Class PaymentInstrument

Base class for payment instrument either stored in the customers profile or related to an order. A payment instrument can be credit card or bank transfer. The object defines standard methods for credit card payment, and can be extended by attributes appropriate for other payment methods.

Note: this class handles sensitive financial and card holder data. Pay special attention to PCI DSS v3. requirements 1, 3, 7, and 9.

All Known Subclasses 

CustomerPaymentInstrument, OrderPaymentInstrument

Constant Summary 
ConstantDescription
ENCRYPTION_ALGORITHM_RSA: String = “RSA”The outdated encryption algorithm “RSA/ECB/PKCS1Padding”.
ENCRYPTION_ALGORITHM_RSA_ECB_OAEPWITHSHA_256ANDMGF1PADDING: String = “RSA/ECB/OAEPWithSHA-256AndMGF1Padding”The encryption algorithm “RSA/ECB/OAEPWithSHA-256AndMGF1Padding”.
METHOD_BANK_TRANSFER: String = “BANK_TRANSFER”Represents a bank transfer type of payment.
METHOD_BML: String = “BML”Represents a ‘bill me later’ type of payment.
METHOD_CREDIT_CARD: String = “CREDIT_CARD”Represents a credit card type of payment.
METHOD_DW_ANDROID_PAY: String = “DW_ANDROID_PAY”Represents an Android Pay payment.
METHOD_DW_APPLE_PAY: String = “DW_APPLE_PAY”Represents an Apple Pay payment.
METHOD_GIFT_CERTIFICATE: String = “GIFT_CERTIFICATE”Represents a gift certificate.

Property Summary 
PropertyDescription
bankAccountDriversLicense: StringReturns the driver’s license number associated with the bank account if the calling context meets the following criteria:
  • If the instance is a CustomerPaymentInstrument, and we are in the context of a storefront request, and the current customer is registered and authenticated, and the payment instrument is associated to the profile of the current customer, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrumentInfo, and we are in the context of a storefront request, and the current customer is identical to the customer related to the basket, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrumentInfo, and we are in the context of a business manager request, and the current user has the permission MANAGE_ORDERS
  • If the instance is a OrderPaymentInstrumentInfo, and the account information has not been masked as a result of the data retention security policy for the site
bankAccountDriversLicenseLastDigits: String (read-only)Returns the last 4 characters of the decrypted driver’s license number of the bank account associated with this PaymentInstrument.
bankAccountDriversLicenseStateCode: StringReturns the driver’s license state code associated with a bank account payment instrument.
bankAccountHolder: StringReturns the full name of the holder of a bank account payment instrument.
bankAccountNumber: StringReturns the bank account number if the calling context meets the following criteria:
  • If the instance is a CustomerPaymentInstrument, and we are in the context of a storefront request, and the current customer is registered and authenticated, and the payment instrument is associated to the profile of the current customer, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrumentInfo, and we are in the context of a storefront request, and the current customer is identical to the customer related to the basket, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrumentInfo, and we are in the context of a business manager request, and the current user has the permission MANAGE_ORDERS
  • If the instance is a OrderPaymentInstrumentInfo, and the account information has not been masked as a result of the data retention security policy for the site
bankAccountNumberLastDigits: String (read-only)Returns the last 4 characters of the decrypted bank account number.
bankRoutingNumber: StringReturns the bank routing number of a bank account payment instrument.
creditCardExpirationMonth: NumberReturns the month of the year in which the credit card expires (1-12).
creditCardExpirationYear: NumberReturns the year in which the credit card expires, such as ‘2004’.
creditCardExpired: Boolean (read-only)Returns true if this payment instrument represents an expired credit card.
creditCardHolder: StringReturns the name of the credit card owner.
creditCardIssueNumber: StringReturns the credit card issue number.
creditCardNumber: StringReturns the decrypted credit card number if the calling context meets the following criteria:
  • If the instance is a CustomerPaymentInstrument, and we are in the context of a storefront request, and the current customer is registered and authenticated, and the payment instrument is associated to the profile of the current customer, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrument in the context of a storefront request, and the current authenticated customer is referenced by the basket or order, and the current protocol is HTTPS.
creditCardNumberLastDigits: String (read-only)Returns the last 4 characters of the decrypted credit card number.
creditCardToken: StringSecure credit card data can be replaced by a token by utilizing a tokenization provider, which securely stores the credit card data using the token as a key.
creditCardType: StringReturns the type of the credit card.
creditCardValidFromMonth: NumberReturns the month of the year in which the credit card became valid (1-12).
creditCardValidFromYear: NumberReturns the year in which the credit card became valid, such as ‘2001’.
giftCertificateCode: StringReturns the Gift Certificate code for this Payment Instrument.
giftCertificateID: StringReturns the Gift Certificate ID for this Payment Instrument.
maskedBankAccountDriversLicense: String (read-only)Returns the decrypted driver’s license number of the bank account with all but the last 4 characters replaced with a ’*’ character.
maskedBankAccountNumber: String (read-only)Returns the decrypted bank account number with all but the last 4 characters replaced with a ’*’ character.
maskedCreditCardNumber: String (read-only)Returns the decrypted credit card number with all but the last 4 characters replaced with a ’*’ character.
maskedGiftCertificateCode: String (read-only)Returns the masked gift certificate code with all but the last 4 characters replaced with a ’*’ character.
paymentMethod: String (read-only)Returns the identifier of the payment method represented by this payment instrument.
permanentlyMasked: Boolean (read-only)Returns true if the account information for this Payment Instrument has been permanently masked as a result of the data retention security policy for the site or a creditcard tokenization, and false otherwise.

