Please use Content-Type: "application/x-www-form-urlencoded" to send API requests to PAYONE platform
All information described as "Unixtimestamp" refers to coordinated universal time (UTC) and is hence not subject to changing from daylight saving time to standard time.
Only use key-value-pairs which are filled with meaningful data. All parameters that are not required for a request must not be used. Do not use dummy-values (like “-“ or “x”) and do not use empty values. E.g.
request “updateuser” does not require a parameter “clearingtype” nor “currency”. -> Do not send e.g. “clearingtype=” or “clearingtype=-“, …
request “getinvoice” does not require a parameter “amount” nor “language”. -> Do not send e.g. “amount=” or “amount=0”, …
request “preauthorization” with “clearingtype=cc” (creditcard) does not require bankdata. -> Do not send e.g. “bankcountry=“, “bankcountry=x”, “iban=” or “iban=x”, …
Do not use dummy values like “birthdate=00000000” or “birthdate=19700101” -> then do not send parameter “birthdate” at all.
Use correct encoding: You may specify two different encodings (ISO 8859-1 or UTF-8). Please set the encoding you really use and don’t mix them up. This may lead to denied requests or to misinterpreted data.
Please use only upper case for country-codes and state-codes. -> Validation enforced from 2019-01-01
Please use only lower case for language-codes. -> Validation enforced from 2019-01-01
Please do not use reserved keys / keywords (like "state") for own usage. -> Validation enforced from 2019-01-01
URLs (like successurl, errorurl, backurl) should not contain special characters (e.g. “+”) as they can be mis-interpretated sometimes. e.g.: “+” (plus) is converted to “ “ (space) with service SOFORT-Überweisung (SB/PNT)
PAYONE API does not modify any given data. Please ensure that e.g. whitespace characters (leading, trailing of in between (for IBAN, BIC, PAN/PPAN)) are removed before sending data to PAYONE.
URLs and E-Mail-addresses with non-latin-characters have to be translated to ASCII using Punycode before passing to PAYONE API as PAYONE does not modify any given data.
