CopycURL Copied Copy failed

#!/usr/bin/env bash
# Save a card and charge it later
#
# Take one card sale, keep a reusable handle to the card it was paid with, charge that handle for a
# second order without the card number, and retire it when the customer is done with you.
#
# Every API call in this blueprint, in order. Each value a call returns is passed to the calls after
# it. A step that happens outside the API is a comment, and any failed call stops the script.

set -euo pipefail

BASE_URL="{{BASE_URL}}"
API_KEY="{{API_KEY}}"

# Sends one request and prints the response body. A failed call prints the API's answer and stops
# the script.
call() {
  local method="$1" path="$2" body="${3:-}" out
  local args=(-sS --fail-with-body -X "$method" "$BASE_URL$path" -H "api-key: $API_KEY")
  if [ -n "$body" ]; then
    args+=(-H "Content-Type: application/json" -d "$body")
  fi
  if ! out=$(curl "${args[@]}"); then
    printf '%s\n' "$out" >&2
    return 1
  fi
  printf '%s' "$out"
}

# Percent-encodes a value for use in a URL.
urlencode() {
  jq -rn --arg value "$1" '$value | @uri'
}

# Phase 1: Take the first payment

# Step 1: Charge the card the first time
step1=$(call POST "/api/transactions" '{
  "transactionType": "Sale",
  "cardData": {
    "cardNumber": "4111111111111111",
    "nameOnCard": "Jane Doe",
    "expirationMonth": 12,
    "expirationYear": 2030,
    "cvv": 123
  },
  "invoiceData": {
    "amounts": { "base": 10.00, "total": 10.00 }
  }
}')
transactionId=$(jq -er '.id | if . == null then error("The response carried no value for transactionId.") else tostring end' <<< "$step1")
merchantId=$(jq -er '.merchantId | if . == null then error("The response carried no value for merchantId.") else tostring end' <<< "$step1")

# Phase 2: Save the card

# Step 2: Turn that sale into a reusable stored payment method
step2=$(call POST "/api/tokens/create-from-transaction-async?transactionId=$(urlencode "$transactionId")&merchantId=$(urlencode "$merchantId")")
savedCardToken=$(jq -er '.publicReference | if . == null then error("The response carried no value for savedCardToken.") else tostring end' <<< "$step2")

# Phase 3: Charge it again later

# Step 3: Charge the stored payment method without the card number
body=$(jq -n --arg savedCardToken "$savedCardToken" '{
  "transactionType": "Sale",
  "initiationType": "CardholderInitiated",
  "tokenData": {
    "token": $savedCardToken
  },
  "invoiceData": {
    "amounts": { "base": 9.00, "total": 9.00 }
  }
}')
call POST "/api/transactions" "$body" > /dev/null

# Phase 4: Retire the stored payment method

# Step 4: Look the stored payment method up by its handle
step4=$(call POST "/api/tokens/resolve-payment-token-async?paymentTokenidentifier=$(urlencode "$savedCardToken")&transactionMerchantId=$(urlencode "$merchantId")&doOwnershipCheck=true")
storedTokenId=$(jq -er '.id | if . == null then error("The response carried no value for storedTokenId.") else tostring end' <<< "$step4")

# Step 5: Retire the stored payment method
call POST "/api/tokens/deactivate-async?id=$(urlencode "$storedTokenId")" > /dev/null

# Step 6: If you need to save a card without charging it
# This blueprint saves the card it just charged, which is the case an integration that already takes
# payments grows into. A signup that stores a card before the first order has no sale to mint from,
# and collecting the number yourself to vault it puts you back in scope for handling it. The hosted
# payment page has a no-charge save mode for exactly that. The customer enters the card on a page
# you don't host, and you get the same handle back. The hosted page is also where the customer's
# stored-credential consent is recorded, which a later charge made without them present has to have.
# The blueprint below covers the hosted flow end to end.

