Example description : Card Store Payment

In this demo example you have Custom Form with enabled support for 3DS payment. Single Payment and Credit Card Storage / 1-Click payment can be processed with integrated 3DS verification.

Continue process flow / Receive CardTokenID / CustomerID and then click again to create transaction.

Fill the form with a valid name, email and a valid card* number (or use default values clicking on the EXAMPLE DATA button).

Show CURL code to make the transaction Show JSON response from CentralPay API

cardTokenId:
customerId:
cardId:
threeDSServerTransID:
authentificationValue:
transactionId:

Offer 1

19.99€

Offer 2

29.99€

Offer 3

39.99€

remember me Use your card

Select card and enter CVV

Secure payment by

Step 1

Collecting the personal information and credit card data. All required fields must be filled before sending data. Select the Remember my card option to store your card.

Step 2

Card data is sent to CentralPay through the browser with token.js. CentralPay stores the card data and returns the CardTokenID to the merchant form. Using the CardToken ID, a new Customer ID is requested.

Step 3

CardToken ID / Customer ID are ready to make a new API request from merchant's server.

Step 4

CardToken ID / Customer ID, currency, amount and other data are sent to CentralPay to check the versioning. Service that allow you to know if a card is compatible with 3ds-2 and in this case create the 3DS Method.

Step 5

The authentification request is sent via POST to the ACS bank URL ("https://test-threedsecure.centralpay.net/acs") provided in the authentification object. A paRes (Payment Authentication Response), is returned from the ACS bank. If challenge is not required ("Y"), a transaction request can be send.

Step 5 challenge

The authentification request is sent via POST to the ACS bank URL ("https://test-threedsecure.centralpay.net/acs") provided in the authentification object. A paRes (Payment Authentication Response), is returned from the ACS bank. If challenge is required ("C"), an OTP validation form is displayed. After validation, the otp returns a transaction status and if it is valid the transaction request is sent.

Step 6

The Payment Authentication Response, Customer ID / Card ID, currency, amount, and order data are sent to the API by submitting the form. CentralPay creates a Transaction and returns TransactionId with JSON response to the merchant.

document.addEventListener("DOMContentLoaded", function() {
const urlCentralpayApi = 'https://test-api.centralpay.net/v2/rest/';
const form = document.querySelector('form[data-centralpay="form"]');
const modalChallenge = document.getElementById('modal-challenge')
const loading = document.getElementById("loading")

modalChallenge.addEventListener('hide.bs.modal', () => {
    checkTransaction();
})


document.querySelector("#formCPay").addEventListener("submit", function(event){
    event.preventDefault();
    onValidFormPay();
}, false);

function onValidFormPay() {
    reset();
    loading.classList.remove("d-none");

    let firstname = form.querySelector('input[name="order[firstName]"]').value;
    let lastname = form.querySelector('input[name="order[lastName]"]').value;
    let number = form.querySelector('input[data-centralpay="card[number]"]').value;
    let holderEmail = form.querySelector('input[name="card[cardholderEmail]"]').value;
    let expirationMonth = form.querySelector('input[data-centralpay="card[expirationMonth]"]').value;
    let expirationYear = form.querySelector('input[data-centralpay="card[expirationYear]"]').value;
    let cvc = form.querySelector('input[data-centralpay="card[cvc]"]').value;

    let data = {
        'merchantPublicKey': document.querySelector('input[data-example="merchantPublicKey"]').value,
        'card[holderEmail]': holderEmail,
        'card[holderName]': lastname + " " + firstname,
        'card[number]': number,
        'card[cvc]': cvc,
        'card[expirationMonth]': expirationMonth,
        'card[expirationYear]': expirationYear,
    };

    const query = new URLSearchParams(data);

    let xhr = new XMLHttpRequest();
    xhr.open('POST', urlCentralpayApi + 'cardToken');
    xhr.setRequestHeader("Origin", "https://example.centralpay.net");
    xhr.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");

