node-barion

Helps manage e-payment transactions through the Barion Smart Gateway.

Table of contents

• Install

• Usage

• Documentation

  • Instantiate new Barion object
  • Start new payment
  • Get payment state
  • Finish pending reservation
  • Refund payment partially or completely
  • Capture a previously authorized payment
  • Cancel a previously authorized payment
  • Complete a formerly prepared and 3DS authenticated One-Click payment
  • Send money to a bank account
  • Get existing accounts of the user
  • Send money to a Barion user or email address
  • Download statement files
  • Handling errors
  • Secure vs. insecure mode

• Future improvements

• Contributions

• License

Install

To add node-barion to your project, run this command inside your workspace directory:

npm install node-barion --save

Usage

This simple example shows how to use node-barion:

// 1) Import the 'node-barion' module
const Barion = require('node-barion');

// 2) Instantiate a Barion object
let barion = new Barion({
    POSKey: '21ec20203aea4069a2dd08002b30',
    Environment: 'test'
});

// 3) Query the Barion API

// 3.a) using callback
barion.getPaymentState({ 
    PaymentId: '046a46b98838473684da452da7' 
}, function (err, data) {
    //handle the result
});

// 3.b) or using promise
barion.getPaymentState({
    PaymentId: '046a46b98838473684da452da7'
}).then(data => {
    //handle data
}).catch(err => {
    //handle error
});

Documentation

node-barion provides all the functionality of Barion API:

• start new payment, reservation or delayed capture
• get the state of an already started payment
• finish a pending reservation
• capture or cancel a previously authorized payment
• complete a formerly prepared One-Click payment
• refund a completed payment
• send money out of Barion via international bank transfer
• get existing accounts of the user
• send money to existing Barion account or email address
• download monthly or daily statements of your account.

IMPORTANT: node-barion is completely consistent with Barion Docs, so you can use exactly the same field names, that are specified in it. Reading the official Barion documentation is highly recommended before starting to use node-barion module.
IMPORTANT: Barion uses PascalCased field naming, but node-barion is case insensitive (this means that if Barion Docs mention a field name PaymentId, you can either use PaymentId, paymentId, paymentid or paymentID notation in your application, as node-barion converts these to the standard PaymentId name).

The signature for every instance method is (options, [callback]), where options is an object which contains the input parameters and callback is a function which processes the response.
If no callback is defined, the methods return a Promise, which resolves with data or rejects with error.

Instantiate new Barion object - Barion(options)

A Barion instance represents a merchant that accepts e-payment transactions through Barion.

In the constructor, you can define default values that can be overridden later in certain queries (except POSKey and Environment):

• POSKey: POSKey of the merchant (string). (required)

• Environment: Environment to use, 'test' or 'prod' (string). (optional, default: 'test')

  IMPORTANT: To use the production environment, you have to explicitly assign 'prod' to this field. Otherwise, the environment is set to 'test' by default.

• Secure: Indicates how node-barion should handle input objects before sending them to the Barion API. Read more (boolean). (optional, default: true)

• FundingSources: Array with the allowed funding sources (string[]). (optional, default: ['All'])

• GuestCheckOut: Indicates if guest checkout is enabled (boolean). (optional, default: true)

• Locale: Localization of Barion GUI (string). (optional, default: 'hu-HU')
  Allowed values are:

  • 'cs-CZ' (Czech)
  • 'de-DE' (German)
  • 'en-US' (English)
  • 'es-ES' (Spanish)
  • 'fr-FR' (French)
  • 'hu-HU' (Hungarian)
  • 'sk-SK' (Slovakian)
  • 'sl-SI' (Slovenian)

• Currency: The default currency to use (string). (optional, default: 'HUF')
  Allowed values are:

  • 'CZK' (Czech crown)
  • 'EUR' (Euro)
  • 'HUF' (Hungarian forint)
  • 'USD' (U.S. dollar)

Usage example

const Barion = require('node-barion');

const barion = new Barion({
    POSKey: '21ec20203aea4069a2dd08002b30',
    Environment: 'test',
    FundingSources: [ 'Balance' ],
    Locale: 'en-US'
});

Start new payment - barion.startPayment(options, [callback])

To create a new payment, call the startPayment function. [Barion Docs]

Parameters:

- Properties marked with this badge must be provided to comply with 3D Secure authentication. Provide as many attributes as you can to avoid 3DS challenge flow for your customers. If the merchant does not provide 3DS-related properties, that does not mean that the payment will fail. It means that the payer will have a higher chance of getting a challenge during payment.

