Redirect 201 redirect from POST @app_api_transfert_create (4999c4)

POST https://api.madex.mg/api/v1/transferts/TRN6AA00F573E92820260908133623/pay

Response
200 OK
IP
102.17.237.105
Profiled on
Token
459212

HTTP Client

2 Total requests
0 HTTP errors

Clients

http_client 2

Requests

POST https://api.orange.com/oauth/v3/token
Request options 
[
  "headers" => [
    "Authorization" => "Basic dDgybmhvM0lkZU56WmNabmRmM3Frc2dEZFJmdWNoTkg6cnZYZEtaanVIVVI4azFTUG5FUmJ4UUNoSUpKYjYwZE5JaUlJY1RFSGpUSHI="
    "Content-Type" => "application/x-www-form-urlencoded"
    "Accept" => "application/json"
  ]
  "body" => "grant_type=client_credentials"
]
Response 200 
[
  "info" => [
    "header_size" => 586
    "request_size" => 368
    "total_time" => 0.129142
    "namelookup_time" => 0.000927
    "connect_time" => 0.015861
    "pretransfer_time" => 0.041909
    "size_upload" => 29.0
    "size_download" => 1007.0
    "speed_download" => 7806.0
    "speed_upload" => 224.0
    "download_content_length" => 1007.0
    "upload_content_length" => 29.0
    "starttransfer_time" => 0.128623
    "primary_ip" => "62.161.18.72"
    "primary_port" => 443
    "local_ip" => "83.166.133.85"
    "local_port" => 37352
    "http_version" => 2
    "protocol" => 2
    "scheme" => "HTTPS"
    "appconnect_time_us" => 41819
    "connect_time_us" => 15861
    "namelookup_time_us" => 927
    "pretransfer_time_us" => 41909
    "starttransfer_time_us" => 128623
    "total_time_us" => 129142
    "effective_method" => "POST"
    "start_time" => 1788874583.7028
    "original_url" => "https://api.orange.com/oauth/v3/token"
    "pause_handler" => Closure(float $duration) {#1256
      class: "Symfony\Component\HttpClient\Response\CurlResponse"
      use: {
        $ch: CurlHandle {#1237 …}
        $multi: Symfony\Component\HttpClient\Internal\CurlClientState {#1265 …}
        $execCounter: -9223372036854775808
      }
    }
    "debug" => """
      *   Trying 62.161.18.72:443...\n
      * Connected to api.orange.com (62.161.18.72) port 443 (#0)\n
      * ALPN, offering h2\n
      * ALPN, offering http/1.1\n
      * successfully set certificate verify locations:\n
      *  CAfile: /etc/ssl/certs/ca-certificates.crt\n
      *  CApath: /etc/ssl/certs\n
      * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384\n
      * ALPN, server accepted to use http/1.1\n
      * Server certificate:\n
      *  subject: C=FR; L=ISSY LES MOULINEAUX; O=Orange SA; CN=*.apibackbone.orange.com\n
      *  start date: Sep 13 00:00:00 2025 GMT\n
      *  expire date: Sep 15 23:59:59 2026 GMT\n
      *  subjectAltName: host "api.orange.com" matched cert's "api.orange.com"\n
      *  issuer: C=US; O=DigiCert Inc; CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1\n
      *  SSL certificate verify ok.\n
      > POST /oauth/v3/token HTTP/1.1\r\n
      Host: api.orange.com\r\n
      Authorization: Basic dDgybmhvM0lkZU56WmNabmRmM3Frc2dEZFJmdWNoTkg6cnZYZEtaanVIVVI4azFTUG5FUmJ4UUNoSUpKYjYwZE5JaUlJY1RFSGpUSHI=\r\n
      Content-Type: application/x-www-form-urlencoded\r\n
      Accept: application/json\r\n
      User-Agent: Symfony HttpClient (Curl)\r\n
      Accept-Encoding: gzip\r\n
      Content-Length: 29\r\n
      \r\n
      * upload completely sent off: 29 out of 29 bytes\n
      * old SSL session ID is stale, removing\n
      * Mark bundle as not supporting multiuse\n
      < HTTP/1.1 200 OK\r\n
      < Server: nginx\r\n
      < Date: Tue, 08 Sep 2026 13:36:23 GMT\r\n
      < Content-Type: application/json; charset=utf-8\r\n
      < Content-Length: 1007\r\n
      < Connection: keep-alive\r\n
      < Access-Control-Allow-Origin: *\r\n
      < Ratelimit-Limit: 100\r\n
      < Ratelimit-Remaining: 84\r\n
      < Ratelimit-Reset: 1\r\n