    xhr.onreadystatechange = function() {
        if (xhr.readyState === 4) {
            if(xhr.status === 400){
                addAlert("400:  CadToken not found", "danger");
                loading.classList.add("d-none");
            }
            else if(xhr.status === 200){
                let dataCard = JSON.parse(xhr.response);
                let textJson = xhr.status + ': DataCard : <br><pre><code>' + JSON.stringify(dataCard, null, 4) + '</code></pre>';
                addAlert(textJson);
                versioning(dataCard.card);
            }
            else{
                addAlert(xhr.status + ":  CadToken Manage this case", "danger");
                loading.classList.add("d-none");
            }
        }
    };
    xhr.send(query.toString());
}

function versioning(data){
    let xhrVerisoning = new XMLHttpRequest();
    let iframe3dsversioning = document.getElementById('iframe-versioning');
    let versioningUrl = window.location.href + "iframe-versioning"
    xhrVerisoning.onreadystatechange = function () {
        if (xhrVerisoning.readyState === 4) {
            if(xhrVerisoning.status === 400){
                addAlert(xhrVerisoning + " : 404  CadToken Manage this case", "danger");
                loading.classList.add("d-none");
            }
            else if(xhrVerisoning.status === 200){
                try {
                    let jsonResponse = JSON.parse(xhrVerisoning.response);

                    if (jsonResponse.threeDSServerTransID && !jsonResponse.errorDetails) {
                        let textJson = xhrVerisoning.status + ': Versionning : <br><pre><code>' + JSON.stringify(jsonResponse, null, 4) + '</code></pre>';
                        addAlert(textJson);
                        iframe3dsversioning.setAttribute('src', versioningUrl);
                        authentication();
                    } else if (jsonResponse.errorDetails){
                        let textJson = xhrVerisoning.status + ': Versionning : ' + jsonResponse.errorDetails.errorCode + '<br><pre><code>' + JSON.stringify(jsonResponse, null, 4) + '</code></pre>';
                        addAlert(textJson, "danger");
                        loading.classList.add("d-none");
                    }
                } catch (e) {
                    addAlert(e, "danger");
                    loading.classList.add("d-none");
                }
            }
            else{
                addAlert(xhrVerisoning + " : Error: Manage this case", "danger");
                loading.classList.add("d-none");
            }
        }
    }
    xhrVerisoning.open('POST', "/versioning")

    let formData = new FormData();
    formData.append("cardTokenId", data.cardTokenId);
    formData.append("cardId", data.cardId);
    xhrVerisoning.send(formData);
}

function authentication() {
    const date = new Date();
    const dataAuthen = {};
    let firstname = form.querySelector('input[name="order[firstName]"]').value;
    let lastname = form.querySelector('input[name="order[lastName]"]').value;
    let holderEmail = form.querySelector('input[name="card[cardholderEmail]"]').value;
    let amount = form.querySelector('input[name="offer"]').value;
    dataAuthen.browserJavaEnabled = navigator.javaEnabled();
    dataAuthen.browserLanguage = navigator.language;
    dataAuthen.browserColorDepth = screen.colorDepth;
    dataAuthen.browserScreenHeight = screen.height;
    dataAuthen.browserScreenWidth = screen.width;
    dataAuthen.browserTZ = date.getTimezoneOffset();
    dataAuthen.browserUserAgent = navigator.userAgent;
    dataAuthen.browserAcceptHeader = acceptHeader;
    dataAuthen.merchantPublicKey = document.querySelector('input[data-example="merchantPublicKey"]').value,
    dataAuthen.email = holderEmail;
    dataAuthen.firstName = firstname;
    dataAuthen.lastName = lastname;
    dataAuthen.amount = amount;

    dataAuthen.amount = amount;
    let xhrAuthentication = new XMLHttpRequest();
    xhrAuthentication.onreadystatechange = function () {
        if (xhrAuthentication.readyState === 4) {
            if(xhrAuthentication.status === 400){
                addAlert(xhrAuthentication + " : 404 CadToken Manage this case", "danger");
                loading.classList.add("d-none");
            }
            else if(xhrAuthentication.status === 200){
                try {
                    let jsonResponse = JSON.parse(xhrAuthentication.response);
                    if (jsonResponse.threeDSServerTransID) {
                        let textJson = xhrAuthentication.status + ': Authentication : <br><pre><code>' + JSON.stringify(jsonResponse, null, 4) + '</code></pre>';
                        addAlert(textJson);