Constructor Summary 

This class does not have a constructor, so you cannot create it directly.

Method Summary 
MethodDescription
getBankAccountDriversLicense()Returns the driver’s license number associated with the bank account if the calling context meets the following criteria:
  • If the instance is a CustomerPaymentInstrument, and we are in the context of a storefront request, and the current customer is registered and authenticated, and the payment instrument is associated to the profile of the current customer, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrumentInfo, and we are in the context of a storefront request, and the current customer is identical to the customer related to the basket, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrumentInfo, and we are in the context of a business manager request, and the current user has the permission MANAGE_ORDERS
  • If the instance is a OrderPaymentInstrumentInfo, and the account information has not been masked as a result of the data retention security policy for the site
getBankAccountDriversLicenseLastDigits()Returns the last 4 characters of the decrypted driver’s license number of the bank account associated with this PaymentInstrument.
getBankAccountDriversLicenseLastDigits(Number)Returns the last specified number of characters of the decrypted driver’s license number of the bank account associated with this PaymentInstrument.
getBankAccountDriversLicenseStateCode()Returns the driver’s license state code associated with a bank account payment instrument.
getBankAccountHolder()Returns the full name of the holder of a bank account payment instrument.
getBankAccountNumber()Returns the bank account number if the calling context meets the following criteria:
  • If the instance is a CustomerPaymentInstrument, and we are in the context of a storefront request, and the current customer is registered and authenticated, and the payment instrument is associated to the profile of the current customer, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrumentInfo, and we are in the context of a storefront request, and the current customer is identical to the customer related to the basket, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrumentInfo, and we are in the context of a business manager request, and the current user has the permission MANAGE_ORDERS
  • If the instance is a OrderPaymentInstrumentInfo, and the account information has not been masked as a result of the data retention security policy for the site
getBankAccountNumberLastDigits()Returns the last 4 characters of the decrypted bank account number.
getBankAccountNumberLastDigits(Number)Returns the last specified number of characters of the decrypted bank account card number.
getBankRoutingNumber()Returns the bank routing number of a bank account payment instrument.
getCreditCardExpirationMonth()Returns the month of the year in which the credit card expires (1-12).
getCreditCardExpirationYear()Returns the year in which the credit card expires, such as ‘2004’.
getCreditCardHolder()Returns the name of the credit card owner.
getCreditCardIssueNumber()Returns the credit card issue number.
getCreditCardNumber()Returns the decrypted credit card number if the calling context meets the following criteria:
  • If the instance is a CustomerPaymentInstrument, and we are in the context of a storefront request, and the current customer is registered and authenticated, and the payment instrument is associated to the profile of the current customer, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrument in the context of a storefront request, and the current authenticated customer is referenced by the basket or order, and the current protocol is HTTPS.
getCreditCardNumberLastDigits()Returns the last 4 characters of the decrypted credit card number.
getCreditCardNumberLastDigits(Number)Returns the last specified number of characters of the decrypted credit card number.
getCreditCardToken()Secure credit card data can be replaced by a token by utilizing a tokenization provider, which securely stores the credit card data using the token as a key.
getCreditCardType()Returns the type of the credit card.
getCreditCardValidFromMonth()Returns the month of the year in which the credit card became valid (1-12).
getCreditCardValidFromYear()Returns the year in which the credit card became valid, such as ‘2001’.
getEncryptedBankAccountDriversLicense(String, String)Encrypts the driver’s license number of the bank account of this object with the given algorithm and the given public key.
getEncryptedBankAccountNumber(String, String)Encrypts the bank account number of this object with the given algorithm and the given public key.
getEncryptedCreditCardNumber(String, CertificateRef)Encrypts the credit card number of this object with the given algorithm and the public key taken from a certificate in the keystore.
getEncryptedCreditCardNumber(String, String)Encrypts the credit card number of this object with the given algorithm and the given public key.
getGiftCertificateCode()Returns the Gift Certificate code for this Payment Instrument.
getGiftCertificateID()Returns the Gift Certificate ID for this Payment Instrument.
getMaskedBankAccountDriversLicense()Returns the decrypted driver’s license number of the bank account with all but the last 4 characters replaced with a ’*’ character.
getMaskedBankAccountDriversLicense(Number)Returns the decrypted driver’s license number of the bank account with all but the specified number characters replaced with a ’*’ character.
getMaskedBankAccountNumber()Returns the decrypted bank account number with all but the last 4 characters replaced with a ’*’ character.
getMaskedBankAccountNumber(Number)Returns the decrypted bank account number with all but the specified number characters replaced with a ’*’ character.
getMaskedCreditCardNumber()Returns the decrypted credit card number with all but the last 4 characters replaced with a ’*’ character.
getMaskedCreditCardNumber(Number)Returns the decrypted credit card number with all but the specified number characters replaced with a ’*’ character.
getMaskedGiftCertificateCode()Returns the masked gift certificate code with all but the last 4 characters replaced with a ’*’ character.
getMaskedGiftCertificateCode(Number)Returns the masked gift certificate code with all but the specified number of characters replaced with a ’*’ character.
getPaymentMethod()Returns the identifier of the payment method represented by this payment instrument.
isCreditCardExpired()Returns true if this payment instrument represents an expired credit card.
isPermanentlyMasked()Returns true if the account information for this Payment Instrument has been permanently masked as a result of the data retention security policy for the site or a creditcard tokenization, and false otherwise.
setBankAccountDriversLicense(String)Set the driver’s license number associated with a bank account payment instrument.
setBankAccountDriversLicenseStateCode(String)Set the driver’s license state code associated with a bank account payment instrument.
setBankAccountHolder(String)Set the full name of the holder of a bank account payment instrument.
setBankAccountNumber(String)Set the bank account number of a bank account payment instrument.
setBankRoutingNumber(String)Set the bank routing number of a bank account payment instrument.
setCreditCardExpirationMonth(Number)Sets the month of the year in which the credit card expires.
setCreditCardExpirationYear(Number)Sets the year in which the credit card expires, such as ‘2004’.
setCreditCardHolder(String)Sets the name of the credit card owner.
setCreditCardIssueNumber(String)Set the credit card issue number.
setCreditCardNumber(String)Sets the credit card number for this payment.
setCreditCardToken(String)Secure credit card data can be replaced by a token by utilizing a tokenization provider, which securely stores the credit card data using the token as a key.
setCreditCardType(String)Sets the type of the credit card.
setCreditCardValidFromMonth(Number)Sets the month of the year in which the credit card became valid (1-12).
setCreditCardValidFromYear(Number)Sets the year in which the credit card became valid, such as ‘2001’.
setGiftCertificateCode(String)Sets the Gift Certificate code for this Payment Instrument.
setGiftCertificateID(String)Sets the Gift Certificate ID for this Payment Instrument.