• PaymentType: Type of the payment, 'Immediate' (classic), 'Reservation' or 'DelayedCapture' (read more) (string). (required)

• ReservationPeriod: Time window allowed by the shop to finalize the payment (string in 'd:hh:mm:ss' format). (required, if the payment type is reservation)

• DelayedCapturePeriod: Time window allowed by the shop to capture or cancel the payment (string in 'd:hh:mm:ss' format). (required, if the payment type is delayed capture)

• PaymentWindow: Time window allowed for the customer to complete the payment (string in 'd:hh:mm:ss' format). (optional, default: 30 minutes)

• GuestCheckOut: Indicates if guest checkout is enabled (boolean). (optional, because it is assigned in the constructor)

• InitiateRecurrence: Indicates that the shop would like to initialize a token payment (e.g. for subscription) (boolean). (optional)

• RecurrenceId: A string used to identify a given authorized payment (read more) (string). (optional)

• FundingSources: Array, that contains the allowed funding sources (string[]). (optional, because it is assigned in the constructor)

• PaymentRequestId: The unique identifier for the payment generated by the shop (string). (required)

• PayerHint: Email address of the customer. Barion use this to fill email field automatically in login form (string). (optional)

• CardHolderNameHint: Full name of the customer. Barion use this to prefill the payment form (string). (optional)

• RecurrenceType: Indiates the nature of the recurrence (RecurrenceType string). (optional, must be defined only when RecurrenceId is specified)

• TraceId: Identifies the nature of the token payment (string). (optional, must be defined when executing token payments)

• RedirectUrl: URL to redirect the user after the payment is completed (string). (required)

• CallbackUrl: URL that Barion should call, when the payment state changes (string). (required)

• Transactions: Array of transactions contained by the payment (PaymentTransaction[]). (required)

• OrderNumber: Order number generated by the shop (string). (optional)

• ShippingAddress: Address of the user (ShippingAddress). (optional)

• Locale: Localization of Barion GUI (string). (optional, because it is assigned in the constructor)

• Currency: The currency to use (string). (optional, because it is assigned in the constructor)

• PayerPhoneNumber: The mobile phone number of the payer (string in '36301234567' format, where 36 is the country code). (optional)

• PayerWorkPhoneNumber: The work phone number of the payer (string in '36301234567' format, where 36 is the country code). (optional)

• PayerHomeNumber: The home number of the payer (string in '36301234567' format, where 36 is the country code). (optional)

• BillingAddress: The billing address associated with the payment, if applicable (BillingAddress). (optional)

• PayerAccount: Information about the payer's account (PayerAccountInformation). (optional)

• PurchaseInformation: Information about the purchase (PurchaseInformation). (optional)

• ChallengePreference: The merchant's preference about the 3DS challenge (ChallengePreference string). (optional)

Output: Read at Barion Docs

Usage example

Example order data:

let orderPayment = {
    OrderNumber: 'O-2019-0001',
    PaymentRequestId: 'O-2019-0001-1',
    PaymentType: 'Immediate',
    Transactions: [
        {
            POSTransactionId: 'O-2019-0001',
            Payee: '[email protected]',
            Total: 210,
            Items: [
                {
                    Name: 'Egg',
                    Description: 'Child of chicken',
                    Quantity: 3,
                    Unit: 'pcs',
                    UnitPrice: 70,
                    ItemTotal: 210
                }    
            ]
        }
    ],
    ShippingAddress: {
        FullName: 'Andrew Jones',
        Zip: '1000',
        City: 'Budapest',
        Street: 'Kossuth Street 2.'
    },
    Currency: 'HUF',
    RedirectUrl: 'https://example.com/payment-result',
    CallbackUrl: 'https://example.com/api/barion/callback/',
};

