DEV Community: Mohammed Aktaa

How to use telr hosted and remote?

Mohammed Aktaa — Mon, 11 May 2020 12:24:03 +0000

First thing we should create order in hosted payment page.
Using this simple code and params.

This API will call when the client click pay or checkout .
All API requests should sent from server side not client side

note: All this API's should sent from server.

<?php
$params = [
    'ivp_framed' => 2,
    'ivp_method' => 'create',
    'ivp_store' => *****,
    'ivp_authkey' => '********',
    'ivp_desc' => ' Description good',
    'ivp_cart' => 'maids - cc - 12341231d542757'.rand(1,400),
    'ivp_currency' => 'AED',
    'ivp_amount' => 1000,
    'ivp_test' => 1,
    'return_auth' => 'https://teljoy.io/telr/new/trans.php?status=Success',
    'return_decl' => 'https://teljoy.io/telr/new/trans.php?status=Declined',
    'return_can' => 'https://teljoy.io/telr/new/trans.php?status=Cancelled',
    'bill_title' => 'Mr',
    'bill_fname' => 'Mohammad',
    'bill_sname' => 'Maids',
    'bill_email' => 'memeaktaa@gmail . com',
    'bill_addr1' => 'Dubai',
    'bill_city' => 'Dubai',
    'bill_country' => 'AE',
];

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://secure.telr.com/gateway/order.json");
curl_setopt($ch, CURLOPT_POST, count($params));
curl_setopt($ch, CURLOPT_POSTFIELDS, $params);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, array('Expect:'));
$results = curl_exec($ch);
curl_close($ch);
print_r($results);
exit(0);

The response of it will be like:

{
"method":"create",
"trace":"4001/7932/5eb93cca",
"order":{
    "ref":"869748BD7502CD7535765D3951855B92AAEE0478D8FF0A41FCFDE86AED79A4F9",
    "url":"https://secure.telr.com/gateway/process_framed_full.html?o=869748BD7502CD7535765D3951855B92AAEE0478D8FF0A41FCFDE86AED79A4F9"
   }
}

The url of order object will be shown in iframe ,now you can complete the payment process and after it completed you need to send request to get transaction reference .
This API should sent internally from server if we have the order id.
if not we need to send the order id from front end.

<?php
$params = [
    'ivp_method' => 'check',
    'ivp_store' => '****',
    'ivp_authkey' => '******',
    'order_ref' => $_POST['order'],
];

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://secure.telr.com/gateway/order.json");
curl_setopt($ch, CURLOPT_POST, count($params));
curl_setopt($ch, CURLOPT_POSTFIELDS, $params);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, array('Expect:'));
$results = curl_exec($ch);
curl_close($ch);
print_r($results);
exit(0);

and the response will be like this if it not (approved or completed)

{
    "method": "check",
    "trace": "4000/16024/5eb93f67",
    "order": {
        "ref": "FD8F21148182123153692EDFA221C93C6313FC659B04353C2E74F4F200495D6B",
        "url": "https://secure.telr.com/gateway/process.html?o=FD8F21148182123153692EDFA221C93C6313FC659B04353C2E74F4F200495D6B",
        "cartid": "maids-cc-1234123254dfasdasdq",
        "test": 1,
        "amount": "1000.00",
        "currency": "AED",
        "description": "Description good",
        "status": {
            "code": 1,
            "text": "Pending"
        }
    }
}

In completed status

{
    "method": "check",
    "trace": "4000/19723/5eb94023",
    "order": {
        "ref": "24AE0DAD7B32CE486694CFF1CFC3C9868FEA617245BB0CF48FF1DEDD563DF8A8",
        "cartid": "maids-cc-1234123254dasd21ew2",
        "test": 1,
        "amount": "1000.00",
        "currency": "AED",
        "description": "Description good",
        "status": {
            "code": 3,
            "text": "Paid"
        },
        "transaction": {
            "ref": "040024914775",
            "type": "sale",
            "class": "ECom",
            "status": "A",
            "code": "923613",
            "message": "Authorised"
        },
        "paymethod": "Card",
        "card": {
            "type": "Visa Credit",
            "last4": "4242",
            "country": "AE",
            "first6": "424242",
            "expiry": {
                "month": 5,
                "year": 2020
            }
        },
        "customer": {
            "email": "memeaktaa@gmail.com",
            "name": {
                "forenames": "Maids.cc Invoice Mohammad",
                "surname": "Maids"
            },
            "address": {
                "line1": "Dubai",
                "city": "Dubai",
                "country": "AE"
            }
        }
    }
}

