PayPal is one of the most innovative and popular payment services that has revolutionized the understanding of financial transactions on the Internet. Founded in 1998, PayPal has become a true game-changer in the realm of online payments, making life and business operations easier for millions of users. At its core, PayPal aims to provide secure, simple, and instant online payments. Using PayPal, users can transfer money within a country or between countries, pay for goods and services on thousands of online platforms, web stores, and receive payments from customers and partners. The uniqueness of PayPal lies not only in its user-friendly interface and global reach but also in its robust data protection and financial security system. The service actively employs cutting-edge encryption technologies to ensure a high level of account and financial security, protecting users from fraud.
What tasks can be accomplished using the PayPal API
- The PayPal API allows you to accept payments from customers on your website;
- It provides capabilities for handling disputes and resolving issues between buyers and sellers;
- You can process refunds or cancel unconfirmed transactions;
- You can use the API to check the status of payments;
- The PayPal API allows you to retrieve detailed information about each transaction, including the amount, date, and other data;
- You can check the balance on your account or users' accounts;
This is just a small list of tasks that can be accomplished using the PayPal API. Thanks to its versatility and flexibility, the API can be integrated into various types of businesses and platforms to enhance user experience and simplify financial operations.
To connect PayPal API
PayPal provides two APIs: REST and IPN. We will focus on the REST API, which we will simply refer to as "API". This API facilitates convenient interaction with necessary entities and uses the JSON data format for exchanging information. PayPal offers two environments: live
and sandbox. o ensure the security of requests, PayPal uses OAuth 2.0 authentication. Therefore, to interact with the API, you need to obtain an access token. To obtain the token, you should send a POST request to the path "v1/oauth2/token" with the parameter "grant_type" having the value "client_credentials", and pass the "Authorization" header with the value "Basic " . base64_encode("$clientId:$secret").
The received token can be used to sign all subsequent requests within a certain time. The $clientId and $secret data can be obtained directly from the PayPal account. There you can also change the mode of operation of the application. Except for the access token request, all other requests can be sent in JSON format.
Usually, the obtained token is sufficient for processing payments, viewing payment history, and other operations. However, the default history is not available, and to use it, you need to enable the corresponding option in your PayPal account settings. In the test environment, the payment history is empty by default, and to work with existing payments, you need to create them.
For certain requests, an elevated level of protection is required, and to perform specific operations, such as processing a payment refund, an additional signature is necessary. To achieve this, you need to pass the "PayPal-Auth-Assertion" header with a value that is a concatenation of base64-encoded JSON strings obtained from the arrays ['alg' => 'none'] and ['iss' => $clientId, 'email' => $email]. The parameter $clientId was mentioned earlier, and $email represents the e-mail address of the PayPal user, registered on their account. It is essential to note that when using the "sandbox" environment, PayPal generates a test e-mail, so please exercise caution during testing operations.
Additionally, instead of using an e-mail in the second array, you can use 'payer_id' with the value of the user's payer_id account. It should also be noted that there must be a period between the two encrypted strings in the resulting string, which PayPal will use as a delimiter.
For example, in the PHP programming language, generating the second signature will look like this:
$joseHeader = base64_encode(json_encode(['alg' => 'none']));
$payload = base64_encode(json_encode([
'iss' => $clientId,
'email' => $email,
]));
return $joseHeader . '.' . $payload;
}
For proper error handling, it is important to consider two types of situations: access errors that may occur when an attempt to obtain a token fails, and validation errors. Therefore, your system will require two mechanisms to handle errors with different formats.
Webhooks Paypal
Webhooks are a mechanism that allows the PayPal API to send real-time event notifications to your server. With webhooks, your application can automatically receive information about various events related to your transactions and PayPal account, without the need to constantly poll the API for updates. When an event occurs, to which a webhook is attached, PayPal sends a POST request with event data to the URL on your server that you specified. Consequently, your server can respond to these notifications and perform necessary actions according to the event.
For example, you can use webhooks for the following scenarios:
- Upon receiving a notification of completed payment, you can update the order status in your system or provide the user access to your content or services;
- If a buyer requests a refund, you can receive a notification of the refund and update the transaction status in your system;
- When disputes or conflicts arise, you can receive notifications about them and take appropriate actions.
To use webhooks, you need to follow these steps:
- Create an endpoint on your server (URL) where PayPal will send event notifications;
- You need to subscribe to specific events that you want to track, such as payment confirmation, refund, subscription cancellation, etc;
- When creating a webhook, you must specify a webhook verification token to allow your server to verify the authenticity of notifications from PayPal;
- After setting up the webhook, it is recommended to test it in the sandbox environment to ensure that your server correctly handles the notifications.
PayPal provides detailed documentation on working with webhooks, including a list of supported events and data formats you will receive for each event. Make sure that your server handles notifications in a secure and reliable manner to avoid data loss or incorrect actions.
Asabix company has experience in connecting PayPal API and other services. If you need help or services with API connection, contact us in any convenient way or leave a request on the integration page of any complexity.
Articles You May Also Be Interested In
Ready to start? Let us know!
Ukraine, Zhytomyr
Vitruka Street, 9V
Mon-Fri, 9 am-7 pm
Poland, Warsaw, 00-842
Łucka street 15/204
Mon-Fri, 9 am-7 pm