MGate Payment Service

MGate Payment Service An architecture diagram generated by Archify. Mobile App · Partner client · Architecture component Mobile App Partner client MGateController · POST /api/mgate/handle · EKS Cluster — dev namespace › mgate-payment-service (port 8081) · Spring MVC MGateController POST /api/mgate/handle Spring MVC CryptoService · RSA + AES verify & decrypt · EKS Cluster — dev namespace › mgate-payment-service (port 8081) CryptoService RSA + AES verify & decrypt RSA Key Pairs · Public + Private keys · Architecture component · Vault / env RSA Key Pairs Public + Private keys Vault / env Handler Registry · OperationType dispatch · EKS Cluster — dev namespace › mgate-payment-service (port 8081) · Strategy pattern Handler Registry OperationType dispatch Strategy pattern MTransfer Service · Transfers, limits, fees · EKS Cluster — dev namespace · OpenFeign MTransfer Service Transfers, limits, fees OpenFeign Provision Service · Token info · EKS Cluster — dev namespace · OpenFeign Provision Service Token info OpenFeign Alias Token Service · Visa Alias CRUD · EKS Cluster — dev namespace · OpenFeign Alias Token Service Visa Alias CRUD OpenFeign Request-to-Pay · R2P lifecycle · EKS Cluster — dev namespace · OpenFeign Request-to-Pay R2P lifecycle OpenFeign Observability · Prometheus + Tracing · EKS Cluster — dev namespace · Micrometer Observability Prometheus + Tracing Micrometer OpenAPI / Swagger · /v3/api-docs · EKS Cluster — dev namespace OpenAPI / Swagger /v3/api-docs RSA-encrypted JSON verifyAndDecrypt() load keys route by OperationType transfer / limit / fee tokenInfo alias CRUD R2P lifecycle metrics docs EKS Cluster — dev namespace mgate-payment-service (port 8081) Legend Backend Cloud Security External

Security

  • • RSA decryption of AES key
  • • AES decryption of request payload
  • • Optional signature verification
  • • Partner token validation

Gateway Logic

  • • Single entry point: POST /api/mgate/handle
  • • 26 OperationType codes via Strategy pattern
  • • Stateless — no database

Downstream

  • • MTransfer: transfers, limits, fees, rates
  • • Provision: card token info
  • • Alias Token: Visa Alias CRUD
  • • Request-to-Pay: R2P lifecycle (14 ops)