Xbase++

Payeezy Place Temp Authorization Hold on Buyer’s Credit Card

See more HTTP Misc Examples

Demonstrates how to place a temporary authorization hold for the desired amount on the buyer’s credit card. You can Capture the authorized amount on completion of service or Void/Refund the transaction as required. Xbase++

LOCAL nSuccess
LOCAL oCrypt
LOCAL oPrng
LOCAL cApiKey
LOCAL cApiSecret
LOCAL cToken
LOCAL cNonce
LOCAL oDtNow
LOCAL oSbTimestamp
LOCAL cTimestamp
LOCAL oJson
LOCAL oSbHmacData
LOCAL cHexHash
LOCAL oSbBase64Hash
LOCAL oHttp
LOCAL cUrl
LOCAL oResp

nSuccess := 0

//  This example requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

oCrypt := CreateObject("Chilkat.Crypt2")
oPrng := CreateObject("Chilkat.Prng")

//  An API key such as y6pWAJNyJyjGv66IsVuWnklkKUPFbb0a
cApiKey := "my_api_key"
//  An API secret such as 86fbae7030253af3cd15faef2a1f4b67353e41fb6799f576b5093ae52901e6f7
cApiSecret := "my_api_secret"
//  A token such as fdoa-a480ce8951daa73262734cf102641994c1e55e7cdf4c02b6
cToken := "my_merchant_token"

//  The nonce is a random number (bytes), something like "6057786719490086000"
cNonce := oPrng:GenRandom(8, "decimal")
? "nonce = " + cNonce

oDtNow := CreateObject("Chilkat.CkDateTime")
oDtNow:SetFromCurrentSystemTime()
oSbTimestamp := CreateObject("Chilkat.StringBuilder")
//  Get the epoch timestamp in seconds
oSbTimestamp:Append(oDtNow:GetAsUnixTimeStr(0))
//  Change it to milliseconds
oSbTimestamp:Append("000")
//  The timestamp is a number similar to this: 1546011905000 (which is a timestamp taken on 28-Dec-2018).
cTimestamp := oSbTimestamp:GetAsString()
? "timestamp = " + cTimestamp

//  Generate the following JSON request body:
//  {
//    "merchant_ref": "Astonishing-Sale",
//    "transaction_type": "authorize",
//    "method": "credit_card",
//    "amount": "1299",
//    "currency_code": "USD",
//    "credit_card": {
//      "type": "visa",
//      "cardholder_name": "John Smith",
//      "card_number": "4788250000028291",
//      "exp_date": "1020",
//      "cvv": "123"
//    }
//  }

oJson := CreateObject("Chilkat.JsonObject")
oJson:UpdateString("merchant_ref", "Astonishing-Sale")
oJson:UpdateString("transaction_type", "authorize")
oJson:UpdateString("method", "credit_card")
oJson:UpdateString("amount", "1299")
oJson:UpdateString("currency_code", "USD")
oJson:UpdateString("credit_card.type", "visa")
oJson:UpdateString("credit_card.cardholder_name", "John Smith")
oJson:UpdateString("credit_card.card_number", "4788250000028291")
oJson:UpdateString("credit_card.exp_date", "1020")
oJson:UpdateString("credit_card.cvv", "123")
oJson:EmitCompact := 0
? oJson:Emit()

//  string hashData = apiKey + nonce + timestamp + token + jsonString;
oSbHmacData := CreateObject("Chilkat.StringBuilder")
oSbHmacData:Append(cApiKey)
oSbHmacData:Append(cNonce)
oSbHmacData:Append(cTimestamp)
oSbHmacData:Append(cToken)
oSbHmacData:Append(oJson:Emit())

//  HMAC the data to produce a hex string.
oCrypt:EncodingMode := "hexlower"
oCrypt:MacAlgorithm := "hmac"
oCrypt:SetMacKeyString(cApiSecret)
oCrypt:HashAlgorithm := "sha256"
oCrypt:Charset := "utf-8"
cHexHash := oCrypt:MacStringENC(oSbHmacData:GetAsString())
? "hexHash = " + cHexHash