                        if (jsonResponse.transStatus === "Y" ) {
                            transaction();
                        }
                        else if (jsonResponse.transStatus !== 'C') {
                            console.log(jsonResponse);
                            let textJson = xhrAuthentication.status + ': Authentication : <br><pre><code>' + JSON.stringify(jsonResponse, null, 4) + '</code></pre>';
                            addAlert(textJson, 'danger');
                            loading.classList.add("d-none");
                        }
                        else {
                            let xhrchallenge = new XMLHttpRequest();
                            xhrchallenge.onreadystatechange = function () {
                                if (xhrchallenge.readyState === 4) {
                                    if (xhrchallenge.status === 200) {
                                        let challengeUrl = window.location.href + "challenge"
                                        let iframe3dschallenge = document.getElementById('iframe-challenge');
                                        iframe3dschallenge.setAttribute('src', challengeUrl);
                                        let modalChallenge  = document.getElementById("modal-challenge");
                                        const modalChallenge = new bootstrap.Modal(modalChallenge); // creating modal object
                                        modalChallenge.show(); // show modal
                                    }
                                }
                            }
                            xhrchallenge.open('POST', "/challenge")
                            xhrchallenge.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");
                            xhrchallenge.send();
                        }
                    }
                } catch (e) {
                    addAlert(e, "danger");
                    loading.classList.add("d-none");
                }
            }
            else{
                addAlert(xhrAuthentication + " : Error: Manage this case", "danger");
                loading.classList.add("d-none");
            }
        }
    }
    xhrAuthentication.open('POST', "/authentication")
    xhrAuthentication.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");

    let queryAuth = new URLSearchParams(dataAuthen);
    xhrAuthentication.send(queryAuth.toString());
}
function transaction() {
    let dataTrans = {
        'amount' : form.querySelector('input[name="offer"]').value,
        'firstname' : form.querySelector('input[name="order[firstName]"]').value,
        'lastname' : form.querySelector('input[name="order[lastName]"]').value,
        'email' : form.querySelector('input[name="card[cardholderEmail]"]').value
    }

    let xhrTransaction = new XMLHttpRequest();
    xhrTransaction.onreadystatechange = function () {
        if (xhrTransaction.readyState === 4) {
            if (xhrTransaction.status === 400) {
                addAlert(xhrTransaction + " : 404  CadToken Manage this case", "danger");
                loading.classList.add("d-none");
            } else if (xhrTransaction.status === 200) {
                try {
                    let jsonResponse = JSON.parse(xhrTransaction.response);
                    let textJson = xhrTransaction.status + ': Transaction : <br><pre><code>' + JSON.stringify(jsonResponse, null, 4) + '</code></pre>';
                    addAlert(textJson);
                    loading.classList.add("d-none");
                } catch (e) {
                    addAlert(e, "danger");
                    loading.classList.add("d-none");
                }
            }
        }
    }
    xhrTransaction.open('POST', "/transaction")
    xhrTransaction.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");
    let queryTrans = new URLSearchParams(dataTrans);
    xhrTransaction.send(queryTrans.toString());
}
function checkTransaction() {
    let xhrTransaction = new XMLHttpRequest();
    xhrTransaction.onreadystatechange = function () {
        console.log(xhrTransaction.readyState);
        if (xhrTransaction.readyState === 4) {
            if (xhrTransaction.status === 400) {
                addAlert(xhrTransaction + " : 404  Transaction Manage this case", "danger");
                loading.classList.add("d-none");
            } else if (xhrTransaction.status === 200) {
                try {
                    console.log(xhrTransaction.response);
                    let jsonResponse = JSON.parse(xhrTransaction.response);
                    let textJson = xhrTransaction.status + ': Transaction : <br><pre><code>' + JSON.stringify(jsonResponse, null, 4) + '</code></pre>';
                    addAlert(textJson);
                    loading.classList.add("d-none");
                } catch (e) {
                    addAlert(e, "danger");
                    loading.classList.add("d-none");
                }
            }
        }
    }
    xhrTransaction.open('GET', "/check-transaction")
    xhrTransaction.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");
    xhrTransaction.send();
}
function addAlert(dataTexte,type = 'secondary') {
    let rowAlert = document.querySelector('.row-alert');
    rowAlert.innerHTML += '<div class="alert alert-' + type + '" role="alert">\n' +
        dataTexte +
        '</div>\n'
}

