The integration consists of three main steps. Creating the payment order, displaying the payment menu, and capturing the funds. In addition, there are other post-purchase options you need. We get to them later on.
Create Payment Order
When your customer has initiated a purchase, you need to create a payment order.
Start by performing a POST request towards the paymentorder resource with
payer information and a completeUrl.
The productName field has been removed in v3.1, and you identify the
paymentOrder version as v3.1 in the header instead.
POST, PATCH, GET and PUT requests use this header:
Content-Type: application/json;version=3.1
GET requests can also use this header:
Accept: application/json;version=3.1
Valid versions are 3.1, 3.0 and 2.0. If you do not add a version,
the request will default to 2.0. Using the productName and setting it to
checkout3 will default to 3.0.
To accompany the new version, we have also added a
v3.1 post-purchase section, v3.1 callback, a new
resource model for failedPostPurchaseAttempts and additions to the
history resource model.
Supported features for this integration are subscriptions (recur, one-click
and unscheduled MIT), MOTO, instrument mode, split settlement (subsite)
and the possibility to use your own logo.
There is also a guest mode option for the payers who don’t wish to store their
information. The way to trigger this is to not include the payerReference
field in your paymentOrder request. If the payer field is included in your
request, you can find the payerReference there.
Sometimes you might need to abort purchases. An example could be if a payer does
not complete the purchase within a reasonable timeframe. For those instances we
have abort, which you can read about in the payment operations.
You can only use abort if the payer has not completed an authorize or a
sale. If the payer is performing an action at a 3rd party, like the MobilePay,
Swish or Vipps apps, abort is unavailable.
To avoid unnecessary calls, we recommend doing a GET on your paymentOrder to
check if abort is an available operation before performing it.
To minimize the risk for
a challenge request (Strong Customer Authentication – “SCA”) on card payments,
it’s recommended that you add as much data as possible to the riskIndicator
object in the request below.
GDPR: GDPR
sensitive data such as email, phone numbers and social security numbers must
not be used directly in request fields such as payerReference. If it is
necessary to use GDPR sensitive data, it must be hashed and then the hash can be
used in requests towards Swedbank Pay.
Payment Order Request
Request
1
2
3
4
POST /psp/paymentorders HTTP/1.1
Host: api.externalintegration.payex.com
Authorization: Bearer <AccessToken>
Content-Type: application/json;version=3.1
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
{
    "paymentorder": {
        "operation": "Purchase",
        "currency": "SEK",
        "amount": 1500,
        "vatAmount": 375,
        "description": "Test Purchase",
        "userAgent": "Mozilla/5.0...",
        "language": "sv-SE",
        "urls": {
            "hostUrls": [ "https://example.com", "https://example.net" ],
            "paymentUrl": "https://example.com/perform-payment", //Seamless View only
            "completeUrl": "https://example.com/payment-completed",
            "cancelUrl": "https://example.com/payment-cancelled", //Redirect only
            "callbackUrl": "https://api.example.com/payment-callback",
            "logoUrl": "https://example.com/logo.png",
            "termsOfServiceUrl": "https://example.com/termsandconditoons.pdf"
        },
        "payeeInfo": {
            "payeeId": "5cabf558-5283-482f-b252-4d58e06f6f3b",
            "payeeReference": "AB832",
            "payeeName": "Merchant1",
            "orderReference": "or-123456"
        }
    }
}
 
| Required | Field | Type | Description | 
|---|---|---|---|
| check | paymentOrder | object | The payment order object. | 
| check | operation | string | Determines the initial operation, defining the type of payment order created. | 
| check | currency | string | The currency of the payment. | 
| check | amount | integer | The transaction amount (including VAT, if any) entered in the lowest monetary unit of the selected currency. E.g.: 10000=100.00SEK,5000=50.00SEK.  The amount displayed is the final amount the payer paid for their order, including any payment method specific discounts or fees. | 
