Middleware: iosCheckToken

// Respon sukses:
{
  "status": "00",
  "message": "Sukses",
  "token": "eyJhbGciOiJIUzI1NiJ9...",
  "signature": "base64_signature"
}

// Request Headers:
Authorization: Bearer <access_token>
X-TIMESTAMP: 2025-01-01T10:00:00+07:00
X-SIGNATURE: <hmac_sha512>
X-CLIENT-ID: <device_imei_encrypted>

// Respon sukses:
{
  "status": "00",
  "message": "Sukses",
  "customer_id": "enc_noid",
  "customer_name": "Nama Nasabah",
  "customer_pin": "enc_pin",
  "account_list": "enc_[norek#nama#saldo#produk]",
  "bank_key": "enc_BPD_PREFIX<>BPD_HASHCODE",
  "bank_list": "kode1-nama1#kode2-nama2#...",
  "ppob_list": "TYPE;CODE;NAME;NOMINAL;ADMIN#..."
}

// Validasi: imei_code + username + pass_crypto dari gmob_nasabah
// Respon sukses:
{
  "status": "00",
  "message": "Sukses",
  "account_list": "enc_daftar_rekening",
  "bank_key": "enc_key",
  "bank_list": "...",
  "ppob_list": "..."
}

// Update gmob_token: status = 'closed', end_time = CURRENT_TIMESTAMP
{ "status": "00", "message": "Logout berhasil." }

// Query params (terenkripsi AES):
?pass_old=enc_old&pass_new=enc_new
// Sukses: {"status":"00","message":"Sukses"}
// Gagal:  {"status":"01","message":"Kata sandi tidak sama."}

// Query params (terenkripsi AES):
?pin_old=enc_old&pin_new=enc_new
// Sukses: {"status":"00","message":"Sukses"}
// Gagal:  {"status":"01","message":"PIN tidak sama."}

// Mengambil semua rekening dari gmob_rekening berdasarkan noid
// Saldo diambil real-time dari gtb_folio (SUM credit-debit)
// Format data setelah dekripsi:
[norek#nama_nasabah#saldo#jenis_produk]
// Contoh: [01234567890#I KETUT WIRA#2500000#Tabungan]

// Status error: 84 = data tidak ada, 01 = tidak aktif

// Request: account_no (enc), start_date, end_date
// Query ke gtb_folio JOIN gum_kdtrs
// Format respon: [tgl#debval#trans_no#amount#keterangan]

// Mengambil mutasi dari gak_mutasi / tabel dinamis gte_folio, gtf_folio, dll
// berdasarkan prefix nomor rekening (10/11=Takamas, 20=Sipura, dll)
// Respon terenkripsi AES

// Request: account_to (enc nomor rekening tujuan)
// Respon: { "status":"00", "product_type":"Tabungan", "customer_name":"Nama" }
// Error: 01 = rekening tujuan tidak aktif

// Hash formula: SHA-256(from+to+amount+namaDari+namaTujuan+remark+BPD_HASHCODE)
{
  "account_from": "enc_norek_asal",
  "account_to": "enc_norek_tujuan",
  "amount": "enc_nominal",
  "name_from": "enc_nama_pengirim",
  "name_to": "enc_nama_penerima",
  "remark": "enc_keterangan",
  "hash_code": "sha256_hash"
}
// Sukses: { "status":"00", "balance": 2500000 }
// Error: 62=hash salah, 01=tdk aktif, 04=saldo kurang, 25=min, 26=limit

// Tambahan field: ref_no (referensi unik), pin (enc)
// Proses: insert ke gmob_transfer, update folio & mutasi
// Sukses: { "status":"00", "trans_no":"REF123", "amount":500000, "balance":2000000 }
// Error: 63=hash salah, 23=duplikat ref, 24=gagal proses

// Request: bank_code, account_to (enc), hash_code
// Proses: request ke BPD Account Inquiry External
// Respon: { "status":"00", "account_name":"NAMA PENERIMA", "bank_name":"BNI" }

// Hash: SHA-256(from+bankCode+to+amount+BPD_HASHCODE)
// Respon: { "status":"00", "transfer_cost":6500, "balance":2500000 }
// Error: 51/52/53=hash salah, 40=saldo kurang

// Alur: Debit folio LPD -> Kirim ke BPD API -> Catat gcore_transfer
// BPD response code sukses: 2001800
// Error: 45=duplikat ref, 68=BPD timeout

// Request: account_no (enc), product_code, customer_id (enc)
// Endpoint FastPay: POST https://rajabiller.fastpay.co.id/transaksi/api_json.php
// Respon: { "status":"00", "tagihan":250000, "admin":2000, "customer_name":"NAMA" }
// Error: 04=saldo kurang, 05=deposit PPOB kurang, 26=limit harian

