QuickPay Transaction API*

Seamless and hassle free checkout experience process

This section will show you how you can tokenize the user and make the payment more seamless with Indodana. With this QuickPay checkout integration, Indodana user can enjoy the easy & fast checkout experience on your platform. Contrast to normal checkout, user with QuickPay checkout activated won't have to input credentials / sign-in to Indodana platform on every transaction. The user will directly proceed to checkout your transaction if we don't detect any suspicious behavior after you redirect the user to our checkout page.

This section only covers the specific QuickPay API integration, so we recommend you to read the Direct API Integration first for general integration information.

Preparation

QuickPay builds on top of the Direct API, so first complete the base Direct API preparation (merchant API key & secret, sandbox / production URLs, and IP whitelist). In addition, QuickPay requires:

QuickPay-specific preparation checklist:

A userTokenCallbackUrl registered with Indodana — receives the QuickPay user token after successful tokenization
A userTokenRevokeCallbackUrl registered with Indodana — notified when a user revokes the connection from the Indodana app

The userTokenCallbackUrl and userTokenRevokeCallbackUrl are configured on Indodana's side during onboarding — contact your Indodana PIC to register them. They are not passed per request.

Integration Flow

The end-to-end QuickPay flow starts by checking whether the user is eligible (has an active PayLater limit), then tokenizes the user, and finally reuses that token for seamless checkouts.

For an already-tokenized user, you can skip straight to Get Payment Calculation / QuickPay Checkout using the stored userToken — the eligibility and connect steps are only needed the first time.

User Tokenization Options

This section will guide you on how to get the Indodana QuickPay user token. The Indodana QuickPay user token is a long live unique token per-user that you can store in your system. You need to pass this Indodana QuickPay user token when checkout to enable seamless transaction experience without user sign-in process.

Indodana provides two tokenization flows :

Explicit user tokenization from merchant's platform menu The explicit user tokenization is a flow when user explicitly says that he/she wants to tokenize Indodana account on your platform menu. Upon successful authorization, your system will get the Indodana QuickPay user token via callback request.
User tokenization on checkout User tokenization on checkout is a flow when user does tokenization while he/she checkouts transactions on your platform using Indodana. Upon successful transaction, your system will get Indodana QuickPay user token via callback request.

API Method References

In this section, {baseUrl} corresponds to https://sandbox01-api.indodanafinance.co.id/chermes/merchant for sandbox and https://api.indodanafinance.co.id/chermes/merchant for production. Authentication uses the same Authorization: Bearer {api_key}:{nonce}:{signature} scheme described in the Direct API Integration.

Indodana Connect Account

POST https://{baseUrl}/v1/connect

Use this API to initiate user tokenization. After calling this API, you will get a redirection URL for the user to authorize your tokenization request. You need to redirect the user to the redirection URL and upon successful authorization, you will get the Indodana QuickPay user token from the callback.

* means the parameter is required

Headers

Name

Type

Description

Authorization*

string

The generated authentication signature with format Bearer {api_key}:{nonce}:{signature}

Request Body

Name

Type

Description

merchantUserKey*

string

User identifier in merchant's platform. Indodana will send the Indodana QuickPay token alongside this information so you know the owner of token.

phoneNumber*

string

Phone number of user in merchant's platform.

backToStoreUrl*

string

Url to be redirected by Indodana to user after the connect process is complete. Must use https://.

metadata

object

Key value pair of additional information of user / transaction.

All callback URLs (backToStoreUrl) must use HTTPS. Requests with http:// URLs will be rejected.

