Capture the pre-authorization
Capture the pre-authorization
If your merchant doesn’t capture a pre-authorization, it expires and the issuing bank releases the hold on the customer’s card.
To capture the pre-authorization, you must use our API.
Before you begin
Bearer tokens
Use our Identity Service to generate a Bearer token to include in the header of your requests. To generate your Bearer token, complete the following steps:
- Include your API key in the x-api-key parameter in the header of a POST request.
- Send your request to https://identity.payroc.com/authorize.
Note: You need to generate a new Bearer token before the previous Bearer token expires.
Example request
Example response
If your request is successful, we return a response that contains your Bearer token, information about its scope, and when it expires.
Headers
To create the header of each POST request, you must include the following parameters:
- Content-Type: Include application/json as the value for this parameter.
- Authorization: Include your Bearer token in this parameter.
- Idempotency-Key: Include a UUID v4 to make the request idempotent.
Errors
If your request is unsuccessful, we return an error. For more information about errors, see Errors.
Send a POST request to capture the pre-authorization
To capture the pre-authorization, you need the UNIQUEREF that we returned to the merchant’s receipt page. Send the UNIQUEREF in the paymentId path parameter in a POST request to our Payments endpoint.
Depending on the amount you want to capture:
- Capture the full amount of the pre-authorization - Don’t send a value for the amount parameter in your request.
- Capture less than the amount of the pre-authorization - Send a value for the amount parameter in your request.
- Capture more than the amount of the pre-authorization - Adjust the pre-authorization before you capture it. For more information about adjusting a pre-authorization, go to Adjust Payment.
Request parameters
To create the body of your request, use the following parameters:
Example request
Response fields
If your request is successful, we capture the pre-authorization and return a response. The response contains the following fields: