CIMB Direct Debit

Integration Steps

Here is the overview of how to integrate with CIMB Direct Debit ::

1. Account Binding

2. OTP Verification

3. Payment

4. Acknowledge Payment Notification

Account Binding

Merchant can binding CIMB account to customer id, each account can only binding to one customer on one merchant. Customer need to verify OTP and input PIN on CIMB page.

Here is the flow for Account Binding :

Account Binding - CIMB

API Endpoint

Environment	Endpoint
HTTP Method	POST
API Sandbox	https://api-sandbox.doku.com
API Production	https://api.doku.com
Path	/direct-debit/allo/v1.0/registration-account-binding

Here is the sample request header, request body and response body for Account Binding - CIMB :

Register a merchant account for direct debit

POSThttps://{api-domain}/direct-debit/merchant/cimb/v1.0/registration-account-binding

Header parameters

Body

application/json

phoneNo*string

Account phone number | min length: 9 | max length: 16

additionalInfo*object

Response

200400401

Successful registration

Body

application/json

responseCodestring

responseMessagestring

referenceNostring

redirectUrlstring

additionalInfoobject

Request

JavaScriptCurl

const response = await fetch('https://{api-domain}/direct-debit/merchant/cimb/v1.0/registration-account-binding', {
    method: 'POST',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "phoneNo": "62857957868761",
      "additionalInfo": {
        "custIdMerchant": "TEST-123",
        "successRegistrationUrl": "https://sandbox.doku.com/bo/login/",
        "failedRegistrationUrl": "https://www.seleniumeasy.com/test"
      }
    }),
});
const data = await response.json();

Response

{
  "responseCode": "2000700",
  "responseMessage": "Successful",
  "referenceNo": "129260743966",
  "redirectUrl": "https://sandbox.doku.com/direct-debit/ui/binding/2238230713001534401107183161486001168389",
  "additionalInfo": {
    "custIdMerchant": "CUSTOMER_CIMBxDOKU",
    "accountStatus": "PENDING",
    "authCode": "1234123412341234"
  }
}

OTP Verification

Once a customer has linked their account through the CIMB platform, merchants needs to verify the account. Merchant can hit this API to verify the OTP :

Here is the flow for OTP Verification :

Verify OTP - CIMB

API Endpoint

Environment	Endpoint
HTTP Method	POST
API Sandbox	https://api-sandbox.doku.com
API Production	https://api.doku.com
Path	/direct-debit/merchant/cimb/v1.0/otp-verification

OTP Verification API

POSThttps://{api-domain}/direct-debit/merchant/cimb/v1.0/otp-verification

Header parameters

Body

application/json

originalPartnerReferenceNostring

otpstring

typestring

additionalInfoobject

Response

200400401

Successful OTP Verification

Body

application/json

one of

OTPBindingSuccessResponse (object)OTPPaymentSuccessResponse (object)

Request

JavaScriptCurl

const response = await fetch('https://{api-domain}/direct-debit/merchant/cimb/v1.0/otp-verification', {
    method: 'POST',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "originalPartnerReferenceNo": "CIMB20000001",
      "otp": "123456",
      "type": "PAYMENT",
      "additionalInfo": {
        "bankCardToken": "12341234"
      }
    }),
});
const data = await response.json();

Response

{
  "responseCode": "2000400",
  "responseMessage": "Successful"
}

Payment

After merchant check the balance, merchant can hit this API to do payment. DOKU will deduct customer's balance.

Here is the flow for Payment CIMB :

Payment - CIMB

API Endpoint

Environment	Endpoint
HTTP Method	POST
API Sandbox	https://api-sandbox.doku.com
API Production	https://api.doku.com
Path	...../direct-debit/merchant/allo/v1.0/payment/host-to-host