With callback

Use the object, initialized above:

barion.startPayment(orderPayment, function (err, data) {
    //handle error / process data
});

With promise

Use the object, initialized above:

barion.startPayment(orderPayment).then(data => {
    //process data
}).catch(err => {
    //handle error
});

Get payment state - barion.getPaymentState(options, [callback])

To get the state of a payment, use getPaymentState function. [Barion Docs]

Parameter:

• PaymentId: ID of the payment in the Barion system (string). (required)

Output: Read at Barion Docs

Usage example

With callback

barion.getPaymentState({
    PaymentId: '15c1071df3ea4289996ead6ae17'
}, function (err, data) {
    //handle error / process data
});

With promise

barion.getPaymentState({
    PaymentId: '15c1071df3ea4289996ead6ae17'
}).then(data => {
    //process data
}).catch(err => {
    //handle error
});

Finish pending reservation - barion.finishReservation(options, [callback])

To finish a pending reservation, use the finishReservation function. [Barion Docs]

Parameters:

• PaymentId: ID of the payment in Barion system (string). (required)
• Transactions: Payment transactions to finish (TransactionToFinish[]). The array should only contain the initial payment transactions. (required)

Output: Read at Barion Docs

Usage example

With callback

barion.finishReservation({
    PaymentId: '15c1071df3ea4289996ead6ae17',
    Transactions: [
        {
            TransactionId: 'c9daac12c9154ce3a0c6a1a3',
            Total: 50
        }
    ]
}, function (err, data) {
    //handle error / process data
});

With promise

barion.finishReservation({
    PaymentId: '15c1071df3ea4289996ead6ae17',
    Transactions: [
        {
            TransactionId: 'c9daac12c9154ce3a0c6a1a3',
            Total: 50
        }
    ]
}).then(data => {
    //process data
}).catch(err => {
    //handle error
});

Capture a previously authorized payment - barion.captureAuthorizedPayment(options, [callback])

To capture (finish) a previously authorized payment, use the captureAuthorizedPayment function. [Barion Docs]

Parameters:

• PaymentId: The payment's ID in the Barion system (string). (required)
• Transactions: Payment transactions to capture (TransactionToFinish[]). (required)

Output: Read at Barion Docs

Usage example

With callback

barion.captureAuthorizedPayment({
    PaymentId: '15c1071df3ea4289996ead6ae17',
    Transactions: [
        {
            TransactionId: 'c9daac12c9154ce3a0c6a1a3',
            Total: 50
        }
    ]
}, function (err, data) {
    //handle error / process data
});

With promise

barion.captureAuthorizedPayment({
    PaymentId: '15c1071df3ea4289996ead6ae17',
    Transactions: [
        {
            TransactionId: 'c9daac12c9154ce3a0c6a1a3',
            Total: 50
        }
    ]
}).then(data => {
    //process data
}).catch(err => {
    //handle error
});

Cancel a previously authorized payment - barion.cancelAuthorizedPayment(options, [callback])

To cancel a previously authorized payment, use the cancelAuthorizedPayment function. [Barion Docs]

Parameters:

• PaymentId: The payment's ID in the Barion system (string). (required)

Output: Read at Barion Docs

Usage example

With callback

barion.cancelAuthorizedPayment({
    PaymentId: '15c1071df3ea4289996ead6ae17'
}, function (err, data) {
    //handle error / process data
});

With promise

barion.cancelAuthorizedPayment({
    PaymentId: '15c1071df3ea4289996ead6ae17'
}).then(data => {
    //process data
}).catch(err => {
    //handle error
});

