// npm i express body-parser
const express = require('express');
const app = express();
app.use(express.json());

app.post('/webhook', (req, res) => {
  const evt = req.body?.event;
  if (evt !== 'transaction.updated') return res.status(400).send('invalid event');
  // TODO: validate signature header and persist to DB
  // console.log('webhook:', req.body);
  res.send('ok');
});

app.listen(3000, () => console.log('Webhook listening on :3000'));

from flask import Flask, request, jsonify
app = Flask(__name__)

@app.post('/webhook')
def webhook():
    data = request.get_json(silent=True) or {}
    if data.get('event') != 'transaction.updated':
        return ('invalid event', 400)
    # TODO: verify signature and persist
    return jsonify({'ok': True})

if __name__ == '__main__':
    app.run(port=3000)

<?php
// composer require guzzlehttp/guzzle
use GuzzleHttp\Client;

$client = new Client(['base_uri' => '<?= e($apiBase) ?>']);
$resp = $client->post('/transactions', [
  'headers' => ['X-API-Key' => '<API_KEY>'],
  'json' => [
    'operator' => 'bkash', 'request_type' => 'cash_in', 'amount' => 34.00, 'recipient' => '01710000000'
  ]
]);
echo $resp->getBody();

// Get
$resp2 = $client->get('/transactions/TXN2025010112300001234', [
  'headers' => ['X-API-Key' => '<API_KEY>']
]);
echo $resp2->getBody();
?>

// npm i axios
const axios = require('axios');
const api = axios.create({ baseURL: 'https://bd-prm.q-bdpay.com/public/api/v1', headers: { 'X-API-Key': '<API_KEY>' } });

async function run() {
  const create = await api.post('/transactions', { operator:'bkash', request_type:'cash_in', amount:34.00, recipient:'01710000000' });
  console.log(create.data);
  const txid = create.data.transaction_id;
  const get = await api.get(`/transactions/${txid}`);
  console.log(get.data);
}
run().catch(console.error);

import requests
BASE = 'https://bd-prm.q-bdpay.com/public/api/v1'
H = { 'X-API-Key': '<API_KEY>', 'Content-Type': 'application/json' }

r = requests.post(f"{BASE}/transactions", json={
  'operator':'bkash', 'request_type':'cash_in', 'amount':34.0, 'recipient':'01710000000'
}, headers=H)
print(r.json())

txid = r.json().get('transaction_id')
g = requests.get(f"{BASE}/transactions/{txid}", headers={'X-API-Key': '<API_KEY>'})
print(g.json())

// OkHttp (implementation 'com.squareup.okhttp3:okhttp:4.11.0')
OkHttpClient client = new OkHttpClient();
String json = "{\"operator\":\"bkash\",\"request_type\":\"cash_in\",\"amount\":34.0,\"recipient\":\"01710000000\"}";
Request req = new Request.Builder()
  .url("https://bd-prm.q-bdpay.com/public/api/v1/transactions")
  .addHeader("X-API-Key", "")
  .post(RequestBody.create(json, MediaType.get("application/json")))
  .build();
Response res = client.newCall(req).execute();
System.out.println(res.body().string());

using System.Net.Http;
using System.Text;
using System.Threading.Tasks;

var http = new HttpClient();
http.DefaultRequestHeaders.Add("X-API-Key", "");
var content = new StringContent("{\"operator\":\"bkash\",\"request_type\":\"cash_in\",\"amount\":34.0,\"recipient\":\"01710000000\"}", Encoding.UTF8, "application/json");
var res = await http.PostAsync("https://bd-prm.q-bdpay.com/public/api/v1/transactions", content);
var body = await res.Content.ReadAsStringAsync();
Console.WriteLine(body);