Server-to-Server
Note: You should be fully PCI compliant if you want to use the Server-to-Server api (as it requires that you collect the card data). If you are not fully PCI compliant, you can use COPYandPAY to collect the payment data securely.
You can perform different types of initial payments using our server-to-server REST API.
A PA is created by sending a POST request over HTTPS to the /v1/payments resource. The request should include all required information such as your authentication credentials, the type of transaction, the amount and the payment information such as card details. A capture may be sent against a successful PA to request the funds being sent for clearing. See backoffice operations for more details.
Example Preauthorization (PA) Request
Response
Example Capture (CP) Request
Response
curl https://test.oppwa.com/v1/payments \
-d "entityId=8a8294174e918ca6014e9c6f5ae12a9c" \
-d "merchantTransactionId=Order Number 123" \
-d "amount=1.00" \
-d "currency=BRL" \
-d "paymentType=PA" \
-d "paymentBrand=VISA" \
-d "card.number=4111111111111111" \
-d "card.holder=Jose da Silva" \
-d "card.expiryMonth=05" \
-d "card.expiryYear=2025" \
-d "card.cvv=123" \
-d "customer.merchantCustomerId=12345678909" \
-d "customer.givenName=Jose" \
-d "customer.surname=da Silva" \
-d "customer.email= [email protected]" \
-d "customer.ip=123.123.123.123" \
-d "descriptor=123 Usage" \
-d "billing.city=Sao Paulo" \
-d "billing.country=BR" \
-d "billing.state=SP" \
-d "billing.street1=Rua Itapeva 547" \
-d "billing.postcode=01332000" \
-d "customParameters[product]=1 month membership" \
-d "customParameters[merchant_website]=www.store.com" \
-d "recurringType=INITIAL" \
-d "testMode=EXTERNAL" \
-H "Authorization: Bearer OGE4Mjk0MTcyODFiOGVlMzAxMjgyOTkwNjZmNTBjZGJ8ZGVtbw=="
{
"id":"8ac7a4a06a00f56b016a03df1f6b5754",
"paymentType":"PA",
"paymentBrand":"VISA",
"amount":"1.00",
"currency":"BRL",
"descriptor":"123 Usage",
"merchantTransactionId":"Order Number 123",
"result":{
"code":"000.100.112",
"description":"Request successfully processed in 'Merchant in Connector Test Mode'"
},
"card":{
"bin":"411111",
"last4Digits":"1111",
"holder":"Jose da Silva",
"expiryMonth":"05",
"expiryYear":"2025"
},
"customer":{
"givenName":"Jose",
"surname":"da Silva",
"merchantCustomerId":"12345678909",
"email":" [email protected]",
"ip":"123.123.123.123"
},
"billing":{
"street1":"Rua Itapeva 547",
"city":"Sao Paulo",
"state":"SP",
"postcode":"01332000",
"country":"BR"
},
"customParameters":{
"merchant_website":"www.store.com",
"product":"1 month membership"
},
"risk":{
"score":"0"
},
"buildNumber":"[email protected] 04:42:22 +0000",
"timestamp":"2019-04-09 20:51:56+0000",
"ndc":"8a8294174e918ca6014e9c6f5ae12a9c_14eca79734c14f31b82f391b08e90b7b"
}
curl https://test.oppwa.com/v1/payments/8ac7a4a06a00f56b016a03df1f6b5754 \
-d "entityId=8a8294174e918ca6014e9c6f5ae12a9c" \
-d "amount=1.00" \
-d "currency=BRL" \
-d "paymentType=CP" \
-d "testMode=EXTERNAL" \
-H "Authorization: Bearer OGE4Mjk0MTcyODFiOGVlMzAxMjgyOTkwNjZmNTBjZGJ8ZGVtbw=="
{
"id": "8ac7a4a26a977d95016a99b9c15b00c8",
"referencedId": "8ac7a4a06a00f56b016a03df1f6b5754",
"paymentType": "CP",
"amount": "1.00",
"currency": "BRL",
"descriptor": "123 Usage",
"merchantTransactionId": "Order Number 123",
"result": {
"code": "000.100.112",
"description": "Request successfully processed in 'Merchant in Connector Test Mode'"
},
"customer": {
"merchantCustomerId": "12345678909"
},
"buildNumber": "[email protected] 08:36:44 +0000",
"timestamp": "2019-05-08 23:14:09+0000",
"ndc": "8a8294174e918ca6014e9c6f5ae12a9c_f9b9ee0131494621a93d186cbf8cca03"
}
A DB is created by sending a POST request over HTTPS to the /v1/payments resource. The request should include all required information such as your authentication credentials, the type of transaction, the amount and the payment information such as card details. A DB request effectively combines a PA and capture (CP) request, automatically requesting that the funds are cleared if the authorization was successful.
