Filter:
This Pull method allows you to send a request via PCI Proxy to a partner API endpoint in order to receive a response where the payload is filtered for credit card data and automatically tokenized.
Forward:
You can send payloads containing PCI Proxy tokens to your parnter APIs and they will be swapped with their raw values before hitting your partner's server.
In either case, add the specified header parameters to your request and redirect your request to the /v1/pull endpoint. All the other headers and your payload will be kept and routed through PCI Proxy without modification.
Example: Booking.com
In this example, you request a data from booking.com, where they return sensitive credit card information.
curl --request POST \
--url https://sandbox.pci-proxy.com/v1/pull \
--header 'Content-Type: application/xml' \
--header 'pci-proxy-api-key: ' \
--header 'x-cc-merchant-id: merchantId' \
--header 'x-cc-url: https://secure-supply-xml.booking.com/hotels/xml/reservations' \
--data '<?xml version="1.0" encoding="UTF-8"?>
<request>
<username>providermachinelogin</username>
<password>********</password>
</request>'
The response is returned to you like the below. Notice that the <cc_number> field has been replaced by the PCI Proxy token.
<?xml version="1.0" encoding="UTF-8"?>
<reservations>
<reservation>
<booked_at>2016-06-01T11:57:22+00:00</booked_at>
<commissionamount>21.09</commissionamount>
<currencycode>EUR</currencycode>
<customer>
<address>Vista 2, 3º izq</address>
<cc_cvc>xC80dmLNReahfVnMNeW6DHt_</cc_cvc>
<cc_expiration_date>07/2018</cc_expiration_date>
<cc_name>John Doe</cc_name>
<cc_number>AAABcHxr-sDssdexyrAAAfyXWIgaAF40</cc_number>
<cc_type>Visa</cc_type>
<city>Madrid</city>
<company />
<countrycode>es</countrycode>
<dc_issue_number />
<dc_start_date />
<email>[email protected]</email>
<first_name>Juan</first_name>
<last_name>Valdez</last_name>
<remarks>Booker is travelling for business...</remarks>
<telephone>666 428 664</telephone>
<zip>28004</zip>
</customer>
<!-- remaining response has been truncated for better visability -->
</reservation>
</reservations>