(Lianja) Global Payments Card Authorization

Demonstrates how to send a card payments authorization request.

For more information, see https://developer.globalpay.com/#!/api/card-payments#api-authorisation

Chilkat Lianja Extension Download Chilkat Lianja Extension

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

loHttp = createobject("CkHttp")

// if you don't have a Client ID yet you can still quickly test some basic request types using the following URL and credentials:

// Test URL - https://test.realexpayments.com/epage-remote.cgi
// Client ID: realexsandbox
// Shared Secret: Po8lRRT67a
lcTestUrl = "https://test.realexpayments.com/epage-remote.cgi"
lcClientID = "realexsandbox"
lcSharedSecret = "Po8lRRT67a"

lcAmount = "1001"
lcCurrency = "EUR"
lcCardNumber = "4263970000005262"

// We'll be sending the following XML in the body of the request:

// <?xml version="1.0" encoding="UTF-8"?>
// <request type="auth" timestamp="20180613141207">
//   <merchantid>MerchantId</merchantid>
//   <account>internet</account>
//   <channel>ECOM</channel>
//   <orderid>N6qsk4kYRZihmPrTXWYS6g</orderid>
//   <amount currency="EUR">1001</amount>
//   <card>
//     <number>4263970000005262</number>
//     <expdate>0425</expdate>
//     <chname>James Mason</chname>
//     <type>VISA</type>
//     <cvn>
//       <number>123</number>
//       <presind>1</presind>
//     </cvn>
//   </card>
//   <autosettle flag="1"/>
//   <sha1hash>87707637a34ba651b6185718c863abc64b673f20</sha1hash>
// </request>

// Use this online tool to generate code from sample XML: 
// Generate Code to Create XML

// Get the current date/time in this format:  20180613141207
loDt = createobject("CkDateTime")
loDt.SetFromCurrentSystemTime()
lcDtStr = loDt.GetAsIso8601("YYYYMMDDhhmmss",.T.)

// Generate a unique order ID
loPrng = createobject("CkPrng")
lcOrderId = loPrng.GenRandom(32,"base64url")

// Compute the sha1hash
loCrypt = createobject("CkCrypt2")
loCrypt.HashAlgorithm = "sha1"
loCrypt.EncodingMode = "hexlower"

loSbA = createobject("CkStringBuilder")
loSbA.Append("timestamp.merchantid.orderid.amount.currency.cardnumber")
lnNumReplaced = loSbA.Replace("timestamp",lcDtStr)
lnNumReplaced = loSbA.Replace("merchantid",lcClientID)
lnNumReplaced = loSbA.Replace("orderid",lcOrderId)
lnNumReplaced = loSbA.Replace("amount",lcAmount)
lnNumReplaced = loSbA.Replace("currency",lcCurrency)
lnNumReplaced = loSbA.Replace("cardnumber",lcCardNumber)

lcHashA = loCrypt.HashStringENC(loSbA.GetAsString())

loSbB = createobject("CkStringBuilder")
loSbB.Append(lcHashA)
loSbB.Append(".")
loSbB.Append(lcSharedSecret)

lcHashB = loCrypt.HashStringENC(loSbB.GetAsString())

loXml = createobject("CkXml")
loXml.Tag = "request"
loXml.AddAttribute("type","auth")
loXml.AddAttribute("timestamp",lcDtStr)
loXml.UpdateChildContent("merchantid",lcClientID)
loXml.UpdateChildContent("account","internet")
loXml.UpdateChildContent("channel","ECOM")
loXml.UpdateChildContent("orderid",lcOrderId)
loXml.UpdateAttrAt("amount",.T.,"currency",lcCurrency)
loXml.UpdateChildContent("amount",lcAmount)
loXml.UpdateChildContent("card|number",lcCardNumber)
loXml.UpdateChildContent("card|expdate","0425")
loXml.UpdateChildContent("card|chname","James Mason")
loXml.UpdateChildContent("card|type","VISA")
loXml.UpdateChildContent("card|cvn|number","123")
loXml.UpdateChildContent("card|cvn|presind","1")
loXml.UpdateAttrAt("autosettle",.T.,"flag","1")
loXml.UpdateChildContent("sha1hash",lcHashB)

loResp = loHttp.PostXml(lcTestUrl,loXml.GetXml(),"utf-8")
if (loHttp.LastMethodSuccess = .F.) then
    ? loHttp.LastErrorText
    release loHttp
    release loDt
    release loPrng
    release loCrypt
    release loSbA
    release loSbB
    release loXml
    return
endif

? "Response Status Code: " + str(loResp.StatusCode)

? "Response Body:"
? loResp.BodyStr

if (loResp.StatusCode <> 200) then
    ? "Failed."
    release loHttp
    release loDt
    release loPrng
    release loCrypt
    release loSbA
    release loSbB
    release loXml
    return
endif

// A status code of 200 indicates we received an XML response, but it could be an error message.
// Here's an example of an error response:

// <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
// <response timestamp="20200418142356">
//     <orderid>N6qsk4kYRZihmPrTXWYS6g</orderid>
//     <result>508</result>
//     <message>Invalid timestamp: '{' Value exceeds allowable limit: '}'</message>
// </response>

// We need to check the "result" within the XML.
loXml.LoadXml(loResp.BodyStr)

lnResult = loXml.GetChildIntValue("result")
? "result = " + str(lnResult)

// A successful result looks like this:

// <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
// <response timestamp="20200418145519">
//     <merchantid>realexsandbox</merchantid>
//     <account>internet</account>
//     <orderid>Cw93I1nFWVZuaATh46qMUCBlCcfrOvLo65C2cq5X-AY</orderid>
//     <result>00</result>
//     <authcode>L3pHww</authcode>
//     <message>AUTH CODE: L3pHww</message>
//     <pasref>96838535689610806</pasref>
//     <cvnresult>M</cvnresult>
//     <timetaken>87</timetaken>
//     <authtimetaken>67</authtimetaken>
//     <batchid>6322506</batchid>
//     <sha1hash>2fd2f15f97f1775779fe9bda536dc8317a4b39f6</sha1hash>
// </response>

if (lnResult = 0) then
    ? "authcode = " + loXml.GetChildContent("authcode")
    ? "Success."

else
    ? "Failed."
endif

release loResp


release loHttp
release loDt
release loPrng
release loCrypt
release loSbA
release loSbB
release loXml