First Data Global E4 Gateway API PHP Example

Is it mandatory I have to use SSL enabled site. I am running your site but I am getting “Unauthorized Request. Bad or missing credentials”. Can you please help. I am stuck with this.

Hi,
Saw your post. I am new to php and i really do not know how to follow the code that you have posted. I copied your code and pasted it to a new test.php file and tried to run it but it results in just an empty page. Hopefully because what i have done is not the right way. I have to integrate this payment gateway into our company website but do not know how and where to start. Could you please please help me? Please send any example files that are working to my mail please or guide me in the right path.

Email id : getsyed.a@gmail.com

Thanks in advance.

Hello.
I need some your help.
I’ using script from post
>>Cindy says:
>>March 2, 2013 at 12:00 am
>>
>>Thanks to John Fiala we may have the solution to the date header errors. He says >>he got the following code to work:
>>
>>// Prepare the Data:
>>$json_request = json_encode($nvp);
>>
>>// HMAC Hash…
But I receive from server only
“Expected signature ‘WqFCXgYFn6XPEUrSlu5rEdKHxqo=’, received signature ‘sRtud+P4E+k9EpkZGIvAnvt12s0=’.”
Are you have any ideas?

Hey Cindy,

Your post is awesome. I tried it but it is not giving any output. Can you please help me

Hello Cindy,
Hope you are doing fine. Thanks for such a nice, easy and working tutorial.
One question though,
Is there a way to delete TransArmor token from GGe4 system? If so then please guide.

Thanks in Advance,

Hi Could you please guide me how do i integrate Telecheck transactions?

I have added another post about adding First Data Global E4 Gateway API to Gravity Forms and WordPress here.——– By cindy

The link is not working now. Cindy can you help me to get those code?

Hi Cindy,I encountered the same problem,I come from China,and Can not read English…There are examples of it can be downloaded?谢谢

Hi,
I am trying to implement the GGE4 through mobile android platform by using SOAP service ,
Below are my code to access the GGE4 SOAP service from my application.

String SOAP_ACTION = “http://api.demo.globalgatewaye4.firstdata.com/vplug-in/transaction/rpc-enc/SendAndCommit”;
String URL = “https://api.demo.globalgatewaye4.firstdata.com/transaction/v12”;

String response = null;
try {
HttpClient httpClient = new DefaultHttpClient();

HttpPost httpPost = new HttpPost(URL);

String bodynew = “”
+ ” ”
+ ” ”
+ ” ”
+ “”
+ ” ”
+ ” 01″
+ ” 15.75″
+ ” 4111111111111111″
+ ” 08/30/2016″
+ ” Walter Sobchak”
+ “”
+ ” ” + “”;

StringEntity se = new StringEntity(bodynew, HTTP.UTF_8);
se.setContentType(“text/xml”);

httpPost.addHeader(“SOAPAction”, SOAP_ACTION);
httpPost.addHeader(BasicScheme.authenticate(new UsernamePasswordCredentials(“AGXXXX-XX”,”ajx1XXd3″),”UTF-8″, false));
httpPost.addHeader(“authorization”, “GGE4_API 12:nCAxZo9gqYzBcS5gm6OFXXXQAaPDjox”);
httpPost.addHeader(“x-gge4-date”, “2014-09-10T11:11:48Z”);
httpPost.addHeader(“x-gge4-content-sha1”, “Ezrq8V56zfTDhwGzotGXXqROks=”);

httpPost.setEntity(se);

HttpResponse httpResponse = httpClient.execute(httpPost);
HttpEntity resEntity = httpResponse.getEntity();
response = EntityUtils.toString(resEntity);

DocumentBuilderFactory factory = DocumentBuilderFactory
.newInstance();
DocumentBuilder builder = factory.newDocumentBuilder();
StringReader sr = new StringReader(response);
InputSource is = new InputSource(sr);
Document XMLResponse = builder.parse(is);
NodeList elements = XMLResponse.getElementsByTagName(“ERRORS”);
Boolean error = Boolean.valueOf(elements.item(0)
.getAttributes().item(0).getNodeValue());
HashMap Data = new HashMap();

} catch (Exception e) {
Log.e(LOG_TAG, e.getMessage());
} finally {
Log.v(LOG_TAG + ” Response”, response);
res=response;
}

Hello,
Please review the below C# code that i’m using for Tagged refund service and i’m passing all the required fields to the service.

