How to Integrate Lovable with Sage Pay (Opayo)

1import { serve } from "https://deno.land/std@0.168.0/http/server.ts";
2
3const INTEGRATION_KEY = Deno.env.get("OPAYO_INTEGRATION_KEY") ?? "";
4const INTEGRATION_PASSWORD = Deno.env.get("OPAYO_INTEGRATION_PASSWORD") ?? "";
5const VENDOR_NAME = Deno.env.get("OPAYO_VENDOR_NAME") ?? "";
6const ENVIRONMENT = Deno.env.get("OPAYO_ENVIRONMENT") ?? "test";
7
8const BASE_URL = ENVIRONMENT === "live"
9  ? "https://pi.sagepay.com/api/v1"
10  : "https://pi-test.sagepay.com/api/v1";
11
12const corsHeaders = {
13  "Access-Control-Allow-Origin": "*",
14  "Access-Control-Allow-Headers": "authorization, x-client-info, apikey, content-type",
15};
16
17serve(async (req) => {
18  if (req.method === "OPTIONS") {
19    return new Response("ok", { headers: corsHeaders });
20  }
21
22  try {
23    const authString = btoa(`${INTEGRATION_KEY}:${INTEGRATION_PASSWORD}`);
24
25    const res = await fetch(`${BASE_URL}/merchant-session-keys`, {
26      method: "POST",
27      headers: {
28        "Authorization": `Basic ${authString}`,
29        "Content-Type": "application/json",
30      },
31      body: JSON.stringify({ vendorName: VENDOR_NAME }),
32    });
33
34    if (!res.ok) {
35      const err = await res.text();
36      throw new Error(`Opayo error: ${res.status} ${err}`);
37    }
38
39    const data = await res.json();
40
41    return new Response(
42      JSON.stringify({
43        merchantSessionKey: data.merchantSessionKey,
44        expiry: data.expiry,
45      }),
46      { headers: { ...corsHeaders, "Content-Type": "application/json" } }
47    );
48  } catch (e) {
49    return new Response(
50      JSON.stringify({ error: (e as Error).message }),
51      { status: 500, headers: { ...corsHeaders, "Content-Type": "application/json" } }
52    );
53  }
54});

1import { serve } from "https://deno.land/std@0.168.0/http/server.ts";
2import { createClient } from "https://esm.sh/@supabase/supabase-js@2";
3
4const INTEGRATION_KEY = Deno.env.get("OPAYO_INTEGRATION_KEY") ?? "";
5const INTEGRATION_PASSWORD = Deno.env.get("OPAYO_INTEGRATION_PASSWORD") ?? "";
6const VENDOR_NAME = Deno.env.get("OPAYO_VENDOR_NAME") ?? "";
7const ENVIRONMENT = Deno.env.get("OPAYO_ENVIRONMENT") ?? "test";
8const SUPABASE_URL = Deno.env.get("SUPABASE_URL") ?? "";
9const SUPABASE_SERVICE_ROLE_KEY = Deno.env.get("SUPABASE_SERVICE_ROLE_KEY") ?? "";
10
11const BASE_URL = ENVIRONMENT === "live"
12  ? "https://pi.sagepay.com/api/v1"
13  : "https://pi-test.sagepay.com/api/v1";
14
15const corsHeaders = {
16  "Access-Control-Allow-Origin": "*",
17  "Access-Control-Allow-Headers": "authorization, x-client-info, apikey, content-type",
18};
19
20serve(async (req) => {
21  if (req.method === "OPTIONS") {
22    return new Response("ok", { headers: corsHeaders });
23  }
24
25  try {
26    const { cardIdentifier, merchantSessionKey, amountInPennies, vendorTxCode, billingAddress } = await req.json();
27    const authString = btoa(`${INTEGRATION_KEY}:${INTEGRATION_PASSWORD}`);
28
29    const payload = {
30      transactionType: "Payment",
31      paymentMethod: {
32        card: {
33          merchantSessionKey,
34          cardIdentifier,
35          save: false,
36        },
37      },
38      vendorTxCode,
39      amount: amountInPennies,
40      currency: "GBP",
41      description: "Order payment",
42      apply3DSecure: "UseMSPSetting",
43      customerFirstName: billingAddress?.firstName ?? "Customer",
44      customerLastName: billingAddress?.lastName ?? "Name",
45      billingAddress: billingAddress ?? {
46        address1: "88",
47        city: "London",
48        postalCode: "EC1A1BB",
49        country: "GB",
50      },
51      vendorName: VENDOR_NAME,
52    };
53
54    const res = await fetch(`${BASE_URL}/transactions`, {
55      method: "POST",
56      headers: { "Authorization": `Basic ${authString}`, "Content-Type": "application/json" },
57      body: JSON.stringify(payload),
58    });
59
60    const data = await res.json();
61
62    if (data.status === "Ok") {
63      const supabase = createClient(SUPABASE_URL, SUPABASE_SERVICE_ROLE_KEY);
64      await supabase.from("orders").update({ status: "paid", opayo_tx_id: data.transactionId }).eq("id", vendorTxCode);
65      return new Response(JSON.stringify({ success: true, transactionId: data.transactionId }), { headers: { ...corsHeaders, "Content-Type": "application/json" } });
66    } else if (data.status === "3DAuth") {
67      return new Response(JSON.stringify({ requires3DS: true, acsUrl: data.acsUrl, paReq: data.paReq, transactionId: data.transactionId }), { headers: { ...corsHeaders, "Content-Type": "application/json" } });
68    } else {
69      return new Response(JSON.stringify({ success: false, error: data.statusDetail ?? "Payment declined" }), { status: 400, headers: { ...corsHeaders, "Content-Type": "application/json" } });
70    }
71  } catch (e) {
72    return new Response(JSON.stringify({ error: (e as Error).message }), { status: 500, headers: { ...corsHeaders, "Content-Type": "application/json" } });
73  }
74});