Accept Payments with Paystack in Supabase Edge Functions

# Create the function
supabase functions new pay

# Store the Paystack secret key
supabase secrets set PAYSTACK_SECRET_KEY=sk_live_xxxxxxxxxxxx

# For test mode
supabase secrets set PAYSTACK_SECRET_KEY=sk_test_xxxxxxxxxxxx

This creates supabase/functions/pay/index.ts.

// supabase/functions/pay/index.ts
import { serve } from "https://deno.land/std@0.208.0/http/server.ts";

const corsHeaders = {
  "Access-Control-Allow-Origin": "*",
  "Access-Control-Allow-Headers": "authorization, x-client-info, apikey, content-type",
};

serve(async (req) => {
  // Handle CORS preflight
  if (req.method === "OPTIONS") {
    return new Response("ok", { headers: corsHeaders });
  }

  if (req.method !== "POST") {
    return new Response("Method not allowed", { status: 405 });
  }

  try {
    const secretKey = Deno.env.get("PAYSTACK_SECRET_KEY");
    if (!secretKey) {
      return new Response(
        JSON.stringify({ error: "Paystack secret key not configured" }),
        { status: 500, headers: { ...corsHeaders, "Content-Type": "application/json" } }
      );
    }

    const { email, amount } = await req.json();

    if (!email || !amount) {
      return new Response(
        JSON.stringify({ error: "email and amount are required" }),
        { status: 400, headers: { ...corsHeaders, "Content-Type": "application/json" } }
      );
    }

    const reference = "edge_" + Date.now() + "_" + crypto.randomUUID().split("-")[0];

    const paystackResponse = await fetch(
      "https://api.paystack.co/transaction/initialize",
      {
        method: "POST",
        headers: {
          Authorization: "Bearer " + secretKey,
          "Content-Type": "application/json",
        },
        body: JSON.stringify({
          email,
          amount: Math.round(Number(amount) * 100), // Convert to kobo
          reference,
        }),
      }
    );

    const data = await paystackResponse.json();

    if (!data.status) {
      return new Response(
        JSON.stringify({ error: data.message }),
        { status: 400, headers: { ...corsHeaders, "Content-Type": "application/json" } }
      );
    }

    return new Response(
      JSON.stringify({
        authorization_url: data.data.authorization_url,
        access_code: data.data.access_code,
        reference: data.data.reference,
      }),
      { headers: { ...corsHeaders, "Content-Type": "application/json" } }
    );
  } catch (error) {
    return new Response(
      JSON.stringify({ error: error.message }),
      { status: 500, headers: { ...corsHeaders, "Content-Type": "application/json" } }
    );
  }
});

// Using Supabase JS client
import { createClient } from '@supabase/supabase-js'

const supabase = createClient(
  import.meta.env.VITE_SUPABASE_URL,
  import.meta.env.VITE_SUPABASE_ANON_KEY
)

async function initializePayment(email: string, amount: number) {
  const { data, error } = await supabase.functions.invoke('pay', {
    body: { email, amount }
  })

  if (error) throw error
  return data // { authorization_url, access_code, reference }
}

// Or using plain fetch:
async function initializePaymentWithFetch(email: string, amount: number) {
  var response = await fetch(
    process.env.SUPABASE_URL + '/functions/v1/pay',
    {
      method: 'POST',
      headers: {
        'Content-Type': 'application/json',
        'Authorization': 'Bearer ' + process.env.SUPABASE_ANON_KEY,
      },
      body: JSON.stringify({ email, amount }),
    }
  )
  return response.json()
}

# Deploy to production
supabase functions deploy pay

# Test locally first
supabase functions serve pay

# Test locally with curl
curl -X POST http://localhost:54321/functions/v1/pay \
  -H "Content-Type: application/json" \
  -d '{"email": "test@example.com", "amount": 5000}'

This guide is part of the Paystack integration guides by language and framework series.

Next: Handle Paystack Webhooks in Supabase Edge Functions

Sign up for the McTaba newsletter