The Unified API for
Cambodia's Banking Network

const crypto = require('crypto');

// Your credentials from dash.baray.io
const API_KEY = 'bry_live_xxxxxxxxxxxx';
const SK = 'Base64EncodedSecretKey32Bytes...';
const IV = 'Base64EncodedIV16Bytes...';

// Encrypt payload for API request
function encrypt(payload) {
  const key = Buffer.from(SK, 'base64');
  const ivBuffer = Buffer.from(IV, 'base64');
  const cipher = crypto.createCipheriv('aes-256-cbc', key, ivBuffer);
  let encrypted = cipher.update(JSON.stringify(payload), 'utf8');
  encrypted = Buffer.concat([encrypted, cipher.final()]);
  return encrypted.toString('base64');
}

// Decrypt webhook response
function decrypt(encryptedData) {
  const key = Buffer.from(SK, 'base64');
  const ivBuffer = Buffer.from(IV, 'base64');
  const decipher = crypto.createDecipheriv('aes-256-cbc', key, ivBuffer);
  let decrypted = decipher.update(Buffer.from(encryptedData, 'base64'));
  decrypted = Buffer.concat([decrypted, decipher.final()]);
  return decrypted.toString('utf8');
}

// Create payment intent
const payload = { amount: '10.00', currency: 'USD', order_id: 'ORDER-12345' };
const response = await fetch('https://api.baray.io/pay', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json', 'x-api-key': API_KEY },
  body: JSON.stringify({ data: encrypt(payload) })
});
const { _id: intentId } = await response.json();
redirect(`https://pay.baray.io/${intentId}`);

// Handle webhook
app.post('/webhook/baray', (req, res) => {
  const orderId = decrypt(req.body.encrypted_order_id);
  // Update order status
  res.status(200).send('OK');
});