(Delphi ActiveX) Payeezy Place Temp Authorization Hold on Buyer’s Credit Card

Demonstrates how to place a temporary authorization hold for the desired amount on the buyer’s credit card. You can Capture the authorized amount on completion of service or Void/Refund the transaction as required.

Chilkat for Delphi Downloads Chilkat ActiveX DLL for Delphi Chilkat non-ActiveX DLL for Delphi * The examples here use the ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Chilkat_TLB;

...

procedure TForm1.Button1Click(Sender: TObject);
var
crypt: TChilkatCrypt2;
prng: TChilkatPrng;
success: Integer;
apiKey: WideString;
apiSecret: WideString;
token: WideString;
nonce: WideString;
dtNow: TCkDateTime;
sbTimestamp: TChilkatStringBuilder;
timestamp: WideString;
json: TChilkatJsonObject;
sbHmacData: TChilkatStringBuilder;
hexHash: WideString;
sbBase64Hash: TChilkatStringBuilder;
http: TChilkatHttp;
url: WideString;
resp: IChilkatHttpResponse;

begin
// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

crypt := TChilkatCrypt2.Create(Self);
prng := TChilkatPrng.Create(Self);

// An API key such as y6pWAJNyJyjGv66IsVuWnklkKUPFbb0a
apiKey := 'my_api_key';
// An API secret such as 86fbae7030253af3cd15faef2a1f4b67353e41fb6799f576b5093ae52901e6f7
apiSecret := 'my_api_secret';
// A token such as fdoa-a480ce8951daa73262734cf102641994c1e55e7cdf4c02b6
token := 'my_merchant_token';

// The nonce is a random number (bytes), something like "6057786719490086000"
nonce := prng.GenRandom(8,'decimal');
Memo1.Lines.Add('nonce = ' + nonce);

dtNow := TCkDateTime.Create(Self);
dtNow.SetFromCurrentSystemTime();
sbTimestamp := TChilkatStringBuilder.Create(Self);
// Get the epoch timestamp in seconds
sbTimestamp.Append(dtNow.GetAsUnixTimeStr(0));
// Change it to milliseconds
sbTimestamp.Append('000');
// The timestamp is a number similar to this: 1546011905000 (which is a timestamp taken on 28-Dec-2018).
timestamp := sbTimestamp.GetAsString();
Memo1.Lines.Add('timestamp = ' + timestamp);

// Generate the following JSON request body:
// {
//   "merchant_ref": "Astonishing-Sale",
//   "transaction_type": "authorize",
//   "method": "credit_card",
//   "amount": "1299",
//   "currency_code": "USD",
//   "credit_card": {
//     "type": "visa",
//     "cardholder_name": "John Smith",
//     "card_number": "4788250000028291",
//     "exp_date": "1020",
//     "cvv": "123"
//   }
// }

json := TChilkatJsonObject.Create(Self);
json.UpdateString('merchant_ref','Astonishing-Sale');
json.UpdateString('transaction_type','authorize');
json.UpdateString('method','credit_card');
json.UpdateString('amount','1299');
json.UpdateString('currency_code','USD');
json.UpdateString('credit_card.type','visa');
json.UpdateString('credit_card.cardholder_name','John Smith');
json.UpdateString('credit_card.card_number','4788250000028291');
json.UpdateString('credit_card.exp_date','1020');
json.UpdateString('credit_card.cvv','123');
json.EmitCompact := 0;
Memo1.Lines.Add(json.Emit());

// string hashData = apiKey + nonce + timestamp + token + jsonString;
sbHmacData := TChilkatStringBuilder.Create(Self);
sbHmacData.Append(apiKey);
sbHmacData.Append(nonce);
sbHmacData.Append(timestamp);
sbHmacData.Append(token);
sbHmacData.Append(json.Emit());

