(Delphi ActiveX) Global Payments Card Authorization

Demonstrates how to send a card payments authorization request.

For more information, see https://developer.globalpay.com/#!/api/card-payments#api-authorisation

Chilkat for Delphi Downloads Chilkat ActiveX DLL for Delphi Chilkat non-ActiveX DLL for Delphi * The examples here use the ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Chilkat_TLB;

...

procedure TForm1.Button1Click(Sender: TObject);
var
http: TChilkatHttp;
success: Integer;
testUrl: WideString;
clientID: WideString;
sharedSecret: WideString;
amount: WideString;
currency: WideString;
cardNumber: WideString;
dt: TCkDateTime;
dtStr: WideString;
prng: TChilkatPrng;
orderId: WideString;
crypt: TChilkatCrypt2;
sbA: TChilkatStringBuilder;
numReplaced: Integer;
hashA: WideString;
sbB: TChilkatStringBuilder;
hashB: WideString;
xml: TChilkatXml;
resp: IChilkatHttpResponse;
result: Integer;

begin
// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

http := TChilkatHttp.Create(Self);

// if you don't have a Client ID yet you can still quickly test some basic request types using the following URL and credentials:

// Test URL - https://test.realexpayments.com/epage-remote.cgi
// Client ID: realexsandbox
// Shared Secret: Po8lRRT67a
testUrl := 'https://test.realexpayments.com/epage-remote.cgi';
clientID := 'realexsandbox';
sharedSecret := 'Po8lRRT67a';

amount := '1001';
currency := 'EUR';
cardNumber := '4263970000005262';

// We'll be sending the following XML in the body of the request:

// <?xml version="1.0" encoding="UTF-8"?>
// <request type="auth" timestamp="20180613141207">
//   <merchantid>MerchantId</merchantid>
//   <account>internet</account>
//   <channel>ECOM</channel>
//   <orderid>N6qsk4kYRZihmPrTXWYS6g</orderid>
//   <amount currency="EUR">1001</amount>
//   <card>
//     <number>4263970000005262</number>
//     <expdate>0425</expdate>
//     <chname>James Mason</chname>
//     <type>VISA</type>
//     <cvn>
//       <number>123</number>
//       <presind>1</presind>
//     </cvn>
//   </card>
//   <autosettle flag="1"/>
//   <sha1hash>87707637a34ba651b6185718c863abc64b673f20</sha1hash>
// </request>

// Use this online tool to generate code from sample XML: 
// Generate Code to Create XML

// Get the current date/time in this format:  20180613141207
dt := TCkDateTime.Create(Self);
dt.SetFromCurrentSystemTime();
dtStr := dt.GetAsIso8601('YYYYMMDDhhmmss',1);

// Generate a unique order ID
prng := TChilkatPrng.Create(Self);
orderId := prng.GenRandom(32,'base64url');

// Compute the sha1hash
crypt := TChilkatCrypt2.Create(Self);
crypt.HashAlgorithm := 'sha1';
crypt.EncodingMode := 'hexlower';

sbA := TChilkatStringBuilder.Create(Self);
sbA.Append('timestamp.merchantid.orderid.amount.currency.cardnumber');
numReplaced := sbA.Replace('timestamp',dtStr);
numReplaced := sbA.Replace('merchantid',clientID);
numReplaced := sbA.Replace('orderid',orderId);
numReplaced := sbA.Replace('amount',amount);
numReplaced := sbA.Replace('currency',currency);
numReplaced := sbA.Replace('cardnumber',cardNumber);

hashA := crypt.HashStringENC(sbA.GetAsString());

sbB := TChilkatStringBuilder.Create(Self);
sbB.Append(hashA);
sbB.Append('.');
sbB.Append(sharedSecret);

hashB := crypt.HashStringENC(sbB.GetAsString());

xml := TChilkatXml.Create(Self);
xml.Tag := 'request';
xml.AddAttribute('type','auth');
xml.AddAttribute('timestamp',dtStr);
xml.UpdateChildContent('merchantid',clientID);
xml.UpdateChildContent('account','internet');
xml.UpdateChildContent('channel','ECOM');
xml.UpdateChildContent('orderid',orderId);
xml.UpdateAttrAt('amount',1,'currency',currency);
xml.UpdateChildContent('amount',amount);
xml.UpdateChildContent('card|number',cardNumber);
xml.UpdateChildContent('card|expdate','0425');
xml.UpdateChildContent('card|chname','James Mason');
xml.UpdateChildContent('card|type','VISA');
xml.UpdateChildContent('card|cvn|number','123');
xml.UpdateChildContent('card|cvn|presind','1');
xml.UpdateAttrAt('autosettle',1,'flag','1');
xml.UpdateChildContent('sha1hash',hashB);

resp := http.PostXml(testUrl,xml.GetXml(),'utf-8');
if (http.LastMethodSuccess = 0) then
  begin
    Memo1.Lines.Add(http.LastErrorText);
    Exit;
  end;

Memo1.Lines.Add('Response Status Code: ' + IntToStr(resp.StatusCode));

Memo1.Lines.Add('Response Body:');
Memo1.Lines.Add(resp.BodyStr);

if (resp.StatusCode <> 200) then
  begin
    Memo1.Lines.Add('Failed.');
    Exit;
  end;

// A status code of 200 indicates we received an XML response, but it could be an error message.
// Here's an example of an error response:

// <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
// <response timestamp="20200418142356">
//     <orderid>N6qsk4kYRZihmPrTXWYS6g</orderid>
//     <result>508</result>
//     <message>Invalid timestamp: '{' Value exceeds allowable limit: '}'</message>
// </response>

// We need to check the "result" within the XML.
xml.LoadXml(resp.BodyStr);

result := xml.GetChildIntValue('result');
Memo1.Lines.Add('result = ' + IntToStr(result));

// A successful result looks like this:

// <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
// <response timestamp="20200418145519">
//     <merchantid>realexsandbox</merchantid>
//     <account>internet</account>
//     <orderid>Cw93I1nFWVZuaATh46qMUCBlCcfrOvLo65C2cq5X-AY</orderid>
//     <result>00</result>
//     <authcode>L3pHww</authcode>
//     <message>AUTH CODE: L3pHww</message>
//     <pasref>96838535689610806</pasref>
//     <cvnresult>M</cvnresult>
//     <timetaken>87</timetaken>
//     <authtimetaken>67</authtimetaken>
//     <batchid>6322506</batchid>
//     <sha1hash>2fd2f15f97f1775779fe9bda536dc8317a4b39f6</sha1hash>
// </response>

if (result = 0) then
  begin
    Memo1.Lines.Add('authcode = ' + xml.GetChildContent('authcode'));
    Memo1.Lines.Add('Success.');

  end
else
  begin
    Memo1.Lines.Add('Failed.');
  end;
end;