Example Debit (DB) Request
Response
curl https://test.oppwa.com/v1/payments \
-d "entityId=8a8294174e918ca6014e9c6f5ae12a9c" \
-d "amount=1.00" \
-d "currency=BRL" \
-d "paymentType=DB" \
-d "paymentBrand=VISA" \
-d "card.number=4111111111111111" \
-d "card.holder=Jose da Silva" \
-d "card.expiryMonth=05" \
-d "card.expiryYear=2025" \
-d "card.cvv=123" \
-d "merchantTransactionId=Order Number 123" \
-d "customer.merchantCustomerId=12345678909" \
-d "customer.givenName=Jose" \
-d "customer.surname=da Silva" \
-d "customer.email= [email protected]" \
-d "customer.ip=123.123.123.123" \
-d "descriptor=123 Usage" \
-d "billing.city=Sao Paulo" \
-d "billing.country=BR" \
-d "billing.state=SP" \
-d "billing.street1=Rua Itapeva 547" \
-d "billing.postcode=01332000" \
-d "customParameters[product]=1 month membership" \
-d "customParameters[merchant_website]=www.store.com" \
-d "recurringType=INITIAL" \
-d "testMode=EXTERNAL" \
-H "Authorization: Bearer OGE4Mjk0MTcyODFiOGVlMzAxMjgyOTkwNjZmNTBjZGJ8ZGVtbw=="
{
"id":"8ac7a4a16a00e9b3016a03f1daf52030",
"paymentType":"DB",
"paymentBrand":"VISA",
"amount":"1.00",
"currency":"BRL",
"descriptor":"123 Usage",
"merchantTransactionId":"Order Number 123",
"result":{
"code":"000.100.112",
"description":"Request successfully processed in 'Merchant in Connector Test Mode'"
},
"card":{
"bin":"411111",
"last4Digits":"1111",
"holder":"Jose da Silva",
"expiryMonth":"05",
"expiryYear":"2025"
},
"customer":{
"givenName":"Jose",
"surname":"da Silva",
"merchantCustomerId":"12345678909",
"email":" [email protected]",
"ip":"123.123.123.123"
},
"billing":{
"street1":"Rua Itapeva 547",
"city":"Sao Paulo",
"state":"SP",
"postcode":"01332000",
"country":"BR"
},
"customParameters":{
"merchant_website":"www.store.com",
"product":"1 month membership"
},
"risk":{
"score":"0"
},
"buildNumber":"[email protected] 04:42:22 +0000",
"timestamp":"2019-04-09 21:12:24+0000",
"ndc":"8a8294174e918ca6014e9c6f5ae12a9c_442a40ed22984abdad86b19afa0e6bc8"
}
Please note that for a HTTP POST request all the parameters are expected to go into the message body and not into the URL.
For a full list of parameters that can be sent in the initial payment request, please see the API Reference.
- Boleto Bancário is a PrePayment (PP) method (invoice/slip/voucher), which is widely used in Brazil to pay offline and online. Boleto represents 20% of payments in e-Commerce.
- Boletos are payment slips, issued by sending a PA to the PPRO system. A Boleto is displayed at end customer’s browser where the Boleto can be printed out and paid in any bank in Brazil.
- Clearing could take up to D+3.
- PPRO matches bank return and generates a payment confirmation transaction type (RC) in the system. The merchant receives a report including Receipts (RC) for paid Boletos through a pre-defined SFTP server or webhook.
- Advantage: Boleto payments are not subject to chargebacks. Once the payment has been made it is final and may only be refunded via bank transfer.
- Boletos have due dates, up to which a payment is possible. Please discuss the optimal due dates (expiry dates) with your Account Manager, as it depends on the industry. Reminder emails sent to the customer up to 3 days before due date improve conversion significantly.
