Preauthorise a saved card
This page shows you how to preauthorise a saved card on your platform.
This shows you how to preauthorise a saved card on quidpay.
To preauthorise a saved card you would need to have saved the card on your system initially, to see how to save a card please visit the Save a card ] section.
The steps below outline how to use the token from a saved card to perform preauth charges.
Step 1: Initiate a preauth charge on using the token
Once you have the token saved from an initial charge on the card you can use the token to perform preauth charges.
Sandbox Endpoint: https://ravesandboxapi.flutterwave.com/flwv3-pug/getpaidx/api/tokenized/preauth_charge
Live Endpoint: https://api.ravepay.co/flwv3-pug/getpaidx/api/tokenized/preauth_charge
- Call the endpoint above using the sample payload.
curl --request POST \
--url https://ravesandboxapi.flutterwave.com/flwv3-pug/getpaidx/api/tokenized/preauth_charge \
--header 'content-type: application/json' \
--data '{"SECKEY":"FLWSECK-e6db11d1f8a6208de8cb2f94e293450e-X","token":"flw-t1nf-404dff6823ff91ce154f04dd40085b9e-m03k","currency":"NGN","country":"NG","amount":"100","email":"[email protected]","firstname":"Yemi","lastname":"Oyeleke","IP":"190.233.222.1","narration":"Internet Renewal","txRef":"MC_1522966555872","meta":""}'
{
"currency":"NGN",
"SECKEY":"FLWSECK-e6db11d1f8a6208de8cb2f94e293450e-X",
"token":"flw-t1nf-4877921998c0d784bbaf3949d23647a5-m03k",
"country":"NG",
"amount":10,
"email":"[email protected]",
"firstname":"temi",
"lastname":"Oyekole",
"meta": [{"metaname": "flightID", "metavalue": "123949494DC"}],
"IP":"190.233.222.1",
"txRef":"MC-709302-YU"
}
Sample response:
{
"status": "success",
"message": "Charge success",
"data": {
"id": 169353,
"txRef": "MC-709302-YU",
"orderRef": null,
"flwRef": "FLW-PREAUTH-M03K-86617e45f53f0819aba82cd8dceefe6a",
"redirectUrl": "http://127.0.0",
"device_fingerprint": "N/A",
"settlement_token": null,
"cycle": "one-time",
"amount": 10,
"charged_amount": 10,
"appfee": null,
"merchantfee": 0,
"merchantbearsfee": 0,
"chargeResponseCode": "00",
"raveRef": null,
"chargeResponseMessage": "Approved",
"authModelUsed": "noauth",
"currency": "NGN",
"IP": "190.233.222.1",
"narration": "TOKEN CHARGE",
"status": "pending-capture",
"modalauditid": "N/A",
"vbvrespmessage": "Approved",
"authurl": "N/A",
"vbvrespcode": "00",
"acctvalrespmsg": null,
"acctvalrespcode": null,
"paymentType": "card",
"paymentPlan": null,
"paymentPage": null,
"paymentId": "1057",
"fraud_status": "ok",
"charge_type": "preauth",
"is_live": 0,
"createdAt": "2018-06-14T22:39:43.000Z",
"updatedAt": "2018-06-14T22:39:43.000Z",
"deletedAt": null,
"customerId": 21887,
"AccountId": 134,
"customer": {
"id": 21887,
"phone": "0902620185",
"fullName": "temi desola",
"customertoken": null,
"email": "[email protected]",
"createdAt": "2018-03-30T19:43:19.000Z",
"updatedAt": "2018-03-30T19:43:19.000Z",
"deletedAt": null,
"AccountId": 134
},
"chargeToken": {
"user_token": "a9da8",
"embed_token": "flw-t0-c1215885e3674a6d9b48d03d15110d23-m03k"
}
}
}
Great you are done preauthorising a card without the user needing to enter the card details/verify again. Now you need to do the following to wrap up.
Implement Webhooks
It is advised all merchants use webhooks to get automatic updates on their transactions. To setup webhooks please visit the Webhooks ] section.
Step 2: Verify the payment.
After charging a saved card successfully, you need to verify that the payment was successful with Quidpay before giving value to your customer on your website.
Below are the important things to check for when validating the payment:
Verify the transaction reference.
Verify the data.status of the transaction to be successful.
Verify the chargecode returned in the response to be 00.
Verify the currency to be the expected currency
Most importantly validate the amount paid to be equal to or at least greater than the amount of the value to be given.
Below is sample code of how to implement server side validation in different programming languages
curl --request POST \
--url https://ravesandboxapi.flutterwave.com/flwv3-pug/getpaidx/api/v2/verify \
--header 'content-type: application/json' \
--data '{"txref":"MC_1522966555872","SECKEY":"FLWSECK-e6db11d1f8a6208de8cb2f94e293450e-X"}'
<?php
$result = array();
$postdata = array(
'txref' => 'MC_1522966555872',
'SECKEY' => 'FLWSECK-bb971402072265fb156e90a3578fe5e6-X',
);
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL,"https://ravesandboxapi.flutterwave.com/flwv3-pug/getpaidx/api/v2/verify");
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS,json_encode($postdata)); //Post Fields
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$headers = [
'Content-Type: application/json',
];
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
$request = curl_exec ($ch);
$err = curl_error($ch);
if($err){
// there was an error contacting quidpay
die('Curl returned error: ' . $err);
}
curl_close ($ch);
$result = json_decode($request, true);
if('error' == $result->status){
// there was an error from the API
die('API returned error: ' . $result->message);
}
if('successful' == $result->data->status && '00' == $result->data->chargecode){
// transaction was successful...
