헥토파이낸셜 개발자센터

Mobile Payment Hybrid Capture API

The Hybrid Capture method performs authentication only in the checkout, while the capture is requested separately from the merchant server. Authentication and capture can be processed independently.

Test Key Information

API Information

POST/spay/APIService.do
Content-Typeapplication/json
테스트https://tbgw.settlebank.co.kr/spay/APIService.do
운영https://gw.settlebank.co.kr/spay/APIService.do

Important Notes

NOTE

Hybrid Capture Flow

1) Authentication request in the checkout (linkMethod='HBRD') → 2) Authentication success response (outStatCd='0061') → 3) Capture request using this API
  • Set the linkMethod parameter to HBRD when making the checkout request.
  • On authentication success, outStatCd returns 0061.
  • Use the trdNo returned upon authentication success as authTrdNo when requesting capture.
  • The merchant order number (mchtTrdNo) must be the same value used in the authentication request.

Request Parameters

타입 표기법
N숫자A영문H한글AN영문+숫자AHN영문+한글+숫자
예: AN(10) = 영문+숫자, 최대 10byte

params Object

└mchtIdAN(10)Alphanumeric, up to 10 bytes*
Unique merchant ID assigned by Hecto Financial
nxhp_sb_hd: Hybrid Capture sandbox
└verAN(4)Alphanumeric, up to 4 bytes*
Message version
*Fixed value
└methodA(2)Alphabetic, up to 2 bytes*
Payment method
*Fixed value (MP: Mobile Payment)
└bizTypeAN(2)Alphanumeric, up to 2 bytes*
Business type code
B0: Payletter resale approval B2: Hecto Financial original approval
*B0: Payletter resale approval, B2: Hecto Financial original approval
└encCdN(2)Numeric, up to 2 bytes*
Encryption type code
*Fixed value
└mchtTrdNoAN(100)Alphanumeric, up to 100 bytes*
Unique order number generated by the merchant (must match the value used in the authentication request)
└trdDtN(8)Numeric, up to 8 bytes*
Request date (YYYYMMDD)
└trdTmN(6)Numeric, up to 6 bytes*
Request time (HHMMSS)
└mobileYnA(1)Alphabetic, up to 1 bytes
Mobile indicator
Y: Mobile web/app N: PC or other
└osTypeA(1)Alphabetic, up to 1 bytes
OS type
A: Android I: iOS W: Windows M: Mac E: Other

data Object

└pktHashAN(64)Alphanumeric, up to 64 bytes*SHA-256(실시간 생성)
Hash value generated using SHA256
NOTE

Hash Generation Combination

trdDt + trdTm + mchtId + mchtTrdNo + trdAmt (plaintext) + hashKey
└phoneNoN(11)Numeric, up to 11 bytesAES-256AES-256/ECB/PKCS5Padding + Base64
Customer mobile phone number
└telCoA(3)Alphabetic, up to 3 bytesAES-256AES-256/ECB/PKCS5Padding + Base64
Carrier
SKT: SK Telecom KTF: KT LGT: LG U+ CJH: CJ Hello Mobile KCT: Korea Cable Telecom SKL: SK 7Mobile
└emailAN(60)Alphanumeric, up to 60 bytes
Customer email address
└mUserIdAHN(50)Alphanumeric + Korean, up to 50 bytes
Merchant customer ID
└crcCdA(3)Alphabetic, up to 3 bytes*
Currency code
*Fixed value
└trdAmtN(12)Numeric, up to 12 bytes*AES-256AES-256/ECB/PKCS5Padding + Base64
Transaction amount
└prdtNmAHN(128)Alphanumeric + Korean, up to 128 bytes*
Product name
└sellerNmAHN(128)Alphanumeric + Korean, up to 128 bytes
Seller name
└ordNmAHN(30)Alphanumeric + Korean, up to 30 bytes
Orderer name
└getBillKeyYnA(1)Alphabetic, up to 1 bytes
Bill key issuance flag
Y: Issue bill key Other: Do not issue bill key
└authTrdNoAN(40)Alphanumeric, up to 40 bytes*
Transaction number returned by Hecto Financial upon authentication success
└linkMethodAN(12)Alphanumeric, up to 12 bytes*
Integration method code
*Fixed value
└notiUrlAN(250)Alphanumeric, up to 250 bytes*
URL of the endpoint to receive payment results (server-to-server webhook URL)
└mchtParamAHN(4000)Alphanumeric + Korean, up to 4000 bytes
Merchant reserved field

Response Parameters

타입 표기법
N숫자A영문H한글AN영문+숫자AHN영문+한글+숫자
예: AN(10) = 영문+숫자, 최대 10byte

params Object

└mchtIdAN(10)Alphanumeric, up to 10 bytes*nxhp_sb_hd
Merchant ID
└verAN(4)Alphanumeric, up to 4 bytes*0A19
Message version
└methodA(2)Alphabetic, up to 2 bytes*MP
Payment method
└bizTypeAN(2)Alphanumeric, up to 2 bytes*B0
Business type code
└encCdN(2)Numeric, up to 2 bytes*23
Encryption type code
└mchtTrdNoAN(100)Alphanumeric, up to 100 bytes*ORDER20211231100000
Merchant order number
└trdNoAN(40)Alphanumeric, up to 40 bytes*STFP_PGMPnxhp_sb_hd0211129135810M1494620
Hecto Financial transaction number
└trdDtN(8)Numeric, up to 8 bytes*20211231
Request date (YYYYMMDD)
└trdTmN(6)Numeric, up to 6 bytes*100000
Request time (HHMMSS)
└outStatCdAN(4)Alphanumeric, up to 4 bytes*0021
Transaction status code (success/failure)
0021: Success 0031: Failure
└outRsltCdAN(4)Alphanumeric, up to 4 bytes*0000
Result code
└outRsltMsgAHN(200)Alphanumeric + Korean, up to 200 bytes*Processed successfully.
Result message

data Object

└pktHashAN(64)Alphanumeric, up to 64 bytes*f395b6725a9a18...
Hash value from the request, returned as-is
└phoneNoN(11)Numeric, up to 11 bytesAES-256AES-256/ECB/PKCS5Padding01012341234
Customer mobile phone number
*실제 응답값은 AES-256 암호화된 값입니다. 복호화 후 사용하세요.
└telCoA(3)Alphabetic, up to 3 bytesAES-256AES-256/ECB/PKCS5PaddingSKT
Carrier
*실제 응답값은 AES-256 암호화된 값입니다. 복호화 후 사용하세요.
└trdAmtN(12)Numeric, up to 12 bytes*AES-256AES-256/ECB/PKCS5Padding1000
Transaction amount
*실제 응답값은 AES-256 암호화된 값입니다. 복호화 후 사용하세요.
└getBillKeyYnA(1)Alphabetic, up to 1 bytes
Bill key issuance flag
Y: Bill key issued Other: Bill key not issued
└billKeyAN(50)Alphanumeric, up to 50 bytesMO0123456789
Bill key issued by Hecto Financial (used from the 2nd payment onwards)
💬

Need technical support?