The first step is to send a Server-to-Server initial payment request with the
paymentBrand and shopperResultUrl. The shopperResultUrl must be url-encoded.Example Boleto (PA) Request
Response
curl https://test.oppwa.com/v1/payments \
-d "entityId=8a8294174e918ca6014e9c6e44672a96" \
-d "paymentType=PA" \
-d "paymentBrand=BOLETO" \
-d "amount=1.00" \
-d "currency=BRL" \
-d "descriptor=yourstore.com - product description - order number 1234" \
-d "customer.givenName= Jose" \
-d "customer.surname=da Silva" \
-d "merchantTransactionId=Order-123" \
-d "customer.merchantCustomerId=12345678909" \
-d "billing.city=São Paulo" \
-d "billing.country=BR" \
-d "billing.state=SP" \
-d "billing.street1=Rua Itapeva, 574" \
-d "billing.postcode=01332000" \
-d "[email protected]" \
-d "customer.ip=123.123.123.123" \
-d "customParameters[CUSTOM_CPF_number]=12345678909" \
-d "customParameters[CUSTOM_due_date]=31/12/2019" \
-d "customParameters[merchant_sitename]= www.yourstore.com" \
-d "customParameters[product]=product description" \
-d "testMode=EXTERNAL" \
-d "shopperResultUrl=https://docs.allpago.com/intro/servertoserver-flow" \
-H "Authorization: Bearer OGE4Mjk0MTcyODFiOGVlMzAxMjgyOTkwNjZmNTBjZGJ8ZGVtbw=="
{
"id":"8ac7a4a26a26c733016a2725a8260f0e",
"paymentType":"PA",
"paymentBrand":"BOLETO",
"amount":"1.00",
"currency":"BRL",
"descriptor":"Demo 4196.0450.7155 Order-123",
"merchantTransactionId":"Order-123",
"result":{
"code":"000.100.112",
"description":"Request successfully processed in 'Merchant in Connector Test Mode'"
},
"resultDetails":{
"ExtendedDescription":"User redirected to Itau",
"ConnectorTxID1":"8ac7a4a26a26c733016a2725a8260f0e",
"merchantAccount":"BR_Itau_ACON4_STAGING_AP",
"connectorInstanceId":"10.2.3.225",
"acquirerReturnCode":"0",
"connectorVersion":"1.0.25",
"AcquirerResponse":"000.000.000",
"EXTERNAL_SYSTEM_LINK":"https://shopline.itau.com.br/shopline/itaubloqueto.asp?DC=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",
"connectorName":"acon4-itau",
"acquirerReturnMessage":"BOLETO LINK SUCCESSFULLY GENERATED",
"acquirerTxId1":"4196.0450.7155",
"acquirerTxId2":"41960450"
},
"customer":{
"givenName":" Jose",
"surname":"da Silva",
"merchantCustomerId":"12345678909",
"email":"[email protected]",
"ip":"123.123.123.123"
},
"billing":{
"street1":"Rua Itapeva, 574",
"city":"São Paulo",
"state":"SP",
"postcode":"01332000",
"country":"BR"
},
"customParameters":{
"CUSTOM_CPF_number":"12345678909",
"CUSTOM_due_date":"31/12/2019",
"merchant_sitename":" www.yourstore.com",
"product":"product description"
},
"buildNumber":"[email protected] 11:07:00 +0000",
"timestamp":"2019-04-16 17:15:40+0000",
"ndc":"8a8294174e918ca6014e9c6e44672a96_c1ed88adddbf464a9de1970d48e5d56e"
}
For a full list of Mandatory Parameters please, see the Mandatory parameters by country (Brazil - Boleto).
Brazilian banks do not support special characters for Boletos. i.e: !, @, #, $, %, ¨, &, , (, ), _ , +, = , ´ , “ , ‘ , ] ,[ , ^,? ,: , >, <, TM, ®, º, °, /, |, \, {, }, ª, ¢, ¬, £, etc, then you must ensure that the customer does not enter special character in these fields.
Expiry date. Payment of the Boleto is possible up to this date. At least 3 days from issuing date is recommended, so that the customer has enough time to conclude the payment.
The boleto can be displayed both on desktop and mobile devices. Typically the user will expect to receive an email containing the order information and the link to display the boleto.
Redirect the shopper to the EXTERNAL_SYSTEM_LINK.
"EXTERNAL_SYSTEM_LINK":"https://shopline.itau.com.br/shopline/itaubloqueto.asp?DC=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",
Sample of Boleto:
Important: Not every boleto will in fact be paid by your customer. Depending on the industry, up to 50% of the issued boletos will not receive a payment. Note that these will remain on the platform, even if already overdue.
