2026-08-04 22:23:54 +07:00
|
|
|
<?php
|
2026-08-09 16:20:21 +07:00
|
|
|
|
|
|
|
|
use Illuminate\Support\Facades\Route;
|
|
|
|
|
use Modules\Payment\Http\Controllers\PaymentController;
|
|
|
|
|
use Modules\Payment\Http\Controllers\PaymentWebhookController;
|
|
|
|
|
use Modules\Payment\Http\Controllers\RefundController;
|
|
|
|
|
|
|
|
|
|
Route::prefix('api/v1')->middleware(['api', 'auth:sanctum', 'throttle:60,1'])->group(function () {
|
|
|
|
|
Route::post('/payments/{booking:booking_ref}/initiate', [PaymentController::class, 'initiate'])->name('payment.payments.initiate');
|
|
|
|
|
Route::post('/bookings/{booking:booking_ref}/refund', [RefundController::class, 'refund'])->name('payment.bookings.refund');
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
// No auth:sanctum — the gateway authenticates itself via its own signed
|
|
|
|
|
// payload (verified inside each gateway's handleWebhook()), not a bearer
|
|
|
|
|
// token (domain.md §6).
|
|
|
|
|
Route::prefix('api/v1')->middleware(['api', 'throttle:60,1'])->group(function () {
|
|
|
|
|
Route::post('/webhooks/{method}/{encryptBookingId?}', [PaymentWebhookController::class, 'handle'])->name('payment.webhooks.handle');
|
|
|
|
|
});
|
