Card rail

Clear a card payment (any issuer)

POST/issuing/:wid/generic/clear

capture, refund or closed. A capture that could not be recorded is answered 503 so the issuer retries.

#Authentication

Issuer signature

No bearer credential: the caller proves itself by signing the raw request body. Anything that does not verify is refused (or, on the card rail, declined) before the body is read.

The immiscible-signature: t=<unix seconds>,v1=<hex> header: an HMAC-SHA256 of <t>.<raw body> with the workspace's issuer secret. Five minute window.

#Path parameters

widstringrequired

Workspace id

Request

curl -X POST "https://immiscible.fly.dev/issuing/$IMMISCIBLE_WORKSPACE/generic/clear" \
  -H "immiscible-signature: $SIGNATURE" \
  -H "content-type: application/json" \
  -d '{
    "kind": "capture",
    "authRef": "auth_881",
    "cardRef": "card_19",
    "amount": 4200,
    "currency": "GBP",
    "eventId": "evt_78"
  }'

// signature: computed over the raw body, see the authentication note above
const res = await fetch('https://immiscible.fly.dev/issuing/$IMMISCIBLE_WORKSPACE/generic/clear', {
  method: 'POST',
  headers: {
    'immiscible-signature': signature,
    'content-type': 'application/json',
  },
  body: JSON.stringify({
    kind: 'capture',
    authRef: 'auth_881',
    cardRef: 'card_19',
    amount: 4200,
    currency: 'GBP',
    eventId: 'evt_78',
  }),
});
const data = await res.json();
console.log(res.status, data);

import requests

# signature: computed over the raw body, see the authentication note above
res = requests.post(
    "https://immiscible.fly.dev/issuing/$IMMISCIBLE_WORKSPACE/generic/clear",
    headers={
        "immiscible-signature": signature,
        "content-type": "application/json",
    },
    json={
        "kind": "capture",
        "authRef": "auth_881",
        "cardRef": "card_19",
        "amount": 4200,
        "currency": "GBP",
        "eventId": "evt_78",
    },
)
print(res.status_code, res.json())