "evt-xxxxxxxxxxxx",
  "type": "payment.purchase.succeeded",
  "time": "2025-10-15T15:10:00Z",
  "data": {
    "payment": {
      "id": "pay-xxxxxxxxxxxx",
      "currency": "COP",
      "current_amount": 200000,
      "transaction": { "status": "APPROVED", "status_detail": "SUCCESS" }
    }
  }
}

curl -X GET https://procobro.akua.la/api/banks?country=COL&rail_id=PSE \
  -H "Authorization: Bearer $ACCESS_TOKEN"

[
  { "id": "1007", "name": "BANCOLOMBIA" },
  { "id": "1051", "name": "DAVIVIENDA" }
]

curl -X POST https://procobro.akua.la/v1/payments/intents \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '
{
  "order_id": "orden-83793",
  "amount": 75000,
  "currency": "COP",
  "rail_id": "DAVIPLATA",
  "rail_type": "WALLET",
  "customer": {
    "phone_number": "3001234567",
    "document": "1234567890",
    "document_type": "CC"
  }
}
'

curl -X POST https://procobro.akua.la/v1/payments/intents/{payment_id}/confirm \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '
{
  "otp": "123456"
}
'

curl -X POST https://procobro.akua.la/v1/links \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '
{
  "type": "payment",
  "expires_in": 3600,
  "data": {
    "amount": {
      "value": 25000,
      "currency": "COP"
    },
    "description": "Orden #12345",
    "redirect_url": "https://mitienda.com/gracias",
    "cancel_url": "https://mitienda.com/carrito"
  }
}
'

{
  "id": "lnk-a1b2c3d4",
  "url": "https://checkout.akua.la/links/lnk-a1b2c3d4",
  "status": "created",
  "expires_at": "2026-07-02T14:00:00Z"
}

curl -X GET https://procobro.akua.la/v1/links/{id} \
  -H "Authorization: Bearer $ACCESS_TOKEN"

curl -X POST https://procobro.akua.la/v1/instruments/enrollments \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '
{
  "type": "card_enrollment",
  "expires_in": 3600,
  "data": {
    "webhook": "https://mitienda.com/webhooks/tarjeta",
    "api_key": "mi-api-key-secreta"
  },
  "metadata": {
    "styleConfig": {
      "text": {
        "headerTitle": "Registrá tu tarjeta",
        "buttonText": "Guardar"
      },
      "colors": {
        "primary": "#5b6ed9"
      }
    }
  }
}
'

{
  "id": "lnk-d7ac0929",
  "url": "https://checkout.akua.la/links/lnk-d7ac0929",
  "type": "card_enrollment",
  "status": "created"
}

<iframe
  src="https://checkout.akua.la/links/lnk-d7ac0929"
  width="100%" height="600" frameborder="0"
  style="max-width:500px;margin:0 auto;display:block;border:none">
</iframe>

curl -X POST https://procobro.akua.la/oauth/token \
  -H "Content-Type: application/json" \
  -d '{"grant_type":"client_credentials","client_id":"<CLIENT_ID>","client_secret":"<CLIENT_SECRET>"}'

# → 200 { "access_token": "eyJ…", "token_type": "Bearer", "expires_in": 43200 }

curl -X POST https://procobro.akua.la/v1/encryption/keys \
  -H "Authorization: Bearer <ACCESS_TOKEN>"

# → 201
# { "kid": "key_…", "algorithm": "RSA-OAEP-256", "status": "active",
#   "public_key": "-----BEGIN PUBLIC KEY-----\n…\n-----END PUBLIC KEY-----\n",
#   "valid_from": "…", "valid_until": "…" }

curl https://procobro.akua.la/v1/encryption/keys \
  -H "Authorization: Bearer <ACCESS_TOKEN>"

// corré esto en TU backend, nunca en el navegador
async function mintToken() {
  const r = await fetch('https://procobro.akua.la/oauth/token', {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({
      grant_type: 'client_credentials',
      client_id: process.env.AKUA_CLIENT_ID,
      client_secret: process.env.AKUA_CLIENT_SECRET,
    }),
  });
  const { access_token } = await r.json();
  return access_token;
}

async function getOrCreateEncryptionKey(token) {
  // 1) reusar la clave activa si ya existe
  let r = await fetch('https://procobro.akua.la/v1/encryption/keys', {
    headers: { Authorization: `Bearer ${token}` },
  });
  if (r.ok) return (await r.json()).public_key;