// Tambahan: nominal (enc), hash_code, pin (enc)
// Proses: validasi -> create gmob_payment -> call FastPay API -> update folio
// Respon: { "status":"00", "tagihan":250000, "admin":2000, "remark":"PLN|ID|TOKEN" }

// IAK API (idalamat.com):
// Prepaid: POST https://prepaid.iak.id/api/top-up
// Postpaid: POST https://mobilepulsa.net/api/v1/bill/check
// Signature IAK: MD5(username + apikey + ref_id)
// Respon format sama dengan /ppob/*

// Headers: X-TIMESTAMP, X-CLIENT-KEY, X-SIGNATURE
// Body: { "grantType": "client_credentials" }
// Respon: {
//   "responseCode": "2002500",
//   "accessToken": "token_string",
//   "tokenType": "BearerToken",
//   "expiresIn": 900
// }

// Headers: Authorization: Bearer <token>, X-TIMESTAMP, X-SIGNATURE
// X-PARTNER-ID, X-EXTERNAL-ID
// HMAC-SHA512: POST:/v1.0/transfer-va/inquiry:token:sha256(body):timestamp

// Body:
{
  "partnerServiceId": "  989191",
  "customerNo": "012345678901234",
  "virtualAccountNo": "989191012345678901234",
  "inquiryRequestId": "unique-id",
  "amount": { "value": "500000.00", "currency": "IDR" },
  "additionalInfo": { "terminalType": "01", "terminalId": "ATM001" }
}

// Sukses (200): responseCode: "2002400"
// virtualAccountName: nama nasabah, inquiryStatus: "00"

// Proses: kredit nasabah di gtb_folio + gak_mutasi + gcore_transfer
// Body: paymentRequestId, paidAmount, sourceAccountNo, referenceNo
// Sukses (200): responseCode: "2002500", paymentFlagStatus: "00"

// Dari app mobile iOS, buat token 6 digit untuk digunakan di ATM
// Request: account_no, token, hash_code
// Proses: insert/update gmob_token status='open'
// Respon: { "status":"00", "data":"TOKEN6DIGIT" }

// Dari ATM, validasi token yang dimasukkan nasabah
// Request: token, transaction_code (01=tarik, 02=setor), hash_code
// Respon: { "status":"00", "account_no":"norek", "customer_name":"NAMA" }
// Error: 30=hash salah, 40=IP tidak dikenal

// Request: account_no, token, amount, transaction_datetime, hash_code
// Proses: kurangi saldo, update gtb_folio & gak_mutasi
// Respon: { "responseCode":"00", "balance":2000000 }
// Error: 61=saldo kurang, 14=rekening tidak aktif

// Proses: tambah saldo, update gtb_folio & gak_mutasi
// Respon: { "responseCode":"00", "balance":3000000 }

// Hapus record folio & mutasi yang sudah diproses
// Request: account_no, token, trans_no, hash_code
// Respon: { "responseCode": "00" }

// Menerima callback dari FastPay / provider PPOB
// Selalu mengembalikan:
{ "status": "99", "rc": "<rc_dari_provider>" }

// Install ODBC Driver 17 + ekstensi PHP sqlsrv:
curl https://packages.microsoft.com/keys/microsoft.asc | apt-key add -
sudo ACCEPT_EULA=Y apt-get install msodbcsql17 unixodbc-dev
sudo pecl install sqlsrv pdo_sqlsrv
echo "extension=sqlsrv.so" >> /etc/php/7.4/cli/php.ini

// Penyebab: Path PUBLIC_KEY_LPD / MASTER_BANK_LIST tidak valid
// Pastikan file ada dan .env menggunakan path absolut yang benar:
ls -la /path/to/keys/public_key.pem
chmod 644 keys/public_key.pem

// SOLUSI: Gunakan PHP 7.4 (sangat disarankan, jangan PHP 8.x)
sudo update-alternatives --config php
# Pilih php7.4

// Penyebab: case-sensitive path di Linux
// Path di composer.json: "App/Helpers/..." (huruf A besar)
// Path aktual: "app/Helpers/..." (huruf a kecil)
// Solusi: composer dump-autoload --no-scripts

// Tambahkan IP development ke .env:
GIO_WHITE_LIST=|103.66.86.234|127.0.0.1|YOUR_DEV_IP

// Atau di iosAccessMdw.php check_access():
// Tambahkan kondisi || $noip == "127.0.0.1"

// Token valid 3 menit dari pembuatan (iosHelper::Gio_CheckToken)
// Solusi: 
sudo ntpdate -u pool.ntp.org  // Sinkronkan waktu server
// Pastikan ada record di gmob_token yang masih fresh

sudo chmod -R 775 storage/ bootstrap/cache/
sudo chown -R www-data:www-data storage/
mkdir -p storage/logs/{token,transfer-in/inquiry,transfer-in/posting,access,tabungan,transfer-AR,transfer-AB,ppob}