Immediate capture

DocsCurrent

Use this integration to capture money from your buyers and move it to your sellers instantly.

Know before you code

Required

To use this integration you must:

Be an approved partner.
Onboard sellers before you begin this integration.
Have an access token.
Inform your sellers of PayPal's Seller Protection policy, so they are aware of use cases that invalidate that protection, such as shipping to an address other than the one in the transaction confirmation.

Note: This server-side integration uses the Orders REST API for this server-side integration. You’ll need to set intent to capture in the create order call for this feature to work.

1. Generate PayPal-Auth-Assertion header

You’ll need to Pass the PayPal-Auth-Assertionheader with the standard Content-Type, Authorization, and PayPal-Request-ID headers. In client-side JavaScript, the value of the PayPal-Auth-Assertion header can be generated as follows:

1// client-side JavaScript
2
3function encodeObjectToBase64(object) {
4  const objectString = JSON.stringify(object);
5  return window.btoa(objectString);
6}
7
8const clientId = "CLIENT-ID";
9const sellerPayerId = "SELLER-PAYER-ID"; // preferred
10// const sellerEmail = "SELLER-ACCOUNT-EMAIL"; // use instead of payer-id if required
11
12const header = {
13  alg: "none"
14};
15const encodedHeader = encodeObjectToBase64(header);
16
17const payload = {
18  iss: clientId,
19  payer_id: sellerPayerId
20  // email: sellerEmail
21};
22const encodedPayload = encodeObjectToBase64(payload);
23
24const jwt = `${encodedHeader}.${encodedPayload}.`; // json web token
25console.log(`Paypal-Auth-Assertion=${jwt}`);

Note: The token contains two period (.) characters, which are required according to the JSON web token structure.

Modify the code

Use the client ID of the platform or marketplace from the PayPal Developer dashboard for clientId.
In the given example, the sellerPayerId is the payer ID of the receiving seller's PayPal account. You can also use email instead of payer_id and supply the email address of the seller's PayPal account.

Example functions to generate the PayPal-Auth-Assertion header in other programming environments:

Node.js

1// Node.js
2
3          function encodeObjectToBase64(object) {
4            const objectString = JSON.stringify(object);
5            return Buffer
6              .from(objectString)
7              .toString("base64");
8          }
9
10          const clientId = "CLIENT-ID";
11          const sellerPayerId = "SELLER-PAYER-ID"; // preferred
12          // const sellerEmail = "SELLER-ACCOUNT-EMAIL"; // use instead if payer-id unknown
13
14          const header = {
15            alg: "none"
16          };
17          const encodedHeader = encodeObjectToBase64(header);
18
19          const payload = {
20            iss: clientId,
21            payer_id: sellerPayerId
22            // email: sellerEmail
23          };
24          const encodedPayload = encodeObjectToBase64(payload);
25
26          const jwt = `${encodedHeader}.${encodedPayload}.`; // json web token
27          console.log(`Paypal-Auth-Assertion=${jwt}`);

Java

1// Java
2
3import org.apache.commons.codec.binary.Base64;
4
5public class Base64Encode {
6
7  public static void main(String[] args) {
8    String clientId = "CLIENT-ID";
9    String sellerPayerId = "SELLER-PAYER-ID"; // preferred
10    // String sellerEmail = "SELLER-ACCOUNT-EMAIL"; // use instead if payer-id unknown
11
12    String header = "{\"alg\":\"none\"}";
13    String payload =
14      "{\"iss\":\"" + clientId + "\",\"payer_id\":\"" + sellerPayerId + "\"}";
15    // "{"iss":"" + clientId + "","email":"" + sellerEmail + ""}";
16
17    byte[] encodedHeader = Base64.encodeBase64(header.getBytes());
18    byte[] encodedPayload = Base64.encodeBase64(payload.getBytes());
19
20    String jwt = new String(encodedHeader) +
21      "." +
22      new String(encodedPayload) +
23      "."; // json web token
24    System.out.println("Paypal-Auth-Assertion=" + jwt);
25  }
26}

2. Create order

You must first create an order and capture funds. To create an order, copy the following code and modify as follows:

Replace BN-CODE with your PayPal attribution ID
Replace PAYPAL-AUTH-ASSERTION with your PayPal auth assertion generated from Step 1.
Use the purchase_units/payee object to specify the end receiver of the funds.
Set the purchase_units/payment_instruction/disbursement_mode field to `DELAYED`.
Use the purchase_units/payment_instruction/platform_fees array to specify fees for the order. You must onboard your seller with the PARTNER_FEE feature to use this array.

