Integração com pix BB

[nildglan]

bom dia pessoal estou fazendo a homologação do pix pelo banco do brasil e coloquei em produção, e coloquei as credenciais e veja o log

 

 

Atribuindo PSP: TACBrPSPBancoDoBrasil, Nome: ACBrPSPBancoDoBrasil
CriarCobrancaImediata( F37875808A5948998456FAE2AE56722E )
PrepararHTTP
Autenticar
LimparHTTP
TransmitirHttp( POST, https://oauth.bb.com.br/oauth/token )
ConfigurarHTTP
ConfigurarProxy
ConfigurarTimeOut
ConfigurarHeaders( POST, https://oauth.bb.com.br/oauth/token )
  Req.Headers:
Authorization: Basic ZXlKcFpDSTZJbUk1WkdKaU1HWXROVEZqWkNJc0ltTnZaR2xuYjFCMVlteHBZMkZrYjNJaU9qQXNJbU52WkdsbmIxTnZablIzWVhKbElqbzRNekEzTUN3aWMyVnhkV1Z1WTJsaGJFbHVjM1JoYkdGallXOGlPako5OmV5SnBaQ0k2SWpCaFpqQmhNRGN0TmpNMVlTMDBNell6TFdJd1pUQXRNR1ZtTUdNek1tSTRaVGRpTXpkaVlUUWlMQ0pqYjJScFoyOVFkV0pzYVdOaFpHOXlJam93TENKamIyUnBaMjlUYjJaMGQyRnlaU0k2T0RNd056QXNJbk5sY1hWbGJtTnBZV3hKYm5OMFlXeGhZMkZ2SWpveUxDSnpaWEYxWlc1amFXRnNRM0psWkdWdVkybGhiQ0k2TVN3aVlXMWlhV1Z1ZEdVaU9pSndjbTlrZFdOaGJ5SXNJbWxoZENJNk1UY3lORGcxTVRRM05USXdPWDA=
Accept-Encoding: gzip, compress, deflate

  Req.Body:
grant_type=client_credentials&scope=cob.write%20cob.read%20pix.write%20pix.read
  ResultCode: 200 - OK
  Sock.LastError: 0
  Resp.Headers:
HTTP/1.1 200 OK
Cache-Control: private, no-store, must-revalidate, max-age=1, s-max-age=1
Connection: Keep-Alive
Date: Wed, 28 Aug 2024 13:28:16 GMT
Pragma: no-cache
Content-Length: 1304
Content-Type: application/json
Access-Control-Allow-Headers: Authorization, X-br-com-bb-prop.1, X-br-com-bb-prop.2, X-br-com-bb-prop.3, X-br-com-bb-prop.4, X-br-com-bb-prop.5, X-br-com-bb-prop.6, X-br-com-bb-prop.7, X-br-com-bb-prop.8, X-br-com-bb-prop.9, X-br-com-bb-prop.10, X-br-com-bb-prop.11, X-br-com-bb-prop.12, X-br-com-bb-prop.13, X-br-com-bb-prop.14, X-br-com-bb-prop.15, X-br-com-bb-tipo-identificador, X-br-com-bb-tipo-credencial, X-br-com-bb-oat-tipo-identificador, X-br-com-bb-oat-tipo-credencial, x-br-com-bb-oat-token-otp, Content-type, Accept, Origin, Charset, Accept-Language
Set-Cookie: JSESSIONID=9N6ZLDSdkuBhbJMUd3MHuApcKxkN6-b2fjyGtSEH84mtza29Fxxu!1300589566; path=/; secure; HttpOnly
Charset: UTF-8
X-XSS-Protection: 1
Access-Control-Allow-Methods: POST
X-ORACLE-DMS-ECID: 88733b37-89b1-4799-badf-6e39c474dafd-00221309
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
x-br-com-bb-oat-versao: 1.13.20
x-br-com-bb-oat-servidor: pxl1oat2b011_oat-servidor-autorizacao-1
X-ORACLE-DMS-RID: 0
Access-Control-Expose-Headers: Content-Type, WWW-Authenticate, Cache-Control, Pragma, Vary, Content-Encoding, X-br-com-bb-prop.1, X-br-com-bb-prop.2, X-br-com-bb-prop.3, X-br-com-bb-prop.4, X-br-com-bb-prop.5, X-br-com-bb-prop.6, X-br-com-bb-prop.7, X-br-com-bb-prop.8, X-br-com-bb-prop.9, X-br-com-bb-prop.10, X-br-com-bb-prop.11, X-br-com-bb-prop.12, X-br-com-bb-prop.13, X-br-com-bb-prop.14, X-br-com-bb-prop.15 x-br-com-bb-oat-titulares-conta
Access-Control-Max-Age: 8400
Strict-Transport-Security: max-age=157680000

