PayPal Express Checkout - 2012 Betriebsanweisung PDF herunterladen (Seite 67)

Express Checkout Integration Guide August 7, 2012 67

PayPal SOAP API Basics

Security

The PayPal SOAP API service is protected to ensure that only authorized PayPal members use

it. There are four levels of security:

1. A required API username (Username field) and API password (Password field).

2. A third required authentication mechanism, which is either one of the following:

– Client-side request signing using a PayPal-issued API Certificate

– Request authentication using an API Signature included in the request (Signature

field)

3. An optional third-party authorization to make the API call on some other account’s behalf

(the optional Subject field).

4. Secure Sockets Layer (SSL) data transport.

A failure of authenticated security at any one of these levels denies access to the PayPal SOAP

API service.

SOAP RequesterCredentials: Username, Password, Signature,

and Subject

For the security of your business, PayPal must verify that merchants or third-party developers

are permitted to initiate a transaction before they make one. PayPal authenticates each request.

If the request cannot be authenticated, a SOAP security fault is returned.

In the SOAP request header, your SOAP client must set the Username, Password elements

to pass an API username/password combination. In addition, you can set the Signature or

Subject elements to specify your API signature string and an optional third-party account

email address for authentication.

The following example shows part of the RequesterCredentials elements. These

elements are required for all SOAP requests.

<SOAP-ENV:Header>

<RequesterCredentials xmlns=”urn:ebay:api:PayPalAPI”

xsi:type=”ebl:CustomSecurityHeaderType”>

<Credentials xmlns=”urn:ebay:apis:eBLBaseComponents”

xsi:type=”ebl:UserIdPasswordType”>

<Username>api_username</Username>

<Password>api_password</Password>

<Signature>api_signature</Signature>

<Subject>authorizing_account_emailaddress</Subject>

</Credentials>

</RequesterCredentials>

</SOAP-ENV:Header>

1 2 ... 62 63 64 65 66 67 68 69 70 71 72 ... 77 78

Keine Kommentare

PayPal Express Checkout - 2012 Betriebsanweisung Seite 67