function reset() {
    document.querySelector('.row-alert').innerHTML = "";
}
});

<div class="container">
    <form method="post" data-centralpay="form" id="formCPay">
        <div class="row col-8 mx-auto ">
            <div class="col-4 card-offer d-flex">
                <div class="form-check form-check-inline">
                    <input class="form-check-input" type="radio" name="offer" id="amount0" value="200" checked>
                    <label class="form-check-label" for="amount0">
                        200
                    </label>
                </div>
                <div class="form-check form-check-inline">
                    <input class="form-check-input" type="radio" name="offer" id="amount1" value="400">
                    <label class="form-check-label" for="amount1">
                        400
                    </label>
                </div>
                <div class="form-check form-check-inline">
                    <input class="form-check-input" type="radio" name="offer" id="amount2" value="600" >
                    <label class="form-check-label" for="amount2">
                        600
                    </label>
                </div>
            </div>
        </div>
        <div class="row col-8 mx-auto mt-3" data-toggle="popover-example-data">
            <p data-form="main-description" class="sr-only">Card data</p>
            <div class="col-6">
                <input data-centralpay="firstName" type="text" name="order[firstName]" autocomplete="off"
                       data-form="card-user" class="form-control" placeholder="First name" required="required" value="robert"/>
            </div>
            <div class="col-6">
                <input data-centralpay="lastName" type="text" name="order[lastName]" autocomplete="off"
                       data-form="card-user" class="form-control" placeholder="Last name" required="required" value="robert"/>
            </div>
            <div class="col-6">
                <input data-centralpay="card[holderEmail]" type="email" name="card[cardholderEmail]"
                       autocomplete="off" class="form-control" data-form="card-user"
                       placeholder="E-mail" required="required" value="rob@gmail.com"/>
            </div>
        </div>

        <div id="card-option" class="row col-6 mt-3 mx-auto">
            <div class="col-12">
                <input data-centralpay="card[number]" type="tel" pattern="([0-9 ]{14,20})?" autocomplete="off"
                       class="form-control form-card-data form-card-number" placeholder="Credit card number"
                       maxlength="20" data-form="card-data" value="4000000000000002"/>
            </div>
            <div class="col-6">
                <input data-centralpay="card[expirationMonth]" type="tel" pattern="[0-9]{1,2}"
                       maxlength="2" autocomplete="off" class="form-control form-card-data" placeholder="MM"
                       data-form="card-data" value="12"/>
            </div>
            <div class="col-6">
                <input data-centralpay="card[expirationYear]" type="tel" max="9999" inputmode="tel"
                       pattern="[0-9]{4}" autocomplete="off" class="form-control form-card-data"
                       data-form="card-data" placeholder="YYYY" value="2022"/>
            </div>
            <div class="col-3">
                <input data-centralpay="card[cvc]" type="tel" pattern="[0-9]{3,4}" maxlength="4"
                       autocomplete="off" class="form-control form-card-data" placeholder="CVV2"
                       name="customerValidationValue" value="123"/>
                <input data-centralpay="card[cvc]" type="hidden"
                       autocomplete="off" class="form-control form-card-data" data-example="merchantPublicKey" value="c62ebc9859d3be51f749b158ac3e50c3d1ea71e5777a14b314ddb78801be2b6b"
                       name="merchantPublicKey"/>
            </div>

