's'

app/digital/lib/payment/xorpayStatus.ts

@@ -0,0 +1,49 @@
+import { createHash } from "crypto";
+
+const XORPAY_AID = process.env.XORPAY_AID || "8220";
+const XORPAY_SECRET =
+  process.env.XORPAY_SECRET || "afcacd99570945f88de62624aaa3578e";
+const XORPAY_QUERY_URL =
+  process.env.XORPAY_QUERY_URL || "https://xorpay.com/api/query2";
+
+export async function queryXorPayOrderStatus(
+  orderId: string,
+  timeoutMs = 5000
+): Promise<{ paid: boolean; status?: string; error?: string; url: string } | null> {
+  const normalizedOrderId = orderId.trim();
+  if (!normalizedOrderId || !XORPAY_AID || !XORPAY_SECRET) {
+    return null;
+  }
+
+  const sign = createHash("md5")
+    .update(`${normalizedOrderId}${XORPAY_SECRET}`, "utf8")
+    .digest("hex")
+    .toLowerCase();
+
+  const url = new URL(
+    `${XORPAY_QUERY_URL.replace(/\/$/, "")}/${encodeURIComponent(XORPAY_AID)}`
+  );
+  url.searchParams.set("order_id", normalizedOrderId);
+  url.searchParams.set("sign", sign);
+
+  try {
+    const res = await fetch(url.toString(), {
+      cache: "no-store",
+      signal: AbortSignal.timeout(timeoutMs),
+    });
+    const data = await res.json().catch(() => ({}));
+    const status = String(data?.status || "").trim().toLowerCase();
+    return {
+      paid: res.ok && (status === "payed" || status === "success"),
+      status,
+      url: url.toString(),
+      error: res.ok ? undefined : `status=${res.status}`,
+    };
+  } catch (error) {
+    return {
+      paid: false,
+      url: url.toString(),
+      error: error instanceof Error ? error.message : String(error),
+    };
+  }
+}