Skip to content
PayplugPayplug Elements

A later debit concluded

POST

Sent to your notification URL once a debit you asked for on a registered card (POST /api/sessions/{sessionId}/debit) has its verdict: taken, or refused. Tell your customer: the platform does not.

Authorizations

Section titled “Authorizations”

Request Bodyrequired

Section titled “Request Bodyrequired”
Media typeapplication/json

The verdict of a later debit you asked for on a registered card.

object
event
required
string
Allowed value: debit
notificationId
required

Stable across retries: deduplicate on it.

string
orderId
required

Your own order reference.

string
extraData

The extraData you gave THIS debit, echoed as given — absent if you gave none.

string
sessionId
required

The session whose card was debited.

string format: uuid
attemptId
required

The tranche that registered the card.

string format: uuid
method
required

The payment method archetype.

string
Allowed values: card applepay wero paypal oney ancv
cardScheme

The card network this tranche ran on — on a co-badged card, the one the cardholder chose. Card tranches only; an absence means the PSP named none we could place, never that there was none.

string
Allowed values: cb visa mastercard amex maestro diners discover jcb china_union_pay
cardCode

The card as the PSP masked it: its first six and last four digits, the rest X. Card tranches only, and only when the PSP gave it — never a full number.

string
cardCountry

The country of the card’s issuer, ISO 3166 alpha-2 — when the PSP gave it.

string
transactionId
required

The debit itself — what POST /api/sessions/{sessionId}/debit answered.

string format: uuid
status
required

Whether the money was taken. failed: nothing was debited, and the amount counts no longer.

string
Allowed values: succeeded failed
amount
required

The debited amount.

object
amount
required

Amount in the MINOR unit of the currency — 1000_00 is one thousand euros, never 1000.

integer
currency
required

ISO 4217 code, uppercase. One currency per session.

string
/^[A-Z]{3}$/
provider
required

Which PSP ran it.

string
providerRef

The PSP’s own reference for the debit.

string
statusCode

The PSP’s code for its verdict.

string
statusMessage

The PSP’s words for its verdict.

string
Example
{
  "event": "debit",
  "notificationId": "019f18f1-cbf4-762f-bd94-776f523c9ffb:019f2a10-5c21-7a8e-9d3f-1b2c3d4e5f60",
  "orderId": "EP-123456",
  "extraData": "retenue-EP-123456-01",
  "sessionId": "019f18f1-cbf4-762f-bd94-776f523c9ffb",
  "attemptId": "019f18f2-6ceb-729c-98b4-d60271a718e0",
  "method": "card",
  "cardScheme": "visa",
  "cardCode": "497010XXXXXX0007",
  "cardCountry": "FR",
  "transactionId": "019f2a10-5c21-7a8e-9d3f-1b2c3d4e5f60",
  "status": "succeeded",
  "amount": {
    "amount": 8000,
    "currency": "EUR"
  },
  "provider": "dalenys",
  "providerRef": "A180702211",
  "statusCode": "0000",
  "statusMessage": "Successful Operation"
}

Responses

Section titled “ Responses ”

200

Section titled “200”

Received. Answer 200 with the body OK in text/plain: any other answer — another status, another content type, another body — is retried at t+1 second, t+1 minute, then t+5 minutes.

Media typetext/plain
string
Allowed value: OK