  // 2) si no hay ninguna, crearla (esto pasa UNA vez en la vida del comercio)
  r = await fetch('https://procobro.akua.la/v1/encryption/keys', {
    method: 'POST',
    headers: { Authorization: `Bearer ${token}` },
  });
  const { public_key } = await r.json();
  return public_key;
}

// Cacheá el resultado (memoria/DB) — no repitas esta llamada en cada request.
const token = await mintToken();
const publicKey = await getOrCreateEncryptionKey(token);

echo -n "4111111111111111" | openssl pkeyutl -encrypt \
  -pubin -inkey pub.pem -pkeyopt rsa_padding_mode:oaep -pkeyopt rsa_oaep_md:sha256 \
  | base64 -w0
# repetí para expiration_month ("12"), expiration_year ("30"), holder_name ("Ana Gómez") y cvv ("123")

curl -X POST https://procobro.akua.la/v1/instruments \
  -H "Authorization: Bearer <ACCESS_TOKEN>" \
  -H "Content-Type: application/json" \
  -d '{
    "type": "CARD",
    "encrypted_number": "<base64 de arriba>",
    "encrypted_expiration_month": "<base64>",
    "encrypted_expiration_year": "<base64>",
    "encrypted_holder_name": "<base64>",
    "encrypted_cvv": "<base64>"
  }'

# → 201 { "id": "ins-…", "status": "ACTIVE", "card": { "last_four_digits": "1111", … } }

<div id="akua-card"></div>
<button id="pagar" disabled>Pagar</button>

<script src="https://akua-fields-akua-la.vercel.app/akua-fields.js"></script>

var sf = AkuaFields.mount('#akua-card', {
  apiBase: 'https://akua-fields-akua-la.vercel.app',
  token: '<JWT>',                       // paso 1
  encryptionPublicKey: '<PEM>',         // paso 2 — obligatorio
  amount: 100000,
  currency: 'COP',
  // accent: '#e96024',                 // opcional: pisa el color de tu marca
});

AkuaFields.mount('#akua-card', {
  // ...opciones del paso 4,
  onReady:    function ()   { pagar.disabled = false; },
  onValidity: function (ok) { pagar.disabled = !ok; },
  onResult:   function (r)  {
    // r = { instrument_id, payment_id, status, ... }
    if (r.status === 'APPROVED') { /* confirmá la orden */ }
  },
});

pagar.onclick = function () {
  pagar.disabled = true;
  sf.pay();
};

// cobrar y asociar la tarjeta al cliente:
sf.pay({ user: { name: 'Ana Gómez', email: 'ana@example.com' } });
// o cliente existente: sf.pay({ user: { id: 'usr-…' } });

// guardar la tarjeta SIN cobrar:
sf.enroll({ user: { email: 'ana@example.com' } });
// → { user_id, instrument_id, status: 'ENROLLED' }

<!doctype html>
<html lang="es">
<body>
  <h1>Pagar $100.000 COP</h1>
  <div id="akua-card"></div>
  <button id="pay" disabled>Pagar</button>

  <script src="https://akua-fields-akua-la.vercel.app/akua-fields.js"></script>
  <script>
    // token y clave de cifrado: los sirve TU backend (nunca minteados en el navegador)
    Promise.all([
      fetch('/token').then(r => r.json()),
      fetch('/encryption-key').then(r => r.json()),
    ]).then(([t, k]) => {
      var sf = AkuaFields.mount('#akua-card', {
        apiBase: 'https://akua-fields-akua-la.vercel.app',
        token: t.token,
        encryptionPublicKey: k.public_key,   // obligatorio
        amount: 100000, currency: 'COP',
        onReady:    function ()   { pay.disabled = false; },
        onValidity: function (ok) { pay.disabled = !ok; },
        onResult:   function (r)  { alert(r.status); },
      });
      pay.onclick = function () { pay.disabled = true; sf.pay(); };
    });
  </script>
</body>
</html>

git clone https://github.com/akua-la/akua-fields-examples
cd akua-fields-examples
cp .env.example .env   # completá tus credenciales de sandbox
node server.js         # abre http://localhost:4000 y pagá con 4111 1111 1111 1111

curl -X POST https://procobro.akua.la/v1/instruments \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '
{
  "type": "CARD",
  "card": {
    "number": "4111111111111111",
    "expiration_month": "12",
    "expiration_year": "30",
    "holder_name": "Ana Gómez",
    "cvv": "123"
  }
}
'

{
  "id": "ins-cu94vq1n8ql8u3v469gg",
  "type": "CARD",
  "status": "ACTIVE",
  "card": {
    "last_four_digits": "1111",
    "bin_data": { "card_brand": "VISA" }
  }
}