Payment confirmations can be received by:
Most boletos are paid with cash at any of the acceptance places in Brazil (post offices, gas stations etc). Since the boleto does not have a native method to refund a transaction, PPRO enables the merchant to refund these transactions via bank transfer. For that it is required for the merchant to collect and provide the customers bank account data, either: programmatically via API or manually via Business Intelligence Platform (BIP).
A refund is performed against a previous payment (RC), referencing its
payment.id by sending a POST request over HTTPS to the /v1/payments/{id} endpoint. A refund is performed
Example Boleto RF Request
Response
curl https://test.oppwa.com/v1/payments/{id} \
-d "entityId=8a8294185b674555015b7ce34a9a17d3" \
-d "amount=1" \
-d "currency=BRL" \
-d "paymentType=RF" \
-d "merchantMemo=Name: João Comprador CPF:12345678909 Bank Name: Banco Santander Agency Number: 1234 Account Number: 123456789" \
-d "testMode=EXTERNAL" \
-H "Authorization: Bearer OGE4Mjk0MTg1YjY3NDU1NTAxNWI3Y2UzMGFjZTE3ZDF8d1N6NG1nNzZYUQ=="
{
"id":"8ac7a4a06cf2812c016cfda0c3a216ed",
"referencedId":"8ac7a4a16cf27265016cfd9d00e9293f",
"paymentType":"RF",
"amount":"1.00",
"currency":"BRL",
"descriptor":"3460.2304.5751 Produto 1",
"merchantInvoiceId":"ADB065957000B",
"result":{
"code":"000.100.112",
"description":"Request successfully processed in 'Merchant in Connector Test Mode'"
},
"customer":{
"merchantCustomerId":"56359439000160"
},
"buildNumber":"[email protected] 09:39:42 +0000",
"timestamp":"2019-09-04 18:54:27+0000",
"ndc":"8a8294185b674555015b7ce34a9a17d3_46f0168f2e80436997c285ca8acc8636"
}
- Oxxo is a PrePayment (PP) method (invoice/slip/voucher), which is widely used in Mexico to pay offline (Oxxo store).
- Oxxo are payment slips, issued by sending a PA request to PPRO’s system. The slip is displayed on the end customer’s browser where it can be either printed out or scanned off a mobile device.
- The Oxxo slip has two important elements: barcode & reference number (numerical representation of the barcode). The customer is able to pay by either of them. It is a question of which design fits your checkout better. In addition, PPRO provides a hosted page containing both elements.
- Clearing usually happens the next day, but can be delayed (in case of weekends and public holidays in Mexico).
- Oxxo due dates are configurable. Please discuss the optimal due dates (expiry dates) with your Account Manager. Reminder emails sent to the customer up to 3 days before due date improve conversion significantly.
The first step is to send a Server-to-Server initial payment request with the
paymentBrand .Example Oxxo (PA) Request
Response
curl https://test.oppwa.com/v1/payments \
-d "entityId=8a829417545c8cf1015476ec405c23b7" \
-d "paymentType=PA" \
-d "paymentBrand=OXXO" \
-d "amount=1.00" \
-d "currency=MXN" \
-d "descriptor=yourstore.com - product description - order number 1234" \
-d "merchantTransactionId=Order-123" \
-d "customer.givenName=Juan" \
-d "customer.surname=Uribe" \
-d "customer.email= [email protected]" \
-d "customer.ip=123.123.123.123" \
-d "billing.city=Mexico City" \
-d "billing.country=MX" \
-d "billing.state=MX" \
-d "billing.street1=Calle 1, 232" \
-d "billing.postcode=01309" \
-d "customParameters[url_logo]=https://www.allpago.com/logos/demo-logo.jpg" \
-d "customParameters[due_date]=14/12/2020" \
-d "customParameters[merchant_sitename]= www.yourstore.com" \
-d "customParameters[product]=product description" \
-d "testMode=EXTERNAL" \
-H "Authorization: Bearer OGE4Mjk0MTcyODFiOGVlMzAxMjgyOTkwNjZmNTBjZGJ8ZGVtbw=="
{