Complete a formerly prepared and 3DS authenticated One-Click payment - barion.completePayment(options, [callback])

To complete a formerly prepared and 3DS authenticated payment in the Barion system, use the completePayment function. [Barion Docs]

Parameters:

• PaymentId: The payment's ID in the Barion system (string). (required)

Output: Read at Barion Docs

Usage example

With callback

barion.completePayment({
    PaymentId: '15c1071df3ea4289996ead6ae17'
}, function (err, data) {
    //handle error / process data
});

With promise

barion.completePayment({
    PaymentId: '15c1071df3ea4289996ead6ae17'
}).then(data => {
    //process data
}).catch(err => {
    //handle error
});

Refund payment partially or completely - barion.refundPayment(options, [callback])

To refund a completed payment, use the refundPayment function. [Barion Docs]

Parameters:

• PaymentId: ID of the payment in Barion system (string). (required)
• Transactions: Payment transactions to refund (TransactionToRefund[]). (required)

Output: Read at Barion Docs

Usage example

With callback

barion.refundPayment({
    PaymentId: '15c1071df3ea4289996ead6ae17',
    TransactionsToRefund: [
        {
            POSTransactionId: 'O-2019-0001',
            TransactionId: 'c9daac12c9154ce3a0c6a1a3',
            AmountToRefund: 50,
            Comment: 'Keep the change you filthy animal!'
        }
    ]
}, function (err, data) {
    //handle error / process data
});

With promise

barion.refundPayment({
    PaymentId: '15c1071df3ea4289996ead6ae17',
    TransactionsToRefund: [
        {
            POSTransactionId: 'O-2019-0001',
            TransactionId: 'c9daac12c9154ce3a0c6a1a3',
            AmountToRefund: 50,
            Comment: 'Sorry for the inconvenience.'
        }
    ]
}).then(data => {
    //process data
}).catch(err => {
    //handle error
});

Send money to a bank account - barion.bankTransfer(options, [callback])

To send money to a bank account internationally, call the bankTransfer function. [Barion Docs]

Parameters:

• UserName: Email address of the shop in the Barion system (string). (required)

• Password: Password of the shop in the Barion system (string). (required)

• Currency: The currency to use (string). (optional, because it is assigned in the constructor)
  Allowed values are:

  • 'CZK' (Czech crown)
  • 'EUR' (Euro)
  • 'HUF' (Hungarian forint)
  • 'USD' (U.S. dollar)

• Amount: Amount of the money to send (number). (required)

• RecipientName: Full name of the recipient (string). (required)

• BankAccount: The recipient's bank account (BankAccount). (required)

• Comment: Comment about the transfer (string). (optional)

Output: Read at Barion Docs

Usage example

With callback

barion.bankTransfer({
    UserName: '[email protected]',
    Password: 'someRlyStrongP4ss#!',
    Currency: 'HUF',
    Amount: 1,
    RecipientName: 'Example Company',
    BankAccount: {
        Country: 'HUN',
        Format: 'Giro',
        AccountNumber: '10032000-01076019'
    },
    Comment: 'Keep the change you filthy animal!'
}, function (err, data) {
    //handle error / process data
});

With promise

barion.bankTransfer({
    UserName: '[email protected]',
    Password: 'someRlyStrongP4ss#!',
    Currency: 'HUF',
    Amount: 1,
    RecipientName: 'Example Company',
    BankAccount: {
        Country: 'HUN',
        Format: 'Giro',
        AccountNumber: '10032000-01076019'
    },
    Comment: 'Keep the change you filthy animal!'
}).then(data => {
    //process data
}).catch(err => {
    //handle error
});

Get existing accounts of the user - barion.getAccounts(options, [callback])

To query the existing accounts of a user, call the getAccounts function. [Barion Docs]

Parameters:

• UserName: Email address of the user in the Barion system (string). (required)

• Password: Password of the user in the Barion system (string). (required)

