Payments redirect API

Overview

Base URL: https://crosspayonline.com/api

Integration model: your backend builds a signed payment URL (GET) and issues an HTTP redirect. Never expose your API key in the browser—generate URLs server-side only.

Quick start (Lahza / PaySky)

1. Create a unique invoice_id (your order ID).
2. Prepare inv_details JSON (line items, info rows, customer).
3. Build the request URL using the endpoint for your payment method (e.g. createInvoiceByAccountPaySky).
4. Redirect the customer to the generated URL.
5. On return_url, read invoice_id, is_paid, transaction_id and update order status.

Common query parameters

All payment endpoints share the same parameters; only the path changes.

inv_details JSON

Keys: inv_items (line items), inv_info (VAT, delivery, discounts), user.userName. Field spellings match the live API contract.

{
  "inv_items": [
    {
      "name": "Shopping from store",
      "quntity": "1.00",
      "unitPrice": "10.00",
      "totalPrice": "10.00",
      "currency": "USD"
    }
  ],
  "inv_info": [
    { "row_title": "Vat", "row_value": "0" },
    { "row_title": "Delevery", "row_value": "0" },
    { "row_title": "Promo Code", "row_value": 0 },
    { "row_title": "Discounts", "row_value": 0 }
  ],
  "user": {
    "userName": "Customer Name"
  }
}

Endpoints (GET → redirect)

There must be no spaces after /api/ in the URL.

PaySky uses the same parameters and flow as Lahza; only the endpoint path changes.

Platform SDK — server samples

Use these patterns on your backend as your "SDK": build the query string with proper encoding, then redirect. Replace placeholders with your CrossPay credentials.

PHP (redirect)

<?php
$base = "https://crosspayonline.com/api/createInvoiceByAccountPaySky";
$invDetails = [
  "inv_items" => [[
    "name" => "Order #1001",
    "quntity" => "1.00",
    "unitPrice" => "10.00",
    "totalPrice" => "10.00",
    "currency" => "USD"
  ]],
  "inv_info" => [
    ["row_title" => "Vat", "row_value" => "0"],
    ["row_title" => "Delevery", "row_value" => "0"],
  ],
  "user" => ["userName" => "Customer Name"]
];
$params = [
  "api_data" => "YOUR_API_DATA",
  "invoice_id" => "ORDER-1001",
  "apiKey" => "YOUR_API_KEY",
  "total" => "10.00",
  "currency" => "USD",
  "inv_details" => json_encode($invDetails),
  "return_url" => "https://merchant.com/payment/return",
  "email" => "customer@mail.com",
  "mobail" => "0590000000",
  "name" => "Customer Name",
];
$url = $base . "?" . http_build_query($params);
header("Location: " . $url);
exit;

Node.js (Express redirect)

app.get("/pay", (req, res) => {
  const base = "https://crosspayonline.com/api/createInvoiceByAccountPaySky";
  const invDetails = {
    inv_items: [{
      name: "Order #1001",
      quntity: "1.00",
      unitPrice: "10.00",
      totalPrice: "10.00",
      currency: "USD"
    }],
    inv_info: [
      { row_title: "Vat", row_value: "0" },
      { row_title: "Delevery", row_value: "0" },
    ],
    user: { userName: "Customer Name" }
  };
  const params = new URLSearchParams({
    api_data: "YOUR_API_DATA",
    invoice_id: "ORDER-1001",
    apiKey: "YOUR_API_KEY",
    total: "10.00",
    currency: "USD",
    inv_details: JSON.stringify(invDetails),
    return_url: "https://merchant.com/payment/return",
    email: "customer@mail.com",
    mobail: "0590000000",
    name: "Customer Name",
  });
  res.redirect(`${base}?${params.toString()}`);
});

Return URL contract

CrossPay appends query parameters when redirecting the customer back:

Example:

https://merchant.com/payment/return?invoice_id=ORDER-1001&is_paid=1&transaction_id=ABC123

Security & best practices

• Keep apiKey on the server only.
• Always URL-encode inv_details and return_url (http_build_query / URLSearchParams).
• Use HTTPS for return_url.
• Log return query params for debugging (avoid sensitive data in logs).

Troubleshooting