Secure Fields allow you to securely collect card data by injecting iframes to your DOM. A separate iframe for both, card number and CVV code is used. Thereby, sensitive data never touches your server and allows you to capture all other related card data such as cardholder name, expiry date, etc. directly by yourself.

Browser compatibility for Secure Fields:

1. Setup Secure Fields

To get started include the following script on your page.

<script src="https://pay.sandbox.datatrans.com/upp/payment/js/secure-fields-2.0.0.js"></script>

2. Create payment form

In order for Secure Fields to insert card number and CVV iframes at the right place, create empty DOM elements and assign them unique IDs. In the example below those are:

• card-number-placeholder

• cvv-placeholder

<form>
    <div>
        <div>
            <label for="card-number-placeholder">Card Number</label>
            <!-- card number container -->
            <div id="card-number-placeholder" style="width: 250px;"></div>
        </div>
        <div>
            <label for="cvv-placeholder">Cvv</label>
            <!-- cvv container -->
            <div id="cvv-placeholder" style="width: 90px;"></div>
        </div>
​
        <button type="button" id="go">Get Token!</button>
    </div>
</form>

3. Retrieve a Transaction ID

Start with creating a new Secure Fields instance:

var secureFields = new SecureFields();
​
// Multiple instances might be created and used independently:
// e.g. var secureFields2 = new SecureFields();

Initialize it with your merchantId and specify which DOM element containers should be used to inject the iframes:

secureFields.initTokenize( "1100007006", {
  cardNumber: "card-number-placeholder", 
  cvv: "cvv-placeholder"                
});

Afterwards submit the form and listen for the success event:

$(function() {
  $("#go").click( function() {
    secureFields.submit(); // submit the "form"
  })
});
​
secureFields.on("success", function(data) {
  if(data.transactionId) {
    // transmit data.transactionId and the rest
    // of the form to your server    
  }
});

Instances can be destroyed if no longer used:

secureFields.destroy();

4. Obtain tokens

Once you've transmitted the transactionId to your server (together with the the rest of your form) you can execute a server to server GET Token request to get tokens for card number and CVV code:

curl https://api.sandbox.datatrans.com/upp/services/v1/inline/token?transactionId=180416140429310027 
    -u 'merchantId:password'

Examples

Advanced example with card detection

GitHub repository: https://github.com/datatrans/secure-fields-sample Demo: https://datatrans.github.io/secure-fields-sample/​

An example of how to implement this behaviour in modern web applications can be found here​

Please also have a look at Styling, Events and Token API references.

Next up

​