# GoBiz e-commerce Issue #0002 UPP Method 0280 returns "Invalid Secure Hash Value, failed validate secure hash" --- ### 0280 Request https://dev.finexusgroup.com:4445/upp/faces/upp/payment.xhtml?h001_MTI=0280&h002_VNO=05&h003_TDT=20201216&h004_TTM=11212359&f001_MID=000000000010999&f007_TxnAmt=000000010000&f010_CurrCode=458&f019_ExpTxnAmt=2&f247_OrgTxnAmt=&f248_OrgCurrCode=&f249_TxnCh=WEB&f250_CCProcFeeAmt=&f251_DDProcFeeAmt=&f252_PromoCode=&f253_CntyCode=MY&f255_IssCode=&f256_FICode=&f260_ServID=UM&f261_HostID=&f262_SessID=&f263_MRN=TR-2012-00000021608088883601&f264_Locale=en&f270_ORN=4324234&f271_ODesc=Hello&f278_EMailAddr=ijaas%40dex-labs.com&f279_HP=0176285758&f280_RURL_UPPPS=http%3A%2F%2Flocalhost%3A3000%2Fapi%2FTransactions%2Fpublic%2Fprocess%2FTA-201216-000001&f281_RURL_UPPPU=http%3A%2F%2Flocalhost%3A3000%2Fapi%2FTransactions%2Fpublic%2Fprocess%2FTA-201216-000001&f282_RURL_UPPPC=http%3A%2F%2Flocalhost%3A3000%2Fapi%2FTransactions%2Fpublic%2Fprocess%2FTA-201216-000001&f285_IPAddr=&f287_ExpOrgTxnAmt=&f350_CrdTyp=&f354_TID=&f325_ECommMercInd=&f339_TokenFlg=&f344_MercCustId=&f347_TokenShrtNm=&f362_PreAuthFlg=&f363_InvNum=&f364_Fee=&t001_SHT=SH2&t002_SHV=ECD8C5DAF683C3D8521BDC74E4753905C7C88E02BE90706F423044113FB79B7D **Full Data Object** ``` { h001_MTI: '0280', h002_VNO: '05', h003_TDT: '20201216', h004_TTM: '11212359', f001_MID: '000000000010999', f007_TxnAmt: '000000010000', f010_CurrCode: '458', f019_ExpTxnAmt: '2', f247_OrgTxnAmt: '', f248_OrgCurrCode: '', f249_TxnCh: 'WEB', f250_CCProcFeeAmt: '', f251_DDProcFeeAmt: '', f252_PromoCode: '', f253_CntyCode: 'MY', f255_IssCode: '', f256_FICode: '', f260_ServID: 'UM', f261_HostID: '', f262_SessID: '', f263_MRN: 'TR-2012-00000021608088883601', f264_Locale: 'en', f270_ORN: '4324234', f271_ODesc: 'Hello', f278_EMailAddr: 'ijaas@dex-labs.com', f279_HP: '0176285758', f280_RURL_UPPPS: 'http://localhost:3000/api/Transactions/public/process/TA-201216-000001', f281_RURL_UPPPU: 'http://localhost:3000/api/Transactions/public/process/TA-201216-000001', f282_RURL_UPPPC: 'http://localhost:3000/api/Transactions/public/process/TA-201216-000001', f285_IPAddr: '', f287_ExpOrgTxnAmt: '', f350_CrdTyp: '', f354_TID: '', f325_ECommMercInd: '', f339_TokenFlg: '', f344_MercCustId: '', f347_TokenShrtNm: '', f362_PreAuthFlg: '', f363_InvNum: '', f364_Fee: '', t001_SHT: 'SH2', t002_SHV: 'ECD8C5DAF683C3D8521BDC74E4753905C7C88E02BE90706F423044113FB79B7D' } ``` **Hashed