The last this is recurring transactions.
If the client didn't accept to save his card details we shouldn't save his transaction reference and show hosted payment page every time he want to pay.
So we need to make checkbox for saving cards or not.

<?php
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    $params = [
        'ivp_store' => '******',
        'ivp_authkey' => '*******',
        'ivp_trantype' => 'void',
        'ivp_tranclass' => 'ecom',
        'ivp_currency' => 'AED',
        'ivp_amount' => '1000',
        'ivp_test' => '1',
        'tran_ref' => '040024914775',
    ];

    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, "https://secure.telr.com/gateway/remote.html");
    curl_setopt($ch, CURLOPT_POST, count($params));
    curl_setopt($ch, CURLOPT_POSTFIELDS, $params);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_HTTPHEADER, array('Expect:'));
    $results = curl_exec($ch);
    curl_close($ch);
    echo $results;
    return;
}

and the response if there is no error will be like this after formatting and parsing because it's coming as a string.

auth_status=A&auth_code=924270&auth_message=Processed&auth_tranref=030025268255&auth_cvv=Y&auth_avs=X&auth_trace=4000%2f24269%2f5eb94102&payment_code=VC&payment_desc=Visa%20Credit%20ending%204242&payment_cardl4=4242&payment_cardl6=424242

I parsed it with js

   res = res.split('&')
   let data = [];
   let value = '';
   let key = '';
   for (let i = 0; i < res.length; i++) {
       key=res[i].split('=')[0];
       value=res[i].split('=')[1];
       data[key]=value
    }

auth_avs: "X"
auth_code: "26"
auth_cvv: "Y"
auth_message: "Original%20transaction%20already%20voided"
auth_status: "E"
auth_trace: "4001%2f4677%2f5eb942fa"
auth_tranref: "040024914812"
payment_cardl4: "4242"
payment_cardl6: "424242↵"
payment_code: "VC"
payment_desc: "Visa%20Credit%20ending%204242"

If there is an error the response will be:

auth_status=E&auth_code=01&auth_message=Invalid%20request&auth_tranref=000000000000&auth_cvv=X&auth_avs=X&auth_trace=4000%2f3110%2f5eb9439b&payment_code=&payment_desc=

auth_avs: "X"
auth_code: "01"
auth_cvv: "X"
auth_message: "Invalid%20request"
auth_status: "E"
auth_trace: "4000%2f3110%2f5eb9439b"
auth_tranref: "000000000000"
payment_code: ""
payment_desc: "↵"

How to integrate with Telr

Mohammed Aktaa — Tue, 21 Apr 2020 08:39:50 +0000

Request method and format

All transaction requests must be sent to the Hosted Payment Page gateway URL:

https://secure.telr.com/gateway/order.json

The HTTP POST data fields that contain the basic purchase information are as follows:

Field	Description
ivp_method	The request method being used
ivp_store	Your store ID
ivp_authkey	Your authentication key
ivp_amount	Transaction amount
ivp_currency	Currency the transaction is in
ivp_test	Test mode indicator `0` or `1`
ivp_cart	Cart ID / Order ID `unique ID`
ivp_desc	Purchase description
return_auth	URL for authorised transactions
return_decl	URL for declined transactions
return_can	URL for cancelled transactions

Test mode requests can be sent from any IP address, but live mode requests will only be accepted from a pre-approved list of IPs (the IP address details for your production systems will be required prior to any live processing)

The response is formatted as JSON.

