The Secure PayGate REST API allows a merchants to use the Saferpay Secure PayGate through their own Systems, thus allowing them to create offers and corresponding offer URLs automatically. This allows a high grade of automatation. This chapter will guide you through the necessary steps to use this API.

The following requirements have to be met, in order to use the Secure PayGate REST API:

• You need a Saferpay Secure PayGate contract, in order to use the Secure PayGate in the first place
  • In conjunction with that, you need at least one Secure PayGate terminal, with attached payment methods of your choice.
• A Saferpay eCommerce licence and thus the existence of a valid identification with a username and password for the Saferpay system, to access the necessary API-functions.

Before you can begin using the Secure PayGate, you need to configure it inside the Backoffice under Secure PayGate > Settings.

First you need to set your Notification email(s). Saferpay will send a payment confirmation mail to these email(s). Next is the Authorization method you want to apply to your Secure PayGate orders, with the following options available:

• Normal (final) authorization: Your normal authorization. Each payment will be authorized and then needs to be captured, either inside the Backoffice itself, or by using the JSON API
• Preauthorization: Similarto the first option, however preauthorizations extend the validity of the authorized payment from a guaranteed 10, to a guaranteed 30 days, which is helpful, if you want to capture a payment on a later delivery.
• Normal (final) authorization with automatic capturing: Triggers an automatic capture, after a successful authorization.

These settings are important, if you intend on using the Secure PayGate in conjunction with the JSON API (more on that later). Here you can define, where the Payment Page should send your customer to, after a successful, failed, or aborted payment. This way, you can send the customer towards your website, or even a specifically tailored return-site.

Furthermore, Saferpay can also trigger a server-to-server notification, in case of a successful payment, which is helpful, to avoid redirect-problems with the former URLs, or in cases, where you do not want to use returnUrls and just the payment notification, to gather the payment-details into your system.

Here you can pre-define certain mail-addresses, that will be presented to the payer, aswell as a BCC-address, where Saferpay will send each offer towards, for archiving purposes.

Finally, you can upload your terms and conditions via a PDF, in the languages you desire.

After the configuration has been completed, you can finally move towards using the Secure PayGate REST API. The specification itself can be found over here.

The first thing to consider, is the fact, that the Secure PayGate REST API, is not the same, as the Saferpay JSON-API, even though both can work hand in hand (more on that later). It can be integrated in a similar way and if you already have the Saferpay JSON API integrated, the effort to use the Secure PayGate REST API is rather low. However there are still some technical differences, which are described inside the specification

The execution of the SecurePayGateOffer CreateOffer request will create a Secure PayGate offer and the corresponding Link to the payment gateway, like it would inside the Saferpay Backoffice. All the offers will be displayed inside the Saferpay Backoffice and marked as RestApi under the Applicationcolumn, so you can differentiate between manual and automatical created offers.

As described before, you can gather the payment data from a Secure PayGate transaction via the Saferpay JSON API. For that, you must define the {{{PAYMENTPAGETOKEN}}} (see above), otherwise you do not have the necessary data to execute the next step.

Once the redirect and/or the notification call arrives at your webserver, you can extract the {{{PAYMENTPAGETOKEN}}} and simply execute the Payment Page Assert. That will return the payment data of the Secure PayGate transaction to your system. This transaction is like a normal Payment Page transaction and further steps may be applied to it, for example the Capture, Partial Capture, or Cancel, Refunds via the API may also be executed, if you wish.

Want to try out the Secure PayGate API for yourself?

Click here for a demo