Pay order with card

POST/payment/zibapay/card/:referenceAPI

Authentication:Bearer token•Authorization: Bearer <token>(Bearer token for server-to-server API calls)

Security requirement: 403 CSRF Protection

Direct server-to-server calls authenticated via Bearer tokens do not require CSRF headers. If you instead invoke mutation endpoints from a web browser using cookie-based sessions, you must include the following header:

X-Requested-With: XMLHttpRequest

Request Parameters

Field	Type	Required	Description
`reference`	string	Required	transactionReferenceId from the collect response, or the order reference.

import axios from "axios";

const url = "https://payment-service-mh2d.onrender.com/api/payment/zibapay/card/:reference";

const headers = {
    Authorization: `Bearer ${process.env.ZIBA_TOKEN}`,
    "Content-Type": "application/json",
};

const payload = {
  "card": {
    "cardnumber": "4111111111111111",
    "expirymonth": "12",
    "expiryyear": "2028",
    "cvv": "123"
  },
  "country": "NG",
  "paymentoption": "card"
};

try {
  const response = await axios.post(url, payload, {
    headers,
    timeout: 15000,
  });
  console.log("Success:", response.status, response.data);
} catch (error) {
  console.error("Request failed:", error.response?.data || error.message);
}

Auth guide

Response fields

Field	Type	Presence	Description
`status`	string	Always returned	Payment status: COMPLETED, PENDING, or FAILED.
`reference`	string	Always returned	Order reference identifier.
`transactionId`	string	Always returned	TransactPay transaction identifier.
`amount`	number	Always returned	Amount charged.
`currency`	string	Always returned	Currency charged.
`redirectUrl`	string	Optional	Provider return URL when the checkout flow supplies one. 3-D Secure is not confirmed.
`message`	string	Optional	Gateway status or confirmation message.

Status codes

HTTP Status	Meaning
200	Card payment processed.
401	No merchant session.

Notes

HTTP 200 returns the provider payment confirmation payload. Illustrative example.

POST/payment/zibapay/card/:referenceAPI

Authentication:Bearer token•Authorization: Bearer <token>(Bearer token for server-to-server API calls)

Security requirement: 403 CSRF Protection

Auth guide →

X-Requested-With: XMLHttpRequest

Request Parameters

Field	Type	Required	Description
`reference`	string	Required	transactionReferenceId from the collect response, or the order reference.

import axios from "axios";

const url = "https://payment-service-mh2d.onrender.com/api/payment/zibapay/card/:reference";

const headers = {
    Authorization: `Bearer ${process.env.ZIBA_TOKEN}`,
    "Content-Type": "application/json",
};

const payload = {
  "card": {
    "cardnumber": "4111111111111111",
    "expirymonth": "12",
    "expiryyear": "2028",
    "cvv": "123"
  },
  "country": "NG",
  "paymentoption": "card"
};

try {
  const response = await axios.post(url, payload, {
    headers,
    timeout: 15000,
  });
  console.log("Success:", response.status, response.data);
} catch (error) {
  console.error("Request failed:", error.response?.data || error.message);
}

Auth guide

Response fields

Field	Type	Presence	Description
`status`	string	Always returned	Payment status: COMPLETED, PENDING, or FAILED.
`reference`	string	Always returned	Order reference identifier.
`transactionId`	string	Always returned	TransactPay transaction identifier.
`amount`	number	Always returned	Amount charged.
`currency`	string	Always returned	Currency charged.
`redirectUrl`	string	Optional	Provider return URL when the checkout flow supplies one. 3-D Secure is not confirmed.
`message`	string	Optional	Gateway status or confirmation message.

Status codes

HTTP Status	Meaning
200	Card payment processed.
401	No merchant session.

Notes

HTTP 200 returns the provider payment confirmation payload. Illustrative example.

Request Parameters

Response fields

Status codes

Notes

Related

Pay order with card

Request Parameters

Response fields

Status codes

Notes

Related