Order created

{
  "method":"create",
  "order":{
    "ref":"OrderRef",
    "url":"https://secure.telr.com/gateway/process.html?o=OrderRef"
  }
}

after that we need to open the url order.url from the response to complete the payment operation.

Error

{
  "method":"create",
  "error":{
    "message":"E56:Duplicate transaction",
    "note":"Cart ID must be unique"
  }
}

Optional additional request fields

In addition to the basic transaction request fields there are other fields that can be included within the request that can alter the way the request is processed.

Supplying customer details

If your systems have the customer details available then you should include the customer’s name, address and email information as part of the request.

Field	Description
bill_title	The customer’s title.
bill_fname	Forenames
bill_sname	Surname
bill_addr1	Address line 1
bill_addr2	Address line 2
bill_addr3	Address line 3
bill_city	City
bill_region	Region/State
bill_country	Country
bill_zip	Post/Area/Zip code
bill_email	Email address
ivp_lang	Payment Page interface language
ivp_update_url	Transaction advice service type URL

If any part of the customer details are not supplied, or if they are not valid, then the payment pages will prompt for the correct details.

For example, if you have supplied name and email but not their address, then the payment pages will only ask for the address.

Stored Cards (Returning Customers)

The Hosted Payment Pages can provide customers with the option to store their card details for future use, making it simpler for a customer to complete the checkout process the next time they purchase from your store.

There are some key requirements in order to enable stored cards: The acquiring bank that your merchant account is with must support continuous authority transactions.
Your store must be operating from a HTTPS server. You must have a method of identifying each individual customer, with a unique ID for each.
Customers must be required to provide some form of authentication (such as username and password) within your store. This must be done using a HTTPS server.
Customer authentication details (such as their password) must be securely managed within your system, and must only be stored using strong hashing algorithms with a random salt for each hash.

To enable the stored card system, you first need to select the ‘Stored cards’ option within the payment page configuration in the Merchant Admin System.

Field	Description	Notes
bill_custref	Unique customer ID	Optional. If set, the customer may be given the option to store their card for future use if the transaction is authorised, and will be presented with a list of stored cards (if any) at the start of a transaction.

The bill_custref field must not be set if the checkout is not for a registered customer – such as if the customer is using a guest checkout option, or if they have not yet registered within your store.

Recruitment Payment

The Repeat Billing system gives merchants who use the Hosted Payment Pages the ability to setup and manage automatic recurring payments, such as those used in a subscription service.

There elements that form a Payment Agreement are as follows:

Initial payment amount
Payment period (Monthly or Weekly)
Payment interval (Interval between payment periods, e.g. every 2 weeks)
Regular payment amount
Start date (when to start the regular payments)
Term (how many payments to take)
Final payment amount (Any additional final payment to take after the last regular payment)

Sending the payment agreement details

Field	Description	Notes
repeat_amount	Regular payment amount	The amount to be taken at each payment interval.
repeat_period	Agreement billing period	This can be set to either ‘M’ (Months) or ‘W’ (Weeks)
repeat_interval	Number of Weeks/Months between each payment	Set to 1 to bill every month/week (as per billing period).
repeat_start	Agreement start date	Formatted as DDMMYYYY. The start date cannot be the same date that the agreement is made on, and cannot be a date that has already past.
repeat_term	Agreement term	Indicates the number of regular payments to take. Set this to zero to indicate an unlimited term.
repeat_final	Final payment amount	0 if there is no final payment amount. Final payment can only be set if there is a fixed term to the agreement.

All payment amounts are taken in the same currency as used for the main transaction request (as sent in the field). The amounts must be sent in major units (for example, 9 dollars 50 cents must be sent as 9.50 not 950).

Immediate Payment Amount

This specifies an amount to be taken at the same time that the agreement is setup. The immediate payment amount is sent as the ivp_amount field in the main transaction request.

Regular Payment Amount

This is the amount that will be taken from the card holder for each payment.

Agreement period and interval

The period must be set to either ‘M’ or ’W’, which relates to Months or Weeks. The interval must be an integer value between 1 and 12.