"id":"8ac7a4a26a304583016a46f8fe2624ee",
"paymentType":"PA",
"paymentBrand":"OXXO",
"amount":"1.00",
"currency":"MXN",
"descriptor":"3503.1119.7264 MX_Oxxo yourstore.com - product description - order number 1234",
"merchantTransactionId":"Order-123",
"result":{
"code":"000.100.112",
"description":"Request successfully processed in 'Merchant in Connector Test Mode'"
},
"resultDetails":{
"ConnectorTxID1":"8ac7a4a26a304583016a46f8fe2624ee",
"connectorInstanceId":"10.2.4.221",
"acquirerReturnCode":"-",
"EXTERNAL_SYSTEM_BARCODE_IMAGE":"https://staging-oxxo-batch.allpago.com/rest/acon2/v1/barcode/image/8ac7a4a26a304583016a46f8fe2624ee",
"EXTERNAL_SYSTEM_LINK":"https://staging-oxxo-batch.allpago.com/rest/acon2/v1/barcode/8ac7a4a26a304583016a46f8fe2624ee",
"EXTERNAL_SYSTEM_BARCODE_NUMBER":"46350311197264520201214000010004",
"ExtendedDescription":"Transaction succeeded",
"merchantAccount":"Oxxo_Batch_ACON3_STAGING",
"connectorVersion":"1.0.15",
"AcquirerResponse":"000.000.000",
"connectorName":"Oxxo-Batch",
"acquirerInitialTxId":"3503.1119.7264",
"acquirerReturnMessage":"-",
"acquirerTxId1":"3503.1119.7264"
},
"customer":{
"givenName":"Juan",
"surname":"Uribe",
"email":" [email protected]",
"ip":"123.123.123.123"
},
"billing":{
"street1":"Calle 1, 232",
"city":"Mexico City",
"state":"MX",
"postcode":"01309",
"country":"MX"
},
"customParameters":{
"due_date":"14/12/2020",
"merchant_sitename":" www.yourstore.com",
"product":"product description",
"url_logo":"https://www.allpago.com/logos/demo-logo.jpg"
},
"buildNumber":"[email protected] 07:26:11 +0000",
"timestamp":"2019-04-22 21:34:44+0000",
"ndc":"8a829417545c8cf1015476ec405c23b7_66c555e58d7a42249294bc382abac905"
}
For a full list of Mandatory Parameters please, see the Mandatory parameters by country (Mexico - Oxxo).
The PA’s response has 3 elements:
- ConnectorDetails.EXTERNAL_SYSTEM_LINK: PPRO hosted complete page containing all elements (barcode, reference number)
- ConnectorDetails.EXTERNAL_SYSTEM_BARCODE_IMAGE: barcode url of PPRO hosted png.
- ConnectorDetails.EXTERNAL_SYSTEM_BARCODE_NUMBER: reference number (can be used equally for paying the oxxo slip). The first option is a complete solution, options 2&3 offer the merchant full flexibility to build his own oxxo page by using the elements to this end.
The Oxxo slip can be displayed both on desktop and mobile devices. Typically the user will expect to receive an email containing the order information and the link to display the Oxxo slip.
Redirect the shopper to the EXTERNAL_SYSTEM_LINK.
Sample of Oxxo slip:
Oxxo sample
Payment confirmations can be received by:
Most slips are paid with cash at any of the acceptance places in Mexico (Oxxo stores). Since the slip does not have a native method to refund a transaction, PPRO enables the merchant to refund these transactions via bank transfer. For that it is required for the merchant to collect and provide the customers bank account data, via Business Intelligence Platform (manual):
Select RC and then click on RF
Add the information required and then click on Submit.
Transaction processed successfully.
Confirm success on the flow.
PayPal is one of the most popular alternative payment methods. In an asynchronous workflow a redirect takes place to allow the account holder to complete/verify the payment. After this the account holder is redirected back to the shopperResultUrl and the status of the payment can be queried.
In an asynchronous workflow a redirect takes place to allow the account holder to complete/verify the payment. After this the account holder is redirected back to the shopperResultUrl and the status of the payment can be queried.