Output: Read at Barion Docs

Usage example

With callback

barion.getAccounts({
    UserName: '[email protected]',
    Password: 'someRlyStrongP4ss#!'
}, function (err, data) {
    //handle error / process data
});

With promise

barion.getAccounts({
    UserName: '[email protected]',
    Password: 'someRlyStrongP4ss#!'
}).then(data => {
    //process data
}).catch(err => {
    //handle error
});

Send e-money to an email address - barion.emailTransfer(options, [callback])

To send money to a Barion user or to an email address, call the emailTransfer function. [Barion Docs]

Parameters:

• UserName: Email address of the user in the Barion system (string). (required)

• Password: Password of the user in the Barion system (string). (required)

• SourceAccountId: The identifier of the Barion wallet. Must be an account of the authenticating user. It can be determined using the getAccounts function (string). (required)

• Amount: The total amount to transfer (Money). (required)

• TargetEmail: The recipient's email address. If they are an active Barion user, they receive the money instantly. If the e-mail address is not registered in Barion, they must register in 7 days to claim the money (string). (required)

• Comment: Comment of the transfer (string). (optional)

Output: Read at Barion Docs

Usage example

With callback

barion.emailTransfer({
    UserName: '[email protected]',
    Password: 'someRlyStrongP4ss#!',
    SourceAccountId: 'bdf45c1d-bb98-4fee-bbf1-62411fb26b86',
    Amount: {
        Currency: 'HUF',
        Value: 50
    },
    TargetEmail: '[email protected]',
    Comment: 'Buy some milk please.'
}, function (err, data) {
    //handle error / process data
});

With promise

barion.emailTransfer({
    UserName: '[email protected]',
    Password: 'someRlyStrongP4ss#!',
    SourceAccountId: 'bdf45c1d-bb98-4fee-bbf1-62411fb26b86',
    Amount: {
        Currency: 'HUF',
        Value: 50
    },
    TargetEmail: '[email protected]',
    Comment: 'Buy some milk please.'
}).then(data => {
    //process data
}).catch(err => {
    //handle error
});

Download statement files - barion.downloadStatement(options, [callback])

To download monthly or daily statement files generated by the Barion system, call the downloadStatement function. [Barion Docs]

Parameters:

• UserName: Email address of the user in the Barion system (string). (required)

• Password: Password of the user in the Barion system (string). (required)

• Year: Year of statement (number). (required)

• Month: Month of statement (number). (required)

• Day: Day of statement. To get daily statement files, contact Barion from the Customer Center in your Barion wallet (number). (optional)

• Currency: The currency of the statement's account. (optional, because it is assigned in the constructor)
  Allowed values are:

  • 'CZK' (Czech crown)
  • 'EUR' (Euro)
  • 'HUF' (Hungarian forint)
  • 'USD' (U.S. dollar)

Output: Read at Barion Docs

• Type: A valid content type from the HTTP response of the Barion API (string).

• Buffer: A Buffer object with the file data (Buffer).

Usage example

With callback

barion.downloadStatement({
    UserName: '[email protected]',
    Password: 'someRlyStrongP4ss#!',
    Year: 2020,
    Month: 1
}, function (err, data) {
    //handle error / process data
});

With promise

barion.downloadStatement({
    UserName: '[email protected]',
    Password: 'someRlyStrongP4ss#!',
    Year: 2020,
    Month: 1
}).then(data => {
    //process data
}).catch(err => {
    //handle error
});

Handling errors

There are 3 main types of errors that can be thrown when you use the node-barion module:

• BarionError: Thrown when the Barion system responds with errors.

  This error has a name field, set to 'BarionError'.

  This error has an errors array which contains the returned errors. Every error has the following fields: Title, Description, ErrorCode, HappenedAt, AuthData, EndPoint (read more).
  

  NOTE: The errors array is set to [] (empty array), when the Barion API responds with:

  • generic error (such as {'Message': 'An error has occurred.'}),
  • invalid JSON (such as an HTML maintenance page)

• BarionModelError: Thrown when the prevalidation of the request is failed. node-barion can throw this type of error only if Secure option is set to true on instantiation.

