Payment links

curl -X POST https://app.flik.co.nz/api/payment-links \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "type": "single",
    "amount": { "total": 250.00 },
    "creditorReference": {
      "reference": "INV-1001",
      "particulars": "Acme Ltd",
      "code": "ORD-5591"
    },
    "checkoutMethod": "both",
    "webhookUrl": "https://example.org/flik/webhook",
    "foreignTransactionId": "invoice-1001"
  }'

const BASE = "https://app.flik.co.nz";

async function createPaymentLink(token, invoice) {
  const res = await fetch(`${BASE}/api/payment-links`, {
    method: "POST",
    headers: {
      Authorization: `Bearer ${token}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      type: "single",
      amount: { total: invoice.total },
      creditorReference: {
        reference: invoice.number,
        particulars: "Acme Ltd",
        code: invoice.id,
      },
      checkoutMethod: "both",
      webhookUrl: "https://example.org/flik/webhook",
      foreignTransactionId: invoice.id,
    }),
  });

  const body = await res.json();

  if (!res.ok) {
    // Branch on body.error.code, never on the message text.
    throw Object.assign(new Error(body.error.message), {
      code: body.error.code,
    });
  }

  // Store body.url — it is not returned again.
  return body;
}

import requests

BASE = "https://app.flik.co.nz"


def create_payment_link(token, invoice):
    res = requests.post(
        f"{BASE}/api/payment-links",
        headers={"Authorization": f"Bearer {token}"},
        json={
            "type": "single",
            "amount": {"total": invoice["total"]},
            "creditorReference": {
                "reference": invoice["number"],
                "particulars": "Acme Ltd",
                "code": invoice["id"],
            },
            "checkoutMethod": "both",
            "webhookUrl": "https://example.org/flik/webhook",
            "foreignTransactionId": invoice["id"],
        },
        timeout=15,
    )

    body = res.json()
    if not res.ok:
        # Branch on body["error"]["code"], never on the message text.
        raise RuntimeError(body["error"]["code"])

    # Store body["url"] — it is not returned again.
    return body

<?php

const FLIK_BASE = 'https://app.flik.co.nz';

function flik_create_payment_link(string $token, array $invoice): array
{
    $ch = curl_init(FLIK_BASE . '/api/payment-links');
    curl_setopt_array($ch, [
        CURLOPT_POST           => true,
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_HTTPHEADER     => [
            'Authorization: Bearer ' . $token,
            'Content-Type: application/json',
        ],
        CURLOPT_POSTFIELDS => json_encode([
            'type'   => 'single',
            'amount' => ['total' => $invoice['total']],
            'creditorReference' => [
                'reference'   => $invoice['number'],
                'particulars' => 'Acme Ltd',
                'code'        => $invoice['id'],
            ],
            'checkoutMethod'       => 'both',
            'webhookUrl'           => 'https://example.org/flik/webhook',
            'foreignTransactionId' => $invoice['id'],
        ]),
    ]);

    $response = curl_exec($ch);
    $status   = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);

    $body = json_decode($response, true);

    if ($status !== 200) {
        // Branch on $body['error']['code'], never on the message text.
        throw new RuntimeException($body['error']['message']);
    }

    // Store $body['url'] — it is not returned again.
    return $body;
}

curl https://app.flik.co.nz/api/payment-links/7b3e4d21-9a6c-4f08-b512-6de3a9c47f10 \
  -H "Authorization: Bearer $TOKEN"

const BASE = "https://app.flik.co.nz";

async function getPaymentLink(token, id) {
  const res = await fetch(`${BASE}/api/payment-links/${id}`, {
    headers: { Authorization: `Bearer ${token}` },
  });

  // 404 means "no such link, or not yours" — both are the same answer here.
  if (res.status === 404) return null;

  const body = await res.json();
  if (!res.ok) throw new Error(body.error.code);

  return body;
}

import requests

BASE = "https://app.flik.co.nz"


def get_payment_link(token, link_id):
    res = requests.get(
        f"{BASE}/api/payment-links/{link_id}",
        headers={"Authorization": f"Bearer {token}"},
        timeout=15,
    )

    # 404 means "no such link, or not yours" — same answer either way.
    if res.status_code == 404:
        return None

    body = res.json()
    if not res.ok:
        raise RuntimeError(body["error"]["code"])

    return body

<?php

const FLIK_BASE = 'https://app.flik.co.nz';

function flik_get_payment_link(string $token, string $id): ?array
{
    $ch = curl_init(FLIK_BASE . '/api/payment-links/' . $id);
    curl_setopt_array($ch, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $token],
    ]);

    $response = curl_exec($ch);
    $status   = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);

    // 404 means "no such link, or not yours".
    if ($status === 404) {
        return null;
    }

    return json_decode($response, true);
}