Examples
repeat_period=M , repeat_interval=1 , repeat_term=12	12 payments taken one month apart – agreement duration is 1 year.
repeat_period=M , repeat_interval=3 , repeat_term=0	Payments taken every quarter, no fixed term. Payments will continue until such time as the agreement is cancelled.

Start date

This indicates when the first regular payment should be taken. It is an 8 digit value, formatted as DDMMYYYY where DD = 2 digit day, MM = 2 digit month and YYYY = 4 digit year.

repeat_start=20042020 is meaning 20 th of April 2020

Final payment amount

This specifies an amount to be taken at the end of the agreement. This is only applicable for fixed term agreements (where repeat_term is non-zero). This final amount is in addition to any amount that would be taken as part of the regular payment processing. It will be taken at one payment interval following the last regular payment.

For fixed term payments:

Initial payment amount (ivp_amount)
repeat_term * repeat_amount
repeat_final

For unlimited term payments:

Initial payment amount (ivp_amount)
Continual payments of repeat_amount until the agreement is cancelled.

You can test it here.

https://mohammadaktaa.me/telr

What is Cotter and how to use it?

Mohammed Aktaa — Tue, 31 Mar 2020 18:55:37 +0000

Cotter is a utility that allows you to make One-Click Secure Phone Number Login

You can use it in:

1- Passwordless Login from Trusted Devices.
2- In-app QR Code for new devices.
3- In-app Time-based OTP for new devices.
4- Fallback Method using OTP via SMS, WhatsApp, Telegram and email.

Step #1
Setup Cotter with your API_KEY_ID and some config to initial cotter

<script
  src="https://js.cotter.app/lib/cotter.js"
  type="text/javascript">
</script>

put this code in your js file

<script>
var config = {
  ApiKeyID: "***************",

  // Type of identity your want to collect: EMAIL or PHONE
  Type: "PHONE",

  // div id of the container for Cotter Form
  ContainerID: "cotter-container-signup",

  // We will send a POST request to your RedirectURL when authentication succeeds
  RedirectURL: "https://yourwebsite.com/account/create",

  // the JSON key for the phone number or email to be posted to RedirectURL
  // Read more on RedirectURL JSON Object below
  IdentifierField: "phone",

  // After calling your RedirectURL, we will pass whatever JSON response
  // your server returned, into your OnSuccess function as the payload parameter
  // This is a good place to set your sessions and redirect to a dashboard.
  OnSuccess: payload => {

  }
};
 var cotter = new Cotter(config);
</script>

Step #2

Add the <div> container to your html.

<div id="cotter-container-signup"></div>

id the of div shoud equal the ContainerId in config.

and now run😁

 cotter.showForm();

the payload of onSuccess function will be like this:

{
  "session": "lqjl2k3a3cm809q8g2nqp2tjcl",
  [IdentifierField in config]: "+ your phone number",
  "id": "fk3j20gh-cd0d-a23j-1kf3-39f128mq2l43"
}

if you're using angular js

$scope.$on('$viewContentLoaded', function () {
  var config = {
  ApiKeyID: "***************",

  // Type of identity your want to collect: EMAIL or PHONE
  Type: "PHONE",

  // div id of the container for Cotter Form
  ContainerID: "cotter-container-signup",

  // We will send a POST request to your RedirectURL when authentication succeeds
  RedirectURL: "https://yourwebsite.com/account/create",

  // the JSON key for the phone number or email to be posted to RedirectURL
  // Read more on RedirectURL JSON Object below
  IdentifierField: "phone",

  // After calling your RedirectURL, we will pass whatever JSON response
  // your server returned, into your OnSuccess function as the payload parameter
  // This is a good place to set your sessions and redirect to a dashboard.
  OnSuccess: payload => {
    // you can SET your own cookie/session here
    window.localStorage.setItem("session", payload.session);
    // you can also redirect users to your dashboard
    window.location.href = "/dashboard";
  }
  CountryCode:["+961","+963","+971","+970"],
};
 var cotter = new Cotter(config);
 cotter.showForm();
});

this is a full example

also you can test it with email instead of phone