The first step is to send a Server-to-Server initial payment request with the
paymentBrand and shopperResultUrl. The shopperResultUrl must be url-encoded.Example Debit (DB) Request
Response
curl https://test.oppwa.com/v1/payments \
-d "entityId=8a8294174e918ca6014e9c77fe772acb" \
-d "merchantTransactionId=100" \
-d "merchantInvoiceId=ORDERID 123" \
-d "paymentBrand=PAYPAL" \
-d "paymentType=DB" \
-d "amount=1.00" \
-d "currency=BRL" \
-d "customer.givenName=Paulo" \
-d "customer.surname=Souza" \
-d "billing.city=São Paulo" \
-d "billing.country=BR" \
-d "billing.state=SP" \
-d "billing.street1=Rua um, 123" \
-d "billing.postcode=01332000" \
-d "[email protected]" \
-d "customer.ip=127.0.0.1" \
-d "customer.merchantCustomerId=12345678909" \
-d "customParameters[merchant_sitename]=http://www.yourstore.com" \
-d "customParameters[product]=product description" \
-d "shopperResultUrl=https://docs.allpago.com/intro/servertoserver-flow" \
-d "testMode=EXTERNAL" \
-H "Authorization: Bearer OGE4Mjk0MTcyODFiOGVlMzAxMjgyOTkwNjZmNTBjZGJ8ZGVtbw=="
{
"id":"8ac7a49f6a303992016a3238975213be",
"paymentType":"DB",
"paymentBrand":"PAYPAL",
"amount":"1.00",
"currency":"BRL",
"descriptor":"8920.8131.8461 BR_Paypal ",
"merchantTransactionId":"100",
"merchantInvoiceId":"ORDERID 123",
"result":{
"code":"000.200.000",
"description":"transaction pending"
},
"resultDetails":{
"CORRELATIONID":"fdb9715a895be",
"AcquirerResponse":"Success"
},
"customer":{
"givenName":"Paulo",
"surname":"Souza",
"merchantCustomerId":"12345678909",
"email":"[email protected]",
"ip":"127.0.0.1"
},
"billing":{
"street1":"Rua um, 123",
"city":"São Paulo",
"state":"SP",
"postcode":"01332000",
"country":"BR"
},
"customParameters":{
"merchant_sitename":"http://www.yourstore.com",
"product":"product description"
},
"redirect":{
"url":"https://www.sandbox.paypal.com/cgi-bin/webscr",
"parameters":[
{
"name":"cmd",
"value":"_express-checkout"
},
{
"name":"useraction",
"value":"commit"
},
{
"name":"token",
"value":"EC-0K812030W0710811W"
}
]
},
"buildNumber":"[email protected] 07:26:11 +0000",
"timestamp":"2019-04-18 20:52:12+0000",
"ndc":"8a8294174e918ca6014e9c77fe772acb_b765a224bdd64563b10b0a690e1609ba"
}
For a full list of Mandatory Parameters please, see the Mandatory parameters by country (Brazil - PayPal).
The next step is to redirect the account holder. To do this you must parse the
redirect.url from the Initial Payment response along with any parameters. If parameters are present they should be POST in the redirect, otherwise a straight forward redirect to the redirect.urlis sufficient.<form action="{redirectUrl}" class="paymentWidgets">
<input type="text" name="{name-1}" value="{value-1}">
...
<input type="text" name="{name-2}" value="{value-2}">
</form>
Redirect the shopper to the
redirect.urlhttps://www.sandbox.paypal.com/cgi-bin/webscr&cmd=_express-checkout&useraction=commit&token=EC-0K812030W0710811
Once the payment has been processed, the customer is redirected to your shopperResultUrl along with a GET parameter resourcePath.
Then, to get the status of the payment, you make a GET request to the baseUrl + resourcePath, including your authentication parameters.
Example of a resourcePath:
resourcePath=/v1/ payments/{id}
Get status request
Get status response
curl -G https://test.oppwa.com/v1/payments/8a8294495baf2abe015bb603a5036098 \
\
-d "entityId=8a8294174e918ca6014e9c77fe772acb" \
-H "Authorization: Bearer OGE4Mjk0MTcyODFiOGVlMzAxMjgyOTkwNjZmNTBjZGJ8ZGVtbw=="
Response:
{
"id":"8a8294495baf2abe015bb603a5036098",
"paymentType":"DB",
"paymentBrand":"PAYPAL",
"amount":"1.00",
"currency":"BRL",
"descriptor":"9226.4459.5362 BR_Paypal",
"merchantTransactionId":"100",
"merchantInvoiceId":"ORDERID 123",
"result":{
"code":"000.100.112",
"description":"Request successfully processed in 'Merchant in Connector Test Mode'"
},
"resultDetails":{
"PAYERID":"4UNBGJQE9AUX6",
"TAXIDTYPE":"BR_CPF",
"AcquirerResponse":"Success",
"ConnectorTxID1":"0GY99688DD5155316",
"SHIPTOSTATE":"SP",
"TAXID":"30949017787"
},
"customer":{
"givenName":"Paulo",
"surname":"Souza",
"merchantCustomerId":"12345678909",
"email":"[email protected]",
"ip":"127.0.0.1"
},
"billing":{
"street1":"Rua um, 123",
"city":"São Paulo",
"state":"SP",
"postcode":"01332000",
"country":"BR"
},
"customParameters":{
"product":"produc description",
"merchant_sitename":"http://www.yourstore.com"
},
"buildNumber":"[email protected] 08:46:08 +0000",
"timestamp":"2017-04-28 19:29:59+0000",
"ndc":"8a8294174e918ca6014e9c77fe772acb_c68f93a382da4bd6b45220b56ecbe4a2",
"virtualAccount":{
"accountId":"[email protected]",
"holder":"Paulo Souza"
}
}
- PIX is the first instant payment system available to Brazilian consumers, developed by the Central Bank of Brazil.