Methods inherited from class ExtensibleObject 

describe, getCustom

Methods inherited from class PersistentObject 

getCreationDate, getLastModified, getUUID

Methods inherited from class Object 

assign, create, create, defineProperties, defineProperty, entries, freeze, fromEntries, getOwnPropertyDescriptor, getOwnPropertyNames, getOwnPropertySymbols, getPrototypeOf, hasOwnProperty, is, isExtensible, isFrozen, isPrototypeOf, isSealed, keys, preventExtensions, propertyIsEnumerable, seal, setPrototypeOf, toLocaleString, toString, valueOf, values

Constant Details 

ENCRYPTION_ALGORITHM_RSA 
ENCRYPTION_ALGORITHM_RSA: String = "RSA"

The outdated encryption algorithm "RSA/ECB/PKCS1Padding". Please do not use anymore!

Deprecated:

Support for this algorithm will be removed in a future release. Please use ENCRYPTION_ALGORITHM_RSA_ECB_OAEPWITHSHA_256ANDMGF1PADDING instead.

Warning

ENCRYPTION_ALGORITHM_RSA_ECB_OAEPWITHSHA_256ANDMGF1PADDING 
ENCRYPTION_ALGORITHM_RSA_ECB_OAEPWITHSHA_256ANDMGF1PADDING: String = "RSA/ECB/OAEPWithSHA-256AndMGF1Padding"

The encryption algorithm "RSA/ECB/OAEPWithSHA-256AndMGF1Padding".

METHOD_BANK_TRANSFER 
METHOD_BANK_TRANSFER: String = "BANK_TRANSFER"

Represents a bank transfer type of payment.

METHOD_BML 
METHOD_BML: String = "BML"

Represents a 'bill me later' type of payment.

