Redirect 201 redirect from POST @app_api_transfert_create (5f1df6)

POST https://api.madex.mg/api/v1/transferts/TRN6AA00F56147E320260908133622/pay

Response
200 OK
IP
102.17.237.105
Profiled on
Token
8281f2

HTTP Client

2 Total requests
0 HTTP errors

Clients

http_client 2

Requests

POST https://api.orange.com/oauth/v3/token
Request options 
[
  "headers" => [
    "Authorization" => "Basic dDgybmhvM0lkZU56WmNabmRmM3Frc2dEZFJmdWNoTkg6cnZYZEtaanVIVVI4azFTUG5FUmJ4UUNoSUpKYjYwZE5JaUlJY1RFSGpUSHI="
    "Content-Type" => "application/x-www-form-urlencoded"
    "Accept" => "application/json"
  ]
  "body" => "grant_type=client_credentials"
]
Response 200 
[
  "info" => [
    "header_size" => 586
    "request_size" => 368
    "total_time" => 0.159925
    "namelookup_time" => 0.015337
    "connect_time" => 0.030145
    "pretransfer_time" => 0.059882
    "size_upload" => 29.0
    "size_download" => 1007.0
    "speed_download" => 6333.0
    "speed_upload" => 182.0
    "download_content_length" => 1007.0
    "upload_content_length" => 29.0
    "starttransfer_time" => 0.159366
    "primary_ip" => "62.161.18.72"
    "primary_port" => 443
    "local_ip" => "83.166.133.85"
    "local_port" => 46876
    "http_version" => 2
    "protocol" => 2
    "scheme" => "HTTPS"
    "appconnect_time_us" => 59819
    "connect_time_us" => 30145
    "namelookup_time_us" => 15337
    "pretransfer_time_us" => 59882
    "starttransfer_time_us" => 159366
    "total_time_us" => 159925
    "effective_method" => "POST"
    "start_time" => 1788874582.5248
    "original_url" => "https://api.orange.com/oauth/v3/token"
    "pause_handler" => Closure(float $duration) {#1256
      class: "Symfony\Component\HttpClient\Response\CurlResponse"
      use: {
        $ch: CurlHandle {#1237 …}
        $multi: Symfony\Component\HttpClient\Internal\CurlClientState {#1265 …}
        $execCounter: -9223372036854775808
      }
    }
    "debug" => """
      *   Trying 62.161.18.72:443...\n
      * Connected to api.orange.com (62.161.18.72) port 443 (#0)\n
      * ALPN, offering h2\n
      * ALPN, offering http/1.1\n
      * successfully set certificate verify locations:\n
      *  CAfile: /etc/ssl/certs/ca-certificates.crt\n
      *  CApath: /etc/ssl/certs\n
      * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384\n
      * ALPN, server accepted to use http/1.1\n
      * Server certificate:\n
      *  subject: C=FR; L=ISSY LES MOULINEAUX; O=Orange SA; CN=*.apibackbone.orange.com\n
      *  start date: Sep 13 00:00:00 2025 GMT\n
      *  expire date: Sep 15 23:59:59 2026 GMT\n
      *  subjectAltName: host "api.orange.com" matched cert's "api.orange.com"\n
      *  issuer: C=US; O=DigiCert Inc; CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1\n
      *  SSL certificate verify ok.\n
      > POST /oauth/v3/token HTTP/1.1\r\n
      Host: api.orange.com\r\n
