Merchant’s system should follow the below rules when calling iOnline Pay’s API.
| Data Transfer | All data are transferred via secure socket layer (HTTPS) |
|---|---|
| Request Method | POST |
| Data Format |
For Payment API and Query API, all request parameters should be submitted by HTTP POST with Form-Data format while all response parameters are returned as a JSON string. For Payment Result Notification, the data format is XML and root node name is "xml". |
| Charset | UTF-8 |
| Signature Algorithm | MD5. RSA2 will be supported in the future. |
| Security Specification | All request data must be signed with specific Signing algorithm and all response data must be verified by checking the signature. For details, please check "Security Specification" section. |