METHOD_CREDIT_CARD 
METHOD_CREDIT_CARD: String = "CREDIT_CARD"

Represents a credit card type of payment.

METHOD_DW_ANDROID_PAY 
METHOD_DW_ANDROID_PAY: String = "DW_ANDROID_PAY"

Represents an Android Pay payment.

METHOD_DW_APPLE_PAY 
METHOD_DW_APPLE_PAY: String = "DW_APPLE_PAY"

Represents an Apple Pay payment.

METHOD_GIFT_CERTIFICATE 
METHOD_GIFT_CERTIFICATE: String = "GIFT_CERTIFICATE"

Represents a gift certificate.

Property Details 

bankAccountDriversLicense 
bankAccountDriversLicense: String

Returns the driver's license number associated with the bank account if the calling context meets the following criteria:

  • If the instance is a CustomerPaymentInstrument, and we are in the context of a storefront request, and the current customer is registered and authenticated, and the payment instrument is associated to the profile of the current customer, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrumentInfo, and we are in the context of a storefront request, and the current customer is identical to the customer related to the basket, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrumentInfo, and we are in the context of a business manager request, and the current user has the permission MANAGE_ORDERS
  • If the instance is a OrderPaymentInstrumentInfo, and the account information has not been masked as a result of the data retention security policy for the site

Otherwise, the method returns the masked driver's license number. If a basket is reopened with OrderMgr.failOrder(Order, Boolean), it always masks sensitive information because during order creation, basket payment information is permanently masked.

See Also:

bankAccountDriversLicenseLastDigits 
bankAccountDriversLicenseLastDigits: String (read-only)

Returns the last 4 characters of the decrypted driver's license number of the bank account associated with this PaymentInstrument.

If the number is empty or null it will be returned without an exception.

bankAccountDriversLicenseStateCode 
bankAccountDriversLicenseStateCode: String

Returns the driver's license state code associated with a bank account payment instrument. Returns null for other payment methods.

bankAccountHolder 
bankAccountHolder: String

Returns the full name of the holder of a bank account payment instrument. Returns null for other payment methods.

bankAccountNumber 
bankAccountNumber: String

Returns the bank account number if the calling context meets the following criteria:

  • If the instance is a CustomerPaymentInstrument, and we are in the context of a storefront request, and the current customer is registered and authenticated, and the payment instrument is associated to the profile of the current customer, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrumentInfo, and we are in the context of a storefront request, and the current customer is identical to the customer related to the basket, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrumentInfo, and we are in the context of a business manager request, and the current user has the permission MANAGE_ORDERS
  • If the instance is a OrderPaymentInstrumentInfo, and the account information has not been masked as a result of the data retention security policy for the site

Otherwise, the method returns the masked bank account number. If a basket is reopened with OrderMgr.failOrder(Order, Boolean), it always masks sensitive information because during order creation, basket payment information is permanently masked.

See Also:

bankAccountNumberLastDigits 
bankAccountNumberLastDigits: String (read-only)

Returns the last 4 characters of the decrypted bank account number.

If the number is empty or null, it will be returned without an exception.

bankRoutingNumber 
bankRoutingNumber: String

Returns the bank routing number of a bank account payment instrument. Returns null for other payment methods.

If account information has been masked due to the data retention security policy for the site, the return value is fully masked.

See Also:

creditCardExpirationMonth 
creditCardExpirationMonth: Number

Returns the month of the year in which the credit card expires (1-12).

creditCardExpirationYear 
creditCardExpirationYear: Number

Returns the year in which the credit card expires, such as '2004'.

creditCardExpired 
creditCardExpired: Boolean (read-only)

Returns true if this payment instrument represents an expired credit card. This check is only logical if the credit card expiration month and year are set. If either of these attributes are not set, then this method always returns false.

creditCardHolder 
creditCardHolder: String

Returns the name of the credit card owner.

creditCardIssueNumber 
creditCardIssueNumber: String

Returns the credit card issue number. This attribute is only used by specific credit/debit card processors such as Solo and Switch in the UK.

creditCardNumber 
creditCardNumber: String

Returns the decrypted credit card number if the calling context meets the following criteria:

  • If the instance is a CustomerPaymentInstrument, and we are in the context of a storefront request, and the current customer is registered and authenticated, and the payment instrument is associated to the profile of the current customer, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrument in the context of a storefront request, and the current authenticated customer is referenced by the basket or order, and the current protocol is HTTPS.
  • If the customer is anonymous, and the customer is referenced by the order, and the protocol is secure and the order status is CREATED.
  • If the instance is a OrderPaymentInstrument, and we are in the context of a business manager request, and the current user has the permission MANAGE_ORDERS
  • If the instance is a OrderPaymentInstrument, and the account information has not been masked as a result of the data retention security policy for the site

Otherwise, the method returns the masked credit card number. If a basket is reopened with OrderMgr.failOrder(Order, Boolean), it always masks sensitive information because during order creation, basket payment information is permanently masked.

