BRI Direct Debit

BRI Direct Debit

One of DOKU's direct debit partner is BRI. Learn more about integration to BRI Direct Debit here.

Integration Steps

The overview of integration process with BRI Direct Debit

1. Card Registration

2. OTP Verification

3. Direct Debit Payment

4. Direct Debit Payment Notification

Card Registration

Merchant can register BRI card/account to customer ID. Each card/account can only registered/bind to one customer on one merchant. Customer need to verify OTP and input PIN on BRI page.

The flow of Card Registration:

API Endpoint

Environment	Endpoint
HTTP Method	POST
API Sandbox	https://api-sandbox.doku.com
API Production	https://api.doku.com
Path	/wtd-direct-debit-snap-bri/snap/v1.0/registration-card-bind

The sample of Request Header, Request Body and Response Body for BRI Direct Debit Card Registration:

Register a merchant account for direct debit

post

/wtd-direct-debit-snap-bri/snap/v1.0/registration-card-bind

Header parameters

X-TIMESTAMPstring · utc timestamprequired

Client's current local time in yyyy-MM- ddTHH:mm:ssTZD format

Example: 2020-12-21T07:56:11.000Z

X-SIGNATUREstringrequired

Algorithm symmetric signature HMAC_SHA512 (clientSecret, stringToSign)

Example: 85be817c55b2c135157c7e89f52499bf0c25ad6eeebe04a986e8c862561b19a5

X-PARTNER-IDstringrequired

Unique ID for a partner (DOKU'S Client ID)

Example: 821508239190

X-EXTERNAL-IDstringrequired

Numeric String. Reference number that should be unique in the same day (request-id)

Example: 418075533589

X-DEVICE-IDstringrequired

Device identification on which the API services are currently being accessed by the end user (customer). Can’t contain symbols

Example: 95221

X-IP-ADDRESSstring

conditional. IP address of the end user (customer) using IPv4 format

Example: 95221

Authorizationstringrequired

Access Token obtained from Get B2B Token API

Example: 95221

Body

bankCardNostring · number

Last four digit of BRI card number | length: 4

Example: 0747

bankCardTypestring

Type of Bank Card Number | value: C (Credit) / D (Debit) / UE

Example: D

identificationNostring · number

ID Number | max length: 20

Example: 6013010111348227

identificationTypestring

Type of ID used for identificationNo | value: 01/02/03/04

Example: 02

emailstring · email

Account email| max length: 255

Example: [e-mail]

expiryDatestring

Card expiry date | length: 4 | format: MMYY

Example: 0525

custIdMerchantstring

Customer id from merchant | min length: 1 | max length: 18

Example: 01010136136144

phoneNostring · number

Customer Phone number | min length: 5 | max length: 16

Example: 6289509325902

accountNamestring

Account name from card number | max length: 70

Example: TESTING-WTD

dateOfBirthstring

Customer date of birth | format: YYYYMMDD

Example: 19960101

additionalInfoobject

Responses

application/json

application/json

application/json

cURL

JavaScript

Python

HTTP

cURL

curl -L \
  --request POST \
  --url 'https://{api-domain}/wtd-direct-debit-snap-bri/snap/v1.0/registration-card-bind' \
  --header 'X-TIMESTAMP: 2020-12-21T07:56:11.000Z' \
  --header 'X-SIGNATURE: 85be817c55b2c135157c7e89f52499bf0c25ad6eeebe04a986e8c862561b19a5' \
  --header 'X-PARTNER-ID: 821508239190' \
  --header 'X-EXTERNAL-ID: 418075533589' \
  --header 'X-DEVICE-ID: 95221' \
  --header 'Authorization: 95221' \
  --header 'Content-Type: application/json' \
  --data '{"bankCardNo":"0747","bankCardType":"D","identificationNo":"6013010111348227","identificationType":"02","email":"[e-mail]","expiryDate":"0525","custIdMerchant":"01010136136144","phoneNo":"6289509325902","accountName":"TESTING-WTD","dateOfBirth":"19960101","additionalInfo":{"customerEmail":"[e-mail]","customerPhoneNo":"6289509325902","customerCountry":"Indonesia","customerAddress":"Jl. Menara Mulia Sekali"}}'

200

400

401

200

{
  "responseCode": "2000100",
  "responseMessage": "Successful",
  "referenceNo": "345968587571",
  "bankCardToken": "aa26bcba00d14a4a6a42e1041498d1e6",
  "additionalInfo": {
    "tokenStatus": "PENDING",
    "tokenStatusMessage": "Waiting for validate OTP"
  }
}

Successful registration

OTP Verification

Once the customer has registered their card through the platform, merchant needs to verify the card. Merchant can hit this API to verify the OTP.