Payment API

POSThttps://{api-domain}/direct-debit/merchant/cimb/v1.0/payment-host-to-host

Header parameters

Body

application/json

partnerReferenceNo*string

Partner Reference Number as Invoice | min length: 1 | max length: 64

amount*object

additionalInfo*object

Response

200400401

Successful Payment

Body

application/json

responseCodestring

responseMessagestring

partnerReferenceNostring

Request

JavaScriptCurl

const response = await fetch('https://{api-domain}/direct-debit/merchant/cimb/v1.0/payment-host-to-host', {
    method: 'POST',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "partnerReferenceNo": "SIM_20230829_0001",
      "amount": {
        "value": "10000.00",
        "currency": "IDR"
      },
      "additionalInfo": {
        "lineItems": [
          {
            "name": "masker",
            "price": "5000.00",
            "quantity": 1
          },
          {
            "name": "aqua",
            "price": "5000.00",
            "quantity": 1
          }
        ],
        "remark": "belanja",
        "successPaymentUrl": "https://dribbble.com/shots/14575431-Payment-method-success/attachments/6265573?mode=media",
        "failedPaymentUrl": "https://dribbble.com/shots/4756331-Failed-Transaction"
      }
    }),
});
const data = await response.json();

Response

{
  "responseCode": "4035413",
  "responseMessage": "OTP Sent To Cardholder",
  "partnerReferenceNo": "L20230718003"
}

Acknowledge Payment Notification

After the payment is being made by your customer, DOKU will send HTTP Notification to your defined Notification URL. Learn how to handle the notification from DOKU .

Additional Feature

Online Refund

Merchant can refund the transaction to DOKU. Hit this API to refund the transaction. Currently DOKU Support Full Refund.

Here is the Refund Flow :

Refund - CIMB

API Endpoint

Environment	Endpoint
HTTP Method	POST
API Sandbox	https://api-sandbox.doku.com
API Production	https://api.doku.com
Path	...../direct-debit/merchant/cimb/v1.0/debit/refund

Refund API

POSThttps://{api-domain}/direct-debit/merchant/cimb/v1.0/debit/refund

Header parameters

Body

application/json

originalPartnerReferenceNo*string

Original Partner Reference Number | min length: 1 | max length: 64

originalExternalId*string

External Id used on payment| min length: 1 | max length: 36

partnerRefundNo*string

Refund Number from merchant | min length: 1 | max length: 64

refundAmount*object

reasonstring

Reason of refund | max length: 255

Response

200400401

Successful Refund

Body

application/json

responseCodestring

responseMessagestring

originalPartnerReferenceNostring

originalReferenceNostring

refundNostring

partnerRefundNostring

refundAmountobject

refundTimestring (date-time)

Request

JavaScriptCurl

const response = await fetch('https://{api-domain}/direct-debit/merchant/cimb/v1.0/debit/refund', {
    method: 'POST',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "originalPartnerReferenceNo": "INV-592566712725",
      "originalExternalId": "10052019",
      "partnerRefundNo": "239850918204981205970",
      "refundAmount": {
        "value": "10000.00",
        "currency": "IDR"
      },
      "reason": "Customer complain"
    }),
});
const data = await response.json();

Response

{
  "responseCode": "2005800",
  "responseMessage": "Successful",
  "originalPartnerReferenceNo": "L20230725005",
  "originalReferenceNo": "Sv6LFBnNOiCevHzLcgK",
  "refundNo": "9lCqroDiy27A",
  "partnerRefundNo": "123450002",
  "refundAmount": {
    "value": "10000.00",
    "currency": "IDR"
  },
  "refundTime": "2020-12-21T17:21:41+07:00"
}

Account Unbinding

In case you need to remove the customer data on DOKU, hit this API to unbinding the customer data.

API Endpoint

Environment	Endpoint
HTTP Method	POST
API Sandbox	https://api-sandbox.doku.com
API Production	https://api.doku.com
Path	...../direct-debit/cimb/v1.0/registration-account-unbinding

Unbinding process

POSThttps://{api-domain}/direct-debit/cimb/v1.0/registration-account-unbinding

Header parameters

Body

application/json

tokenId*string

DOKU Gateway token | Format : AN

Response

200400401

Successful Unbinding

Body

application/json

responseCode*string

responseMessage*string

Request

JavaScriptCurl

const response = await fetch('https://{api-domain}/direct-debit/cimb/v1.0/registration-account-unbinding', {
    method: 'POST',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "tokenId": "hdiwh3h832d832h382h3duh2"
    }),
});
const data = await response.json();

Response

{
  "responseCode": "4030913",
  "responseMessage": "OTP Sent To Cardholder"
}