      Authorization: Basic dDgybmhvM0lkZU56WmNabmRmM3Frc2dEZFJmdWNoTkg6cnZYZEtaanVIVVI4azFTUG5FUmJ4UUNoSUpKYjYwZE5JaUlJY1RFSGpUSHI=\r\n
      Content-Type: application/x-www-form-urlencoded\r\n
      Accept: application/json\r\n
      User-Agent: Symfony HttpClient (Curl)\r\n
      Accept-Encoding: gzip\r\n
      Content-Length: 29\r\n
      \r\n
      * upload completely sent off: 29 out of 29 bytes\n
      * old SSL session ID is stale, removing\n
      * Mark bundle as not supporting multiuse\n
      < HTTP/1.1 200 OK\r\n
      < Server: nginx\r\n
      < Date: Tue, 08 Sep 2026 13:36:22 GMT\r\n
      < Content-Type: application/json; charset=utf-8\r\n
      < Content-Length: 1007\r\n
      < Connection: keep-alive\r\n
      < Access-Control-Allow-Origin: *\r\n
      < Ratelimit-Limit: 100\r\n
      < Ratelimit-Remaining: 85\r\n
      < Ratelimit-Reset: 1\r\n
      < Via: sekapi\r\n
      < X-Input-Reverse-Proxy: opoielbl3jp1n8c\r\n
      < X-Oapi-Request-Id: b483d5b8-93ab-4982-88e1-ab02327953ee#1210158\r\n
      < X-Ratelimit-Limit-Second: 100\r\n
      < X-Ratelimit-Remaining-Second: 85\r\n
      < X-Request-Id: 7873004b-4614-4779-8bb4-56b628a2afb6\r\n
      < X-Sekapi-Gw-Latency: 1\r\n
      < Strict-Transport-Security: max-age=31536000; includeSubDomains\r\n
      < \r\n
      """
  ]
  "response_headers" => [
    "HTTP/1.1 200 OK"
    "Server: nginx"
    "Date: Tue, 08 Sep 2026 13:36:22 GMT"
    "Content-Type: application/json; charset=utf-8"
    "Content-Length: 1007"
    "Connection: keep-alive"
    "Access-Control-Allow-Origin: *"
    "Ratelimit-Limit: 100"
    "Ratelimit-Remaining: 85"
    "Ratelimit-Reset: 1"
    "Via: sekapi"
    "X-Input-Reverse-Proxy: opoielbl3jp1n8c"
    "X-Oapi-Request-Id: b483d5b8-93ab-4982-88e1-ab02327953ee#1210158"
    "X-Ratelimit-Limit-Second: 100"
    "X-Ratelimit-Remaining-Second: 85"
    "X-Request-Id: 7873004b-4614-4779-8bb4-56b628a2afb6"
    "X-Sekapi-Gw-Latency: 1"
    "Strict-Transport-Security: max-age=31536000; includeSubDomains"
  ]
  "response_json" => [
    "access_token" => "eyJ0eXAiOiJKV1QiLCJ2ZXIiOiIxLjAiLCJhbGciOiJFUzM4NCIsImtpZCI6Ikg1RkdUNXhDUlJWU0NseG5vTXZCWEtUM1AyckhTRVZUNV9VdE16UFdCYTQifQ.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.9cQ3uuUzhNGmScXkng_kZ6VOHB4aQps8j_Y88D-KogCxOgqaSPDlz-rTJwJyQsGIEI_JCfbEv33_WroJ2shvtrgZBMN5k3SvqfnPd9z3ycYNivXNpYRmV-ovvw3974Vi"
    "token_type" => "Bearer"
    "expires_in" => 3600
    "scope" => "ope:orange-money_mpay_dev:v1:access ope:orange-money_mpay_mg:v1:access"
  ]
]
POST https://api.orange.com/orange-money-webpay/mg/v1/webpayment
Request options 
[
  "headers" => [
    "Authorization" => "Bearer eyJ0eXAiOiJKV1QiLCJ2ZXIiOiIxLjAiLCJhbGciOiJFUzM4NCIsImtpZCI6Ikg1RkdUNXhDUlJWU0NseG5vTXZCWEtUM1AyckhTRVZUNV9VdE16UFdCYTQifQ.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.9cQ3uuUzhNGmScXkng_kZ6VOHB4aQps8j_Y88D-KogCxOgqaSPDlz-rTJwJyQsGIEI_JCfbEv33_WroJ2shvtrgZBMN5k3SvqfnPd9z3ycYNivXNpYRmV-ovvw3974Vi"