CopyPowerShell Copied Copy failed

# Save a card and charge it later
#
# Take one card sale, keep a reusable handle to the card it was paid with, charge that handle for a
# second order without the card number, and retire it when the customer is done with you.
#
# Every API call in this blueprint, in order. Each value a call returns is passed to the calls after
# it. A step that happens outside the API is a comment, and any failed call stops the script.

$ErrorActionPreference = 'Stop'

$baseUrl = '{{BASE_URL}}'
$apiKey = '{{API_KEY}}'

# Sends one request and returns the parsed response body. A failed call stops the script.
function Invoke-BlueprintCall([string] $Method, [string] $Path, [string] $Body) {
    $arguments = @{
        Method  = $Method
        Uri     = $baseUrl + $Path
        Headers = @{ 'api-key' = $apiKey }
    }
    if ($Body) {
        $arguments.ContentType = 'application/json'
        $arguments.Body = [System.Text.Encoding]::UTF8.GetBytes($Body)
    }
    Invoke-RestMethod @arguments
}

# Turns a value read off a response back into the text the API sent. A missing value stops the
# script.
function ConvertTo-CaptureValue($Value, [string] $Name) {
    if ($null -eq $Value) { throw "The response carried no value for $Name." }
    if ($Value -is [datetime] -and $Value.Kind -eq 'Unspecified') { return $Value.ToString('yyyy-MM-ddTHH:mm:ss.FFFFFFF', [cultureinfo]::InvariantCulture) }
    if ($Value -is [datetime]) { return $Value.ToUniversalTime().ToString('o') }
    if ($Value -is [bool]) { return $Value.ToString().ToLowerInvariant() }
    [string]$Value
}

# Phase 1: Take the first payment

# Step 1: Charge the card the first time
$body = @'
{
  "transactionType": "Sale",
  "cardData": {
    "cardNumber": "4111111111111111",
    "nameOnCard": "Jane Doe",
    "expirationMonth": 12,
    "expirationYear": 2030,
    "cvv": 123
  },
  "invoiceData": {
    "amounts": { "base": 10.00, "total": 10.00 }
  }
}
'@
$step1 = Invoke-BlueprintCall -Method 'POST' -Path '/api/transactions' -Body $body
$transactionId = ConvertTo-CaptureValue $step1.id 'transactionId'
$merchantId = ConvertTo-CaptureValue $step1.merchantId 'merchantId'

# Phase 2: Save the card

# Step 2: Turn that sale into a reusable stored payment method
$step2 = Invoke-BlueprintCall -Method 'POST' -Path "/api/tokens/create-from-transaction-async?transactionId=$([uri]::EscapeDataString($transactionId))&merchantId=$([uri]::EscapeDataString($merchantId))"
$savedCardToken = ConvertTo-CaptureValue $step2.publicReference 'savedCardToken'

# Phase 3: Charge it again later

# Step 3: Charge the stored payment method without the card number
$body = @"
{
  "transactionType": "Sale",
  "initiationType": "CardholderInitiated",
  "tokenData": {
    "token": $(ConvertTo-Json -InputObject ([string]($savedCardToken)))
  },
  "invoiceData": {
    "amounts": { "base": 9.00, "total": 9.00 }
  }
}
"@
$null = Invoke-BlueprintCall -Method 'POST' -Path '/api/transactions' -Body $body

# Phase 4: Retire the stored payment method

# Step 4: Look the stored payment method up by its handle
$step4 = Invoke-BlueprintCall -Method 'POST' -Path "/api/tokens/resolve-payment-token-async?paymentTokenidentifier=$([uri]::EscapeDataString($savedCardToken))&transactionMerchantId=$([uri]::EscapeDataString($merchantId))&doOwnershipCheck=true"
$storedTokenId = ConvertTo-CaptureValue $step4.id 'storedTokenId'

# Step 5: Retire the stored payment method
$null = Invoke-BlueprintCall -Method 'POST' -Path "/api/tokens/deactivate-async?id=$([uri]::EscapeDataString($storedTokenId))"

# Step 6: If you need to save a card without charging it
# This blueprint saves the card it just charged, which is the case an integration that already takes
# payments grows into. A signup that stores a card before the first order has no sale to mint from,
# and collecting the number yourself to vault it puts you back in scope for handling it. The hosted
# payment page has a no-charge save mode for exactly that. The customer enters the card on a page
# you don't host, and you get the same handle back. The hosted page is also where the customer's
# stored-credential consent is recorded, which a later charge made without them present has to have.
# The blueprint below covers the hosted flow end to end.