See Also:

creditCardNumberLastDigits 
creditCardNumberLastDigits: String (read-only)

Returns the last 4 characters of the decrypted credit card number.

If the number is empty or null it will be returned without an exception.

creditCardToken 
creditCardToken: String

Secure credit card data can be replaced by a token by utilizing a tokenization provider, which securely stores the credit card data using the token as a key. The stored data can later reused by including the token in a request. In this way credit card processes such as authorization and capture can be implemented without being responsible for persisting the credit card data.

creditCardType 
creditCardType: String

Returns the type of the credit card.

creditCardValidFromMonth 
creditCardValidFromMonth: Number

Returns the month of the year in which the credit card became valid (1-12). This attribute is not used by all credit card types.

creditCardValidFromYear 
creditCardValidFromYear: Number

Returns the year in which the credit card became valid, such as '2001'. This attribute is not used by all credit card types.

giftCertificateCode 
giftCertificateCode: String

Returns the Gift Certificate code for this Payment Instrument.

giftCertificateID 
giftCertificateID: String

Returns the Gift Certificate ID for this Payment Instrument.

Deprecated:

Use getGiftCertificateCode()

Warning

maskedBankAccountDriversLicense 
maskedBankAccountDriversLicense: String (read-only)

Returns the decrypted driver's license number of the bank account with all but the last 4 characters replaced with a '*' character.

If the driver's license number is empty, it will be returned without an exception.

maskedBankAccountNumber 
maskedBankAccountNumber: String (read-only)

Returns the decrypted bank account number with all but the last 4 characters replaced with a '*' character.

If the number is empty (i.e. "" or null), it will be returned without an exception.

maskedCreditCardNumber 
maskedCreditCardNumber: String (read-only)

Returns the decrypted credit card number with all but the last 4 characters replaced with a '*' character.

If the number is empty, it will be returned without an exception.

maskedGiftCertificateCode 
maskedGiftCertificateCode: String (read-only)

Returns the masked gift certificate code with all but the last 4 characters replaced with a '*' character.

paymentMethod 
paymentMethod: String (read-only)

Returns the identifier of the payment method represented by this payment instrument.

permanentlyMasked 
permanentlyMasked: Boolean (read-only)

Returns true if the account information for this Payment Instrument has been permanently masked as a result of the data retention security policy for the site or a creditcard tokenization, and false otherwise.

When account information is masked only the last 4 digits of the credit card or bank account number are recoverable. The bank account driver's license number and bank routing number are completely masked.

Method Details 

getBankAccountDriversLicense() 
getBankAccountDriversLicense(): String

Returns the driver's license number associated with the bank account if the calling context meets the following criteria:

  • If the instance is a CustomerPaymentInstrument, and we are in the context of a storefront request, and the current customer is registered and authenticated, and the payment instrument is associated to the profile of the current customer, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrumentInfo, and we are in the context of a storefront request, and the current customer is identical to the customer related to the basket, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrumentInfo, and we are in the context of a business manager request, and the current user has the permission MANAGE_ORDERS
  • If the instance is a OrderPaymentInstrumentInfo, and the account information has not been masked as a result of the data retention security policy for the site

Otherwise, the method returns the masked driver's license number. If a basket is reopened with OrderMgr.failOrder(Order, Boolean), it always masks sensitive information because during order creation, basket payment information is permanently masked.

Returns:

  • the driver's license number if the calling context meets the necessary criteria.

See Also:

getBankAccountDriversLicenseLastDigits() 
getBankAccountDriversLicenseLastDigits(): String

Returns the last 4 characters of the decrypted driver's license number of the bank account associated with this PaymentInstrument.

If the number is empty or null it will be returned without an exception.

Returns:

  • the last 4 characters of the de-crypted driver's license number.

getBankAccountDriversLicenseLastDigits(Number) 
getBankAccountDriversLicenseLastDigits(count: Number): String

Returns the last specified number of characters of the decrypted driver's license number of the bank account associated with this PaymentInstrument.

If the number is empty (i.e. "" or null), it will be returned without an exception.

Note that count is limited to 4 in an unsecure environment, and if account information for this payment instrument has been masked due to the data retention security policy for the site.

Parameters:

  • count - number of characters to be returned.

Returns:

  • the last specified number of characters of the decrypted driver's license number.

See Also:

getBankAccountDriversLicenseStateCode() 
getBankAccountDriversLicenseStateCode(): String

Returns the driver's license state code associated with a bank account payment instrument. Returns null for other payment methods.

