Payments API

The two endpoints

POST https://<payments-worker>/create-order
Content-Type: application/json        (no Authorization header)
{
  "amount": 5,                       // in currency units, not paise
  "currency": "USD",                 // defaults to USD
  "gameId": "my-game", "gameName": "My Game",
  "developerUid": "...", "developerName": "...",
  "userId": "...", "userEmail": "...", "country": "IN"
}

200 {
  "keyId":   "rzp_live_...",         // publishable key, safe for the browser
  "orderId": "order_...",
  "amount":  500,                    // paise: amount x 100
  "currency": "USD"
}

400 { "error": "Donation amount must be between $1 and $15,000." }
502 { "error": "<Razorpay's own description>" }

Verifying the payment

• The expected signature is HMAC-SHA256 over "<order_id>|<payment_id>" keyed with the secret.
• The comparison is length-checked and constant-time on the worker side.
• The worker returns the identifiers you sent back to you; it does not record the donation itself.
• Nothing here is authenticated, so the caller must be the one completing checkout.

POST https://<payments-worker>/verify-payment
{
  "razorpay_order_id":   "order_...",
  "razorpay_payment_id": "pay_...",
  "razorpay_signature":  "<hex>",
  "gameId": "my-game", "userId": "..."
}

200 { "ok": true, "orderId": "order_...", "paymentId": "pay_...", ... }
400 { "ok": false, "error": "Missing Razorpay payment verification fields." }
400 { "ok": false, "error": "Invalid Razorpay signature." }

Limits and sanitising

• Amounts are rounded to two decimals before the range check.
• Currency is upper-cased and trimmed to three characters.
• Free-text fields are whitespace-collapsed and truncated: names and ids to 80, emails to 120, country to 8.
• A receipt is generated as don_<timestamp>_<8-char uuid>.

What payments does not include

There is no paid download, no in-app purchase, no subscription and no price field on a listing. The store's own monetisation is a visit-based payout model, and that number is computed from analytics, not from a payment processor.