CopyTypeScript Copied Copy failed

// Save a card and charge it later
//
// Take one card sale, keep a reusable handle to the card it was paid with, charge that handle for a
// second order without the card number, and retire it when the customer is done with you.
//
// Every API call in this blueprint, in order. Each value a call returns is passed to the calls
// after it. A step that happens outside the API is a comment, and any failed call stops the script.

export {};

const baseUrl = '{{BASE_URL}}';
const apiKey = '{{API_KEY}}';

// Sends one request and returns the parsed response body. A failed call throws.
async function call(method: string, path: string, body?: unknown): Promise<any> {
  const headers: Record<string, string> = { 'api-key': apiKey };
  if (body !== undefined) {
    headers['Content-Type'] = 'application/json';
  }

  const response = await fetch(baseUrl + path, {
    method,
    headers,
    body: body === undefined ? undefined : JSON.stringify(body),
  });

  const text = await response.text();
  if (!response.ok) {
    throw new Error(`${method} ${path} answered ${response.status}: ${text}`);
  }

  return text ? JSON.parse(text) : null;
}

// Turns a value read off a response into the text the API sent. A missing value throws.
function capture(value: unknown, name: string): string {
  if (value === undefined || value === null) {
    throw new Error(`The response carried no value for ${name}.`);
  }

  return typeof value === 'string' ? value : JSON.stringify(value);
}

// Phase 1: Take the first payment

// Step 1: Charge the card the first time
const step1 = await call('POST', '/api/transactions', {
  "transactionType": "Sale",
  "cardData": {
    "cardNumber": "4111111111111111",
    "nameOnCard": "Jane Doe",
    "expirationMonth": 12,
    "expirationYear": 2030,
    "cvv": 123
  },
  "invoiceData": {
    "amounts": { "base": 10.00, "total": 10.00 }
  }
});
const transactionId = capture(step1.id, 'transactionId');
const merchantId = capture(step1.merchantId, 'merchantId');

// Phase 2: Save the card

// Step 2: Turn that sale into a reusable stored payment method
const step2 = await call('POST', `/api/tokens/create-from-transaction-async?transactionId=${encodeURIComponent(transactionId)}&merchantId=${encodeURIComponent(merchantId)}`);
const savedCardToken = capture(step2.publicReference, 'savedCardToken');

// Phase 3: Charge it again later

// Step 3: Charge the stored payment method without the card number
await call('POST', '/api/transactions', {
  "transactionType": "Sale",
  "initiationType": "CardholderInitiated",
  "tokenData": {
    "token": savedCardToken
  },
  "invoiceData": {
    "amounts": { "base": 9.00, "total": 9.00 }
  }
});

// Phase 4: Retire the stored payment method

// Step 4: Look the stored payment method up by its handle
const step4 = await call('POST', `/api/tokens/resolve-payment-token-async?paymentTokenidentifier=${encodeURIComponent(savedCardToken)}&transactionMerchantId=${encodeURIComponent(merchantId)}&doOwnershipCheck=true`);
const storedTokenId = capture(step4.id, 'storedTokenId');

// Step 5: Retire the stored payment method
await call('POST', `/api/tokens/deactivate-async?id=${encodeURIComponent(storedTokenId)}`);

// Step 6: If you need to save a card without charging it
// This blueprint saves the card it just charged, which is the case an integration that already
// takes payments grows into. A signup that stores a card before the first order has no sale to mint
// from, and collecting the number yourself to vault it puts you back in scope for handling it. The
// hosted payment page has a no-charge save mode for exactly that. The customer enters the card on a
// page you don't host, and you get the same handle back. The hosted page is also where the
// customer's stored-credential consent is recorded, which a later charge made without them present
// has to have. The blueprint below covers the hosted flow end to end.

