Checkout sessions

curl -X POST https://app.flik.co.nz/api/checkout-sessions \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: order-5591" \
  -d '{
    "type": "single",
    "amount": { "total": 25.00 },
    "creditorReference": {
      "reference": "INV-1001",
      "particulars": "Acme Ltd",
      "code": "ORD-5591"
    },
    "checkoutMethod": "both",
    "redirectUrl": "https://example.com/thanks",
    "webhookUrl": "https://example.com/flik/webhook",
    "foreignTransactionId": "order-5591"
  }'

const res = await fetch(
  "https://app.flik.co.nz/api/checkout-sessions",
  {
    method: "POST",
    headers: {
      Authorization: `Bearer ${token}`,
      "Content-Type": "application/json",
      "Idempotency-Key": order.id,
    },
    body: JSON.stringify({
      type: "single",
      amount: { total: order.total },
      creditorReference: {
        reference: order.invoiceNumber,
        particulars: "Acme Ltd",
        code: order.id,
      },
      checkoutMethod: "both",
      redirectUrl: "https://example.com/thanks",
      webhookUrl: "https://example.com/flik/webhook",
      foreignTransactionId: order.id,
    }),
  }
);

const body = await res.json();

if (!res.ok) {
  // Branch on body.error.code, never on the message text.
  throw Object.assign(new Error(body.error.message), {
    code: body.error.code,
    param: body.error.param,
  });
}

// Store body.id against the order, then redirect to body.url

res = requests.post(
    "https://app.flik.co.nz/api/checkout-sessions",
    headers={
        "Authorization": f"Bearer {token}",
        "Idempotency-Key": order["id"],
    },
    json={
        "type": "single",
        "amount": {"total": order["total"]},
        "creditorReference": {
            "reference": order["invoice_number"],
            "particulars": "Acme Ltd",
            "code": order["id"],
        },
        "checkoutMethod": "both",
        "redirectUrl": "https://example.com/thanks",
        "webhookUrl": "https://example.com/flik/webhook",
        "foreignTransactionId": order["id"],
    },
    timeout=15,
)

body = res.json()

if not res.ok:
    # Branch on body["error"]["code"], never on the message text.
    raise FlikError(body["error"])

# Store body["id"] against the order, then redirect to body["url"]

<?php

$ch = curl_init('https://app.flik.co.nz/api/checkout-sessions');
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . $token,
        'Content-Type: application/json',
        'Idempotency-Key: ' . $order['id'],
    ],
    CURLOPT_POSTFIELDS => json_encode([
        'type'   => 'single',
        'amount' => ['total' => $order['total']],
        'creditorReference' => [
            'reference'   => $order['invoice_number'],
            'particulars' => 'Acme Ltd',
            'code'        => $order['id'],
        ],
        'checkoutMethod'       => 'both',
        'redirectUrl'          => 'https://example.com/thanks',
        'webhookUrl'           => 'https://example.com/flik/webhook',
        'foreignTransactionId' => $order['id'],
    ]),
]);

$response = curl_exec($ch);
$status   = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

$body = json_decode($response, true);

if ($status !== 200) {
    // Branch on $body['error']['code'], never on the message text.
    throw new RuntimeException($body['error']['message']);
}

// Store $body['id'] against the order, then redirect to $body['url']

curl https://app.flik.co.nz/api/checkout-sessions/cs_7Hk2pQr4TnVxWy9BdLmE \
  -H "Authorization: Bearer $TOKEN"

const res = await fetch(
  `https://app.flik.co.nz/api/checkout-sessions/${sessionId}`,
  { headers: { Authorization: `Bearer ${token}` } }
);

// 404 covers both "no such session" and "not yours".
if (res.status === 404) return null;
if (!res.ok) throw new Error((await res.json()).error.message);

const session = await res.json();
if (session.status === "completed") {
  await fulfil(session.foreignTransactionId);
}

res = requests.get(
    f"https://app.flik.co.nz/api/checkout-sessions/{session_id}",
    headers={"Authorization": f"Bearer {token}"},
    timeout=15,
)

# 404 covers both "no such session" and "not yours".
if res.status_code == 404:
    return None
if not res.ok:
    raise FlikError(res.json()["error"])

session = res.json()
if session["status"] == "completed":
    fulfil(session["foreignTransactionId"])

<?php

$ch = curl_init('https://app.flik.co.nz/api/checkout-sessions/' . $sessionId);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $token],
]);

$response = curl_exec($ch);
$status   = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

// 404 covers both "no such session" and "not yours".
if ($status === 404) {
    return null;
}

$session = json_decode($response, true);

if ($session['status'] === 'completed') {
    fulfil($session['foreignTransactionId']);
}