{
    "status": "OK",
    "requestId": "4dbc33a5-86ee-11eb-a301-cddc223655fd",
    "redirectUrl": "https://quickpay.indodanafinance.co.id/product-installment/connect?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJyZXF1ZXN0SWQiOiI0ZGJjMzNhNS04NmVlLTExZWItYTMwMS1jZGRjMjIzNjU1ZmQiLCJtZXJjaGFudElkIjoiNGZlZjBjY2EtNmE3Ni0xMWU5LWE5MjMtMTY4MWJlNjYzZDNlIiwic2FsdCI6MTYxNTk2NDM2MiwiaWF0IjoxNjE1OTY0MzYyLCJleHAiOjE2MTU5Njc5NjJ9.xWv0CJPUC_saPOIj_gxVYPOSaAY-PV94ZsVL_YRNZoo"
}

{
  "status": "ERROR",
  "error": {
    "kind": "Unauthorized",
    "message": "<String>"
  }
}

When you initiate checkout with null / invalid Indodana QuickPay user token, it will give the signed-in user an option to do tokenization on Indodana checkout page. With this method, you don't need to create a dedicated menu for connecting Indodana account to your platform.

Please refer to checkout using QuickPay for the API specification.

Get Payment Calculation

POST https://{baseUrl}/v3/payment_calculation

Once the user is tokenized, you can use this API to know installment options available for the current user based on his/her limit balance. If you pass a valid Indodana QuickPay user token to call this API, this API will respond with additional properties currentAvailableLimitBalance and isEligible. When the user's current limit balance is insufficient on the particular tenure option, the property isEligible will be false, so you can gray out the payment option based on your platform UI/UX design.

* means the parameter is required

Headers

Name

Type

Description

X-User-Token

string

[Optional] If token is set, this will be used to authenticate the user. userToken is generated specified per merchant

Authorization*

string

The generated authentication signature with format Bearer {api_key}:{nonce}:{signature}

Request Body

Name

Type

Description

items*

array

Array of <Item>. Details of shopping items in the transaction.

amount*

number

Total amount of the transaction. Should be equal to the sum of all the <Item>'s costs.

{
    "status": "OK",
    "payments": [
        {
            "amount": 4560000,
            "installmentAmount": 7848000,
            "monthlyInstallment": 327000,
            "tenure": 24,
            "tenureTimeUnit": "MONTH",
            "totalInterest": 3288000,
            "provision": 60000,
            "paymentType": "Bayar dalam 24 bulan",
            "rate": 3,
            "id": "24_months",
            "merchantDiscountRate": 450000,
            "totalTransactionAmount": 4500000,
            "currentAvailableLimitBalance": 28284996,
            "isEligible": true
        },
        {
            "amount": 4554000,
            "installmentAmount": 7020000,
            "monthlyInstallment": 390000,
            "tenure": 18,
            "tenureTimeUnit": "MONTH",
            "totalInterest": 2466000,
            "provision": 54000,
            "paymentType": "Bayar dalam 18 bulan",
            "rate": 3,
            "id": "18_months",
            "merchantDiscountRate": 450000,
            "totalTransactionAmount": 4500000,
            "currentAvailableLimitBalance": 28284996,
            "isEligible": true
        },
        {
            "amount": 4548000,
            "installmentAmount": 6192000,
            "monthlyInstallment": 516000,
            "tenure": 12,
            "tenureTimeUnit": "MONTH",
            "totalInterest": 1644000,
            "provision": 48000,
            "paymentType": "Bayar dalam 12 bulan",
            "rate": 3,
            "id": "12_months",
            "merchantDiscountRate": 450000,
            "totalTransactionAmount": 4500000,
            "currentAvailableLimitBalance": 28284996,
            "isEligible": true
        },
        {
            "amount": 4548000,
            "installmentAmount": 5370000,
            "monthlyInstallment": 895000,
            "tenure": 6,
            "tenureTimeUnit": "MONTH",
            "totalInterest": 822000,
            "provision": 48000,
            "paymentType": "Bayar dalam 6 bulan",
            "rate": 3,
            "id": "6_months",
            "merchantDiscountRate": 450000,
            "totalTransactionAmount": 4500000,
            "currentAvailableLimitBalance": 23570830,
            "isEligible": true
        },
        {
            "amount": 4545000,
            "installmentAmount": 4956000,
            "monthlyInstallment": 1652000,
            "tenure": 3,
            "tenureTimeUnit": "MONTH",
            "totalInterest": 411000,
            "provision": 45000,
            "paymentType": "Bayar dalam 3 bulan",
            "rate": 3,
            "id": "3_months",
            "merchantDiscountRate": 450000,
            "totalTransactionAmount": 4500000,
            "currentAvailableLimitBalance": 18856664,
            "isEligible": true
        }
    ]
}