        </div>
        <div class="row">
            <div class="col-auto mx-auto">
                <button class="btn btn-cpay btn-primary" type="submit" value="submit" data-form="submit" data-toggle="popover"
                        data-placement="bottom" data-trigger="hover">
                        <span data-display="submit-value">Pay</span>
                </button>
            </div>
        </div>
    </form>
    <div class="row  mt-5">
        <div class="col-6 row-alert mx-auto"></div>

    </div>
    <div class="row">
        <div class="col-6 mx-auto d-flex align-items-center d-none" id="loading">
            <strong>Loading...</strong>
            <div class="spinner-border ms-auto" role="status" aria-hidden="true"></div>
        </div>
    </div>

    <iframe id="iframe-versioning" src="" width="200" height="200"></iframe>
    <div class="modal" tabindex="-1" id="modal-challenge">
        <div class="modal-dialog">
            <div class="modal-content">
                <div class="modal-header">
                    <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
                </div>
                <div class="modal-body">
                    <iframe id="iframe-challenge" src="" width="450" height="500" class="mx-auto"></iframe>
                </div>
                <div class="modal-footer">
                    <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Close</button>
                </div>
            </div>
        </div>
    </div>

</div>
<script>
    const acceptHeader = "<?php echo $_SERVER['HTTP_ACCEPT']; ?>";
</script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js" integrity="sha512-aVKKRRi/Q/YV+4mjoKBsE4x3H+BkegoM/em46NNlCqNTmUYADjBbeNefNxYV7giUp0VxICtqdrbqU7iVaeZNXA==" crossorigin="anonymous" referrerpolicy="no-referrer"></script>
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js" integrity="sha384-kenU1KFdBIe4zVF0s0G1M5b4hcpxyD9F7jL+jjXkk+Q2h455rYXK/7HAuoJl+0I4" crossorigin="anonymous"></script>


define('URL_API', 'https://test-api.centralpay.net/v2/rest/');
define('USER', '1c1b28f2-a84b-4b30');
define('PASSWORD', 'VJezNXV9Wz#A');

public function checkVersioning() {
    session_reset();
    $cardTokenId = $this->posts['cardTokenId'];
    $cardId = $this->posts['cardId'];

    $_SESSION['card']['cardTokenId'] = $cardTokenId;
    $_SESSION['card']['cardId'] = $cardId;

    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, URL_API . '3ds2/versioning');
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_POST, 1);
    curl_setopt($ch, CURLOPT_POSTFIELDS, "cardTokenId=".$cardTokenId."&cardId=&cardTokenId=".$cardId);
    curl_setopt($ch, CURLOPT_USERPWD, USER . ':' . PASSWORD);

    $headers = array();
    $headers[] = 'Content-Type: application/x-www-form-urlencoded';
    curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);

    $result = curl_exec($ch);
    if (curl_errno($ch)) {
        echo 'Error:' . curl_error($ch);
    }
    $versioning = json_decode($result);

    $_SESSION['versioning'] = $versioning;
    curl_close($ch);
    echo  $result;
}

public function getIframeversioning() {
    $versioning = $_SESSION['versioning'];
    echo '<form action="'.$versioning->threeDSMethodURL . '" name="form-3ds" method="POST" id="form-3ds">
    <input type="text" value="' .$versioning->threeDSMethodDataForm->threeDSMethodData . '" name="threeDSMethodData" />
    <input type="submit" id="submit" />

    </form>
    <script src="https://code.jquery.com/jquery-3.5.1.min.js"></script>
    <script>
        jQuery(document).ready(function () {
            jQuery("#form-3ds #submit").trigger("click");
        });
    </script>
    ';
}

public function checkAuthentication() {

    $urlBack = $_SERVER['HTTP_REFERER']."/challenge-back";
    $postfield = $this->posts;