| check | vatAmount | integer | The payment’s VAT (Value Added Tax) amount, entered in the lowest monetary unit of the selected currency. E.g.:10000=100.00SEK,5000=50.00SEK.  ThevatAmountentered will not affect theamountshown on the payment page, which only shows the totalamount. This field is used to specify how much of the totalamountthe VAT will be. Set to0(zero) if there is no VATamountcharged. | 
| check | description | string | The description of the payment order. | 
| check | userAgent | string | The user agent of the payer. Should typically be set to the value of the User-Agentheader sent by the payer’s web browser. | 
| check | language | string | sv-SE,nb-NO,da-DK,en-USorfi-FI. | 
| implementation | string | Indicates which implementation to use. | |
| check | urls | object | The urlsobject, containing the URLs relevant for the payment order. | 
| check | hostUrls | array | The array of valid host URLs. | 
| paymentUrl | string | The paymentUrlrepresents the URL that Swedbank Pay will redirect back to when the view-operation needs to be loaded, to inspect and act on the current status of the payment, such as when the payer is redirected out of the Seamless View (the<iframe>) and sent back after completing the payment.paymentUrlis only used in Seamless Views and should point to the page of where the Payment Order Seamless View is hosted. If bothcancelUrlandpaymentUrlis sent, thepaymentUrlwill used. Trustly will only be available if thepaymentUrlis provided while using Seamless View. When using Redirect, Trustly will appear regardless. | |
| check | completeUrl | string | The URL that Swedbank Pay will redirect back to when the payer has completed their interactions with the payment. This does not indicate a successful payment, only that it has reached a final (complete) state. A GETrequest needs to be performed on the payment order to inspect it further. SeecompleteUrlfor details. | 
| check | cancelUrl | string | The URL to redirect the payer to if the payment is cancelled, either by the payer or by the merchant trough an abortrequest of thepaymentorpaymentorder. | 
| check | callbackUrl | string | The URL that Swedbank Pay will perform an HTTP POSTagainst every time a transaction is created on the payment order. See callback for details. | 
| logoUrl | string | With permission and activation on your contract (if you are using Seamless    View), sending in a logoUrlwill replace the Swedbank Pay logo with the    logo sent in. If you do not send in alogoUrl, then no logo and no text is    shown. Without permission or activation on your contract, sending in alogoUrlhas no effect. The logo must be a picture with maximum 50px height    and 400px width. Requires HTTPS. Read more about this in     Custom Logo . | |
| termsOfServiceUrl | string | The URL to the terms of service document which the payer must accept in order to complete the payment. HTTPS is a requirement. | |
| check | payeeInfo | object | The payeeInfoobject, containing information about the payee (the recipient of the money). SeepayeeInfofor details. | 
| check | payeeId | string | The ID of the payee, usually the merchant ID. | 
| check | payeeReference | string | A unique reference from the merchant system. Set per operation to     ensure an exactly-once delivery of a transactional operation. Length and     content validation depends on whether the transaction.numberor thepayeeReferenceis sent to the acquirer. If Swedbank Pay handles the     settlement, thetransaction.numberis sent and thepayeeReferencemust be in the format ofA-Za-z0-9andstring(30). If you handle the settlement,     Swedbank Pay will send thepayeeReferenceand it will be limited to the     format ofstring(12). All characters must be digits.               In Invoice PaymentspayeeReferenceis used as an invoice/receipt         number, if thereceiptReferenceis not defined. | 
| payeeName | string | The name of the payee, usually the name of the merchant. | |
| orderReference | string(50) | The order reference should reflect the order reference found in the merchant’s systems. | 
Payment Order Response
Response
1
2
3
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8; version=3.1
api-supported-versions: 3.x/2.0
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
{
    "paymentorder": {
        "id": "/psp/paymentorders/09ccd29a-7c4f-4752-9396-12100cbfecce",
        "created": "2020-06-22T10:56:56.2927632Z",
        "updated": "2020-06-22T10:56:56.4035291Z",
        "operation": "Purchase",
        "status": "Initialized",
        "currency": "SEK",
        "vatAmount": 375,
        "amount": 1500,
        "description": "Test Purchase",
        "initiatingSystemUserAgent": "swedbankpay-sdk-dotnet/3.0.1",
        "language": "sv-SE",