{
    "status": "ERROR",
    "error": {
        "kind": "Unauthorized",
        "message": "User token is invalid"
    }
}

Purchase Transaction Checkout

POST https://{baseUrl}/v3/checkout_url

This checkout API v3 enables QuickPay integration. You need to pass valid x-user-token on the header so user can enjoy the easy & fast checkout experience. Don't worry if you don't have the Indodana QuickPay user token for current checkout user in the first place, our checkout page already handle the flow and you need to store the token every time Indodana sends the token via callback to your system and use this token for subsequent transaction.

* means the parameter is required

Headers

Name

Type

Description

X-User-Token*

string

Indodana QuickPay user token. You can pass null if user account not connected yet in your platform.

Authorization*

string

The generated authentication signature with format Bearer {api_key}:{nonce}:{signature}

Request Body

Name

Type

Description

merchantUserKey*

string

User identifier in merchant's platform. Indodana will send the Indodana QuickPay user token alongside this information so you know the owner of the token.

transactionDetails*

object

<Transaction> - Detail of the transaction.

customerDetails*

object

<Customer> - Detail of the customer.

sellers*

array

Array of <Seller> - Detail of the sellers involved in the transaction. May contain more than 1 seller.

billingAddress*

object

<Address> - Billing address of the customer for the transaction.

shippingAddress*

string

(Required only for goods, for service / digital product is not required) <Address> - Shipping address of the customer for the transaction.

paymentType*

string

(Required for active Indodana QuickPay user token) Installment options / payment terms chosen by the customer. Possible values: 30_days, 3_months, 6_months, 12_months

approvedNotificationUrl*

string

The URL that will be called by Indodana when the transaction is approved and successful. Must use https://.

cancellationRedirectUrl

string

[Optional] The URL for user to be redirected if transaction's cancelled in Indodana's checkout page. If set, must use https://.

backToStoreUrl*

string

The URL for user to be redirected after completes the checkout process. Must use https://.

expirationAt

string

Timestamp when the transaction expired on merchant's platform.

metadata

object

Key value pair contains additional information of transaction.

couponCodes

Array of String

Coupon Code

All callback URLs (approvedNotificationUrl, cancellationRedirectUrl, backToStoreUrl) must use HTTPS. Requests with http:// URLs will be rejected.

{
  "status": "OK",
  "redirectUrl": "https://quickpay.indodanafinance.co.id/product-installment/quickpay?purchaseTransactionId=aa5023a7-8803-11eb-9b88-7947f72d641d&pid=wat-wat&c=checkout&utm_source=wat-wat&utm_campaign=wat-wat&token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwdXJjaGFzZVRyYW5zYWN0aW9uSWQiOiJhYTUwMjNhNy04ODAzLTExZWItOWI4OC03OTQ3ZjcyZDY0MWQiLCJ1c2VySWQiOiI1ZjUwMDBkMS1mM2NlLTQ4NDgtYWNiNS0xZmM5YzZkZjU2ZTAiLCJpc3MiOiJJTkRPREFOQSIsInNjb3BlIjoiUVVJQ0tQQVkiLCJpYXQiOjE2MTYwODM0ODgsImV4cCI6MTYxNjA4NTI4OH0.tOEOdk44iMxCO8quk2_mvcc4A38oZL3iE0Kdh_zkCmY",
  "transactionId": "aa5023a7-8803-11eb-9b88-7947f72d641d"
}

{
  "status": "ERROR",
  "error": {
    "kind": "GenericValidationError",
    "message": "<Object>"
  }
}

Object Type References

For object specification of Transaction, Customer, Seller, Address, and Metadata can refer to this API reference.

QuickPay User Token Revocation

POST https://{baseUrl}/v1/revoke_user_token

You can revoke the Indodana QuickPay user token from your platform permanently. When token is revoked, the token will be invalid and system will trigger tokenization again on next user checkout from your platform. The token itself can be revoked from your side and Indodana side. So for the integration, we expect you to always save the token from our callback to your system with the purpose to always have the valid token of the user.