String** ``` h001_MTI=0280&h002_VNO=05&h003_TDT=20201216&h004_TTM=11361971&f001_MID=000000000010999&f007_TxnAmt=000000010000&f010_CurrCode=458&f019_ExpTxnAmt=2&f247_OrgTxnAmt=&f248_OrgCurrCode=&f249_TxnCh=WEB&f250_CCProcFeeAmt=&f251_DDProcFeeAmt=&f252_PromoCode=&f253_CntyCode=MY&f255_IssCode=&f256_FICode=&f260_ServID=UM&f261_HostID=&f262_SessID=&f263_MRN=TR-2012-00000021608089779721&f264_Locale=en&f270_ORN=4324234&f271_ODesc=Hello&f278_EMailAddr=ijaas%40dex-labs.com&f279_HP=0176285758&f280_RURL_UPPPS=http%3A%2F%2Flocalhost%3A3000%2Fapi%2FTransactions%2Fpublic%2Fprocess%2FTA-201216-000001&f281_RURL_UPPPU=http%3A%2F%2Flocalhost%3A3000%2Fapi%2FTransactions%2Fpublic%2Fprocess%2FTA-201216-000001&f282_RURL_UPPPC=http%3A%2F%2Flocalhost%3A3000%2Fapi%2FTransactions%2Fpublic%2Fprocess%2FTA-201216-000001&f285_IPAddr=&f287_ExpOrgTxnAmt=&f350_CrdTyp=&f354_TID=&f325_ECommMercInd=0&f339_TokenFlg=N&f344_MercCustId=&f347_TokenShrtNm=&f362_PreAuthFlg=N&f363_InvNum=&f364_Fee=B96856FA91749A259F71340E3C6BC3478524320F218587D22071A35DD4E7B4FF ``` **Hash Key** ``` B96856FA91749A259F71340E3C6BC3478524320F218587D22071A35DD4E7B4FF ``` **SH256 HMAC Hash Result** ``` ECD8C5DAF683C3D8521BDC74E4753905C7C88E02BE90706F423044113FB79B7D ``` --- ### 0290 Response http://localhost:3000/api/Transactions/public/process/TA-201216-000001?h001_MTI=0290&h002_VNO=05&h003_TDT=20201216&h004_TTM=11212359&f001_MID=000000000010999&f004_PAN=&f005_ExpDate=&f006_TxnDtTm=20201216112123&f007_TxnAmt=000000010000&f009_RespCode=12&f010_CurrCode=458&f011_AuthIDResp=&f019_ExpTxnAmt=2&f023_RRN=201216614467&f024_OrgRespCode=&f254_DDRespCode=22&f256_FICode=&f257_PGRN=201216112214AC0860UM&f258_TxnStatDetCde=5015&f259_TxnStatMsg=Invalid+Secure+Hash+Value%2C+failed+validate+secure+hash&f260_ServID=UM&f261_HostID=&f262_SessID=&f263_MRN=TR-2012-00000021608088883601&f270_ORN=4324234&f277_DDRN=&f283_UPP_PM=&f286_OrgDDRespCode=&f350_CrdTyp=&f352_AcqBank=&f353_IPPTenure=&f325_ECommMercInd=&f339_TokenFlg=&f344_MercCustId=&f346_Token=&f347_TokenShrtNm=&f348_MaskPAN=&t001_SHT=SH2&t002_SHV=F8E2AAE8AD042FEAC7D2E8837D4D5B3231D5559478E50C48CFB54B194EE6B380 **Response Data** ``` { h001_MTI: '0290', h002_VNO: '05', h003_TDT: '20201216', h004_TTM: '11212359', f001_MID: '000000000010999', f004_PAN: '', f005_ExpDate: '', f006_TxnDtTm: '20201216112123', f007_TxnAmt: '000000010000', f009_RespCode: '12', f010_CurrCode: '458', f011_AuthIDResp: '', f019_ExpTxnAmt: '2', f023_RRN: '201216614467', f024_OrgRespCode: '', f254_DDRespCode: '22', f256_FICode: '', f257_PGRN: '201216112214AC0860UM', f258_TxnStatDetCde: '5015', f259_TxnStatMsg: 'Invalid Secure Hash Value, failed validate secure hash', f260_ServID: 'UM', f261_HostID: '', f262_SessID: '', f263_MRN: 'TR-2012-00000021608088883601', f270_ORN: '4324234', f277_DDRN: '', f283_UPP_PM: '', f286_OrgDDRespCode: '', f350_CrdTyp: '', f352_AcqBank: '', f353_IPPTenure: '', f325_ECommMercInd: '', f339_TokenFlg: '', f344_MercCustId: '', f346_Token: '', f347_TokenShrtNm: '', f348_MaskPAN: '', t001_SHT: 'SH2', t002_SHV: 'F8E2AAE8AD042FEAC7D2E8837D4D5B3231D5559478E50C48CFB54B194EE6B380' } ```