        "availableInstruments": [
          "CreditCard",
          "Invoice-PayExFinancingSe",
          "Invoice-PayMonthlyInvoiceSe",
          "Swish",
          "CreditAccount",
          "Trustly" ],
        "implementation": "PaymentsOnly",  
        "instrumentMode": false,
        "guestMode": false,
        "orderItems": {
          "id": "/psp/paymentorders/09ccd29a-7c4f-4752-9396-12100cbfecce/orderitems"
        },
        "urls": {
          "id": "/psp/paymentorders/09ccd29a-7c4f-4752-9396-12100cbfecce/urls"
        },
        "payeeInfo": {
          "id": "/psp/paymentorders/09ccd29a-7c4f-4752-9396-12100cbfecce/payeeinfo"
        },
        "payer": {
          "id": "/psp/paymentorders/09ccd29a-7c4f-4752-9396-12100cbfecce/payers"
        },
        "history": {
          "id": "/psp/paymentorders/09ccd29a-7c4f-4752-9396-12100cbfecce/history"
        },
        "failed": {
          "id": "/psp/paymentorders/09ccd29a-7c4f-4752-9396-12100cbfecce/failed"
        },
        "aborted": {
          "id": "/psp/paymentorders/09ccd29a-7c4f-4752-9396-12100cbfecce/aborted"
        },
        "paid": {
          "id": "/psp/paymentorders/09ccd29a-7c4f-4752-9396-12100cbfecce/paid"
        },
        "cancelled": {
          "id": "/psp/paymentorders/09ccd29a-7c4f-4752-9396-12100cbfecce/cancelled"
        },
        "reversed": {
          "id": "/psp/paymentorders/09ccd29a-7c4f-4752-9396-12100cbfecce/reversed"
        },
        "financialTransactions": {
          "id": "/psp/paymentorders/09ccd29a-7c4f-4752-9396-12100cbfecce/financialtransactions"
        },
        "failedAttempts": {
          "id": "/psp/paymentorders/09ccd29a-7c4f-4752-9396-12100cbfecce/failedattempts"
        },
        "postPurchaseFailedAttempts": {
          "id": "/psp/paymentorders/09ccd29a-7c4f-4752-9396-12100cbfecce/failedattempts"
        },
        "metadata": {
          "id": "/psp/paymentorders/09ccd29a-7c4f-4752-9396-12100cbfecce/metadata"
        }
    },
    "operations": [
        {
          "method": "GET",
          "href": "https://ecom.externalintegration.payex.com/payment/menu/5a17c24e-d459-4567-bbad-aa0f17a76119?_tc_tid=30f2168171e142d38bcd4af2c3721959",
          "rel": "redirect-checkout",
          "contentType": "text/html"
        },
        {
          "method": "GET",
          "href": "https://ecom.externalintegration.payex.com/payment/core/js/px.payment.client.js?token=5a17c24e-d459-4567-bbad-aa0f17a76119&culture=nb-NO&_tc_tid=30f2168171e142d38bcd4af2c3721959",
          "rel": "view-checkout",
          "contentType": "application/javascript"
        },
        {
          "href": "https://api.payex.com/psp/paymentorders/09ccd29a-7c4f-4752-9396-12100cbfecce",
          "rel":"update-order",
          "method":"PATCH",
          "contentType":"application/json"
        },
        {
          "href": "https://api.payex.com/psp/paymentorders/09ccd29a-7c4f-4752-9396-12100cbfecce",
          "rel": "abort",
          "method": "PATCH",
          "contentType": "application/json"
        },
        {
          "href": "https://api.payex.com/psp/paymentorders/09ccd29a-7c4f-4752-9396-12100cbfecce",
          "rel": "abort-paymentattempt",
          "method": "PATCH",
          "contentType": "application/json"
        }
    ]
}
 
| Field | Type | Description | 
|---|---|---|
| paymentOrder | object | The payment order object. | 
| id | string | The relative URL and unique identifier of the paymentorderresource .     Please read about URL Usage     to understand how this and other URLs should be used in your solution. | 
| created | string | The ISO-8601 date of when the payment order was created. | 
| updated | string | The ISO-8601 date of when the payment order was updated. | 
| operation | string | Purchase | 
| status | string | Indicates the payment order’s current status. Initializedis returned when the payment is created and still ongoing. The request example above has this status.Paidis returned when the payer has completed the payment successfully. See thePaidresponse.Failedis returned when a payment has failed. You will find an error message in theFailedresponse.Cancelledis returned when an authorized amount has been fully cancelled. See theCancelledresponse. It will contain fields from both the cancelled description and paid section.Abortedis returned when the merchant has aborted the payment, or if the payer cancelled the payment in the redirect integration (on the redirect page). See theAbortedresponse. | 
| currency | string | The currency of the payment order. | 