Returns:

  • the state in which the bank account driver's license was issued.

getBankAccountHolder() 
getBankAccountHolder(): String

Returns the full name of the holder of a bank account payment instrument. Returns null for other payment methods.

Returns:

  • the bank account holder's full name.

getBankAccountNumber() 
getBankAccountNumber(): String

Returns the bank account number if the calling context meets the following criteria:

  • If the instance is a CustomerPaymentInstrument, and we are in the context of a storefront request, and the current customer is registered and authenticated, and the payment instrument is associated to the profile of the current customer, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrumentInfo, and we are in the context of a storefront request, and the current customer is identical to the customer related to the basket, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrumentInfo, and we are in the context of a business manager request, and the current user has the permission MANAGE_ORDERS
  • If the instance is a OrderPaymentInstrumentInfo, and the account information has not been masked as a result of the data retention security policy for the site

Otherwise, the method returns the masked bank account number. If a basket is reopened with OrderMgr.failOrder(Order, Boolean), it always masks sensitive information because during order creation, basket payment information is permanently masked.

Returns:

  • the bank account number if the calling context meets the necessary criteria.

See Also:

getBankAccountNumberLastDigits() 
getBankAccountNumberLastDigits(): String

Returns the last 4 characters of the decrypted bank account number.

If the number is empty or null, it will be returned without an exception.

Returns:

  • the last 4 characters of the decrypted bank account number.

getBankAccountNumberLastDigits(Number) 
getBankAccountNumberLastDigits(count: Number): String

Returns the last specified number of characters of the decrypted bank account card number.

If the number is empty (i.e. "" or null), it will be returned without an exception.

Note that count is limited to 4 in an unsecure environment, and if account information for this payment instrument has been masked due to the data retention security policy for the site.

Parameters:

  • count - number of characters to be returned.

Returns:

  • the last specified characters of the decrypted bank account number.

See Also:

getBankRoutingNumber() 
getBankRoutingNumber(): String

Returns the bank routing number of a bank account payment instrument. Returns null for other payment methods.

If account information has been masked due to the data retention security policy for the site, the return value is fully masked.

Returns:

  • the bank account rounting number.

See Also:

getCreditCardExpirationMonth() 
getCreditCardExpirationMonth(): Number

Returns the month of the year in which the credit card expires (1-12).

Returns:

  • the month of the year in which the credit card expires (1-12).

getCreditCardExpirationYear() 
getCreditCardExpirationYear(): Number

Returns the year in which the credit card expires, such as '2004'.

Returns:

  • the year in which the credit card expires.

getCreditCardHolder() 
getCreditCardHolder(): String

Returns the name of the credit card owner.

Returns:

  • the name of the credit card owner.

getCreditCardIssueNumber() 
getCreditCardIssueNumber(): String

Returns the credit card issue number. This attribute is only used by specific credit/debit card processors such as Solo and Switch in the UK.

Returns:

  • the credit card issue number

getCreditCardNumber() 
getCreditCardNumber(): String

Returns the decrypted credit card number if the calling context meets the following criteria:

  • If the instance is a CustomerPaymentInstrument, and we are in the context of a storefront request, and the current customer is registered and authenticated, and the payment instrument is associated to the profile of the current customer, and the current protocol is HTTPS
  • If the instance is a OrderPaymentInstrument in the context of a storefront request, and the current authenticated customer is referenced by the basket or order, and the current protocol is HTTPS.
  • If the customer is anonymous, and the customer is referenced by the order, and the protocol is secure and the order status is CREATED.
  • If the instance is a OrderPaymentInstrument, and we are in the context of a business manager request, and the current user has the permission MANAGE_ORDERS
  • If the instance is a OrderPaymentInstrument, and the account information has not been masked as a result of the data retention security policy for the site

Otherwise, the method returns the masked credit card number. If a basket is reopened with OrderMgr.failOrder(Order, Boolean), it always masks sensitive information because during order creation, basket payment information is permanently masked.

Returns:

  • the decrypted credit card number if the calling context meets the necessary criteria.

See Also:

getCreditCardNumberLastDigits() 
getCreditCardNumberLastDigits(): String

Returns the last 4 characters of the decrypted credit card number.

If the number is empty or null it will be returned without an exception.

Returns:

  • the last 4 characters of the de-crypted credit card number.

getCreditCardNumberLastDigits(Number) 
getCreditCardNumberLastDigits(count: Number): String

Returns the last specified number of characters of the decrypted credit card number.

If the number is empty (i.e. "" or null), it will be returned without an exception.

Note that count is limited to 4 in an unsecure environment, and if account information for this payment instrument has been masked due to the data retention security policy for the site.

Parameters:

  • count - number of characters to be returned.

Returns:

  • the last specified number of characters of the decrypted credit card number.