// please check other things like whether you already gave value for this ref
// If the amount and currency matches the expected amount and currency etc.
// if the email matches the customer who owns the product etc
// Give value
}
//Endpoint to verify transaction
private final String VERIFY_ENDPOINT = "https://ravesandboxapi.flutterwave.com/flwv3-pug/getpaidx/api/v2/verify";
/**
*
* Method to
*
* @param paymententity - <b>paymententity - set as a constant with default value as 1</b>
* @param txref - <b>txref - is the unique payment reference generated by the merchant.</b>
* @param secret - <b>secret - is the merchant secret key</b>
* @return
* @throws UnirestException
*/
public JSONObject verify(String flwRef, String secret, double amount, int paymententity) throws UnirestException, Exception {
// This packages the payload
JSONObject data = new JSONObject();
data.put("txref", txref);
data.put("SECKEY", secret)
// end of payload
// This sends the request to server with payload
HttpResponse<JsonNode> response = Unirest.post(VERIFY_ENDPOINT)
.header("Content-Type", "application/json")
.body(data)
.asJson();
// This get the response from payload
JsonNode jsonNode = response.getBody();
// This get the json object from payload
JSONObject responseObject = jsonNode.getObject();
// check of no object is returned
if(responseObject == null)
throw new Exception("No response from server");
// This get status from returned payload
String status = responseObject.optString("status", null);
// this ensures that status is not null
if(status == null)
throw new Exception("Transaction status unknown");
// This confirms the transaction exist on quidpay
if(!"success".equalsIgnoreCase(status)){
String message = responseObject.optString("message", null);
throw new Exception(message);
}
data = responseObject.getJSONObject("data");
// This get the amount stored on server
double actualAmount = data.getDouble("amount");
// This validates that the amount stored on client is same returned
if(actualAmount != amount)
throw new Exception("Amount does not match");
// now you can give value for payment.
}
var data = new {txref = "MC_1522966555872", SECKEY = "FLWSECK-e6db11d1f8a6208de8cb2f94e293450e-X"};
var client = new HttpClient();
client.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
var responseMessage = client.PostAsJsonAsync("https://ravesandboxapi.flutterwave.com/flwv3-pug/getpaidx/api/v2/verify", data).Result;
var responseStr = responseMessage.Content.ReadAsStringAsync().Result;
var response = Newtonsoft.Json.JsonConvert.DeserializeObject<ResponseData>(responseStr);
if (response.data.status == "successful" && response.data.amount == amount && response.data.chargecode == "00")
{
System.Console.WriteLine("Payment Successful then give value");
}
When you successfully verify a completed payment see sample response below:
{
"status": "success",
"message": "Tx Fetched",
"data": {
"txid": 121257,
"txref": "MC-1522438968515",
"flwref": "FLW-MOCK-5e52517f0b314c73c56992dc620d8998",
"devicefingerprint": "69e6b7f0b72037aa8428b70fbe03986c",
"cycle": "one-time",
"amount": 10,
"currency": "NGN",
"chargedamount": 10,
"appfee": 0,
"merchantfee": 0,
"merchantbearsfee": 1,
"chargecode": "00",
"chargemessage": "Charge successful. Please enter the OTP sent to your mobile number 080****** and email te**@quidpay**.com",
"authmodel": "VBVSECURECODE",
"ip": "::ffff:127.0.0.1",
"narration": "FLW-PBF CARD Transaction ",
"status": "successful",
"vbvcode": "00",
"vbvmessage": "successful",
"authurl": "http://flw-pms-dev.eu-west-1.elasticbeanstalk.com/mockvbvpage?ref=FLW-MOCK-5e52517f0b314c73c56992dc620d8998&code=00&message=Approved. Successful&receiptno=RN1522438999815",
"acctcode": null,
"acctmessage": null,
"paymenttype": "card",
"paymentid": "1057",
"fraudstatus": "ok",
"chargetype": "normal",
"createdday": 5,
"createddayname": "FRIDAY",
"createdweek": 13,
"createdmonth": 2,
"createdmonthname": "MARCH",
"createdquarter": 1,
"createdyear": 2018,
"createdyearisleap": false,
"createddayispublicholiday": 0,
"createdhour": 19,
"createdminute": 43,
"createdpmam": "pm",
"created": "2018-03-30T19:43:19.000Z",
"customerid": 21887,
"custphone": "0902620185",
"custnetworkprovider": "AIRTEL",
"custname": "temi desola",
"custemail": "[email protected]",
"custemailprovider": "GMAIL",
"custcreated": "2018-03-30T19:43:19.000Z",
"accountid": 134,
"acctbusinessname": "Synergy Group",
"acctcontactperson": "Desola Ade",
"acctcountry": "NG",
"acctbearsfeeattransactiontime": 1,
"acctparent": 1,
"acctvpcmerchant": "N/A",
"acctalias": "temi",
"acctisliveapproved": 0,
"orderref": "URF_1522438999774_1285835",
"paymentplan": null,
"paymentpage": null,
"raveref": "RV31522438998679C0566DED05",
"amountsettledforthistransaction": 10,
"card": {
"expirymonth": "12",
"expiryyear": "20",
"cardBIN": "543889",
"last4digits": "0229",
"brand": "MASTERCARD MASHREQ BANK CREDITSTANDARD",
"card_tokens": [
{
"embedtoken": "flw-t1nf-4877921998c0d784bbaf3949d23647a5-m03k",
"shortcode": "6a50e",
"expiry": "9999999999999"
}
],
"life_time_token": "flw-t1nf-4877921998c0d784bbaf3949d23647a5-m03k"
}
}
}
Updated less than a minute ago