    $_SESSION['trans']['amount'] = $postfield['amount'];
    $_SESSION['trans']['customer']["email"] = $postfield['email'];
    $_SESSION['trans']['customer']["firstName"] = $postfield['firstName'];
    $_SESSION['trans']['customer']["lastName"] = $postfield['lastName'];

    $postfield["threeDSServerTransID"] = $_SESSION['versioning']->threeDSServerTransID;
    $postfield["cardTokenId"] = $_SESSION['card']['cardTokenId'];
    $postfield["deviceChannel"] = '02';
    $postfield["messageCategory"] = '01';
    $postfield["purchaseAmount"] = intval($postfield['amount']);
    $postfield["purchaseCurrency"] = 'EUR';
    $postfield["threeDSRequestorAuthenticationInd"] = '01';
    $postfield["notificationURL"] = $urlBack;
    $postfield["threeDSRequestorURL"] = 'https://www.centralpay.eu';
    $postfield["challengeWindowSize"] = '05';
    $postfield['browserJavascriptEnabled'] = true;

    $ch = curl_init();

    curl_setopt($ch, CURLOPT_URL, URL_API . '/3ds2/authentication');
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_POST, 1);
    curl_setopt($ch, CURLOPT_POSTFIELDS,http_build_query($postfield));
    curl_setopt($ch, CURLOPT_USERPWD, USER . ':' . PASSWORD);

    $headers = array();
    $headers[] = 'Content-Type: application/x-www-form-urlencoded';
    curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);

    $result = curl_exec($ch);
    $_SESSION['authentication'] = json_decode($result);
    echo $result;
    if (curl_errno($ch)) {
        echo 'Error:' . curl_error($ch);
    }
    curl_close($ch);
}

public function challenge() {
    $htmliframe = '<form action="%authentification.acsURL%" name="form-challenge" method="POST" id="form-challenge">
                        <input type="text" value="%authentification.base64EncodedChallengeRequest%" name="creq" />
                        <input type="submit" id="submit" />

                    </form>
                    <script src="https://code.jquery.com/jquery-3.5.1.min.js"></script>
                    <script>
                        $(function() {
                            console.log("submit authentication")
                            $("#submit").trigger("click");
                        });
                    </script>';
    $htmliframe = str_replace("%authentification.acsURL%", $_SESSION['authentication']->acsURL, $htmliframe);
    $htmliframe = str_replace("%authentification.base64EncodedChallengeRequest%", $_SESSION['authentication']->base64EncodedChallengeRequest, $htmliframe);
    echo $htmliframe;
}


public function ChallengeBack()
{
    $ipClient = $_SERVER['REMOTE_ADDR'];
    $retour = json_decode(base64_decode($this->posts['cres']), true);

     if (in_array($retour['transStatus'], ['Y', 'A'])) {
         ##API_3DS2_RESULTS##
         $response =$this->checkThreeDSresult($retour['threeDSServerTransID']);
         $retourOtp = json_decode($response);
         $_SESSION['retourOtp'] = $retourOtp;
         ##API_TRANSACTION##
         $otp =  $_SESSION['retourOtp'];
         $postVars = [
             'currency' => 'EUR',
             'amount' => $_SESSION['trans']['amount'],
             'endUserIp' => $ipClient,
             'merchantTransactionId' => 'REFERENCE XXX',
             'pointOfSaleId' => "",
             'browserUserAgent' => $_SERVER['HTTP_USER_AGENT'],
             'browserAcceptLanguage' => 'fre',
             'cardTokenId' => $_SESSION['card']['cardTokenId'],
             "order[cardholderEmail]" => $_SESSION['trans']['customer']['email'],
             "order[firstName]" => $_SESSION['trans']['customer']['firstName'],
             "order[lastName]" => $_SESSION['trans']['customer']['lastName'],
             "order[email]" => $_SESSION['trans']['customer']['email'],
             "3ds[threeDSServerTransID]" =>  $_SESSION['authentication']->threeDSServerTransID,
             "3ds[status]" => $_SESSION['retourOtp']->transStatus,
             "3ds[cavv]" => $_SESSION['retourOtp']->authenticationValue,
             "3ds[eci]" =>  $_SESSION['retourOtp']->eci,
             "3ds[xid]" => substr(bin2hex(uniqid()), 0, 20),
             "capture" => "true"
         ];
         if ($otp !== null) {
             $postVars["3ds[threeDSServerTransID]"] = $_SESSION['authentication']->threeDSServerTransID;
             $postVars["3ds[status]"] = $otp->transStatus;
             $postVars["3ds[cavv]"] = $otp->authenticationValue;
             $postVars["3ds[eci]"] = $otp->eci;
             $postVars["3ds[xid]"] = $otp->transStatus;
         }
         $transactionReq = new Transaction();