* means the parameter is required

Headers

Name

Type

Description

X-User-Token*

string

Indodana QuickPay user token to be revoked

Authorization*

string

The generated authentication signature with format Bearer {api_key}:{nonce}:{signature}

{
    "status": "OK",
    "isActive":false,
    "merchantUserKey": "<merchant user key that has been sent during connect process>"
}

{
    "status": "OK"
}

{
    "status": "ERROR",
    "error": {
        "kind": "Unauthorized",
        "message": "User token is invalid"
    }
}

Object Type References

For object specification of Item, can refer to this API reference.

User QuickPay Eligibility

GET https://{baseUrl}/v2/users/check_eligibility?phoneNumber={phoneNumber}

This API is used to check whether a user is eligible to connect QuickPay or not. Eligible means the user has active PayLater Limit

Headers

Name

Type

Description

Authorization*

String

The generated authentication signature with the format Bearer {api_key}:{nonce}:{signature}

Query Parameters

Pass phoneNumber as a URL query parameter (this is a GET request — do not send it in the request body).

Name

Type

Description

phoneNumber*

String

User Registered Phone Number

{
  "status": "OK",
  "isEligible": true
}

{
  "status": "ERROR",
  "error": {
    "kind": "Unauthorized",
    "message": "Request is unauthorize"
  }
}

User Credit Details

GET https://{baseUrl}/v1/user_details

Once user is tokenized, you can use this API to know about user information details including account status and remaining credit limit.

* means the parameter is required

Headers

Name

Type

Description

X-User-Token*

string

Indodana QuickPay user token

Authorization*

string

The generated authentication signaturee with format Bearer {api_key}:{nonce}:{signature}

{
  "status": "OK",
  "userDetail" : {
        "name" : "Nicholas",
        "email" : "Nicholas@gmail.com",
        "phoneNumber": "+62812xxxx0957",
        "connectedOn": "2021-03-19T17:35:25+0700"
   },
   "creditLimitDetail" : {
        "status" : "ACTIVE",
        "bucketizedCreditLimits":[
            {
                "tenure":"1",
                "limit":5200000,
                "limitBalance":4714166
            },
            {
                "tenure":"3",
                "limit":20800000,
                "limitBalance":18856664
            },
            {
                "tenure":"6",
                "limit":26000000,
                "limitBalance":23570830
            },
            {
                "tenure":"12",
                "limit":31200000,
                "limitBalance":28284996
            },
            {
                "tenure":"18",
                "limit":31200000,
                "limitBalance":28284996
            },
            {
                "tenure":"24",
                "limit":31200000,
                "limitBalance":28284996
            }
        ]
    }
}

{
    "status": "ERROR",
    "error": {
        "kind": "Unauthorized",
        "message": "User token is invalid"
    }
}

Sample API Request and Response

Indodana Connect Account

{
  "merchantUserKey": "+6281221815339",
  "backToStoreUrl": "https://example.merchant/",
  "phoneNumber": "+6281221815339"
}

{
    "status": "OK",
    "requestId": "4dbc33a5-86ee-11eb-a301-cddc223655fd",
    "redirectUrl": "https://quickpay.indodanafinance.co.id/product-installment/connect?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJyZXF1ZXN0SWQiOiI0ZGJjMzNhNS04NmVlLTExZWItYTMwMS1jZGRjMjIzNjU1ZmQiLCJtZXJjaGFudElkIjoiNGZlZjBjY2EtNmE3Ni0xMWU5LWE5MjMtMTY4MWJlNjYzZDNlIiwic2FsdCI6MTYxNTk2NDM2MiwiaWF0IjoxNjE1OTY0MzYyLCJleHAiOjE2MTU5Njc5NjJ9.xWv0CJPUC_saPOIj_gxVYPOSaAY-PV94ZsVL_YRNZoo"
}