The flow of OTP Verification:

Environment	Endpoint
HTTP Method	POST
API Sandbox	https://api-sandbox.doku.com
API Production	https://api.doku.com
Path	/wtd-direct-debit-snap-bri/snap/v1.0/otp-verification

The sample of Request Header, Request Body and Response Body for BRI Direct Debit OTP Verification:

OTP Verification API

post

/wtd-direct-debit-snap-bri/snap/v1.0/otp-verification

Header parameters

X-TIMESTAMPstring · utc timestamprequired

Client's current local time in yyyy-MM- ddTHH:mm:ssTZD format

Example: 2020-12-21T07:56:11.000Z

X-SIGNATUREstringrequired

Algorithm symmetric signature HMAC_SHA512 (clientSecret, stringToSign)

Example: 85be817c55b2c135157c7e89f52499bf0c25ad6eeebe04a986e8c862561b19a5

X-PARTNER-IDstringrequired

Unique ID for a partner (DOKU'S Client ID)

Example: 821508239190

X-EXTERNAL-IDstringrequired

Numeric String. Reference number that should be unique in the same day (request-id)

Example: 418075533589

X-DEVICE-IDstringrequired

Device identification on which the API services are currently being accessed by the end user (customer). Can’t contain symbols

Example: 95221

X-IP-ADDRESSstring

conditional. IP address of the end user (customer) using IPv4 format

Example: 95221

Authorizationstringrequired

Access Token obtained from Get B2B Token API

Example: Bearer eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE2OTgwNTA3NDMsImlzcyI6IkRPS1UiLCJjbGllbnRJZCI6IkJSTi0wMjExLTE2OTY5MTk2NTE5MTgifQ.x-D5VlK6TlVZbLPUSCr-Gbfgh4tnp0QDJmedYFHJGHFjg1c4x39pszU4sLvRhr0Jk0vKdMIzxUZeNhKoesWqDJitnG3kfrNZNsMb_WYUC0tJW91onXzYOKXiTgsHwRNFoWPQHlXIEtT3RQm-SRlCpk_E0gsavgkQn2-kbJEBnPhIs4eKg5IUY9GYi4hRr-_GHsudDl8sd2B5UBB_rHYq36BRmLXH7i7MQADHPsB1ktPVgk3ZWF0jebEjI-lJ88p-omL1vQNvRseXej2HKBa9chGLmPDvXYBQaRmmstHz-tv1boFrHfwsHJebcUec-i3WE1vMvP_3EPXdbqb45N4ciQ

Body

originalReferenceNostringrequired

Original Reference No get from prcess binding or payment | min length: 1 | max length: 64