Resp.Body:
{"access_token":"HCBTzS7xW1-hUnrKq6l59wguRLOsFWt44ergZom0DjiXnYAl1yleaUdqtKD_mx4rQHJ92hFJUawc-iBRZ9cfcw.9zhyjfKKLwyDBK4dq26T_P-WUkmQQX1HJxwGSgFAtuciiyNq6aetxmW7Se-B_WctNgm9Zv06p7G-KC--Wvwuid83s6xlpAQXd5yflJV2tvYj_Glrp2JAJGDrMuOscGoxRsTpzY2R_OtL4r_V-NCaNI3zp-XRhRRKv652CsOz_bvx2brXgyNrgry1ISVC1WYQQ6-ii48Li_9XMcrnyEZ6H3ZlSbZVi_kpuZlhZXlGLeNaKqBGVKZu18w_FNJarvhOd51__zZTeoXG5yottGlqHG7nF052hj3j8y0fZ_2uj5n2KDgaBpgrWAFzZEB0DW-16_30GmfpUlTHJjNuw7mLGiTj-gHQWIF7mB6BYthMZD81n-vofFiLC7A12VyDkm9zHsped_cW9WBvP0fRCIZ6fYEIJuLIWKJHWhk4nb6btXign_Hhg6-axOatve-OOt-6BCxYVxBnlXb3HT8-D1saMl_wfQnoEYEDeXcgAHEZOxA7s5IWXm-LIVwcuT2KfDAoGXcdBP-lFqjgYZCz8XKlZ56oWmqcflWMu8utRvM1d_Nb2pmHK5FgFPhdYfWISuqVK-zkYyEUaQ5wutDMPk8oEb9Ih52RMVywC9XBfW_GABB7vw_Ro2RNOS-B_YPeldFHSTOj8MneVAdFgafaAmCfp5q3mPIPEdANrWF4CKfLoUixOFg8WPnuAtFiK-QXSB1E3i8SSR2fgLMSwRaHxFK_xIQHK-MXaQIq79y0f44j-Zn9vO9uhOUI34d9tmmRYHhGj-F0QHdNNfyhW3sEkvW6SRQ5pJp7Udsy-_g3M0jQE6hzkwT_AECY28dWxOgOF_5DzSGQKzKvkuqLCxhRMHn5F9FigzZEj_P9U-mVJnDtTSp39XvR1da6PUni2FzZV_g_E3L8NhJaxqKDKdZs8UqJBuvLDPir8ct7TNl5yk-ynE88LvITVKjlCG0oCrtZ8iL4OQ_mAFIG6JYyVGtKkAObNi-ipYxm14fWpW9xBv7TDGdSj8jYR5qdRSaEFBuC1beB.fxWkBIlwAXZQLF3lq__xdY-Cuds-GOSFBeElKFW1zRZepeV9BpL8NmgnD0B0OV0KZMxzLpabvqd8FYXlvfg7ZQ","token_type":"Bearer","expires_in":600,"scope":"pix.read pix.write cob.write cob.read"}
LimparHTTP
AcessarEndPoint( PUT, /cob )
ConfigurarAutenticacao( PUT, /cob )
CalcularURLEndPoint( PUT, /cob )
  https://api.bb.com.br/pix/v1/cob/F37875808A5948998456FAE2AE56722E?gw-dev-app-key=232b9560e4c602c18c67691c6318e39e
ChamarEventoQuandoAcessarEndPoint( /cob, https://api.bb.com.br/pix/v1/cob/F37875808A5948998456FAE2AE56722E?gw-dev-app-key=232b9560e4c602c18c67691c6318e39e, PUT )
TransmitirHttp( PUT, https://api.bb.com.br/pix/v1/cob/F37875808A5948998456FAE2AE56722E?gw-dev-app-key=232b9560e4c602c18c67691c6318e39e )
ConfigurarHTTP
ConfigurarProxy
ConfigurarTimeOut
ConfigurarHeaders( PUT, https://api.bb.com.br/pix/v1/cob/F37875808A5948998456FAE2AE56722E?gw-dev-app-key=232b9560e4c602c18c67691c6318e39e )
  Req.Headers:
Authorization:Bearer HCBTzS7xW1-hUnrKq6l59wguRLOsFWt44ergZom0DjiXnYAl1yleaUdqtKD_mx4rQHJ92hFJUawc-iBRZ9cfcw.9zhyjfKKLwyDBK4dq26T_P-WUkmQQX1HJxwGSgFAtuciiyNq6aetxmW7Se-B_WctNgm9Zv06p7G-KC--Wvwuid83s6xlpAQXd5yflJV2tvYj_Glrp2JAJGDrMuOscGoxRsTpzY2R_OtL4r_V-NCaNI3zp-XRhRRKv652CsOz_bvx2brXgyNrgry1ISVC1WYQQ6-ii48Li_9XMcrnyEZ6H3ZlSbZVi_kpuZlhZXlGLeNaKqBGVKZu18w_FNJarvhOd51__zZTeoXG5yottGlqHG7nF052hj3j8y0fZ_2uj5n2KDgaBpgrWAFzZEB0DW-16_30GmfpUlTHJjNuw7mLGiTj-gHQWIF7mB6BYthMZD81n-vofFiLC7A12VyDkm9zHsped_cW9WBvP0fRCIZ6fYEIJuLIWKJHWhk4nb6btXign_Hhg6-axOatve-OOt-6BCxYVxBnlXb3HT8-D1saMl_wfQnoEYEDeXcgAHEZOxA7s5IWXm-LIVwcuT2KfDAoGXcdBP-lFqjgYZCz8XKlZ56oWmqcflWMu8utRvM1d_Nb2pmHK5FgFPhdYfWISuqVK-zkYyEUaQ5wutDMPk8oEb9Ih52RMVywC9XBfW_GABB7vw_Ro2RNOS-B_YPeldFHSTOj8MneVAdFgafaAmCfp5q3mPIPEdANrWF4CKfLoUixOFg8WPnuAtFiK-QXSB1E3i8SSR2fgLMSwRaHxFK_xIQHK-MXaQIq79y0f44j-Zn9vO9uhOUI34d9tmmRYHhGj-F0QHdNNfyhW3sEkvW6SRQ5pJp7Udsy-_g3M0jQE6hzkwT_AECY28dWxOgOF_5DzSGQKzKvkuqLCxhRMHn5F9FigzZEj_P9U-mVJnDtTSp39XvR1da6PUni2FzZV_g_E3L8NhJaxqKDKdZs8UqJBuvLDPir8ct7TNl5yk-ynE88LvITVKjlCG0oCrtZ8iL4OQ_mAFIG6JYyVGtKkAObNi-ipYxm14fWpW9xBv7TDGdSj8jYR5qdRSaEFBuC1beB.fxWkBIlwAXZQLF3lq__xdY-Cuds-GOSFBeElKFW1zRZepeV9BpL8NmgnD0B0OV0KZMxzLpabvqd8FYXlvfg7ZQ
Accept-Encoding: gzip, compress, deflate

