Alpha Tester Required!
(Read everything before applying)
I've just finished the first API service: Receive Payments APIIt can be accessed here:
It works very similarly to
Blockchain's API, with these basic differences:
- It works with CAPTcoin instead of Bitcoin (of course)
- It has an extra security for the merchant: A hash is sent with every callback. The actual key is sent only in the body of the SSL request when the address is generated. This is to make sure it's encrypt (unlike Blockchain, which asks the merchants to send a secret key via GET). So even if an attacker succeeds sniffing the traffic between the API and the merchant's server, he won't be able to simulate a callback. Learn more here (look for "salt_hash" and "security_hash").
- Transactions are forwarded to the merchant only after 6 confirmations. This is to prevent double-spend attacks (an extra security for the API).
- The code is 100% made from scratch.
This is the basic diagram explaining how it works:
This service is in alpha stage nowSo I need testers:
Beware all generated addresses will be destroyed after this phase is over.
Do not use it on production yet.To test, please go to:
https://api.captcoin.com/and read the full description and instructions.
Basically, you need to call this URL, either from your browser (to test) or from your server:
https://api.captcoin.com/receive?method=create&address=$receiving_address&callback=$callback_url
Where:
- $receiving_address: Your CAPTcoin address. Payments will be forwarded there
- $callback_url: The URL which will be called
Ideally, it'd be great if some of you can implement your own $callback_url for testing purposes.
The site contains instructions and basic examples on how to achieve that.
(I'm still working on a fork of
https://github.com/blockchain/receive_payment_php_demo with a complete working example)
If you're not able to do that, you can use this Callbak URL:
https://api.captcoin.com/test.php
Whenever it is called, it will just log the event here:
https://api.captcoin.com/log.txtso you can confirm it.
I made a simple tool to easily perform these tests:
https://api.captcoin.com/test/Just follow these steps:
- Go to https://api.captcoin.com/test/
- Enter your CAPTcoin address and your callback URL, and click "Send"
- Verify the response
- Check the callback that will be sent, and confirm by clicking "Test the Callback URL"
- Verify the response is as expected
- If that works fine, go eject and send some amount between ⟳0.1 and ⟳1 to the generated address.
- Check the callbacks (for example https://api.captcoin.com/log.txt) every 3 minutes.
- Verify the coins are forwarded after 6 confirmations.
Please, help testing this to be 100% it's ready for production
Post any feedback.
I repeat the warning: All generated addresses will be destroyed after the alpha period is over. Do not use it on production yet.
