Next.js ile iyzico 3D Secure entegrasyonu: adım adım rehber

npm install better-payment

IYZICO_API_KEY=sandbox-...
IYZICO_SECRET_KEY=sandbox-...
APP_URL=http://localhost:3000

// lib/payment.ts
import { betterPayment, iyzico } from 'better-payment';

const createPayment = () =>
  betterPayment({
    mode: process.env.NODE_ENV === 'production' ? 'production' : 'sandbox',
    providers: {
      iyzico: iyzico({
        apiKey: process.env.IYZICO_API_KEY!,
        secretKey: process.env.IYZICO_SECRET_KEY!,
      }),
    },
    handler: {
      allowedActions: ['payment/init-3ds', 'payment/complete-3ds'],

      // Tutarları tarayıcıdan değil, siparişinizden alın
      transformRequest: async (ctx) => {
        if (ctx.action !== 'payment/init-3ds') return ctx.body;
        const order = await db.orders.find(ctx.body?.orderId);
        return {
          price: order.total,
          paidPrice: order.total,
          currency: 'TRY',
          conversationId: order.id,
          basketId: order.id,
          callbackUrl: `${process.env.APP_URL}/api/pay/iyzico/payment/complete-3ds`,
          paymentCard: ctx.body?.paymentCard,
          buyer: order.buyer,
          shippingAddress: order.shippingAddress,
          billingAddress: order.billingAddress,
          basketItems: order.items,
        };
      },

      // Yalnızca doğrulanmış sonuçlar buraya gelir
      onCallback: async (result) => {
        await db.orders.updatePayment(result.paymentId, result.status);
      },

      // 3D Secure'dan dönen müşteriyi sipariş sayfasına yönlendirin
      callbackRedirect: (result) => `/orders/${result.paymentId}?payment=${result.status}`,
    },
  });

let instance: ReturnType<typeof createPayment> | undefined;
export const getBetterPayment = () => (instance ??= createPayment());

// app/api/pay/[...path]/route.ts
import { toNextJsHandler } from 'better-payment/next';
import { getBetterPayment } from '@/lib/payment';

export const { GET, POST } = toNextJsHandler(getBetterPayment);

const res = await fetch('/api/pay/iyzico/payment/init-3ds', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({ orderId, paymentCard }),
});

const result = await res.json();
if (result.status === 'pending' && result.threeDSHtmlContent) {
  document.open();
  document.write(result.threeDSHtmlContent);
  document.close();
}