CopyC# Copied Copy failed

// Save a card and charge it later
//
// Take one card sale, keep a reusable handle to the card it was paid with, charge that handle for a
// second order without the card number, and retire it when the customer is done with you.
//
// Every API call in this blueprint, in order. Each value a call returns is passed to the calls
// after it. A step that happens outside the API is a comment, and any failed call stops the script.

using System.Text;
using System.Text.Json;

var baseUrl = "{{BASE_URL}}";
var apiKey = "{{API_KEY}}";

using var http = new HttpClient();
http.DefaultRequestHeaders.Add("api-key", apiKey);

// Sends one request and returns the parsed response body. A failed call throws.
async Task<JsonElement> CallAsync(string method, string path, string? body = null)
{
    using var request = new HttpRequestMessage(new HttpMethod(method), baseUrl + path);
    if (body is not null)
    {
        request.Content = new StringContent(body, Encoding.UTF8, "application/json");
    }

    using var response = await http.SendAsync(request);
    var json = await response.Content.ReadAsStringAsync();
    if (!response.IsSuccessStatusCode)
    {
        throw new HttpRequestException($"{method} {path} answered {(int)response.StatusCode}: {json}");
    }

    return json.Length == 0 ? default : JsonSerializer.Deserialize<JsonElement>(json);
}

// Turns a value read off a response into the text the API sent. A missing value throws.
static string Capture(JsonElement value, string name) => value.ValueKind switch
{
    JsonValueKind.String => value.GetString()!,
    JsonValueKind.Number or JsonValueKind.True or JsonValueKind.False => value.GetRawText(),
    _ => throw new InvalidOperationException($"The response carried no value for {name}.")
};

// Phase 1: Take the first payment

// Step 1: Charge the card the first time
var step1 = await CallAsync("POST", "/api/transactions", """
    {
      "transactionType": "Sale",
      "cardData": {
        "cardNumber": "4111111111111111",
        "nameOnCard": "Jane Doe",
        "expirationMonth": 12,
        "expirationYear": 2030,
        "cvv": 123
      },
      "invoiceData": {
        "amounts": { "base": 10.00, "total": 10.00 }
      }
    }
    """);
var transactionId = Capture(step1.GetProperty("id"), "transactionId");
var merchantId = Capture(step1.GetProperty("merchantId"), "merchantId");

// Phase 2: Save the card

// Step 2: Turn that sale into a reusable stored payment method
var step2 = await CallAsync("POST", $"/api/tokens/create-from-transaction-async?transactionId={Uri.EscapeDataString(transactionId)}&merchantId={Uri.EscapeDataString(merchantId)}");
var savedCardToken = Capture(step2.GetProperty("publicReference"), "savedCardToken");

// Phase 3: Charge it again later

// Step 3: Charge the stored payment method without the card number
await CallAsync("POST", "/api/transactions", $$"""
    {
      "transactionType": "Sale",
      "initiationType": "CardholderInitiated",
      "tokenData": {
        "token": {{JsonSerializer.Serialize(savedCardToken)}}
      },
      "invoiceData": {
        "amounts": { "base": 9.00, "total": 9.00 }
      }
    }
    """);

// Phase 4: Retire the stored payment method

// Step 4: Look the stored payment method up by its handle
var step4 = await CallAsync("POST", $"/api/tokens/resolve-payment-token-async?paymentTokenidentifier={Uri.EscapeDataString(savedCardToken)}&transactionMerchantId={Uri.EscapeDataString(merchantId)}&doOwnershipCheck=true");
var storedTokenId = Capture(step4.GetProperty("id"), "storedTokenId");