//  Now base64 encode the hex string:
oSbBase64Hash := CreateObject("Chilkat.StringBuilder")
oSbBase64Hash:Append(cHexHash)
oSbBase64Hash:Encode("base64", "utf-8")

? "This is the Authorization header to be sent with the payeezy request:"
? "Authorization: " + oSbBase64Hash:GetAsString()

//  -----------------------------------------------------------
//  Now that we have the value for the Authorization header, send the POST containing the JSON.

oHttp := CreateObject("Chilkat.Http")

oHttp:Accept := "*/*"
oHttp:UserAgent := ""
oHttp:SetRequestHeader("Authorization", oSbBase64Hash:GetAsString())
oHttp:SetRequestHeader("apikey", cApiKey)
oHttp:SetRequestHeader("nonce", cNonce)
oHttp:SetRequestHeader("timestamp", cTimestamp)
oHttp:SetRequestHeader("token", cToken)

oHttp:SessionLogFilename := "qa_output/payeezy.txt"

cUrl := "https://api-cert.payeezy.com/v1/transactions"
oResp := CreateObject("Chilkat.HttpResponse")
nSuccess := oHttp:HttpJson("POST", cUrl, oJson, "application/json", oResp)
IF (nSuccess == 0)
    ? oHttp:LastErrorText
    oCrypt:destroy()
    oPrng:destroy()
    oDtNow:destroy()
    oSbTimestamp:destroy()
    oJson:destroy()
    oSbHmacData:destroy()
    oSbBase64Hash:destroy()
    oHttp:destroy()
    oResp:destroy()
    RETURN
ENDIF

? "response status code = " + Str(oResp:StatusCode)
oJson:Load(oResp:BodyStr)
? oJson:Emit()

//  Sample JSON response:

//  {
//    "correlation_id": "228.4604632998994",
//    "transaction_status": "approved",
//    "validation_status": "success",
//    "transaction_type": "authorize",
//    "transaction_id": "ET175628",
//    "transaction_tag": "2313721985",
//    "method": "credit_card",
//    "amount": "1299",
//    "currency": "USD",
//    "cvv2": "M",
//    "token": {
//      "token_type": "FDToken",
//      "token_data": {
//        "value": "9732261336638291"
//      }
//    },
//    "card": {
//      "type": "visa",
//      "cardholder_name": "John Smith",
//      "card_number": "8291",
//      "exp_date": "1020"
//    },
//    "bank_resp_code": "100",
//    "bank_message": "Approved",
//    "gateway_resp_code": "00",
//    "gateway_message": "Transaction Normal"
//  }
//  

? oJson:StringOf("correlation_id")
? oJson:StringOf("transaction_status")
? oJson:StringOf("validation_status")
? oJson:StringOf("transaction_type")
? oJson:StringOf("transaction_id")
? oJson:StringOf("transaction_tag")
? oJson:StringOf("method")
? oJson:StringOf("amount")
? oJson:StringOf("currency")
? oJson:StringOf("cvv2")
? oJson:StringOf("token.token_type")
? oJson:StringOf("token.token_data.value")
? oJson:StringOf("card.type")
? oJson:StringOf("card.cardholder_name")
? oJson:StringOf("card.card_number")
? oJson:StringOf("card.exp_date")
? oJson:StringOf("bank_resp_code")
? oJson:StringOf("bank_message")
? oJson:StringOf("gateway_resp_code")
? oJson:StringOf("gateway_message")

oCrypt:destroy()
oPrng:destroy()
oDtNow:destroy()
oSbTimestamp:destroy()
oJson:destroy()
oSbHmacData:destroy()
oSbBase64Hash:destroy()
oHttp:destroy()
oResp:destroy()