See Also:

getCreditCardToken() 
getCreditCardToken(): String

Secure credit card data can be replaced by a token by utilizing a tokenization provider, which securely stores the credit card data using the token as a key. The stored data can later reused by including the token in a request. In this way credit card processes such as authorization and capture can be implemented without being responsible for persisting the credit card data.

Returns:

  • the token

getCreditCardType() 
getCreditCardType(): String

Returns the type of the credit card.

Returns:

  • the type of the credit card.

getCreditCardValidFromMonth() 
getCreditCardValidFromMonth(): Number

Returns the month of the year in which the credit card became valid (1-12). This attribute is not used by all credit card types.

Returns:

  • the month of the year in which the credit card became valid (1-12).

getCreditCardValidFromYear() 
getCreditCardValidFromYear(): Number

Returns the year in which the credit card became valid, such as '2001'. This attribute is not used by all credit card types.

Returns:

  • the year in which the credit card became valid

getEncryptedBankAccountDriversLicense(String, String) 
getEncryptedBankAccountDriversLicense(algorithm: String, publicKey: String): String

Encrypts the driver's license number of the bank account of this object with the given algorithm and the given public key. Returned is the Base64 encoded representation of the result.

See also Cipher.encrypt(String, String, String, String, Number) on how to generate RSA key pairs.

If account information has been masked due to the data retention security policy for the site, the returned value is the Base64 encoded representation of the encrypted form of the masked number.

Parameters:

  • algorithm - The algorithm to be used for the encryption of this credit card number. Must be a valid, non-null algorithm. Currently, only the following algorithms are supported: <li>ENCRYPTION_ALGORITHM_RSA – outdated, please do not use anymore <li>ENCRYPTION_ALGORITHM_RSA_ECB_OAEPWITHSHA_256ANDMGF1PADDING – the current algorithm </ul>
  • publicKey - A Base64 encoded form of the public key to be used to encrypt this bank account driver's license number. Must be a valid, non-blank key.

Returns:

  • the Base64 encoded representation of the bank account driver's license.

Throws:

  • IllegalArgumentException - If algorithm is not a valid known algorithm.
  • IllegalArgumentException - If publicKey is a null, empty or blank string.

getEncryptedBankAccountNumber(String, String) 
getEncryptedBankAccountNumber(algorithm: String, publicKey: String): String

Encrypts the bank account number of this object with the given algorithm and the given public key. Returned is the Base64 encoded representation of the result.

If account information has been masked due to the data retention security policy for the site, the returned value is the Base64 encoded representation of the encrypted form of the masked number.

Parameters:

  • algorithm - The algorithm to be used for the encryption of this credit card number. Must be a valid, non-null algorithm. Currently, only the following algorithms are supported: <li>ENCRYPTION_ALGORITHM_RSA – outdated, please do not use anymore <li>ENCRYPTION_ALGORITHM_RSA_ECB_OAEPWITHSHA_256ANDMGF1PADDING – the current algorithm </ul>
  • publicKey - A Base64 encoded form of the public key to be used to encrypt this credit card number. Must be a valid, non-blank key.

Returns:

  • the Base64 encoded representation of the bank account number.

Throws:

  • IllegalArgumentException - If algorithm is not a valid known algorithm.
  • IllegalArgumentException - If publicKey is a null, empty or blank string.

See Also:

getEncryptedCreditCardNumber(String, CertificateRef) 
getEncryptedCreditCardNumber(algorithm: String, certificateRef: CertificateRef): String

Encrypts the credit card number of this object with the given algorithm and the public key taken from a certificate in the keystore. Returned is the Base64 encoded representation of the result.

See also Cipher.encrypt(String, CertificateRef, String, String, Number) on how to generate RSA key pairs.

If account information has been masked due to the data retention security policy for the site, the returned value is the Base64 encoded representation of the encrypted form of the masked number.

Parameters:

  • algorithm - The algorithm to be used for the encryption of this credit card number. Must be a valid, non-null algorithm. Currently, only the following algorithms are supported: <li>ENCRYPTION_ALGORITHM_RSA – outdated, please do not use anymore <li>ENCRYPTION_ALGORITHM_RSA_ECB_OAEPWITHSHA_256ANDMGF1PADDING – the current algorithm </ul>
  • certificateRef - A reference to a trusted certificate entry containing the public key in the keystore. Must be non-null.

Returns:

  • the Base64 encoded representation of the credit card number.

Throws:

  • IllegalArgumentException - If algorithm is not a valid known algorithm.
  • IllegalArgumentException - If certificateRef is null or could not be found.

See Also:

getEncryptedCreditCardNumber(String, String) 
getEncryptedCreditCardNumber(algorithm: String, publicKey: String): String

Encrypts the credit card number of this object with the given algorithm and the given public key. Returned is the Base64 encoded representation of the result.