StringBuilder Json_builder = new StringBuilder();
StringBuilder string_builder = new StringBuilder();
using (StringWriter string_writer = new StringWriter(Json_builder))
{
using (JsonTextWriter xml_writer = new JsonTextWriter(string_writer))
{ //build XML string
//xml_writer.Formatting = System.Xml.Formatting.Indented;
xml_writer.WriteStartObject();

//xml_writer.WritePropertyName(“ExactID”);//Gateway ID
//xml_writer.WriteValue(“AG0920-05”);

//xml_writer.WritePropertyName(“Password”);
//xml_writer.WriteValue(“9f1bl7sn”);//Password

xml_writer.WritePropertyName(“Transaction_Type”);
xml_writer.WriteValue(“34”);

xml_writer.WritePropertyName(“Transaction_Tag”);
xml_writer.WriteValue(“31831856”);

xml_writer.WritePropertyName(“Authorization_Num”);
xml_writer.WriteValue(“ET152662”);

xml_writer.WritePropertyName(“amount”);
xml_writer.WriteValue(“1.66”);

xml_writer.WriteEndObject();
}
}
using (StringWriter string_writer = new StringWriter(string_builder))
{
using (XmlTextWriter xml_writer = new XmlTextWriter(string_writer))
{ //build XML string
//xml_writer.Formatting = System.Xml.Formatting.Indented;
xml_writer.WriteStartElement(“Transaction”);
xml_writer.WriteElementString(“ExactID”, “AG0920-05”);//Gateway ID
xml_writer.WriteElementString(“Password”, “9f1bl7sn”);//Password
xml_writer.WriteEndElement();
}
}
string xml_string = string_builder.ToString();
string Json_string = Json_builder.ToString();

//SHA1 hash on XML string
ASCIIEncoding encoder = new ASCIIEncoding();
byte[] xml_byte = encoder.GetBytes(xml_string);
SHA1CryptoServiceProvider sha1_crypto = new SHA1CryptoServiceProvider();
string hash = BitConverter.ToString(sha1_crypto.ComputeHash(xml_byte)).Replace(“-“, “”);
string hashed_content = hash.ToLower();

//assign values to hashing and header variables
string keyID = “167015”;//key ID
string key = “IFhtcMcjW35YrQGcMQYdy_Tmza41VmtP”;//Hmac key
string method = “POST\n”;
string type = “application/json; charset=UTF-8”;//REST XML
string time = DateTime.UtcNow.ToString(“yyyy-MM-ddTHH:mm:ssZ”);
string uri = “/transaction/v13”;

string hash_data = method + type + “\n” + hashed_content + “\n” + time + “\n” + uri;
//hmac sha1 hash with key + hash_data
HMAC hmac_sha1 = new HMACSHA1(Encoding.UTF8.GetBytes(key)); //key
byte[] hmac_data = hmac_sha1.ComputeHash(Encoding.UTF8.GetBytes(hash_data)); //data
//base64 encode on hmac_data
string base64_hash = Convert.ToBase64String(hmac_data);
string url = “https://api.demo.globalgatewaye4.firstdata.com” + uri; //DEMO Endpoint

//begin HttpWebRequest
HttpWebRequest web_request = (HttpWebRequest)WebRequest.Create(url);
web_request.Method = “POST”;
web_request.ContentType = type;
web_request.Accept = “application/json”;
web_request.Headers.Add(“x-gge4-date”, time);
web_request.Headers.Add(“x-gge4-content-sha1”, hashed_content);
web_request.Headers.Add(“Authorization”, “GGE4_API ” + keyID + “:” + base64_hash);
web_request.ContentLength = Json_string.Length;