Example: 108772587457

otpstringrequired

OTP | min length: 1 | max length: 18

Example: 999999

chargeTokenstring · number

DOKU Gateway token get from binding process| length: 6

Example: 89e1174c796b9628dcfd3ebec996e6c0

typestringrequired

Type of OTP Verification process | value: card/payment

Example: card

Responses

application/json

application/json

application/json

application/json

cURL

JavaScript

Python

HTTP

cURL

curl -L \
  --request POST \
  --url 'https://{api-domain}/wtd-direct-debit-snap-bri/snap/v1.0/otp-verification' \
  --header 'X-TIMESTAMP: 2020-12-21T07:56:11.000Z' \
  --header 'X-SIGNATURE: 85be817c55b2c135157c7e89f52499bf0c25ad6eeebe04a986e8c862561b19a5' \
  --header 'X-PARTNER-ID: 821508239190' \
  --header 'X-EXTERNAL-ID: 418075533589' \
  --header 'X-DEVICE-ID: 95221' \
  --header 'Authorization: Bearer eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE2OTgwNTA3NDMsImlzcyI6IkRPS1UiLCJjbGllbnRJZCI6IkJSTi0wMjExLTE2OTY5MTk2NTE5MTgifQ.x-D5VlK6TlVZbLPUSCr-Gbfgh4tnp0QDJmedYFHJGHFjg1c4x39pszU4sLvRhr0Jk0vKdMIzxUZeNhKoesWqDJitnG3kfrNZNsMb_WYUC0tJW91onXzYOKXiTgsHwRNFoWPQHlXIEtT3RQm-SRlCpk_E0gsavgkQn2-kbJEBnPhIs4eKg5IUY9GYi4hRr-_GHsudDl8sd2B5UBB_rHYq36BRmLXH7i7MQADHPsB1ktPVgk3ZWF0jebEjI-lJ88p-omL1vQNvRseXej2HKBa9chGLmPDvXYBQaRmmstHz-tv1boFrHfwsHJebcUec-i3WE1vMvP_3EPXdbqb45N4ciQ' \
  --header 'Content-Type: application/json' \
  --data '{"originalReferenceNo":"108772587457","otp":"999999","chargeToken":"89e1174c796b9628dcfd3ebec996e6c0","type":"card"}'

200

400

401

404

200

{
  "responseCode": "2000400",
  "responseMessage": "Successful",
  "originalReferenceNo": "108772587457",
  "additionalInfo": {
    "tokenStatus": "SUCCESS",
    "tokenStatusMessage": "Success Register Card"
  }
}

Successful OTP Verification

Direct Debit Payment

This API is used for payment of transaction based on the card number in the card token obtained from the Card Registration/Binding process. After merchant hit this Payment API, DOKU will deduct the customer's balance.

The flow of Direct Debit Payment:

Environment	Endpoint
HTTP Method	POST
API Sandbox	https://api-sandbox.doku.com
API Production	https://api.doku.com
Path	/wtd-direct-debit-snap-bri/snap/v1.0/debit/payment-host-to-host

The sample of Request Header, Request Body and Response Body for BRI Direct Debit Payment:

Payment API

post

/wtd-direct-debit-snap-bri/snap/v1.0/debit/payment-host-to-host

Header parameters

X-TIMESTAMPstring · utc timestamprequired

Client's current local time in yyyy-MM- ddTHH:mm:ssTZD format

Example: 2020-12-21T07:56:11.000Z

X-SIGNATUREstringrequired

Algorithm symmetric signature HMAC_SHA512 (clientSecret, stringToSign)

Example: 85be817c55b2c135157c7e89f52499bf0c25ad6eeebe04a986e8c862561b19a5

X-PARTNER-IDstringrequired

Unique ID for a partner (DOKU'S Client ID)

Example: 821508239190

X-EXTERNAL-IDstringrequired

Numeric String. Reference number that should be unique in the same day (request-id)

Example: 418075533589

X-DEVICE-IDstringrequired

Device identification on which the API services are currently being accessed by the end user (customer). Can’t contain symbols

Example: 95221

X-IP-ADDRESSstring

conditional. IP address of the end user (customer) using IPv4 format

Example: 95221

Authorization-customerstringrequired

Access token obtained from B2B2C API

Example: Bearer fa8sjjEj813Y9JGoqwOeOPWbnt4CUpvIJbU1mMU4a11MNDZ7Sg5u9a

Authorizationstringrequired

Access Token obtained from Get B2B Token API

Example: Bearer eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE2OTgwNTA3NDMsImlzcyI6IkRPS1UiLCJjbGllbnRJZCI6IkJSTi0wMjExLTE2OTY5MTk2NTE5MTgifQ.x-D5VlK6TlVZbLPUSCr-Gbfgh4tnp0QDJmedYFHJGHFjg1c4x39pszU4sLvRhr0Jk0vKdMIzxUZeNhKoesWqDJitnG3kfrNZNsMb_WYUC0tJW91onXzYOKXiTgsHwRNFoWPQHlXIEtT3RQm-SRlCpk_E0gsavgkQn2-kbJEBnPhIs4eKg5IUY9GYi4hRr-_GHsudDl8sd2B5UBB_rHYq36BRmLXH7i7MQADHPsB1ktPVgk3ZWF0jebEjI-lJ88p-omL1vQNvRseXej2HKBa9chGLmPDvXYBQaRmmstHz-tv1boFrHfwsHJebcUec-i3WE1vMvP_3EPXdbqb45N4ciQ