      < Via: sekapi\r\n
      < X-Input-Reverse-Proxy: opoielbl3jp1n8c\r\n
      < X-Oapi-Request-Id: d28b4e58-f587-4775-b466-5b9e38468372#1228867\r\n
      < X-Ratelimit-Limit-Second: 100\r\n
      < X-Ratelimit-Remaining-Second: 84\r\n
      < X-Request-Id: 11d5b052-8474-4434-bbfe-e6b50f2e9d82\r\n
      < X-Sekapi-Gw-Latency: 0\r\n
      < Strict-Transport-Security: max-age=31536000; includeSubDomains\r\n
      < \r\n
      """
  ]
  "response_headers" => [
    "HTTP/1.1 200 OK"
    "Server: nginx"
    "Date: Tue, 08 Sep 2026 13:36:23 GMT"
    "Content-Type: application/json; charset=utf-8"
    "Content-Length: 1007"
    "Connection: keep-alive"
    "Access-Control-Allow-Origin: *"
    "Ratelimit-Limit: 100"
    "Ratelimit-Remaining: 84"
    "Ratelimit-Reset: 1"
    "Via: sekapi"
    "X-Input-Reverse-Proxy: opoielbl3jp1n8c"
    "X-Oapi-Request-Id: d28b4e58-f587-4775-b466-5b9e38468372#1228867"
    "X-Ratelimit-Limit-Second: 100"
    "X-Ratelimit-Remaining-Second: 84"
    "X-Request-Id: 11d5b052-8474-4434-bbfe-e6b50f2e9d82"
    "X-Sekapi-Gw-Latency: 0"
    "Strict-Transport-Security: max-age=31536000; includeSubDomains"
  ]
  "response_json" => [
    "access_token" => "eyJ0eXAiOiJKV1QiLCJ2ZXIiOiIxLjAiLCJhbGciOiJFUzM4NCIsImtpZCI6Ikg1RkdUNXhDUlJWU0NseG5vTXZCWEtUM1AyckhTRVZUNV9VdE16UFdCYTQifQ.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.iXmlzWYs4dCvuNvhX1jkWXAbKLt5FkvkJgmVUQ1E0u03L48YC4QcWNxDtk7bt-V-_GJFB9EYjVV4TozZv1S7jPA_nUQjKaFHiNHuvrDUiB95chME-4gdJHt0A5nGV2Lj"
    "token_type" => "Bearer"
    "expires_in" => 3600
    "scope" => "ope:orange-money_mpay_dev:v1:access ope:orange-money_mpay_mg:v1:access"
  ]
]
POST https://api.orange.com/orange-money-webpay/mg/v1/webpayment
Request options 
[
  "headers" => [
    "Authorization" => "Bearer eyJ0eXAiOiJKV1QiLCJ2ZXIiOiIxLjAiLCJhbGciOiJFUzM4NCIsImtpZCI6Ikg1RkdUNXhDUlJWU0NseG5vTXZCWEtUM1AyckhTRVZUNV9VdE16UFdCYTQifQ.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.iXmlzWYs4dCvuNvhX1jkWXAbKLt5FkvkJgmVUQ1E0u03L48YC4QcWNxDtk7bt-V-_GJFB9EYjVV4TozZv1S7jPA_nUQjKaFHiNHuvrDUiB95chME-4gdJHt0A5nGV2Lj"
    "Accept" => "application/json"
    "Content-Type" => "application/json"
  ]
  "json" => [
    "merchant_key" => "68d1eabe"
    "currency" => "MGA"
    "order_id" => "MDX-AA380CCC-E2D45F70"
    "amount" => 500
    "return_url" => "https://api.madex.mg/payment/orange/return?attempt=PMN6AA00F57A9CB720260908133623&ref=MDX-AA380CCC&code=TRN6AA00F573E92820260908133623"
    "cancel_url" => "https://api.madex.mg/payment/orange/cancel?attempt=PMN6AA00F57A9CB720260908133623&ref=MDX-AA380CCC&code=TRN6AA00F573E92820260908133623"
    "notif_url" => "https://api.madex.mg/api/callback/orange/notify/PMN6AA00F57A9CB720260908133623"
    "lang" => "fr"
    "reference" => "ref MDX-AA380CCC-E2D45F70"
  ]
]
Response 201 
[
  "info" => [
    "header_size" => 743
    "request_size" => 1683
    "total_time" => 0.116574
    "namelookup_time" => 1.9E-5
    "connect_time" => 1.9E-5
    "pretransfer_time" => 7.9E-5
    "size_upload" => 574.0
    "size_download" => 293.0
    "speed_download" => 2525.0
    "speed_upload" => 4948.0
    "download_content_length" => 293.0
    "upload_content_length" => 574.0
    "starttransfer_time" => 0.116367
    "primary_ip" => "62.161.18.72"
    "primary_port" => 443
    "local_ip" => "83.166.133.85"
    "local_port" => 37352
    "http_version" => 2
    "protocol" => 2
    "scheme" => "HTTPS"
    "appconnect_time_us" => 19
    "connect_time_us" => 19
    "namelookup_time_us" => 19
    "pretransfer_time_us" => 79
    "starttransfer_time_us" => 116367
    "total_time_us" => 116574
    "effective_method" => "POST"
    "start_time" => 1788874583.8327
    "original_url" => "https://api.orange.com/orange-money-webpay/mg/v1/webpayment"