  Req.Body:
{"calendario":{"expiracao":3600},"valor":{"original":"2.00"},"chave":"28062609000104","solicitacaoPagador":"MARINEIDE DOS SANTOS SILVA"}
  ResultCode: 403 - Forbidden
  Sock.LastError: 0
  Resp.Headers:
HTTP/1.1 403 Forbidden
date: Wed, 28 Aug 2024 13:28:17 GMT
set-cookie: JSESSIONID=9N6ZLDSdkuBhbJMUd3MHuApcKxkN6-b2fjyGtSEH84mtza29Fxxu!1300589566
set-cookie: a3a5e13dff29335ee4bd6fcc40c4fc31=9d82e67d596c2434f00e48c0322388e1; path=/; HttpOnly; Secure; SameSite=None
server: openresty
x-bw-uuid: 5897fa18-740b-4725-871a-0efe6e247fa7
Content-Type: application/json;charset=utf-8
Content-Length: 117
Connection: keep-alive

Resp.Body:
{ "statusCode": 403, "error": "Forbidden", "message": "Application key is not allowed to call this resource method" }
ChamarEventoQuandoReceberRespostaEndPoint( /cob, PUT )
  ResultCode:403
  RespostaHttp: { "statusCode": 403, "error": "Forbidden", "message": "Application key is not allowed to call this resource method" }
 

 

ta me retornando esse erro Application key is not allowed to call this resource method  será que o gerente que tem que fazer as liberação de escopo

[BigWings]

A configuração da versão está correta? Parece estar usando a v1 que já foi descontinuada pelo banco.

[nildglan]

na versão 2 precisa do certificado la baixe 3 arquivos todos com extinção  .cer   AC_SOLUTI_SSL_EV_G4.cer    , api.webhook.bb.com.br.cer e Autoridade_Certificadora_Raiz_Brasileira_v10.cer

qual seria desse?

e também precisa de uma chave que Chave privada é essa?

