Payment Flow

Konco memproses pembayaran via MonitPay payment gateway (aktif). Duitku SDK ada di dependency tapi route callback-nya dikomentari. Alur payment mencakup topup spend cap, withdraw/refund, dan transfer balance — sebagian via admin request workflow, sebagian via API engine langsung.

Arsitektur payment

Member action (topup/withdraw/refund)
  │
  ▼
OrderService / PaymentService (dazo-whitelist)
  │
  ├─ Create Order (flag: pending)
  │
  ├─ Request ke MonitPay
  │   └─ MonitpayService::requestPayment(...)
  │
  ▼
Member redirect ke MonitPay payment page
  │
  ▼ (payment success/fail di MonitPay side)
  │
  ┌──────────────────────────────────────────────┐
  │  MonitPay callback (webhook)                  │
  │  POST /api/monitpay/callback                  │
  │  → MonitpayController::callback               │
  │  → validasi signature                         │
  │  → update Order flag: paid                    │
  │  → log ke WebhookLog                          │
  └────────────┬─────────────────────────────────┘
               │
               ▼
  monitpay:sync (every 2 minutes)
  ├─ Sync status transaksi yang masih pending
  ├─ Update flag order bila callback tertunda
  └─ Timeout 5 menit via withoutOverlapping(5)
               │
               ▼
  Order flag: paid
  ├─ Topup spend cap
  │   └─ AdminRequestService → Admin approval
  │       └─ Approved → MyApi::post('/api/account/topup')
  │           └─ API engine → FacebookApiService → Meta Graph
  │
  ├─ Withdraw / Refund
  │   └─ AdminRequestService → Admin approval
  │       └─ Approved → MyApi::post('/api/account/withdraw' | '/refund')
  │
  └─ Transfer Balance (antar akun member)
      └─ API engine: /api/transfer-balance
          └─ TransferBalanceService (atomic)

MonitPay (aktif)

Komponen

Callback flow

MonitPay server
  │
  │  POST /api/monitpay/callback
  │  Body: { payment data + signature }
  ▼
MonitpayController::callback
  │
  ├─ Validasi signature HMAC (dari config monitpay)
  ├─ Lookup order by reference
  ├─ Update order.flag = 'paid' (bila success)
  ├─ Log ke WebhookLog (audit trail)
  └─ Return acknowledgement ke MonitPay

Sync scheduler

// app/Console/Kernel.php
$schedule->command('monitpay:sync')
    ->everyTwoMinutes()
    ->withoutOverlapping(5) // Timeout 5 menit jika stuck
    ->runInBackground()
    ->onSuccess(fn () => Log::info('MonitPay sync completed successfully'))
    ->onFailure(fn () => Log::error('MonitPay sync failed or timeout'));

Sandbox (dev only)

Duitku (nonaktif)

Topup spend cap

Alur topup spend cap iklan Facebook:

1. Member request topup via UI — create Order (OrderTopup type, flag=pending)
2. Payment via MonitPay — redirect ke payment page
3. Callback/sync — update Order.flag=paid
4. Admin approval — create AdminRequest untuk approval topup
5. Admin approve — AdminRequestService trigger MyApi::post('/api/account/topup', [...])
6. API engine — AccountController::topupSpendCap → FacebookApiService → Meta Graph API (update spend cap)
7. Audit — WebhookLog + AdminRequestHistory

Withdraw / Refund

Alur penarikan sisa saldo spend cap:

1. Member request withdraw/refund via UI — create Order (OrderWithdraw type, flag=pending)
2. Admin approval — AdminRequest untuk approval withdraw
3. Admin approve — AdminRequestService trigger:
   • MyApi::post('/api/account/withdraw', [...]) → kurangi spend cap di Facebook
   • MyApi::post('/api/account/refund', [...]) → refund saldo (bila ada)
4. API engine — AccountController::withdrawSpendCap / refundSpendCap → Meta Graph API
5. Payout ke member — transfer bank manual atau via payment gateway

Transfer balance antar-akun

Alur transfer saldo dari satu akun iklan member ke akun lain:

1. Member request transfer via UI — create Order (OrderTransferBalance type)
2. Admin approval — AdminRequest approval
3. Admin approve — MyApi::post('/api/transfer-balance', [...])
4. API engine — TransferBalanceController::store → TransferBalanceService (atomic):
   • Cek saldo riil akun sumber di Facebook (/api/account/balance)
   • Deduct dari akun sumber (/api/account/withdraw)
   • Topup ke akun tujuan (/api/account/topup)
   • Record di TransferBalance + TransferBalanceDetail
5. Queue job — TransferBalanceJob (background) bila operasi perlu async

Endpoint transfer balance

Admin Request workflow

Topup/withdraw/refund/transfer semuanya via admin request approval workflow:

Tipe admin request

Invoice & billing

Webhook logging

Setiap callback payment gateway di-log ke tabel WebhookLog:

Admin dapat melihat log via route admin.webhook_logs.*.

Order flag lifecycle

Scheduler terkait

Langkah berikutnya

• Detail MonitPay & service eksternal lain? Lihat External Services.
• Detail Admin Request workflow? Baca Conventions.
• Endpoint API engine detail? Lihat API Reference.