Payment API

S2S (server-to-server) Payment process

Data is sent as a server-to-server request, authenticated with standard HTTP Basic Authentication Header. All server-to-server requests use UTF-8 charset.

1. If payment method is chosen in web store, see Payment API | Choosing the payment method

2. A new payment request (Create Payment | Request (S2S HTTP POST) ) is sent by the web store software (with no payer browser intervention).

3. The success response (Create Payment | Response (XML) ) is in XML document with root element <pmt>.

   1. These values are usually the same as in the request: pmt_action, pmt_version, pmt_id, pmt_reference, pmt_amount, pmt_currency

   2. pmt_paymenturl

      1. This is the address where the payer can be redirected instantly to continue the payment process

      2. or this address could be used as "payment link" that is sent to the payer for example by email

      3. or this link can be shown somewhere in the web store.

4. Payer is redirected to the pmt_paymenturl.

5. When the payer returns to the web store after payment, web store must validate the payment confirmation and make sure it was not fabricated by a malicious user. Use instantly to validate the payment.

6. OPTIONAL (yet recommended): Later a callback request () from Svea’s server is made to web store. If payment has not yet been confirmed earlier, web store must use to validate the payment.

7. OPTIONAL: pmt_paymenturl expiration time can be updated

Choosing the payment method

Web store can display the available payment methods for the buyer in their web store checkout process. This is achieved by retrieving the available payment methods per order using . After that, the Create Payment API should contain the code (pmt_paymentmethod, ) of the payment method the buyer chose in the web store. Otherwise, the buyer will choose the payment method on a page rendered by Svea Payments.

When the buyer chooses payment method in the web store that is using the Buyer’s Assistant, the web store must display the terms and conditions of the Buyer’s Assistant service in the web store and ensure the buyer agrees to them. These are found from the API response.