public
POST /v1/pay/invoices/{token}/confirm
The payer entered a card — record it and take the money. Unauthenticated.
身份验证
此端点是公开的。它不需要任何凭据或组织——这是我们自己的营销网站和 AI 问答引擎所读取的内容。
此端点不需要组织 ID。您的密钥已用于识别其所属的组织,且响应范围也仅限于该组织。
免费试用
将尖括号中的内容替换为您自己的值,并将键占位符替换为您仪表板中的一个键。
curl -X POST https://api.zinndigital.com/v1/pay/invoices/{token}/confirm \
-H "Content-Type: application/json" \
-d '{ "setup_intent_id": <string> }'已登录?您仪表板中的 API 控制台会自动填入您真实的组织 ID 和您自己的密钥,并针对实时 API 运行请求,以便您查看实际的响应。 在 API 控制台中打开此端点
详细信息
The second half of a two-step that cannot be collapsed into one. A payer with no card on file gets a SetupIntent from /checkout, confirms it in the browser, and lands here; this records the mandate and then charges the order. Charging on the first call instead would put a failed payment on the order — this platform classifies a mandate-less charge as nothing was presented — and the capture webhook refuses to settle one of those, so the money would be taken and never recorded. setup_intent_id is an id and not a credential. The mandate behind it is re-read from the gateway and refused unless the gateway itself says it belongs to this invoice's payer, so holding one pay link cannot attach a stranger's saved card.
参数
| 名称 | 类型 | 必填 | 内容简介 |
|---|---|---|---|
token (path) | string | 是 | — |
请求正文
| 名称 | 类型 | 必填 | 内容简介 |
|---|---|---|---|
setup_intent_id | string | 是 | — |
响应
| 名称 | 类型 | 必填 | 内容简介 |
|---|---|---|---|
status | string | 是 | — |
settled | boolean | 是 | — |
amount_minor | integer | 是 | — |
currency | string | 是 | — |
client_token | string | 否 | A card intent's client secret, for the browser SDK. It authorises confirming this one intent and nothing else. |
redirect_url | string | 否 | An approval page to send the payer to (PayPal, a crypto invoice). |
action_kind | string | 否 | setup means no card is on file and client_token is a SetupIntent secret — confirm it, then call /confirm. Anything else is a live charge's own action. |
setup_intent_id | string | 否 | The SetupIntent the card form is mounted against, echoed back for the /confirm call. An id, not a secret: the server re-reads it from the gateway and refuses it unless the… |
此端点可能返回的错误
404 · 409 · 429