Push Payment to Devices

POST /openapi/v1/devices/payments/push

Push payment information (amount + QR code) directly to physical devices at the checkout counter.

POS Payload (Smart POS):

{
  "serial_no": "00059012710",
  "order_id": "0129210912",
  "amount": 150000,
  "type": "pos"
}

Soundbox Payload:

{
  "serial_no": "SB-001234",
  "amount": 150000,
  "qr_string": "00020101021138550010A000000727...",
  "type": "soundbox"
}

Field	Required	Description
serial_no	✅	Device serial number
order_id	✅ if type == "pos"	Order ID
amount	✅	Amount (VND)
qr_string	✅ if type == "soundbox"	QR string from the Create QR API
type	✅	"pos" or "soundbox"

cURL

curl --location '<base_url>/openapi/v1/devices/payments/push' \
  --header 'Partner-Code: YOUR_PARTNER_CODE' \
  --header 'Content-Type: application/json' \
  --header 'Authorization: Bearer eyJhbGciOiJSUzI1NiIsI…' \
  --data '{
  "data": ENCRYPTED_PAYLOAD
}'

Python

import requests

url = "<base_url>/openapi/v1/devices/payments/push"

payload = {"data": "ENCRYPTED_PAYLOAD"}
headers = {
    "Partner-Code": "YOUR_PARTNER_CODE",
    "Content-Type": "application/json",
    "Authorization": "Bearer eyJhbGciOiJSUzI1NiIsI…",
}

response = requests.post(url, headers=headers, json=payload)
print(response.text)

Go

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	url := "<base_url>/openapi/v1/devices/payments/push"
	body := strings.NewReader(`{"data":"ENCRYPTED_PAYLOAD"}`)

	req, _ := http.NewRequest("POST", url, body)
	req.Header.Set("Partner-Code", "YOUR_PARTNER_CODE")
	req.Header.Set("Content-Type", "application/json")
	req.Header.Set("Authorization", "Bearer eyJhbGciOiJSUzI1NiIsI…")

	resp, _ := http.DefaultClient.Do(req)
	defer resp.Body.Close()

	result, _ := io.ReadAll(resp.Body)
	fmt.Println(string(result))
}

JavaScript

const response = await fetch("<base_url>/openapi/v1/devices/payments/push", {
  method: "POST",
  headers: {
    "Partner-Code": "YOUR_PARTNER_CODE",
    "Content-Type": "application/json",
    "Authorization": "Bearer eyJhbGciOiJSUzI1NiIsI…",
  },
  body: JSON.stringify({ data: "ENCRYPTED_PAYLOAD" }),
});

const result = await response.text();
console.log(result);

Request

Headers

Name	Required	Description
Partner-Code	✅	Merchant identifier code (provided by TCONNECT)
Content-Type	✅	application/json
Authorization	✅	Bearer <access_token>

Body

Field	Type	Required	Description
data	string	✅	AES-256-CBC encrypted payload as Hexadecimal

Response

200 — Command sent to device successfully

Field	Type	Description
message	string	Confirmation of command dispatch status (e.g. "Successfully pushed new payment to Soundbox")