// Step 5: Retire the stored payment method
await CallAsync("POST", $"/api/tokens/deactivate-async?id={Uri.EscapeDataString(storedTokenId)}");

// Step 6: If you need to save a card without charging it
// This blueprint saves the card it just charged, which is the case an integration that already
// takes payments grows into. A signup that stores a card before the first order has no sale to mint
// from, and collecting the number yourself to vault it puts you back in scope for handling it. The
// hosted payment page has a no-charge save mode for exactly that. The customer enters the card on a
// page you don't host, and you get the same handle back. The hosted page is also where the
// customer's stored-credential consent is recorded, which a later charge made without them present
// has to have. The blueprint below covers the hosted flow end to end.

CopyPython Copied Copy failed

# Save a card and charge it later
#
# Take one card sale, keep a reusable handle to the card it was paid with, charge that handle for a
# second order without the card number, and retire it when the customer is done with you.
#
# Every API call in this blueprint, in order. Each value a call returns is passed to the calls after
# it. A step that happens outside the API is a comment, and any failed call stops the script.

from urllib.parse import quote

import json
import requests

BASE_URL = "{{BASE_URL}}"
API_KEY = "{{API_KEY}}"


# Sends one request and returns the parsed response body. A failed call raises.
def call(method, path, body=None):
    response = requests.request(
        method,
        BASE_URL + path,
        headers={"api-key": API_KEY},
        json=body,
    )
    response.raise_for_status()
    return response.json() if response.content else None


# Turns a value read off a response into the text the API sent. A missing value raises.
def capture(value, name):
    if value is None:
        raise ValueError(f"The response carried no value for {name}.")
    return value if isinstance(value, str) else json.dumps(value)


# Phase 1: Take the first payment

# Step 1: Charge the card the first time
step1 = call("POST", "/api/transactions", {
  "transactionType": "Sale",
  "cardData": {
    "cardNumber": "4111111111111111",
    "nameOnCard": "Jane Doe",
    "expirationMonth": 12,
    "expirationYear": 2030,
    "cvv": 123
  },
  "invoiceData": {
    "amounts": { "base": 10.00, "total": 10.00 }
  }
})
transaction_id = capture(step1["id"], "transactionId")
merchant_id = capture(step1["merchantId"], "merchantId")

# Phase 2: Save the card

# Step 2: Turn that sale into a reusable stored payment method
step2 = call("POST", f"/api/tokens/create-from-transaction-async?transactionId={quote(transaction_id, safe='')}&merchantId={quote(merchant_id, safe='')}")
saved_card_token = capture(step2["publicReference"], "savedCardToken")

# Phase 3: Charge it again later

# Step 3: Charge the stored payment method without the card number
call("POST", "/api/transactions", {
  "transactionType": "Sale",
  "initiationType": "CardholderInitiated",
  "tokenData": {
    "token": saved_card_token
  },
  "invoiceData": {
    "amounts": { "base": 9.00, "total": 9.00 }
  }
})

# Phase 4: Retire the stored payment method

# Step 4: Look the stored payment method up by its handle
step4 = call("POST", f"/api/tokens/resolve-payment-token-async?paymentTokenidentifier={quote(saved_card_token, safe='')}&transactionMerchantId={quote(merchant_id, safe='')}&doOwnershipCheck=true")
stored_token_id = capture(step4["id"], "storedTokenId")

# Step 5: Retire the stored payment method
call("POST", f"/api/tokens/deactivate-async?id={quote(stored_token_id, safe='')}")

# Step 6: If you need to save a card without charging it
# This blueprint saves the card it just charged, which is the case an integration that already takes
# payments grows into. A signup that stores a card before the first order has no sale to mint from,
# and collecting the number yourself to vault it puts you back in scope for handling it. The hosted
# payment page has a no-charge save mode for exactly that. The customer enters the card on a page
# you don't host, and you get the same handle back. The hosted page is also where the customer's
# stored-credential consent is recorded, which a later charge made without them present has to have.
# The blueprint below covers the hosted flow end to end.