Body

bankCardTokenstringrequired

DOKU Gateway token get from binding process | min length: 1 | max length: 128

Example: 198ad24d9562f1179a25cd65fe1dddec

transAmountobjectrequired

additionalInfoobjectrequired

Responses

application/json

application/json

application/json

cURL

JavaScript

Python

HTTP

cURL

curl -L \
  --request POST \
  --url 'https://{api-domain}/wtd-direct-debit-snap-bri/snap/v1.0/debit/payment-host-to-host' \
  --header 'X-TIMESTAMP: 2020-12-21T07:56:11.000Z' \
  --header 'X-SIGNATURE: 85be817c55b2c135157c7e89f52499bf0c25ad6eeebe04a986e8c862561b19a5' \
  --header 'X-PARTNER-ID: 821508239190' \
  --header 'X-EXTERNAL-ID: 418075533589' \
  --header 'X-DEVICE-ID: 95221' \
  --header 'Authorization-customer: Bearer fa8sjjEj813Y9JGoqwOeOPWbnt4CUpvIJbU1mMU4a11MNDZ7Sg5u9a' \
  --header 'Authorization: Bearer eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE2OTgwNTA3NDMsImlzcyI6IkRPS1UiLCJjbGllbnRJZCI6IkJSTi0wMjExLTE2OTY5MTk2NTE5MTgifQ.x-D5VlK6TlVZbLPUSCr-Gbfgh4tnp0QDJmedYFHJGHFjg1c4x39pszU4sLvRhr0Jk0vKdMIzxUZeNhKoesWqDJitnG3kfrNZNsMb_WYUC0tJW91onXzYOKXiTgsHwRNFoWPQHlXIEtT3RQm-SRlCpk_E0gsavgkQn2-kbJEBnPhIs4eKg5IUY9GYi4hRr-_GHsudDl8sd2B5UBB_rHYq36BRmLXH7i7MQADHPsB1ktPVgk3ZWF0jebEjI-lJ88p-omL1vQNvRseXej2HKBa9chGLmPDvXYBQaRmmstHz-tv1boFrHfwsHJebcUec-i3WE1vMvP_3EPXdbqb45N4ciQ' \
  --header 'Content-Type: application/json' \
  --data '{"bankCardToken":"198ad24d9562f1179a25cd65fe1dddec","merchantId":"MCH-0001-2768422848550","transAmount":{"value":"90000.00","currency":"IDR"},"additionalInfo":{"merchantTrxId":"66778181123","otpStatus":"YES","lineItems":[{"name":"Vitamin C","price":"40000.00","quantity":"1"},{"name":"Pensil Warna","price":"50000.00","quantity":"1"}]}}'

200

400

401

200

{
  "responseCode": "2005400",
  "responseMessage": "Successful",
  "referenceNo": "738663838768",
  "additionalInfo": {
    "merchantTrxId": "66778181123",
    "transactionStatus": "PENDING",
    "transactionStatusMessage": "Waiting for validate OTP"
  }
}

Successful Payment

Direct Debit Payment Notification

After the payment is done by the customer, DOKU will send HTTP Notification to merchant's defined Notification URL. Learn how to handle the notification from DOKU.

Additional Feature

Online Direct Debit Refund

This endpoint is used to create refund requests for previously successful payments. Refunds can be made in full or partial amounts. Merchant can refund the transaction to DOKU. Hit this API to refund the transaction. Currently DOKU Support Full Refund.