 

eu coloquei esse AC_SOLUTI_SSL_EV_G4.cer e deu esse erro  EACBrPixHttpException: Erro HTTP: 500, Metodo: POST, URL: https://oauth.bb.com.br/oauth/token

 

 

log completo do erro depois que coloquei um certificado

Atribuindo PSP: TACBrPSPBancoDoBrasil, Nome: ACBrPSPBancoDoBrasil
CriarCobrancaImediata( 8BA485B6770D499EBD37FDE314968AAE )
PrepararHTTP
Autenticar
LimparHTTP
TransmitirHttp( POST, https://oauth.bb.com.br/oauth/token )
ConfigurarHTTP
ConfigurarProxy
ConfigurarTimeOut
ConfigurarHeaders( POST, https://oauth.bb.com.br/oauth/token )
  Req.Headers:
Authorization: Basic ZXlKcFpDSTZJall5TTJKa05ERWlMQ0pqYjJScFoyOVFkV0pzYVdOaFpHOXlJam93TENKamIyUnBaMjlUYjJaMGQyRnlaU0k2T0RNeE16Y3NJbk5sY1hWbGJtTnBZV3hKYm5OMFlXeGhZMkZ2SWpveWZROmV5SnBaQ0k2SWpjeE5XRmtaakF0TWpneE5pMDBabUpoTFdGbElpd2lZMjlrYVdkdlVIVmliR2xqWVdSdmNpSTZNQ3dpWTI5a2FXZHZVMjltZEhkaGNtVWlPamd6TVRNM0xDSnpaWEYxWlc1amFXRnNTVzV6ZEdGc1lXTmhieUk2TWl3aWMyVnhkV1Z1WTJsaGJFTnlaV1JsYm1OcFlXd2lPakVzSW1GdFltbGxiblJsSWpvaWNISnZaSFZqWVc4aUxDSnBZWFFpT2pFM01qUTROelF4TWpZMk5ETjk=
Accept-Encoding: gzip, compress, deflate

  Req.Body:
grant_type=client_credentials&scope=cob.write%20cob.read%20pix.write%20pix.read
  ResultCode: 500 - 
  Sock.LastError: 10091
  Resp.Headers:
POST /oauth/token HTTP/1.0
Host: oauth.bb.com.br
Keep-Alive: 300
Connection: keep-alive
User-Agent: Mozilla/4.0 (compatible; Synapse)
Content-Type: application/x-www-form-urlencoded
Content-Length: 79
Authorization: Basic ZXlKcFpDSTZJall5TTJKa05ERWlMQ0pqYjJScFoyOVFkV0pzYVdOaFpHOXlJam93TENKamIyUnBaMjlUYjJaMGQyRnlaU0k2T0RNeE16Y3NJbk5sY1hWbGJtTnBZV3hKYm5OMFlXeGhZMkZ2SWpveWZROmV5SnBaQ0k2SWpjeE5XRmtaakF0TWpneE5pMDBabUpoTFdGbElpd2lZMjlrYVdkdlVIVmliR2xqWVdSdmNpSTZNQ3dpWTI5a2FXZHZVMjltZEhkaGNtVWlPamd6TVRNM0xDSnpaWEYxWlc1amFXRnNTVzV6ZEdGc1lXTmhieUk2TWl3aWMyVnhkV1Z1WTJsaGJFTnlaV1JsYm1OcFlXd2lPakVzSW1GdFltbGxiblJsSWpvaWNISnZaSFZqWVc4aUxDSnBZWFFpT2pFM01qUTROelF4TWpZMk5ETjk=
Accept-Encoding: gzip, compress, deflate

Resp.Body:

EACBrPixHttpException: Erro HTTP: 500, Metodo: POST, URL: https://oauth.bb.com.br/oauth/token
 

[BigWings]

Depois de enviar o certificado para o banco, na tua aplicação é só apontar o pfx.

[nildglan]

só uma dúvida em vou fazer a exportação é desse certificado que eu baixei do bb? porque baixe esses 3 arquivos .cer   AC_SOLUTI_SSL_EV_G4.cer    , api.webhook.bb.com.br.cer e Autoridade_Certificadora_Raiz_Brasileira_v10.cer  é esses que vou exportar e enviar de volta é isso?

[BigWings]

Você vai implantar um webhook?

Se não, não vai precisar baixar os certificados do banco, apenas enviar o da empresa, conforme o manual.

[nildglan]

vou enviar o certificado da empresa o A1 certo?

[nildglan]

e o Certificado que eu informo no componente acbr é certificado da empresa também o A1

[nildglan]

veja na imagem , ai tentei baixar esse segundo mais quando colocou no portal do bb informando que o certificado é ínvalido, é que não tem como anexar imagem ta dando erro ao anexar

[nildglan]

conseguir valeu

[Juliomar Marchetti]

Obrigado por reportar.

Fechando. Para novas dúvidas, criar um novo tópico.