Purchase Transaction Checkout

{
    "merchantUserKey": "<MERCHANT-USER-KEY>",
    "transactionDetails": {
      "merchantOrderId": "<MERCHANT-ORDER-ID>",
      "amount": 4500000,
      "items": [
        {
          "id": "<MERCHANT-ITEM-ID>",
          "name": "iPhone 6S",
          "category": "<ITEM-CATEGORY>",
          "price": 4500000,
          "url": "http://merchant.com/phone/iphone-6s",
          "imageUrl": "http://merchant.com/phone/iphone-6s/cover.jpg",
          "type": "Mobile Phone",
          "quantity": 1,
          "parentType": "SELLER",
          "parentId": "<MERCHANT-SELLER-ID>"
        }
      ]
    },
    "customerDetails": {
      "firstName": "First",
      "lastName": "Last",
      "email": "first.last@gmail.com",
      "phone": "081212345678"
    },
    "sellers": [
      {
        "id": "<MERCHANT-SELLER-ID>",
        "name": "Penjual iPhone",
        "url": "https://merchant.com/shop",
        "sellerIdNumber": "<MERCHANT-SELLER-ID-NUMBER>",
        "email": "seller@merchant.com",
        "officialSeller": false,
        "address": {
          "firstName": "Merchant",
          "lastName": "Seller",
          "address": "Kelapa Gading",
          "city": "Jakarta Utara",
          "postalCode": "11240",
          "phone": "081812345678",
          "countryCode": "IDN"
        }
      }
    ],
    "billingAddress": {
      "firstName": "First",
      "lastName": "Last",
      "address": "Tomang",
      "city": "Jakarta Barat",
      "postalCode": "11430",
      "phone": "081987654321",
      "countryCode": "IDN"
    },
    "shippingAddress": {
      "firstName": "First",
      "lastName": "Last",
      "address": "Tomang",
      "city": "Jakarta Barat",
      "postalCode": "11430",
      "phone": "081987654321",
      "countryCode": "IDN"
    },
    "paymentType": "3_months",
    "approvedNotificationUrl": "https://payment-notification.merchant.com/transaction-approval-handler",
    "cancellationRedirectUrl": "https://merchant.com/phone/iphone-6s",
    "backToStoreUrl": "https://merchant.com/phone/iphone-6s",
    "expirationAt": "2019-12-31T18:00:00+07:00"
}

{
  "status": "OK",
  "redirectUrl": "https://quickpay.indodanafinance.co.id/product-installment/quickpay?purchaseTransactionId=aa5023a7-8803-11eb-9b88-7947f72d641d&pid=wat-wat&c=checkout&utm_source=wat-wat&utm_campaign=wat-wat&token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwdXJjaGFzZVRyYW5zYWN0aW9uSWQiOiJhYTUwMjNhNy04ODAzLTExZWItOWI4OC03OTQ3ZjcyZDY0MWQiLCJ1c2VySWQiOiI1ZjUwMDBkMS1mM2NlLTQ4NDgtYWNiNS0xZmM5YzZkZjU2ZTAiLCJpc3MiOiJJTkRPREFOQSIsInNjb3BlIjoiUVVJQ0tQQVkiLCJpYXQiOjE2MTYwODM0ODgsImV4cCI6MTYxNjA4NTI4OH0.tOEOdk44iMxCO8quk2_mvcc4A38oZL3iE0Kdh_zkCmY",
  "transactionId": "aa5023a7-8803-11eb-9b88-7947f72d641d"
}

{
  "status": "OK",
  "redirectUrl": "https://quickpay.indodanafinance.co.id/product-installment/payment?purchaseTransactionId=d820eb22-8802-11eb-9b88-c5e7c9c9cd17&pid=wat-wat&c=checkout&utm_source=wat-wat&utm_campaign=wat-wat&targetTab=Daftar&T38044Flow=false",
  "transactionId": "d820eb22-8802-11eb-9b88-c5e7c9c9cd17"
}

Handling Transaction Confirmation Notification

Note that for this section, the API Request would be the payload that the merchant receives in their endpoint, and the API Response would be the payload that the merchant expected to send to Indodana as acknowledgement.