         $transResult = $transactionReq->newTransaction($postVars);
         $_SESSION["payment"] = $transResult;
         $transaction = json_decode($transResult);
         if ($transaction->transactionStatus == "SUCCESS") {
             echo "<img src='../../assets/images/sucess.png' width='200px'><br>
                    <p>".$transaction->transactionStatus."</p>
                    <p> Transaction : ".$transaction->transactionId."</p>
                    <strong>".$transaction->amount.$transaction->currency."</strong>";
         }

     } else {
         $error = ['error'=>"error opt"];
         echo json_encode($error);
     }
}

public function checkThreeDSresult($threeDSServerTransID){
    $result = '';
    try {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, URL_API . '/3ds2/results/'.$threeDSServerTransID);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_USERPWD, USER . ':' . PASSWORD);

        $headers = array();
        $headers[] = 'Content-Type: application/x-www-form-urlencoded';
        curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);

        $result = curl_exec($ch);
        if (curl_errno($ch)) {
            return 'Error:' . curl_error($ch);
        }
    } catch (\Throwable $th) {
        throw $th;
    }
    curl_close($ch);
    return $result;
}

public function newTransaction($args = null) {
    $ch = curl_init();
    $ipClient = $_SERVER['REMOTE_ADDR'];

    curl_setopt($ch, CURLOPT_URL, URL_API . '/transaction');
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_POST, 1);
    $merchantTransactionId = uniqid("example");
    if (!empty($args)) {
        $post = $args;
    } else {
        $post = array(
            'merchantTransactionId' => $merchantTransactionId,
            'amount' => $this->posts['amount'],
            'capture' => 'true',
            'currency' => 'EUR',
            'receiptEmail' => $this->posts['email'],
            'pointOfSaleId' => '',
            'cardTokenId' => $_SESSION['card']['cardTokenId'],
            'description' => '',
            'endUserIp' => $ipClient,
            'order[firstName]' =>  $this->posts['lastname'],
            'order[lastName]' =>  $this->posts['firstname'],
            'order[country]' => 'FR',
            'endUserLanguage' => 'fr',
            'browserAcceptLanguage' => 'fr,fr-FR,en-US,en',
            'browserUserAgent' => 'Mozilla'

        );
    }
    curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($post));
    curl_setopt($ch, CURLOPT_USERPWD, USER . ':' . PASSWORD);

    $headers = array();
    $headers[] = 'Content-Type: application/x-www-form-urlencoded';
    curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);

    $result = curl_exec($ch);
    if (curl_errno($ch)) {
        echo 'Error:' . curl_error($ch);
    }
    curl_close($ch);
    return $result;
}

public function checkTransaction() {
    if (!empty($_SESSION['payment'])) {
        echo $_SESSION["payment"];
    } else {
        $error = ['error'=>"Pas de transaction"];
        echo json_encode($error);
    }
}

MerchantPublicKey •

username:password •

pointOfSaleID (optional) •

Order country: