Pre-authorization: blocks the amount on the card without charging it.
Charge it later with capture(), or release it with voidAuthorization().
A success result means the amount is blocked.
Void (XML API Void), before end of day. paymentId is the order id.
Charges (all or part of) a pre-authorized amount
Completes the payment after the okUrl / failUrl POST.
The ver3 hash covers the values but not the field names, so a valid hash
alone does not pin which value is the order id. The result is therefore
confirmed with the bank: 3d and 3d_host only authenticate the card, so they
charge with XML Auth (the bank's answer decides); in 3d_pay and
3d_pay_hosting the bank charged the card, which is checked with an order
status query.
A callback that fails the hash, names another store, or claims a payment
the bank does not confirm is rejected as INVALID_HASH.
paymentId and conversationId are set only for a payment the bank
confirmed, and on a timeout after the bank was reached for this order;
a failure never carries ids taken from the callback.
Deletes a saved card
Order status (ORDERSTATUS). paymentId is the order id.
Pre-authorization with 3D Secure. Complete it with completeThreeDSPayment()
as usual; success then means the amount is blocked.
3D Secure payment: an auto-submitting form to the bank's 3D gate, signed with hash ver3. With storetype 3d_pay_hosting / 3d_host the bank collects the card on its own page, so no card data is sent.
Query installment options
A customer's saved cards
Refund (XML API Credit). paymentId is the order id.
Saves a card with the provider without charging it
Releases a pre-authorization; nothing is charged
EST (Asseco) virtual POS, shared by İş Bankası, Ziraat Bankası, Halkbank, TEB and Şekerbank. One provider class, configured per bank.
Auth(non-3D)/fim/est3Dgate(storetype 3d, 3d_pay, 3d_pay_hosting or 3d_host), signed with hash ver3Auth, 3d_pay / 3d_pay_hosting are confirmed with an order status queryCredit, cancel()Void, getPayment() order status (ORDERSTATUS)paymentIdis your order id (oid): theconversationIdyou pass, or a generated one.