{
    "amount": 1876000.00,    
    "paymentType": "30_days",
    "transactionStatus": "PAID",
    "merchantOrderId": "<MERCHANT-ORDER-ID>",
    "transactionTime": "2018-12-21T18:18:18+07:00",
    "transactionId": "<INDODANA-TRANSACTION-ID>"
}

{
  "status":"OK",
  "message":"Message from merchant if any"
}

{
  "status":"REJECT",
  "message":"Message from merchant if any"
}

Get Payment Calculation

{
  "amount": 4500000,
  "items": [
    {
      "id": "<MERCHANT-ITEM-ID>",
      "name": "iPhone 6S",
      "category": "<ITEM-CATEGORY>",
      "price": 4500000,
      "url": "http://merchant.com/phone/iphone-6s",
      "imageUrl": "http://merchant.com/phone/iphone-6s/cover.jpg",
      "type": "Mobile Phone",
      "quantity": 1,
      "parentType": "SELLER",
      "parentId": "<MERCHANT-SELLER-ID>"
    }
  ]
}

{
  "status": "OK",
  "payments": [
    {
      "amount": 4560000,
      "installmentAmount": 7848000,
      "monthlyInstallment": 327000,
      "tenure": 24,
      "tenureTimeUnit": "MONTH",
      "totalInterest": 3288000,
      "provision": 60000,
      "paymentType": "Bayar dalam 24 bulan",
      "rate": 3,
      "id": "24_months",
      "merchantDiscountRate": 450000,
      "totalTransactionAmount": 4500000,
      "currentAvailableLimitBalance": 28284996,
      "isEligible": true
    },
    {
      "amount": 4554000,
      "installmentAmount": 7020000,
      "monthlyInstallment": 390000,
      "tenure": 18,
      "tenureTimeUnit": "MONTH",
      "totalInterest": 2466000,
      "provision": 54000,
      "paymentType": "Bayar dalam 18 bulan",
      "rate": 3,
      "id": "18_months",
      "merchantDiscountRate": 450000,
      "totalTransactionAmount": 4500000,
      "currentAvailableLimitBalance": 28284996,
      "isEligible": true
    },
    {
      "amount": 4548000,
      "installmentAmount": 6192000,
      "monthlyInstallment": 516000,
      "tenure": 12,
      "tenureTimeUnit": "MONTH",
      "totalInterest": 1644000,
      "provision": 48000,
      "paymentType": "Bayar dalam 12 bulan",
      "rate": 3,
      "id": "12_months",
      "merchantDiscountRate": 450000,
      "totalTransactionAmount": 4500000,
      "currentAvailableLimitBalance": 28284996,
      "isEligible": true
    },
    {
      "amount": 4548000,
      "installmentAmount": 5370000,
      "monthlyInstallment": 895000,
      "tenure": 6,
      "tenureTimeUnit": "MONTH",
      "totalInterest": 822000,
      "provision": 48000,
      "paymentType": "Bayar dalam 6 bulan",
      "rate": 3,
      "id": "6_months",
      "merchantDiscountRate": 450000,
      "totalTransactionAmount": 4500000,
      "currentAvailableLimitBalance": 23570830,
      "isEligible": true
    },
    {
      "amount": 4545000,
      "installmentAmount": 4956000,
      "monthlyInstallment": 1652000,
      "tenure": 3,
      "tenureTimeUnit": "MONTH",
      "totalInterest": 411000,
      "provision": 45000,
      "paymentType": "Bayar dalam 3 bulan",
      "rate": 3,
      "id": "3_months",
      "merchantDiscountRate": 450000,
      "totalTransactionAmount": 4500000,
      "currentAvailableLimitBalance": 18856664,
      "isEligible": true
    }
  ]
}