// write and send request data
using (StreamWriter stream_writer = new StreamWriter(web_request.GetRequestStream()))
{
stream_writer.Write(Json_string);
}
//get response and read into string
string response_string;
try
{
using (HttpWebResponse web_response = (HttpWebResponse)web_request.GetResponse())
{
using (StreamReader response_stream = new StreamReader(web_response.GetResponseStream()))
{
response_string = response_stream.ReadToEnd();
}

//load xml
XmlDocument xmldoc = new XmlDocument();
xmldoc.LoadXml(response_string);
XmlNodeList nodelist = xmldoc.SelectNodes(“TransactionResult”);

//bind XML source DataList control
//DataList1.DataSource = nodelist;
//DataList1.DataBind();
//output raw XML for debugging

string request = “Request” + web_request.Headers.ToString() + System.Web.HttpUtility.HtmlEncode(xml_string);
string response = “Response” + web_response.Headers.ToString() + System.Web.HttpUtility.HtmlEncode(response_string);
}
}
//read stream for remote error response
catch (WebException ex)
{
if (ex.Response != null)
{
using (HttpWebResponse error_response = (HttpWebResponse)ex.Response)
{
using (StreamReader reader = new StreamReader(error_response.GetResponseStream()))
{
string remote_ex = reader.ReadToEnd();
string error = remote_ex;
}
}
}
}
or how should i pass the credentials to the web api?

But stilll it gives error of 401(Unauthorization).

Please suggest.
Thank you.

Cindy,

Thanks for the informative post

My code is working fine– it’s POST’ing, my Authorization is being accepted beautifully, and I get a nice response/receipt

However–I’m curious, to add an extra bit of security (or maybe because I’m a glutton for punishment)– I am trying to verify the RESPONSE’s Authorization. Have you been able to do that?

A response header looks something like this:


HTTP/1.1 201
Authorization: GGE4_API 999999:w+AuSlMWoaiueOw8uNRHu9K4buU=
Cache-Control: max-age=0, private, must-revalidate
Content-Type: application/json; charset=utf-8
Date: Mon, 20 Oct 2014 19:11:46 GMT
ETag: "b50682eee494199449605b0e0c4703fb"
Location: https://api.demo.globalgatewaye4.firstdata.com/transaction/v12/34569515
Server: Apache
Status: 201
X-GGE4-CONTENT-SHA1: da0d8512e1aa14897c47da597a4a1e4ec7040713
X-GGE4-Date: 2014-10-20T19:11:46Z
X-Rack-Cache: invalidate, pass
X-Request-Id: d004033b9a813866f94d0a2ec2f12182
X-UA-Compatible: IE=Edge,chrome=1
Content-Length: 1325
Connection: keep-alive


I’m trying to use my hashing function to double check that the ‘Authorization’ in the response is correct

Here’s my function (same one used to build the POST’s authorization code– which works fine)


function e4hash($args) {
$hashstr = implode("\n",$args);
return "GGE4_API ".MY_KEY.":".base64_encode(hash_hmac("sha1",$hashstr,MY_HMAC,1));
}


I assume that the RESPONSE Authorization follows the same format as the POST, namely:


Request Method + \n
+ Content-type + \n
+ Content Digest (SHA-1) + \n
+ Sending Time + \n
+ Request URL


I have tried variations of the following and I can never reproduce the response’s Authorization, what am I missing?


e4hash(
"HTTP/1.1 201",
"application/json; charset=utf-8",
"da0d8512e1aa14897c47da597a4a1e4ec7040713",
"2014-10-20T19:11:46Z",
"/transaction/v12/34569515"
);


In this case the result of the above code does not equal “GGE4_API 999999:w+AuSlMWoaiueOw8uNRHu9K4buU=”
like it should

Do you know if the RESPONSE authorization uses different fields than what I have provided? It still should rely on the same HMAC associated with the account (/POST’ing) correct?

Any help would be appreciated

Thanks

Ah hah!

A completely different hash of values,

The value is created with a SHA 1 Hash using the following parameter string:
sharedsecret + approvalcode + chargetotal + currency + txndatetime + storename

Thanks Cindy, I’ve been searching forever, don’t know how I missed this PDF!