The flow of Direct Debit Refund:

Environment	Endpoint
HTTP Method	POST
API Sandbox	https://api-sandbox.doku.com
API Production	https://api.doku.com
Path	/wtd-direct-debit-snap-bri/snap/v1.0/refund

The sample of Request Header, Request Body and Response Body for BRI Direct Debit Refund:

Refund API

post

/wtd-direct-debit-snap-bri/snap/v1.0/debit/refund

Header parameters

X-TIMESTAMPstring · utc timestamprequired

Client's current local time in yyyy-MM- ddTHH:mm:ssTZD format

Example: 2020-12-21T07:56:11.000Z

X-SIGNATUREstringrequired

Algorithm symmetric signature HMAC_SHA512 (clientSecret, stringToSign)

Example: 85be817c55b2c135157c7e89f52499bf0c25ad6eeebe04a986e8c862561b19a5

X-PARTNER-IDstringrequired

Unique ID for a partner (DOKU'S Client ID)

Example: 821508239190

X-EXTERNAL-IDstringrequired

Numeric String. Reference number that should be unique in the same day (request-id)

Example: 418075533589

X-DEVICE-IDstringrequired

Device identification on which the API services are currently being accessed by the end user (customer). Can’t contain symbols

Example: 95221

X-IP-ADDRESSstring

conditional. IP address of the end user (customer) using IPv4 format

Example: 95221

Authorization-customerstringrequired

Access token obtained from B2B2C API

Example: Bearer fa8sjjEj813Y9JGoqwOeOPWbnt4CUpvIJbU1mMU4a11MNDZ7Sg5u9a

Authorizationstringrequired

Access Token obtained from Get B2B Token API

Example: Bearer eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE2OTgwNTA3NDMsImlzcyI6IkRPS1UiLCJjbGllbnRJZCI6IkJSTi0wMjExLTE2OTY5MTk2NTE5MTgifQ.x-D5VlK6TlVZbLPUSCr-Gbfgh4tnp0QDJmedYFHJGHFjg1c4x39pszU4sLvRhr0Jk0vKdMIzxUZeNhKoesWqDJitnG3kfrNZNsMb_WYUC0tJW91onXzYOKXiTgsHwRNFoWPQHlXIEtT3RQm-SRlCpk_E0gsavgkQn2-kbJEBnPhIs4eKg5IUY9GYi4hRr-_GHsudDl8sd2B5UBB_rHYq36BRmLXH7i7MQADHPsB1ktPVgk3ZWF0jebEjI-lJ88p-omL1vQNvRseXej2HKBa9chGLmPDvXYBQaRmmstHz-tv1boFrHfwsHJebcUec-i3WE1vMvP_3EPXdbqb45N4ciQ

Body

originalReferenceNostringrequired

Original Reference Number | min length: 1 | max length: 64

Example: 884791706226

partnerRefundNostringrequired

Partner refund number | min length: 1 | max length: 64

Example: 123491931459

originalExternalIdstringrequired

External id used on payment | min length: 1 | max length: 64

Example: 85116108

reasonstring

Reason of refund | max length: 255

Example: kesalahan data

refundAmountobject

additionalInfoobjectrequired

Responses

application/json

application/json

application/json

cURL

JavaScript

Python

HTTP

cURL

curl -L \
  --request POST \
  --url 'https://{api-domain}/wtd-direct-debit-snap-bri/snap/v1.0/debit/refund' \
  --header 'X-TIMESTAMP: 2020-12-21T07:56:11.000Z' \
  --header 'X-SIGNATURE: 85be817c55b2c135157c7e89f52499bf0c25ad6eeebe04a986e8c862561b19a5' \
  --header 'X-PARTNER-ID: 821508239190' \
  --header 'X-EXTERNAL-ID: 418075533589' \
  --header 'X-DEVICE-ID: 95221' \
  --header 'Authorization-customer: Bearer fa8sjjEj813Y9JGoqwOeOPWbnt4CUpvIJbU1mMU4a11MNDZ7Sg5u9a' \
  --header 'Authorization: Bearer eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE2OTgwNTA3NDMsImlzcyI6IkRPS1UiLCJjbGllbnRJZCI6IkJSTi0wMjExLTE2OTY5MTk2NTE5MTgifQ.x-D5VlK6TlVZbLPUSCr-Gbfgh4tnp0QDJmedYFHJGHFjg1c4x39pszU4sLvRhr0Jk0vKdMIzxUZeNhKoesWqDJitnG3kfrNZNsMb_WYUC0tJW91onXzYOKXiTgsHwRNFoWPQHlXIEtT3RQm-SRlCpk_E0gsavgkQn2-kbJEBnPhIs4eKg5IUY9GYi4hRr-_GHsudDl8sd2B5UBB_rHYq36BRmLXH7i7MQADHPsB1ktPVgk3ZWF0jebEjI-lJ88p-omL1vQNvRseXej2HKBa9chGLmPDvXYBQaRmmstHz-tv1boFrHfwsHJebcUec-i3WE1vMvP_3EPXdbqb45N4ciQ' \
  --header 'Content-Type: application/json' \
  --data '{"originalReferenceNo":"884791706226","partnerRefundNo":"123491931459","originalExternalId":"85116108","reason":"kesalahan data","refundAmount":{"value":"45000.00","currency":"IDR"},"additionalInfo":{"merchantTrxId":"667781811252"}}'

