End-to-end example

POST /ccpayment/api/token
{ "app_id": "APP_ID", "app_secret": "APP_SECRET" }
→ data.token = "eyJ..."

POST /ccpayment/api/walletCheckout
Authorization: Bearer eyJ...
{
  "merchant_key": "MERCHANT_KEY",
  "hash_key": generateSipayHashKey(["149.90","TRY","MERCHANT_KEY","ORDER-2026-0001"], APP_SECRET),
  "invoice_id": "ORDER-2026-0001",
  "total": 149.90,
  "currency_code": "TRY",
  "payment_service_provider": ["apple_pay","google_pay"]
}
→ JavaScript (send to the browser)

<div id="walletCheckout"></div>
<script>/* injected walletCheckout JS */</script>
<script>
  document.getElementById('walletCheckout')
    .addEventListener('sipay:wallet-token', e => {
      postToServer({ transientToken: e.detail.transientToken });
    });
</script>

POST /ccpayment/api/walletPay
Authorization: Bearer eyJ...
{
  "merchant_key": "MERCHANT_KEY",
  "hash_key": generateSipayHashKey(["ORDER-2026-0001","MERCHANT_KEY"], APP_SECRET),
  "invoice_id": "ORDER-2026-0001",
  "cybersource_transient_token": "eyJraWQiOi..."
}
→ { "status_code": 100, "status_description": "Payment process successful", "data": { ... } }