Brief technical talk about Cash Payment/Direct Debit integration with FPX, Maybank2u and RHB Now. Talk given in WebcampKL Koko Crunch 25th September 2013. https://www.facebook.com/events/540066812734190/

1. CASH PAYMENT
in MALAYSIA
#wckl koko crunch
WARNING: highly technical

2. @arzumy

3. SAYS

4. GROUPON

5. GROUPON
ipay88
maybank2u

6. billplz

7. billplz
fpx
rhb now

8. FPX, MAYBANK2U & RHB NOW

9. requirements workflow
features
API calls
why

10. WHY CASH PAYMENT

11. DISCLAIMER!

12. TECH REQUIREMENTS

13. FPX
java public ip*
*not really
web app

14. ssl public ip*
*not really, if you can convince them
web app
MAYBANK2U

15. public ip*
*not really
web app
RHB NOW

16. GENERAL WORKFLOW
reading drive c:

17. FPX
our app fpx bank
java daemon
browser

18. our app maybank2u
browser
MAYBANK2U

19. our app rhb now
browser
RHB NOW

20. FEATURE: SANDBOX

21. FPX M2U RHB
Y Y Y
IP
whitelist
Office
hour
make sure your account
manager is online

22. FEATURE: REQUERY

23. FPX M2U RHB
Y Y Y
beg & steal
browser
only
N

24. FEATURE: SECURITY

25. FPX M2U RHB
obscurity
&
trust
hashed
request
signed
xml

26. PEEK AT THE API CALLS

27. FPX
message:request|message.type:AR|message.token:01|
message.orderno:720136345498125710....
<?xml version="1.0" encoding="UTF- 8"?
><SELLER_FPX_REQ><MESG_TYPE>AR</MESG_TYPE><MESG_T
OKEN>01</MESG_TOKEN>....
POST ?MsgToFpx=<?xml version="1.0" encoding="UTF-
8"?><SELLER_FPX_REQ><MESG_TYPE>AR</
MESG_TYPE><MESG_T OKEN>01</MESG_TOKEN>....
...and repeat string manipulation

28. GET ?sendString=Login$111$1$125.00$1$ABC1234$$$https://XYZ/...
response
MAYBANK2U
?transDate=2009-11-26T18:10:36.195+08:00&status=00&transAmo...
request

29. FORM POST
response
request
RHB NOW
FORM POST

30. OTHER MISC STUFF
THAT I CAN THINK OF
ON THE SPOT
IF WE HAVE TIME

31. HELP THE COMMUNITY
@arzumy