| amount | integer | The transaction amount (including VAT, if any) entered in the lowest monetary unit of the selected currency. E.g.: 10000=100.00SEK,5000=50.00SEK.  The amount displayed is the final amount the payer paid for their order, including any payment method specific discounts or fees. | 
| vatAmount | integer | The payment’s VAT (Value Added Tax) amount, entered in the lowest monetary unit of the selected currency. E.g.:10000=100.00SEK,5000=50.00SEK.  ThevatAmountentered will not affect theamountshown on the payment page, which only shows the totalamount. This field is used to specify how much of the totalamountthe VAT will be. Set to0(zero) if there is no VATamountcharged. | 
| description | string(40) | A textual description of the purchase. Maximum length is 40 characters. | 
| initiatingSystemUserAgent | string | The user agent of the HTTP client making the request, reflecting the value sent in the User-Agentheader with the initialPOSTrequest which created the Payment Order. | 
| language | string | sv-SE,nb-NO,da-DK,en-USorfi-FI. | 
| availableInstruments | string | A list of payment methods available for this payment. | 
| implementation | string | The merchant’s Digital Payments implementation type. EnterpriseorPaymentsOnly. We ask that you don’t build logic around this field’s response. It is mainly for information purposes, as the implementation types might be subject to name changes. If this should happen, updated information will be available in this table. | 
| integration | string | The merchant’s Digital Payments integration type. HostedView(Seamless View) orRedirect. This field will not be populated until the payer has opened the payment UI, and the client script has identified if Swedbank Pay or another URI is hosting the container with the payment iframe. We ask that you don’t build logic around this field’s response. It is mainly for information purposes. as the integration types might be subject to name changes, If this should happen, updated information will be available in this table. | 
| instrumentMode | bool | Set to trueorfalse. Indicates if the payment is initialized with Instrument Mode (only one payment method available). | 
| guestMode | bool | Set to trueorfalse. Indicates if the payer chose to pay as a guest or not. When using the Payments Only implementation, this is triggered by not including apayerReferencein the originalpaymentOrderrequest. | 
| orderItems | id | The URL to the orderItemsresource where information about the order items can be retrieved. | 
| urls | id | The URL to the urlsresource where all URLs related to the payment order can be retrieved. | 
| payeeInfo | id | The URL to the payeeInforesource where information related to the payee can be retrieved. | 
| payer | id | The URL to the payerresource where information about the payer can be retrieved. | 
| history | id | The URL to the historyresource where information about the payment’s history can be retrieved. | 
| failed | id | The URL to the failedresource where information about the failed transactions can be retrieved. | 
| aborted | id | The URL to the abortedresource where information about the aborted transactions can be retrieved. | 
| paid | id | The URL to the paidresource where information about the paid transactions can be retrieved. | 
| cancelled | id | The URL to the cancelledresource where information about the cancelled transactions can be retrieved. | 
| reversed | id | The URL to the reversedresource where information about the reversed transactions can be retrieved. | 
| financialTransactions | id | The URL to the financialTransactionsresource where information about the financial transactions can be retrieved. | 
| failedAttempts | id | The URL to the failedAttemptsresource where information about the failed attempts can be retrieved. | 
| postPurchaseFailedAttempts | id | The URL to the postPurchaseFailedAttemptsresource where information about the failed capture, cancel or reversal attempts can be retrieved. | 
| metadata | id | The URL to the metadataresource where information about the metadata can be retrieved. | 
| operations | array | The array of operations that are possible to perform on the payment order in its current state. | 
Adding To Your Request
The request shown above includes what you need to create the payment, but you can add more sections if you need or want.
Examples can be to include order items by adding a separate node, or provide risk indicators and information about the payer to make the payment process as frictionless as possible.
Read more about possible additions to the request in our feature section.