Kartangizga pul tushdi — buyurtma o'zi yopiladi

import requests, hashlib

BASE = "https://pay.jamshidkhatamov.uz"
SHOP_ID, SHOP_KEY = "jkh_xxxx", "sk_xxxx"

# 1) To'lov yaratish
r = requests.post(f"{BASE}/payment/create", json={
    "shop_id": SHOP_ID, "shop_key": SHOP_KEY,
    "amount": 50000, "order_id": "1042",
}).json()
# r["amount"]  -> mijoz aynan shuni to'laydi (masalan 50001)
# r["card"]    -> {"number", "holder", "provider"}
# r["pay_url"] -> tayyor to'lov sahifasi

# 2) complete_url (Flask misol)
@app.post("/jkhpay/complete")
def complete():
    d = request.get_json()
    sign = hashlib.md5(f"{d['shop_id']}{d['payment_id']}{d['amount']}{SHOP_KEY}".encode()).hexdigest()
    if sign != d["sign"]:
        return "bad sign", 403
    if d["status"] == "paid":
        mark_order_paid(d["order_id"], d["payment_id"])  # bir marta!
    return "ok", 200

<?php
$base = "https://pay.jamshidkhatamov.uz";
$shopId = "jkh_xxxx"; $shopKey = "sk_xxxx";

// 1) To'lov yaratish
$ch = curl_init("$base/payment/create");
curl_setopt_array($ch, [
  CURLOPT_POST => true, CURLOPT_RETURNTRANSFER => true,
  CURLOPT_HTTPHEADER => ["Content-Type: application/json"],
  CURLOPT_POSTFIELDS => json_encode([
    "shop_id" => $shopId, "shop_key" => $shopKey,
    "amount" => 50000, "order_id" => "1042",
  ]),
]);
$pay = json_decode(curl_exec($ch), true);
header("Location: " . $pay["pay_url"]);

// 2) complete.php
$d = json_decode(file_get_contents("php://input"), true);
$sign = md5($d["shop_id"] . $d["payment_id"] . $d["amount"] . $shopKey);
if (!hash_equals($sign, $d["sign"])) { http_response_code(403); exit; }
if ($d["status"] === "paid") markOrderPaid($d["order_id"], $d["payment_id"]);
echo "ok";

import crypto from "node:crypto";
const BASE = "https://pay.jamshidkhatamov.uz";
const SHOP_ID = "jkh_xxxx", SHOP_KEY = "sk_xxxx";

// 1) To'lov yaratish
const pay = await fetch(`${BASE}/payment/create`, {
  method: "POST", headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ shop_id: SHOP_ID, shop_key: SHOP_KEY, amount: 50000, order_id: "1042" }),
}).then(r => r.json());

// 2) complete_url (Express)
app.post("/jkhpay/complete", express.json(), (req, res) => {
  const d = req.body;
  const sign = crypto.createHash("md5")
    .update(`${d.shop_id}${d.payment_id}${d.amount}${SHOP_KEY}`).digest("hex");
  if (sign !== d.sign) return res.sendStatus(403);
  if (d.status === "paid") markOrderPaid(d.order_id, d.payment_id);
  res.send("ok");
});