C#

Cybersource Process Payment

Process a Payment. Demonstrates how to send a POST request to the Cybersource API with HTTP signature authorization. C#

bool success = false;

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

Chilkat.JsonObject json = new Chilkat.JsonObject();

// Create the following JSON:
// 
// {
//   "keyId": "aaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee",
//   "hmacKey": "Bx42CFD+cp++kMdkmavDMqVCN6YwNQ0M1bRmcxsLal5=",
//   "algorithm": "HmacSHA256",
//   "headers": [
//     "host",
//     "(request-target)",
//     "digest",
//      "v-c-merchant-id"
//   ]
// }

// Substitute your actual API key and API secret in place of "api-key" and "api-secret"
json.UpdateString("keyId","api-key");
json.UpdateString("hmacKey","api-secret");
json.UpdateString("algorithm","HmacSHA256");

// Indicate the names of the headers to be included in the signature.
// "(request-target)" is not actually a header name, but is a special name for HTTP signatures.
// Copy the following three lines of code exactly as-is.  
// Do not replace "host", "date", or "(request-target)" with values.
json.UpdateString("headers[0]","host");
json.UpdateString("headers[1]","(request-target)");
json.UpdateString("headers[2]","digest");
json.UpdateString("headers[3]","v-c-merchant-id");

// Build the following JSON to be sent in the request body:

// {
//   "clientReferenceInformation": {
//     "code": "TC50171_3"
//   },
//   "paymentInformation": {
//     "card": {
//       "number": "4111111111111111",
//       "expirationMonth": "12",
//       "expirationYear": "2031"
//     }
//   },
//   "orderInformation": {
//     "amountDetails": {
//       "totalAmount": "102.21",
//       "currency": "USD"
//     },
//     "billTo": {
//       "firstName": "John",
//       "lastName": "Doe",
//       "address1": "1 Market St",
//       "locality": "san francisco",
//       "administrativeArea": "CA",
//       "postalCode": "94105",
//       "country": "US",
//       "email": "test@cybs.com",
//       "phoneNumber": "4158880000"
//     }
//   }
// }

// Use this online tool to generate code from sample JSON: 
// Generate Code to Create JSON

Chilkat.JsonObject jsonBody = new Chilkat.JsonObject();
jsonBody.UpdateString("clientReferenceInformation.code","TC50171_3");
jsonBody.UpdateString("paymentInformation.card.number","4111111111111111");
jsonBody.UpdateString("paymentInformation.card.expirationMonth","12");
jsonBody.UpdateString("paymentInformation.card.expirationYear","2031");
jsonBody.UpdateString("orderInformation.amountDetails.totalAmount","102.21");
jsonBody.UpdateString("orderInformation.amountDetails.currency","USD");
jsonBody.UpdateString("orderInformation.billTo.firstName","John");
jsonBody.UpdateString("orderInformation.billTo.lastName","Doe");
jsonBody.UpdateString("orderInformation.billTo.address1","1 Market St");
jsonBody.UpdateString("orderInformation.billTo.locality","san francisco");
jsonBody.UpdateString("orderInformation.billTo.administrativeArea","CA");
jsonBody.UpdateString("orderInformation.billTo.postalCode","94105");
jsonBody.UpdateString("orderInformation.billTo.country","US");
jsonBody.UpdateString("orderInformation.billTo.email","test@cybs.com");
jsonBody.UpdateString("orderInformation.billTo.phoneNumber","4158880000");

Chilkat.Http http = new Chilkat.Http();

// Setting the AuthSignature property causes the following header to be computed and added:
// Authorization: Signature keyId="...", algorithm="hmac-sha256", headers="(request-target) host date", signature="..."
http.AuthSignature = json.Emit();

http.SetRequestHeader("v-c-merchant-id","your-merchant-id");

// Calculate the digest of the body..
Chilkat.StringBuilder sbBody = new Chilkat.StringBuilder();
jsonBody.EmitCompact = false;
sbBody.Append(jsonBody.Emit());
sbBody.ToLF();
http.SetRequestHeader("digest",sbBody.GetHash("sha256","base64","utf-8"));

Chilkat.CkDateTime dtNow = new Chilkat.CkDateTime();
dtNow.SetFromCurrentSystemTime();

// Add a v-c-date header such as Fri, 19 May 2023 14:32:51 GMT
http.SetRequestHeader("v-c-date",dtNow.GetAsRfc822(false));

// This is needed for the CyberSource HTTP Signature -- internally, the shared secret needs to be decoded from base64 and not taken literally as a string.
http.UncommonOptions = "DecodeHmacKeyBytes";

string jsonStr = sbBody.GetAsString();
Chilkat.HttpResponse resp = new Chilkat.HttpResponse();
success = http.HttpStr("POST","https://apitest.cybersource.com/pts/v2/payments",jsonStr,"utf-8","application/json",resp);
if (success == false) {
    Debug.WriteLine(http.LastErrorText);
    return;
}

Debug.WriteLine(resp.BodyStr);
Debug.WriteLine("----");
// A 201 status code indicates success.
Debug.WriteLine("Status code = " + Convert.ToString(http.LastStatus));