This module provides REST endpoints for decoupled Drupal Commerce checkout experiences. It allows for the creation of orders, payments, and the management of payment capturing and finalization through an API.
The modules provides REST endpoints for decoupled Commerce experience:
- Remote orders creation (alongside with user / profile / order items)
- Remote payment creation / initialization (and capturing if needed)
- Remote payment capturing / finalization (if was not captured before)
REST API
1. Create a new order (with potential to submit payment as well)
POST /commerce/order/create
Payload documentation
2. Create a new payment for the order (with potential to capture it as well)
POST /commerce/payment/create/{order_id}
Payload documentation
3. Capture the existing payment (if it was not captured before).
POST /commerce/payment/capture/{order_id}/{payment_id}
No payload.
4. Void the existing payment (if it was not captured before).
POST /commerce/payment/void/{order_id}/{payment_id}
No payload.
Payment Gateway integrations
The module was tested / proven to be working with:
- Paypal Button (Express Checkout)
- Stripe
- Credit Cards through Global Payments (former Realex)
- Direct Debits
Known issues:
- Currently frontend can override order item price. Need a better way of allowing / disallowing this override.
- Theoretically payment endpoints can be bruteforced and payments can be initialized / completed on behalf of other people. Needs some sort of tokenization to make sure that only user who created the order can pay for it (not sure how viable this is though).