    "Accept" => "application/json"
    "Content-Type" => "application/json"
  ]
  "json" => [
    "merchant_key" => "68d1eabe"
    "currency" => "MGA"
    "order_id" => "MDX-C0201C4B-4DF939CA"
    "amount" => 500
    "return_url" => "https://api.madex.mg/payment/orange/return?attempt=PMN6AA00F567E8E320260908133622&ref=MDX-C0201C4B&code=TRN6AA00F56147E320260908133622"
    "cancel_url" => "https://api.madex.mg/payment/orange/cancel?attempt=PMN6AA00F567E8E320260908133622&ref=MDX-C0201C4B&code=TRN6AA00F56147E320260908133622"
    "notif_url" => "https://api.madex.mg/api/callback/orange/notify/PMN6AA00F567E8E320260908133622"
    "lang" => "fr"
    "reference" => "ref MDX-C0201C4B-4DF939CA"
  ]
]
Response 201 
[
  "info" => [
    "header_size" => 810
    "request_size" => 1683
    "total_time" => 0.082728
    "namelookup_time" => 4.0E-5
    "connect_time" => 4.0E-5
    "pretransfer_time" => 0.000102
    "size_upload" => 574.0
    "size_download" => 293.0
    "speed_download" => 3573.0
    "speed_upload" => 7000.0
    "download_content_length" => 293.0
    "upload_content_length" => 574.0
    "starttransfer_time" => 0.082524
    "primary_ip" => "62.161.18.72"
    "primary_port" => 443
    "local_ip" => "83.166.133.85"
    "local_port" => 46876
    "http_version" => 2
    "protocol" => 2
    "scheme" => "HTTPS"
    "appconnect_time_us" => 40
    "connect_time_us" => 40
    "namelookup_time_us" => 40
    "pretransfer_time_us" => 102
    "starttransfer_time_us" => 82524
    "total_time_us" => 82728
    "effective_method" => "POST"
    "start_time" => 1788874582.6853
    "original_url" => "https://api.orange.com/orange-money-webpay/mg/v1/webpayment"
    "pause_handler" => Closure(float $duration) {#1242
      class: "Symfony\Component\HttpClient\Response\CurlResponse"
      use: {
        $ch: CurlHandle {#1250 …}
        $multi: Symfony\Component\HttpClient\Internal\CurlClientState {#1265 …}
        $execCounter: -9223372036854775783
      }
    }
    "debug" => """
      * Found bundle for host api.orange.com: 0x55861cd62090 [serially]\n
      * Can not multiplex, even if we wanted to!\n
      * Re-using existing connection! (#0) with host api.orange.com\n
      * Connected to api.orange.com (62.161.18.72) port 443 (#0)\n
      > POST /orange-money-webpay/mg/v1/webpayment HTTP/1.1\r\n
      Host: api.orange.com\r\n
      Authorization: Bearer eyJ0eXAiOiJKV1QiLCJ2ZXIiOiIxLjAiLCJhbGciOiJFUzM4NCIsImtpZCI6Ikg1RkdUNXhDUlJWU0NseG5vTXZCWEtUM1AyckhTRVZUNV9VdE16UFdCYTQifQ.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.9cQ3uuUzhNGmScXkng_kZ6VOHB4aQps8j_Y88D-KogCxOgqaSPDlz-rTJwJyQsGIEI_JCfbEv33_WroJ2shvtrgZBMN5k3SvqfnPd9z3ycYNivXNpYRmV-ovvw3974Vi\r\n
      Accept: application/json\r\n