  NOTE: Secure option is set to true by default.

  This error has a name field, set to 'BarionModelError'.

  This error has an errors array, which contains the returned errors as strings.

• Other errors: Common Javascript errors, such as Error or TypeError (thrown e.g. when network error occurred).

Usage example

You are able to distinguish types of errors based on their names, but it is not required. Instead, you can simply log them without any condition checking.

With callback

barion.startPayment(someObj, function (err, data) {
    if (err) {
        if (err.name === 'BarionModelError') {
            //prevalidation of request object found errors
            return console.log(err.errors);
        } else if (err.name === 'BarionError') {
            //Barion API responded with error
            return console.log(err.errors);
        } else {
            //other error occured
            return console.log(err);
        }
    }

    // if no error occured, process data
});

With promise

barion.startPayment(someObj)
    .then(data => {
        //process data
    })
    .catch(err => {
        if (err.name === 'BarionModelError') {
            //prevalidation of request object found errors
            console.log(err.errors);
        } else if (err.name === 'BarionError') {
            //Barion API responded with error
            console.log(err.errors);
        } else {
            //other error occured
            console.log(err);
        }
    });

Secure vs. insecure mode

The node-barion module can work in 2 different modes that can be set with the Secure (boolean) field when instantiating a new Barion object. The field's default value is true (Secure Mode).

When the Secure field's value is true, the module works in "Secure Mode". In this mode, the module does some checks and transformations (if necessary and possible) on the given object before sends it to the Barion API. If it finds any error, that cannot be fixed automatically, it throws BarionModelError.

In Secure Mode, the following steps are applied to all input objects:

1. Sanitizing the object:

• The module strips any unknown fields from the input object (just the documented fields are transmitted to the Barion API).

• The module converts every field names to PascalCase (as you can see in the Barion Docs).

• If there are ambiguous field names (e.g. paymentid and PaymentId too), the module throws an error.

1. Validating the object: The module runs syntactic and semantic checks on the given values (e.g. checks if PaymentId is a string and a valid GUID). If something is wrong, it throws BarionModelError.

2. Building the request object: The module produces the object that will be transmitted to the Barion API. It merges the Barion instance's default values with values in the input object. Fields in the given object are override default values (except the POSKey field).

3. Sending the request to the Barion API: If building the request object was successful, the module sends the request to the Barion API, and returns its response. If there are username and password in the input object, the module uses Basic Authentication, and does not transmit credentials as query parameters.

When the Secure field's value is false, the module works in "Insecure Mode". This means that the module does not run any checks and transformations on the input object. In this mode, the module merges the Barion instance's default values with values in the input object and sends it to the Barion API "as is". As in this mode, node-barion does not know any semantic meaning of the input object's fields, it can send credentials (e.g. username and password) as query parameters to the Barion API. This is not secure, because these parameters can be logged by servers (e.g. proxies and firewalls) in plain text, even if HTTPS connection is used.

Future improvements

• Make available to set optional fields as defaults (e.g. callbackUrl).
• Support automatic reservation finalization / payment refund (fill the Transactions field via getPaymentState)

Contributions

Contributions are welcome.

If you report a bug, please provide the simplest example code where the error is reproducible (of course, without any confidential data) and describe the environment, where you run node-barion.

If you find a security issue, please contact me at email and I will get back to you as soon as possible.

I do not merge any PRs that break the build success. To test your changes before sending a PR, you should follow the instructions below:

0. Make sure you have a test Barion account, with at least 300 HUF balance.
1. Add your credentials to Barion in test/integration/credentials.json (there is an EXAMPLE in the directory with the required JSON structure).
2. Run the tests: npm run test
3. To check coverage, run: npm run coverage
4. Run integration tests: npm run integration-test

License

Copyright (c) 2019-present, Kiss Aron <[email protected]>

Unless otherwise stated in sources, the terms specified in LICENSE file are applicable.