Apple Pay for the Web Merchant Validation

I tried this and it works. The php script fails for me with the same error as "OSSStatus -61". Seems the .pem file is not supported now and you have to use .p12 file. Since i dont have a password for my certificate so i v used --pass ""

curl --data '{"merchantIdentifier":"merchant.com.xxxxxxx","domainName":"mystore.com","displayName":"MyStore"}' --cert /Library/WebServer/Documents/ApplePayJS/MerchIdentity.p12 --pass "" https://apple-pay-gateway.apple.com/paymentservices/startSession -v

Thanks

Gurvinder

Ok, good that you got it working, but I'd try to avoid any changes just to get it working when serverd from your Mac's local webserver as this won't be the case when you deploy it for reals - that's likely to be on a CENTOS server or similar, which will more than likely be using OpenSSL.

Hi,

I am following your ApplePayJS project on Github.I am able to get all the points,Bit confused about this below point.

have you got a Merchant (Payment processing ) certificate from apple? (you may need this signed with your payment processing partner's csr rather than your own - e.g. Stripe.com )

My payment processing partner is cybersource so i got a CSR from cybersource .I can generate the payment processing cert from apple but where it will be used.We are sending the encrypted response to cybersource so they would be decrypting the payment data.Are i need to send the cerificate to cybersource or just create the cert and leave it .

Please help.

Thanks.

hi.

So. there's two encrypted conversations going on.

1. between you and apple, asking for a 5 minute merchant session token. proving to apple that you're a pre-approved applepay merchant
2. between the customer and apple. apple turns the credit card token on the customer's iphone into a token encrypted with the payment processing certificate you created with cybersource's CSR. Cybersource have the private key (they generated it at the same time they generated the CSR (which is a combinaiton of a public key and an identifier)

Looking on cybersource's website, looks like they don't need the certificate apple generated with their CSR. Other payment processors ask for it (e.g. stripe.com)

Hi evermeire1,

Apple developer site gives error when I attemp to generate this certificate using an ECC(256) csr. It says it should be RSA(2048).

How did you manage to generate your ECC certificate?

Thanks

Hi I am getting payment not completed error message..!

Where do I need to attach the payment processing certificate. I created aaplepay.cert using CSR.!

But I don't know where I should attach this and how??

@jarretth What does OID stand for? I'm trying to find this in Keychain Access but I don't see anything labeled this?

Nevermind. This is the Organizations Id. Which is basically whatever you put in there (e.g. merchant.whatever.com)

evermeire1

Your post was what saved my life along with a post from stack overflow. I have been on this for a week till I found this.

For any one who might be using coldFusion, which might be just me I would constantly get 503 Service unavailable. Here is what worked eventually

<cfhttp

url="#VARIABLES.serverEndPoint#"

method="post"

result="result"

charset="utf-8"

clientCert ="/var/www/html/ler/pathto.p12"

clientCertPassword="#password#"

>

<cfhttpparam

name="data"

type="XML"

value='{"merchantIdentifier":"#merchantID#", "domainName":"#DomainName#", "displayName":"Application Name"}'

/>

</cfhttp>

Hi,

I am trying to validate merchant through node express.js . Below is my code

app.get('/merchant-session/new', function (req, res) {
  var uri = req.query.validationURL || 'https://apple-pay-gateway-cert.apple.com/paymentservices/startSession';
  var options = {
  uri: uri,
  json: {
  merchantIdentifier: "merchant...",
  displayName: "....",
  domainName: "fe-uat2-..."
  },

  agentOptions: {
  cert: cert,
  key: cert
  }
  };

  request.post(options, function (error, response, body) {
  if (body) {
  // Apple returns a payload with `displayName`, but passing this
  // to `completeMerchantValidation` causes it to error.
  delete body.displayName;
  }
  console.log('body =>>>>>', body);
  console.log('respnse =>>>>>', response)
  res.send(body);
  }, (error) => {
  console.error(`error =>>>>`, error);
  });
});

Same issue. All I had to do was create the payment processing certificate in the Apple Dev portal even though I'm not using it yet. Issue was really obscure but your comment saved me.

This fixed error "Payment Services Exception merchantId=... not registered for service"

HTTP/1.1 417 Expectation Failed

@NorfolkMustard

How can I get the "encrypted, tokenised credit card number" and decrypt it to get the credit card number and process the payment myself ?

I am struggling to get the credit card number from the response object. I managed to get customer name, card brand, type and last 4 digits of card number. But cannot get the full card number. (see my question https://forums.developer.apple.com/thread/128712).

This is what I get from the JS at the end: https://drive.google.com/file/d/1a33fsO77xGNxUEC2qKQFYbKpWK1qzo87/view

But how can I get the credit card number out of that ?

Hi. Please explain what is the <certFile>:<certPassword>