- PIX is a PrePayment (PP) method, which allows transfers and payments between different financial institutions in up to 10 seconds, 24 hours a day and every day of the year, including weekends and holidays (funds are transferred in real-time from the customer’s account to the payee).
- PIX is issued by sending a PA to the PPRO system. PPRO can offer two different PIX solutions:
- 1.A complete solution: PPRO generates and hosts a complete page containing all elements (dynamic QR code image, EMV code - including the Copy EMV code button and merchant logo);
- 2.QR Code (dynamic) URL/Image: gives to merchant full flexibility to build its own PIX checkout page based on a QR code image.
- PPRO receives the bank confirmation and generates a payment confirmation transaction type (RC) in the system. The merchant receives via webhook a notification about the payment confirmation. (The merchant should provide its webhook URL).
Example Webhook object
{
"type": "PAYMENT",
"payload": {
"id": "8ac7a4a180f46dd40180f64fff9758f4",
"referencedId": "8ac7a49f80f46dd40180f64ffd575919",
"paymentType": "RC",
"paymentBrand": "PIX",
"amount": "2.99",
"currency": "BRL",
"presentationAmount": "2.99",
"presentationCurrency": "BRL",
"descriptor": "4665.9054.5519 BR_PIX CNL-T331 Test PIX Transaction",
"merchantTransactionId": "d58580f6-4dca-4a7f-8629-81784352df5d",
"result": {
"code": "000.100.112",
"description": "Request successfully processed in 'Merchant in Connector Test Mode'",
"randomField958178183": "Please allow for new unexpected fields to be added"
},
"customer": {
"givenName": "P",
"surname": "PRO - IT"
},
"billing": {
"street1": "Rua Nenhuma **** Bloco 29",
"city": "Fortaleza",
"state": "CE",
"postcode": "12345678",
"country": "BR"
},
"authentication": {
"entityId": "8a8294186242c2be01624d0416f620ed"
},
"redirect": {
"parameters": []
},
"risk": {
"score": ""
},
"timestamp": "2022-05-24 13:44:39+0000",
"ndc": "8a8294186242c2be01624d0416f620ed_c0e0eadf0f7b4c00ab08e546a7474642",
"merchantAccountId": "8ac7a4c8675ffec1016779db30f325ef",
"channelName": "BR_PIX",
"source": "OPP"
}
}
- Advantage: Besides the instant confirmation, PIX payments are not subject to chargebacks. Once the payment has been made it is final and can be refunded only by the merchant.
- PIX has due dates, up to which a payment is possible. Please discuss the optimal due dates (expiry dates) with your Account Manager, as it depends on the industry. Reminder emails sent to the customer up to 3 days before the due date improve conversion significantly.
