Wire #8

Content-Type: text/xml; charset=utf-8
Accept: text/xml, application/xml
Content-Length: 2555
User-Agent: PunchOut Mock Host 1.0

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE cXML SYSTEM "http://xml.cxml.org/schemas/cXML/1.2.021/cXML.dtd">
<cXML payloadID="1788679529.10001.25103@punchout.demo.borong.com" timestamp="2026-09-06T15:25:29+08:00" xml:lang="en-US">
  <Header>
    <From>
      <Credential domain="NetworkID">
        <Identity>DEMO-BUYER</Identity>
      </Credential>
    </From>
    <To>
      <Credential domain="NetworkID">
        <Identity>DROPEE</Identity>
      </Credential>
    </To>
    <Sender>
      <Credential domain="NetworkID">
        <Identity>DEMO-BUYER</Identity>
        <SharedSecret>demo-secret</SharedSecret>
      </Credential>
      <UserAgent>PunchOut Mock Host 1.0</UserAgent>
    </Sender>
  </Header>
  <Request deploymentMode="test">
    <PunchOutSetupRequest operation="create">
      <BuyerCookie>BC-D110150673B8335A</BuyerCookie>
      <Extrinsic name="FirstName">Syed</Extrinsic>
      <Extrinsic name="LastName">Kamal</Extrinsic>
      <Extrinsic name="UserFullName">Syed Kamal</Extrinsic>
      <Extrinsic name="UniqueName">syed.kamal@demo-buyer.test</Extrinsic>
      <Extrinsic name="UserEmail">syed.kamal@demo-buyer.test</Extrinsic>
      <Extrinsic name="Department">OPU-9000</Extrinsic>
      <Extrinsic name="UserId">ACC19</Extrinsic>
      <Extrinsic name="PhoneNumber">60874001019</Extrinsic>
      <BrowserFormPost>
        <URL>https://punchout.demo.borong.com/punchout/return</URL>
      </BrowserFormPost>
      <Contact role="endUser">
        <Name xml:lang="en">Syed Kamal</Name>
        <Email>syed.kamal@demo-buyer.test</Email>
      </Contact>
      <SupplierSetup>
        <URL>https://public.demo.borong.com/punchout/setup-request</URL>
      </SupplierSetup>
      <ShipTo>
        <Address addressID="ADDR-9002">
          <Name xml:lang="en">Labuan Terminal</Name>
          <PostalAddress name="default">
            <DeliverTo>Syed Kamal</DeliverTo>
            <Street>Jalan Merdeka</Street>
            <City>Labuan</City>
            <State>MYLAB</State>
            <PostalCode>87000</PostalCode>
            <Country isoCountryCode="MY">Malaysia</Country>
          </PostalAddress>
          <Email name="default">syed.kamal@demo-buyer.test</Email>
          <Phone name="work">
            <TelephoneNumber>
              <CountryCode isoCountryCode="MY">00</CountryCode>
              <AreaOrCityCode>00</AreaOrCityCode>
              <Number>60874001019</Number>
            </TelephoneNumber>
          </Phone>
        </Address>
      </ShipTo>
    </PunchOutSetupRequest>
  </Request>
</cXML>

HTTP/1.1 200 OK
Server: nginx/1.24.0 (Ubuntu)
Content-Type: application/xml
Connection: close
X-Powered-By: PHP/8.4.25
Cache-Control: no-cache, private
Date: Sun, 06 Sep 2026 07:25:30 GMT
charset: utf-8
Set-Cookie: XSRF-TOKEN=eyJpdiI6IkVFQkZkVEM5NUgyNkNaYXpBcFBmMHc9PSIsInZhbHVlIjoiUkhDSWRSTVdTSVpSME03Tys2M1VHbytFd05pS2dIa1lMMjZHQTR5aWorYUo5bFQ3V21UQmduTWFORXc5MTRxWXpNOHR5T0o5aHZabTBOeEQyb2ZwZ3RYSWY1cDFuS091MmZCek12bkVwRGZrRWdwazh1SHE4bjZabHRVWWxPZ0kiLCJtYWMiOiI1ODljZTdkMTQzNjI2ZWM2NjFiMTgyOTJlMjEyMTBmODhlOTViYjRhMDFkOTZjMGY3YzQwNzQyYjRhNTJkYTc1IiwidGFnIjoiIn0%3D; expires=Sun, 06 Sep 2026 09:25:30 GMT; Max-Age=7200; path=/; secure; samesite=lax
Set-Cookie: borong_public_demo_session=eyJpdiI6InlyTlRHVVRmR3gxOXg2dk5URDVBbGc9PSIsInZhbHVlIjoiQmFVYnpLUzdaa3NYaW0wVy9RYmxkZHFpRHBSVzZrNXRra2NTRGVXNXNnYWxMWHdYS0xlV3BrdXd4cjJLbTdQM3NjbmFVREZONzA5NitWazFtZ0dnV0F5SG5MK3hremJwc1U0NU9OK3dDTmIzYW0ya0ZGWkJmMDhBWmdlVEw5RjciLCJtYWMiOiJiNWU2Y2Y1NTY3MjJjZmE5ZDgyODgyOTlmZDQ0NmEzZjJlN2Q5MDBmYTA0MjdiYzMxYmNjMzQwODNhOWUzMThlIiwidGFnIjoiIn0%3D; expires=Sun, 06 Sep 2026 09:25:30 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE cXML SYSTEM "http://xml.cxml.org/schemas/cXML/1.2.021/cXML.dtd">
<cXML xml:lang="en-US" payloadID="1788679529.10001.61560@dropee.com" timestamp="2026-09-06T07:25:29">
  <Response>
    <Status code="200" text="OK"/>
    <PunchOutSetupResponse>
      <StartPage>
        <URL>https://public.demo.borong.com/punchout/login/WdmXGmixL5Uix76gFhof7YemIaInRd</URL>
      </StartPage>
    </PunchOutSetupResponse>
  </Response>
</cXML>