// HMAC the data to produce a hex string.
crypt.EncodingMode := 'hexlower';
crypt.MacAlgorithm := 'hmac';
crypt.SetMacKeyString(apiSecret);
crypt.HashAlgorithm := 'sha256';
crypt.Charset := 'utf-8';
hexHash := crypt.MacStringENC(sbHmacData.GetAsString());
Memo1.Lines.Add('hexHash = ' + hexHash);

// Now base64 encode the hex string:
sbBase64Hash := TChilkatStringBuilder.Create(Self);
sbBase64Hash.Append(hexHash);
sbBase64Hash.Encode('base64','utf-8');

Memo1.Lines.Add('This is the Authorization header to be sent with the payeezy request:');
Memo1.Lines.Add('Authorization: ' + sbBase64Hash.GetAsString());

// -----------------------------------------------------------
// Now that we have the value for the Authorization header, send the POST containing the JSON.

http := TChilkatHttp.Create(Self);

http.Accept := '*/*';
http.UserAgent := '';
http.SetRequestHeader('Authorization',sbBase64Hash.GetAsString());
http.SetRequestHeader('apikey',apiKey);
http.SetRequestHeader('nonce',nonce);
http.SetRequestHeader('timestamp',timestamp);
http.SetRequestHeader('token',token);

http.SessionLogFilename := 'qa_output/payeezy.txt';

url := 'https://api-cert.payeezy.com/v1/transactions';
resp := http.PostJson2(url,'application/json',json.Emit());
if (http.LastMethodSuccess <> 1) then
  begin
    Memo1.Lines.Add(http.LastErrorText);
    Exit;
  end;

Memo1.Lines.Add('response status code = ' + IntToStr(resp.StatusCode));
json.Load(resp.BodyStr);
Memo1.Lines.Add(json.Emit());

// Sample JSON response:

// {
//   "correlation_id": "228.4604632998994",
//   "transaction_status": "approved",
//   "validation_status": "success",
//   "transaction_type": "authorize",
//   "transaction_id": "ET175628",
//   "transaction_tag": "2313721985",
//   "method": "credit_card",
//   "amount": "1299",
//   "currency": "USD",
//   "cvv2": "M",
//   "token": {
//     "token_type": "FDToken",
//     "token_data": {
//       "value": "9732261336638291"
//     }
//   },
//   "card": {
//     "type": "visa",
//     "cardholder_name": "John Smith",
//     "card_number": "8291",
//     "exp_date": "1020"
//   },
//   "bank_resp_code": "100",
//   "bank_message": "Approved",
//   "gateway_resp_code": "00",
//   "gateway_message": "Transaction Normal"
// }
// 

Memo1.Lines.Add(json.StringOf('correlation_id'));
Memo1.Lines.Add(json.StringOf('transaction_status'));
Memo1.Lines.Add(json.StringOf('validation_status'));
Memo1.Lines.Add(json.StringOf('transaction_type'));
Memo1.Lines.Add(json.StringOf('transaction_id'));
Memo1.Lines.Add(json.StringOf('transaction_tag'));
Memo1.Lines.Add(json.StringOf('method'));
Memo1.Lines.Add(json.StringOf('amount'));
Memo1.Lines.Add(json.StringOf('currency'));
Memo1.Lines.Add(json.StringOf('cvv2'));
Memo1.Lines.Add(json.StringOf('token.token_type'));
Memo1.Lines.Add(json.StringOf('token.token_data.value'));
Memo1.Lines.Add(json.StringOf('card.type'));
Memo1.Lines.Add(json.StringOf('card.cardholder_name'));
Memo1.Lines.Add(json.StringOf('card.card_number'));
Memo1.Lines.Add(json.StringOf('card.exp_date'));
Memo1.Lines.Add(json.StringOf('bank_resp_code'));
Memo1.Lines.Add(json.StringOf('bank_message'));
Memo1.Lines.Add(json.StringOf('gateway_resp_code'));
Memo1.Lines.Add(json.StringOf('gateway_message'));
end;