Sample request - cURL

1curl -v -X POST https://api-m.sandbox.paypal.com/v2/checkout/orders
2-H 'Content-Type: application/json' -H 'Authorization: Bearer ACCESS-TOKEN'
3-H 'PayPal-Partner-Attribution-Id: BN-CODE'
4-H 'PayPal-Auth-Assertion: PAYPAL-AUTH-ASSERTION'
5-d '{
6"intent": "CAPTURE",
7"purchase_units": [
8  {
9    "amount": {
10      "currency_code": "USD",
11      "value": "100.00"
12      },
13        "payment_instruction": {
14          "disbursement_mode": "INSTANT",
15        "platform_fees": [
16          {
17            "amount": {
18              "currency_code": "USD",
19              "value": "25.00"
20              }
21          }
22        ]
23      }
24    }
25  ]
26}

Sample request - Node

1var express = require('express');
2var request = require('request');
3express().post('/my-server/create-order', function(req, res) {
4	request.post('https://api-m.sandbox.paypal.com/v2/checkout/orders', {
5		headers: {
6			"Content-Type": "application/json",
7			"Authorization": "Bearer ACCESS-TOKEN",
8			"PayPal-Partner-Attribution-Id": "BN-CODE",
9			"PayPal-Auth-Assertion": "PAYPAL-AUTH-ASSERTION"
10		},
11		body: {
12			"intent": "CAPTURE",
13			"purchase_units": [{
14				"amount": {
15					"currency_code": "USD",
16					"value": "100.00"
17				},
18				"payment_instruction": {
19					"disbursement_mode": "INSTANT",
20					"platform_fees": [{
21						"amount": {
22							"currency_code": "USD",
23							"value": "25.00"
24						}
25					}]
26				}
27			}],
28		},
29		json: true
30	}, function(err, response, body) {
31		if (err) {
32			console.error(err);
33			return res.sendStatus(500);
34		}
35		res.json({
36			id: body.id
37		});
38	});
39});

3. Capture order

After your buyer approves the order, call capture order to capture the buyer’s funds.

Copy the following code and modify as follows:

Replace ACCESS-TOKEN with your access token.
Replace BN-CODE with your PayPal partner attribution ID.
Replace PAYPAL-AUTH-ASSERTION with your PayPal auth assertion generated from Step 1.

Sample request - cURL

1curl -v -k -X POST https://api-m.paypal.com/v2/checkout/orders/5O190127TN364715T/capture
2-H 'Content-Type: application/json'
3-H 'Authorization: Bearer ACCESS-TOKEN'
4-H 'PayPal-Partner-Attribution-Id: BN-CODE'
5-H 'PayPal-Auth-Assertion: PAYPAL-AUTH-ASSERTION'
6-d '{}'

Sample request - Node

1var express = require('express');
2var request = require('request');
3express().post('/my-server/handle-approve/:id', function(req, res) {
4	var OrderID = req.params.id;
5	request.post('https://api-m.sandbox.paypal.com/v2/checkout/orders/' + OrderID + '/capture', {
6		headers: {
7			"Content-Type": "application/json",
8			"Authorization": "Bearer ACCESS-TOKEN",
9			"PayPal-Partner-Attribution-Id": "BN-CODE",
10			"PayPal-Auth-Assertion": "PAYPAL-AUTH-ASSERTION"
11		}
12	}, function(err, response, body) {
13		if (err) {
14			console.error(err);
15			return res.sendStatus(500);
16		}
17		res.json({
18			status: 'success'
19		});
20	});
21});

Note: Note: Orders cannot be captured until the status of the order is set to APPROVED. The order status is set to APPROVED when the buyer successfully completes the checkout flow.

4. Show order details

To see your order details, pass the order ID as a path parameter in a show order details call.

Copy the following code and modify as follows:

Replace ACCESS-TOKEN with your access token.
Replace BN-CODE with your PayPal partner attribution ID.
Replace PAYPAL-AUTH-ASSERTION with your PayPal auth assertion generated from Step 1.

Sample request - cURL

1curl -v -X GET https://api-m.sandbox.paypal.com/v2/checkout/orders/5O190127TN364715T
2-H "Content-Type: application/json"
3-H 'Authorization: Bearer ACCESS-TOKEN'
4-H 'PayPal-Partner-Attribution-Id: BN-CODE'
5-H 'PayPal-Auth-Assertion: PAYPAL-AUTH-ASSERTION'

Sample request - Node

1var http = require("https");
2var options = {
3	"method": "GET",
4	"hostname": "api-m.sandbox.paypal.com",
5	"port": null,
6	"path": "/v2/checkout/orders/5O190127TN364715T",
7	"headers": {
8		"Content-Type": "application/json",
9		"Authorization": "Bearer ACCESS-TOKEN",
10		"PayPal-Partner-Attribution-Id": "BN-CODE",
11		"PayPal-Auth-Assertion": "PAYPAL-AUTH-ASSERTION"
12	}
13};
14var req = http.request(options, function(res) {
15	var chunks = [];
16	res.on("data", function(chunk) {
17		chunks.push(chunk);
18	});
19	res.on("end", function() {
20		var body = Buffer.concat(chunks);
21		console.log(body.toString());
22	});
23});
24req.end();

Next steps

Recommended

Integration Checklist

Go through the integration checklist before you go live.