200

400

401

200

{
  "responseCode": "2005800",
  "responseMessage": "Successful",
  "originalPartnerReferenceNo": "2238220704144005697107174446374000107558",
  "originalReferenceNo": "884791706226",
  "refundNo": "132979271182",
  "partnerRefundNo": "123491931459",
  "refundTime": "2022-07-04T16:09:35+07:00",
  "refundAmount": {
    "value": "45000.00",
    "currency": "IDR"
  }
}

Successful Refund

Card Registration Unbinding

This API is used to delete customer's card data in DOKU.

API Endpoint

Environment	Endpoint
HTTP Method	POST
API Sandbox	https://api-sandbox.doku.com
API Production	https://api.doku.com
Path	/wtd-direct-debit-snap-bri/snap/v1.0/registration-card-unbind

The sample of Request Header, Request Body and Response Body for BRI Direct Debit Card Registration Unbinding:

Unbinding process

post

/wtd-direct-debit-snap-bri/snap/v1.0/registration-card-unbind

Header parameters

X-TIMESTAMPstring · utc timestamprequired

Client's current local time in yyyy-MM- ddTHH:mm:ssTZD format

Example: 2020-12-21T07:56:11.000Z

X-SIGNATUREstringrequired

Algorithm symmetric signature HMAC_SHA512 (clientSecret, stringToSign)

Example: 85be817c55b2c135157c7e89f52499bf0c25ad6eeebe04a986e8c862561b19a5

X-PARTNER-IDstringrequired

Unique ID for a partner (DOKU'S Client ID)

Example: 821508239190

X-EXTERNAL-IDstringrequired

Numeric String. Reference number that should be unique in the same day (request-id)

Example: 418075533589

X-DEVICE-IDstringrequired

Device identification on which the API services are currently being accessed by the end user (customer). Can’t contain symbols

Example: 95221

X-IP-ADDRESSstring

conditional. IP address of the end user (customer) using IPv4 format

Example: 95221

Authorizationstringrequired

Access Token obtained from Get B2B Token API

Example: 95221

Body

tokenstringrequired

DOKU Gateway token | Format : AN

Example: hdiwh3h832d832h382h3duh2

Responses

application/json

application/json

application/json

cURL

JavaScript

Python

HTTP

cURL

curl -L \
  --request POST \
  --url 'https://{api-domain}/wtd-direct-debit-snap-bri/snap/v1.0/registration-card-unbind' \
  --header 'X-TIMESTAMP: 2020-12-21T07:56:11.000Z' \
  --header 'X-SIGNATURE: 85be817c55b2c135157c7e89f52499bf0c25ad6eeebe04a986e8c862561b19a5' \
  --header 'X-PARTNER-ID: 821508239190' \
  --header 'X-EXTERNAL-ID: 418075533589' \
  --header 'X-DEVICE-ID: 95221' \
  --header 'Authorization: 95221' \
  --header 'Content-Type: application/json' \
  --data '{"token":"hdiwh3h832d832h382h3duh2"}'

200

400

401

200

{
  "responseCode": "2000500",
  "responseMessage": "OTP Sent To Cardholder",
  "bankCardToken": "89e1174c796b9628dcfd3ebec996e6c0",
  "additionalInfo": {
    "tokenStatus": "SUCCESS",
    "tokenStatusMessage": "Success Unbinding Card"
  }
}

Successful Unbinding