      Content-Type: application/json\r\n
      User-Agent: Symfony HttpClient (Curl)\r\n
      Accept-Encoding: gzip\r\n
      Content-Length: 574\r\n
      \r\n
      * upload completely sent off: 574 out of 574 bytes\n
      * Mark bundle as not supporting multiuse\n
      < HTTP/1.1 201 Created\r\n
      < Server: nginx\r\n
      < Date: Tue, 08 Sep 2026 13:36:22 GMT\r\n
      < Content-Type: application/json; charset=utf-8\r\n
      < Content-Length: 293\r\n
      < Connection: keep-alive\r\n
      < Access-Control-Allow-Origin: *\r\n
      < Access-Control-Expose-Headers: X-Result-Count, X-Total-Count, X-OAPI-Request-Id, X-Rate-Limit-Limit, X-Rate-Limit-Remaining, X-Rate-Limit-Reset\r\n
      * Added cookie 4281922fe76c97b33c73c6e1d6f259b4="c647be402d1c1c515bceac6b2910247d" for domain api.orange.com, path /, expire 0\n
      < Set-Cookie: 4281922fe76c97b33c73c6e1d6f259b4=c647be402d1c1c515bceac6b2910247d; path=/; HttpOnly\r\n
      * Added cookie BIGipServer~naomi-ginefa~pool-mg-ose-HTTP="!iljWAKrkoDxS7L68uG19SD5dOmmhzDngJJGmNSGH/mP+DVlHKTObKcyFv/v15TrxMsIyYvwmPDWDl/3j4TwSnwF0DqZkDCW6ZGBjtAc=" for domain api.orange.com, path /, expire 0\n
      < Set-Cookie: BIGipServer~naomi-ginefa~pool-mg-ose-HTTP=!iljWAKrkoDxS7L68uG19SD5dOmmhzDngJJGmNSGH/mP+DVlHKTObKcyFv/v15TrxMsIyYvwmPDWDl/3j4TwSnwF0DqZkDCW6ZGBjtAc=; path=/; Httponly; Secure\r\n
      < Strict-Transport-Security: max-age=31536000; includeSubDomains\r\n
      < X-Oapi-Request-Id: opapccballrt06-772599-1385315-20\r\n
      < Strict-Transport-Security: max-age=31536000; includeSubDomains\r\n
      < \r\n
      """
  ]
  "response_headers" => [
    "HTTP/1.1 201 Created"
    "Server: nginx"
    "Date: Tue, 08 Sep 2026 13:36:22 GMT"
    "Content-Type: application/json; charset=utf-8"
    "Content-Length: 293"
    "Connection: keep-alive"
    "Access-Control-Allow-Origin: *"
    "Access-Control-Expose-Headers: X-Result-Count, X-Total-Count, X-OAPI-Request-Id, X-Rate-Limit-Limit, X-Rate-Limit-Remaining, X-Rate-Limit-Reset"
    "Set-Cookie: 4281922fe76c97b33c73c6e1d6f259b4=c647be402d1c1c515bceac6b2910247d; path=/; HttpOnly"
    "Set-Cookie: BIGipServer~naomi-ginefa~pool-mg-ose-HTTP=!iljWAKrkoDxS7L68uG19SD5dOmmhzDngJJGmNSGH/mP+DVlHKTObKcyFv/v15TrxMsIyYvwmPDWDl/3j4TwSnwF0DqZkDCW6ZGBjtAc=; path=/; Httponly; Secure"
    "Strict-Transport-Security: max-age=31536000; includeSubDomains"
    "X-Oapi-Request-Id: opapccballrt06-772599-1385315-20"
    "Strict-Transport-Security: max-age=31536000; includeSubDomains"
  ]
  "response_json" => [
    "status" => 201
    "message" => "OK"
    "pay_token" => "v13mfoazal2nfjd0p0emnhem8psqpztpfwptbgwedvoauhqgdkwmkl1sxpkpsjfw"
    "payment_url" => "https://mpayment.orange-money.com/mg/mpayment/abstract/v13mfoazal2nfjd0p0emnhem8psqpztpfwptbgwedvoauhqgdkwmkl1sxpkpsjfw"
    "notif_token" => "khloc5etefeouhkfild6qtc7kjub45vo"
  ]
]