    "pause_handler" => Closure(float $duration) {#1242
      class: "Symfony\Component\HttpClient\Response\CurlResponse"
      use: {
        $ch: CurlHandle {#1250 …}
        $multi: Symfony\Component\HttpClient\Internal\CurlClientState {#1265 …}
        $execCounter: -9223372036854775800
      }
    }
    "debug" => """
      * Found bundle for host api.orange.com: 0x55861cd772e0 [serially]\n
      * Can not multiplex, even if we wanted to!\n
      * Re-using existing connection! (#0) with host api.orange.com\n
      * Connected to api.orange.com (62.161.18.72) port 443 (#0)\n
      > POST /orange-money-webpay/mg/v1/webpayment HTTP/1.1\r\n
      Host: api.orange.com\r\n
      Authorization: Bearer eyJ0eXAiOiJKV1QiLCJ2ZXIiOiIxLjAiLCJhbGciOiJFUzM4NCIsImtpZCI6Ikg1RkdUNXhDUlJWU0NseG5vTXZCWEtUM1AyckhTRVZUNV9VdE16UFdCYTQifQ.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.iXmlzWYs4dCvuNvhX1jkWXAbKLt5FkvkJgmVUQ1E0u03L48YC4QcWNxDtk7bt-V-_GJFB9EYjVV4TozZv1S7jPA_nUQjKaFHiNHuvrDUiB95chME-4gdJHt0A5nGV2Lj\r\n
      Accept: application/json\r\n
      Content-Type: application/json\r\n
      User-Agent: Symfony HttpClient (Curl)\r\n
      Accept-Encoding: gzip\r\n
      Content-Length: 574\r\n
      \r\n
      * upload completely sent off: 574 out of 574 bytes\n
      * Mark bundle as not supporting multiuse\n
      < HTTP/1.1 201 Created\r\n
      < Server: nginx\r\n
      < Date: Tue, 08 Sep 2026 13:36:23 GMT\r\n
      < Content-Type: application/json; charset=utf-8\r\n
      < Content-Length: 293\r\n
      < Connection: keep-alive\r\n
      < Access-Control-Allow-Origin: *\r\n
      < Access-Control-Expose-Headers: X-Result-Count, X-Total-Count, X-OAPI-Request-Id, X-Rate-Limit-Limit, X-Rate-Limit-Remaining, X-Rate-Limit-Reset\r\n
      * Added cookie 4281922fe76c97b33c73c6e1d6f259b4="95c28e20843a146587a8c3bbda9443ab" for domain api.orange.com, path /, expire 0\n
      < Set-Cookie: 4281922fe76c97b33c73c6e1d6f259b4=95c28e20843a146587a8c3bbda9443ab; path=/; HttpOnly\r\n
      * Added cookie BIGipServer~naomi-ginefa~pool-mg-ose-HTTP="rd2o00000000000000000000ffffac1ec4d3o80" for domain api.orange.com, path /, expire 0\n
      < Set-Cookie: BIGipServer~naomi-ginefa~pool-mg-ose-HTTP=rd2o00000000000000000000ffffac1ec4d3o80; path=/; Httponly; Secure\r\n
      < Strict-Transport-Security: max-age=31536000; includeSubDomains\r\n
      < X-Oapi-Request-Id: opapccballrt02-996270-1409537-8\r\n
      < Strict-Transport-Security: max-age=31536000; includeSubDomains\r\n
      < \r\n
      """
  ]
  "response_headers" => [
    "HTTP/1.1 201 Created"
    "Server: nginx"
    "Date: Tue, 08 Sep 2026 13:36:23 GMT"
    "Content-Type: application/json; charset=utf-8"
    "Content-Length: 293"
    "Connection: keep-alive"
    "Access-Control-Allow-Origin: *"
    "Access-Control-Expose-Headers: X-Result-Count, X-Total-Count, X-OAPI-Request-Id, X-Rate-Limit-Limit, X-Rate-Limit-Remaining, X-Rate-Limit-Reset"
    "Set-Cookie: 4281922fe76c97b33c73c6e1d6f259b4=95c28e20843a146587a8c3bbda9443ab; path=/; HttpOnly"
    "Set-Cookie: BIGipServer~naomi-ginefa~pool-mg-ose-HTTP=rd2o00000000000000000000ffffac1ec4d3o80; path=/; Httponly; Secure"
    "Strict-Transport-Security: max-age=31536000; includeSubDomains"
    "X-Oapi-Request-Id: opapccballrt02-996270-1409537-8"
    "Strict-Transport-Security: max-age=31536000; includeSubDomains"
  ]
  "response_json" => [
    "status" => 201
    "message" => "OK"
    "pay_token" => "v1hrcszwn7nlnlygfdl6jluuowr5jfgtrneafshufbqvj6jaezdrrh8xodlqi8g4"
    "payment_url" => "https://mpayment.orange-money.com/mg/mpayment/abstract/v1hrcszwn7nlnlygfdl6jluuowr5jfgtrneafshufbqvj6jaezdrrh8xodlqi8g4"
    "notif_token" => "xtawbx0kn9pjsjyfeghit7urovzifk1d"
  ]
]