Apinganhang API v1

Base URL

https://client.apinganhang.net/api/v1

Auth Header

Authorization: Bearer eyJhbGci...

Login

curl -X POST https://client.apinganhang.net/api/v1/auth/login.php \
  -H "Content-Type: application/json" \
  -d '{"username":"demo","password":"123456"}'Copy

200 Response:

{
  "success": true,
  "token": "eyJhbGci...",
  "user": {
    "id": 5,
    "username": "demo",
    "email": "[email protected]",
    "money": 150000,
    "time_momo": 1788998400
  }
}

Profile

curl https://client.apinganhang.net/api/v1/auth/profile.php \
  -H "Authorization: Bearer <token>"Copy

200 Response:

{
  "success": true,
  "data": {
    "id": 5,
    "username": "demo",
    "email": "[email protected]",
    "money": 150000,
    "time_momo": 1788998400,
    "token": "eyJhbGci...",
    "id_telegram": 123456789
  }
}

List Accounts

curl "https://client.apinganhang.net/api/v1/accounts/index.php?bank=MBBANK" \
  -H "Authorization: Bearer <token>"Copy

200 Response:

{
  "success": true,
  "data": [
    {
      "id": 268,
      "bank_code": "MBBANK",
      "account_number": "0368492618",
      "holder_name": "NGUYEN VAN A",
      "balance": 19437345,
      "active": 1
    }
  ]
}

Connect OTP — Step 1

curl -X POST https://client.apinganhang.net/api/v1/accounts/connect.php \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{
    "action": "request_otp",
    "bank_code": "BIDV",
    "login_id": "bidv_user",
    "password": "bidv_pass",
    "account_number": "8877172056"
  }'Copy

200

{
  "success": true,
  "step": "otp_required",
  "message": "Mã OTP đã được gửi đến SĐT"
}

Connect OTP — Step 2

curl -X POST https://client.apinganhang.net/api/v1/accounts/connect.php \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{
    "action": "verify_otp",
    "bank_code": "BIDV",
    "login_id": "bidv_user",
    "password": "bidv_pass",
    "account_number": "8877172056",
    "otp": "123456"
  }'Copy

200

{
  "success": true,
  "step": "done",
  "message": "Xác thực OTP thành công",
  "data": { "id": 68, "bank_code": "BIDV" }
}

Transactions

# 20 giao dịch mới nhất
curl "https://client.apinganhang.net/api/v1/transactions/index.php?limit=20" \
  -H "Authorization: Bearer <token>"

# Lọc theo bank + ngày
curl "https://client.apinganhang.net/api/v1/transactions/index.php?\
bank=MBBANK&date_from=2026-04-01&date_to=2026-04-16" \
  -H "Authorization: Bearer <token>"

# Tìm kiếm
curl "https://client.apinganhang.net/api/v1/transactions/index.php?\
search=INV2026001&type=INCOME" \
  -H "Authorization: Bearer <token>"Copy

200

{
  "success": true,
  "data": [
    {
      "id": 25533,
      "amount": 1000000,
      "bank": "MBBANK",
      "ref_no": "FT26105370000088",
      "description": "NGUYEN VAN A CK",
      "type": "in",
      "account": "0368492618",
      "balance_after": 19437345,
      "transaction_time": "15/04/2026 09:30:00",
      "created_at": 1776395400
    }
  ],
  "pagination": {
    "page": 1, "limit": 20,
    "total": 150, "total_pages": 8
  },
  "totals": {
    "total_in": 5000000,
    "total_out": 2000000,
    "net": 3000000
  }
}

Xác minh thanh toán (PHP)

<?php
$token = 'YOUR_TOKEN';
$base  = 'https://client.apinganhang.net/api/v1';
$order = 'INV20260416001';
$expect = 500000;

$url = "$base/transactions/index.php?" .
  http_build_query([
    'search' => $order,
    'type'   => 'INCOME',
    'limit'  => 10,
  ]);

$ch = curl_init($url);
curl_setopt_array($ch, [
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer $token",
  ],
  CURLOPT_TIMEOUT => 15,
]);
$res = json_decode(curl_exec($ch), true);
curl_close($ch);

foreach ($res['data'] ?? [] as $txn) {
  if (
    abs($txn['amount']) === $expect &&
    stripos($txn['description'], $order) !== false
  ) {
    echo "Paid! ref={$txn['ref_no']}\n";
    break;
  }
}
?>Copy

Xác minh thanh toán (Node.js)

const axios = require('axios');
const TOKEN = 'YOUR_TOKEN';
const BASE = 'https://client.apinganhang.net/api/v1';

async function verify(order, amount, bank) {
  const { data } = await axios.get(
    `${BASE}/transactions/index.php`,
    {
      params: { search: order, type: 'INCOME', limit: 10, bank },
      headers: { Authorization: `Bearer ${TOKEN}` },
    }
  );
  return (data.data || []).find(t =>
    Math.abs(t.amount) === amount &&
    (t.description || '').toLowerCase()
      .includes(order.toLowerCase())
  );
}

verify('INV20260416001', 500000, 'MBBANK')
  .then(m => console.log(m ? 'Paid' : 'Pending'));Copy

Webhook Callback Payload

POST https://your-site.com/payment/callback
Content-Type: application/json

{
  "event": "transaction.confirmed",
  "order_code": "INV20260416001",
  "amount": 500000,
  "bank": "MBBANK",
  "trans_id": "FT26105370000088",
  "account": "0368492618",
  "paid_at": 1776395400,
  "sign": "hmac_sha256(secret, ...)"
}

Verify Webhook Signature (PHP)

<?php
$secret = 'YOUR_SECRET';
$body = json_decode(
  file_get_contents('php://input'), true
);
$expected = hash_hmac('sha256',
  implode('|', [
    $body['order_code'],
    $body['amount'],
    $body['trans_id'],
    $body['paid_at'],
  ]),
  $secret
);
if (!hash_equals($expected, $body['sign'])) {
  http_response_code(403);
  die('Invalid signature');
}
echo json_encode(['received' => true]);
?>Copy

Site Settings

curl https://client.apinganhang.net/api/v1/services/site-settings.php \
  -H "Authorization: Bearer <token>"Copy

200

{
  "success": true,
  "data": {
    "title": "API Ngân hàng",
    "description": "Hệ thống API ngân hàng...",
    "logo": "https://client.apinganhang.net/public/assets/img/logo.png",
    "hotline": "0123456789",
    "link_facebook": "https://...",
    "link_zalo": ""
  }
}

Bank Packages

curl https://client.apinganhang.net/api/v1/services/packages.php \
  -H "Authorization: Bearer <token>"Copy

200

{
  "success": true,
  "data": [
    {
      "id": 1,
      "bank_code": "MBBANK",
      "name": "MB Bank API",
      "price": 50000,
      "features": "Thông báo GD, lấy số dư",
      "active": 1
    }
  ]
}