{
  "status": "OK",
  "payments": [
    {
      "amount": 4560000,
      "installmentAmount": 7848000,
      "monthlyInstallment": 327000,
      "tenure": 24,
      "tenureTimeUnit": "MONTH",
      "totalInterest": 3288000,
      "provision": 60000,
      "paymentType": "Bayar dalam 24 bulan",
      "rate": 3,
      "id": "24_months",
      "merchantDiscountRate": 450000,
      "totalTransactionAmount": 4500000
    },
    {
      "amount": 4554000,
      "installmentAmount": 7020000,
      "monthlyInstallment": 390000,
      "tenure": 18,
      "tenureTimeUnit": "MONTH",
      "totalInterest": 2466000,
      "provision": 54000,
      "paymentType": "Bayar dalam 18 bulan",
      "rate": 3,
      "id": "18_months",
      "merchantDiscountRate": 450000,
      "totalTransactionAmount": 4500000
    },
    {
      "amount": 4548000,
      "installmentAmount": 6192000,
      "monthlyInstallment": 516000,
      "tenure": 12,
      "tenureTimeUnit": "MONTH",
      "totalInterest": 1644000,
      "provision": 48000,
      "paymentType": "Bayar dalam 12 bulan",
      "rate": 3,
      "id": "12_months",
      "merchantDiscountRate": 450000,
      "totalTransactionAmount": 4500000
    },
    {
      "amount": 4548000,
      "installmentAmount": 5370000,
      "monthlyInstallment": 895000,
      "tenure": 6,
      "tenureTimeUnit": "MONTH",
      "totalInterest": 822000,
      "provision": 48000,
      "paymentType": "Bayar dalam 6 bulan",
      "rate": 3,
      "id": "6_months",
      "merchantDiscountRate": 450000,
      "totalTransactionAmount": 4500000
    },
    {
      "amount": 4545000,
      "installmentAmount": 4956000,
      "monthlyInstallment": 1652000,
      "tenure": 3,
      "tenureTimeUnit": "MONTH",
      "totalInterest": 411000,
      "provision": 45000,
      "paymentType": "Bayar dalam 3 bulan",
      "rate": 3,
      "id": "3_months",
      "merchantDiscountRate": 450000,
      "totalTransactionAmount": 4500000
    }
  ]
}

Callback User Token

This step is used to retrieve the Indodana QuickPay user token from callback after the authorization from user already completed.

You need to inform us the URL to be registered on Indodana side. After successful store token in your system, you need to response with status code 200 like defined in the response example tab below to acknowledge the token.

{
  "type": "INDODANA_QUICKPAY_USER_TOKEN",
  "data": {
    "requestId": "<requestId>",
    "merchantUserKey": "<merchantUserKey>",
    "token": "<token>",
    "isActive": true
  }
}

{
  "status":"OK",
  "message":"Message from merchant if any"
}

{
  "status":"REJECT",
  "message":"Message from merchant if any"
}

Revoke User Token Callback

When a user revokes the QuickPay connection from the Indodana app, Indodana sends a POST request to your registered userTokenRevokeCallbackUrl so you can mark the stored token inactive on your side. Acknowledge with a 200 response, then stop using the token and re-tokenize on the user's next checkout.

{
  "type": "INDODANA_QUICKPAY_USER_REVOKED_TOKEN",
  "data": {
    "requestId": "6f1a2c48-7b1e-4a3d-9f10-3c9b7f2ab001",
    "merchantUserKey": "MERCHANT-USER-12345",
    "token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
    "isActive": false
  }
}

{
  "status": "OK",
  "message": "Token deactivated"
}

Security Best Practices

First follow the general Security Best Practices that apply to every Indodana integration — verifying inbound callback signatures, protecting your secret key, TLS, IP allowlisting, and not using SSL/certificate pinning. The items below are specific to QuickPay's stored user token.

Protect the stored user token

The QuickPay userToken is long-lived and lets you initiate seamless checkouts for that user, so treat it as a sensitive credential:

Store it encrypted at rest — never in plaintext.
Keep it server-side only — never expose it to the browser or client-side code.
Restrict and audit access to the token store.

Fail closed on revocation

When you receive a revoke callback on userTokenRevokeCallbackUrl, or when any API call returns 401 "User token is invalid", immediately mark the stored token inactive and trigger re-tokenization on the user's next checkout. Never keep using a token after the user has disconnected.

PreviousQRIS Transaction API

NextPoS Transaction API

Last updated 2 days ago