1. Send an Initial Payment
Example PIX (PA) Request
Response
curl --location --request POST 'https://test.oppwa.com/v1/payments' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--header 'Authorization: Bearer OGFjN2E0Y2E2NmM1OTMwMDAxNjZjNWRiMjQwMDAwOTF8QjloanhBe3DBCJs==' \
--data-urlencode 'entityId=8ac7a4c87e6fdf6f017e738f136703b9' \
--data-urlencode 'amount=0.01' \
--data-urlencode 'currency=BRL' \
--data-urlencode 'paymentBrand=PIX' \
--data-urlencode 'paymentType=PA' \
--data-urlencode 'customer.merchantCustomerId=15351770806' \
--data-urlencode 'merchantTransactionId=90a1e944-e7a7-42f3-8d9a-4737bd71aa44' \
--data-urlencode 'customer.givenName=PPRO' \
--data-urlencode 'customer.surname=LATAM' \
--data-urlencode '[email protected]' \
--data-urlencode 'descriptor=PPRO descriptor' \
--data-urlencode 'customParameters[product]=PPRO product' \
--data-urlencode 'customParameters[merchant_website]=www.ppro.com' \
--data-urlencode 'recurringType=INITIAL' \
--data-urlencode 'billing.state=SP' \
--data-urlencode 'billing.city=Ernestton' \
--data-urlencode 'billing.country=BR' \
--data-urlencode 'billing.street1=5577 Breanne Corner' \
--data-urlencode 'billing.postcode=12345609' \
--data-urlencode 'customer.ip=130.225.128.202' \
--data-urlencode 'testMode=EXTERNAL'
{
"id": "8ac7a49f80479b6d01804845887326c6",
"paymentType": "PA",
"paymentBrand": "PIX",
"amount": "0.01",
"currency": "BRL",
"descriptor": "",
"merchantTransactionId": "90a1e944-e7a7-42f3-8d9a-4737bd71aa44",
"result": {
"code": "000.100.112",
"description": "Request successfully processed in 'Merchant in Connector Test Mode'"
},
"resultDetails": {
"ConnectorTxID1": "8ac7a49f80479b6d01804845887326c6",
"connectorInstanceId": "127.0.0.1",
"acquirerReturnCode": "ATIVA",
"EXTERNAL_SYSTEM_LINK": "https://pix-itau.dev.lpm.latam.ppro.com/pix-itau/rest/acon4/v1/qrcode/6892721e-b8fd-44a9-a308-3266dbf6a2ea/8ac7a49f80479b6d01804845887326c6",
"ExtendedDescription": "Transaction succeeded",
"recurrence": "true",
"merchantAccount": "pix-itau-local-dev",
"aprId": "6892721e-b8fd-44a9-a308-3266dbf6a2ea",
"installments": "1",
"EXTERNAL_SYSTEM_EMV": "00020101021226770014BR.GOV.BCB.PIX2555api.itau/pix/qr/v2/91475506-141a-4c89-8cde-b766741d2fcd5204000053039865802BR5916PPRO BRASIL LTDA6009SAO PAULO62070503***630477B3",
"connectorVersion": "1.1.5",
"AcquirerResponse": "000.000.000",
"EXTERNAL_SYSTEM_QRCODE_IMAGE": "https://pix-itau.dev.lpm.latam.ppro.com/pix-itau/rest/acon4/v1/image/6892721e-b8fd-44a9-a308-3266dbf6a2ea/8ac7a49f80479b6d01804845887326c6",
"connectorName": "Pix-Itau",
"acquirerReturnMessage": "Success",
"acquirerTxId1": "8ac7a49f80479b6d01804845887326c6"
},
"customer": {
"givenName": "PPRO",
"surname": "LATAM",
"merchantCustomerId": "15351770806",
"email": "[email protected]",
"ip": "130.225.128.202"
},
"billing": {
"street1": "5577 Breanne Corner",
"city": "Ernestton",
"state": "SP",
"postcode": "12345609",
"country": "BR"
},
"customParameters": {
"merchant_website": "www.ppro.com",
"product": "PPRO product"
},
"buildNumber": "[email protected] 12:32:39 +0000",
"timestamp": "2022-04-20 18:39:22+0000",
"ndc": "8ac7a4c87e6fdf6f017e738f136703b9_2c23e4048831473d927257f4b2cc56e0"
}
List of mandatory fields:
--data-urlencode 'authentication.entityId=8ac9a4cb7859e48801785f9debcd53af' \
--data-urlencode 'amount=0.01' \
--data-urlencode 'currency=BRL' \
--data-urlencode 'paymentBrand=PIX' \
--data-urlencode 'paymentType=PA' \
--data-urlencode 'billing.country=BR'
--data-urlencode customParameters[referencedTxUuid]=(Parente UUID)' {ONLY FOR RF}
Note:
Brazilian banks do not support special characters. i.e: !, @, #, $, %, ¨, &, , (, ), _ , +, = , ´ , “ , ‘ , ] ,[ , ^,? ,: , >, <, TM, ®, º, °, /, |, \, {, }, ª, ¢, ¬, £, etc, then you must ensure that the customer does not enter a special character in these fields.
2. Redirect the shopper
The PIX QR Code can be displayed both on desktop and mobile devices. Typically the user will expect to receive an email containing the order information and the link to display the PIX QR Code.
Redirect the shopper to the EXTERNAL_SYSTEM_LINK.
"EXTERNAL_SYSTEM_LINK":"https://pix-itau.allpago.com/pix-itau/rest/acon4/v1/qrcode/e72c8102-2909-4758-be5a-efbfc381953b/8ac9a4a37c3097b3017c521022ca0174",
Sample of PIX:
Sample of PIX