See also Cipher.encrypt(String, String, String, String, Number) on how to generate RSA key pairs.

If account information has been masked due to the data retention security policy for the site, the returned value is the Base64 encoded representation of the encrypted form of the masked number.

Parameters:

  • algorithm - The algorithm to be used for the encryption of this credit card number. Must be a valid, non-null algorithm. Currently, only the following algorithms are supported: <li>ENCRYPTION_ALGORITHM_RSA – outdated, please do not use anymore <li>ENCRYPTION_ALGORITHM_RSA_ECB_OAEPWITHSHA_256ANDMGF1PADDING – the current algorithm </ul>
  • publicKey - A Base64 encoded form of the public key to be used to encrypt this credit card number. Must be a valid, non-blank key.

Returns:

  • the Base64 encoded representation of the credit card number.

Throws:

  • IllegalArgumentException - If algorithm is not a valid known algorithm.
  • IllegalArgumentException - If publicKey is a null, empty or blank string.

See Also:

Deprecated:

Please use getEncryptedCreditCardNumber(String, CertificateRef) instead.

Warning

getGiftCertificateCode() 
getGiftCertificateCode(): String

Returns the Gift Certificate code for this Payment Instrument.

Returns:

  • the Gift Certificate code or null if not set.

getGiftCertificateID() 
getGiftCertificateID(): String

Returns the Gift Certificate ID for this Payment Instrument.

Returns:

  • the Gift Certificate ID or null if not set.

Deprecated:

Use getGiftCertificateCode()

Warning

getMaskedBankAccountDriversLicense() 
getMaskedBankAccountDriversLicense(): String

Returns the decrypted driver's license number of the bank account with all but the last 4 characters replaced with a '*' character.

If the driver's license number is empty, it will be returned without an exception.

Returns:

  • the decrypted driver's license number with all but the last 4 characters replaced with a '*' character.

getMaskedBankAccountDriversLicense(Number) 
getMaskedBankAccountDriversLicense(ignore: Number): String

Returns the decrypted driver's license number of the bank account with all but the specified number characters replaced with a '*' character.

If the driver's license number is empty (i.e. "" or null), it will be returned without an exception.

Note that ignore is limited to 4 in an unsecure environment, and if account information for this payment instrument has been masked due to the data retention security policy for the site.

Parameters:

  • ignore - the number of characters to leave unmasked.

Returns:

  • the decrypted driver's license number with all but the specified number characters replaced with a '*' character.

See Also:

getMaskedBankAccountNumber() 
getMaskedBankAccountNumber(): String

Returns the decrypted bank account number with all but the last 4 characters replaced with a '*' character.

If the number is empty (i.e. "" or null), it will be returned without an exception.

Returns:

  • the decrypted bank account number with all but the last 4 characters replaced with a '*' character.

getMaskedBankAccountNumber(Number) 
getMaskedBankAccountNumber(ignore: Number): String

Returns the decrypted bank account number with all but the specified number characters replaced with a '*' character.

If the card number is empty (i.e. "" or null), it will be returned without an exception.

Note that ignore is limited to 4 in an unsecure environment, and if account information for this payment instrument has been masked due to the data retention security policy for the site.

Parameters:

  • ignore - the number of characters to leave unmasked

Returns:

  • the decrypted bank account number with all but the specified number of characters replaced with a '*' character.

See Also:

getMaskedCreditCardNumber() 
getMaskedCreditCardNumber(): String

Returns the decrypted credit card number with all but the last 4 characters replaced with a '*' character.

If the number is empty, it will be returned without an exception.

Returns:

  • the decrypted credit card number with all but the last 4 characters replaced with a '*' character.

getMaskedCreditCardNumber(Number) 
getMaskedCreditCardNumber(ignore: Number): String

Returns the decrypted credit card number with all but the specified number characters replaced with a '*' character.

If the card number is empty (i.e. "" or null), it will be returned without an exception.

Note that ignore is limited to 4 in an unsecure environment, and if account information for this payment instrument has been masked due to the data retention security policy for the site.

Parameters:

  • ignore - the number of characters to leave unmasked.

Returns:

  • the decrypted credit card number with all but the specified number characters replaced with a '*' character.

See Also:

getMaskedGiftCertificateCode() 
getMaskedGiftCertificateCode(): String

Returns the masked gift certificate code with all but the last 4 characters replaced with a '*' character.

Returns:

  • the masked gift certificate code.

getMaskedGiftCertificateCode(Number) 
getMaskedGiftCertificateCode(ignore: Number): String

Returns the masked gift certificate code with all but the specified number of characters replaced with a '*' character.

Parameters:

  • ignore - the number of characters to leave unmasked.

Returns:

  • the masked gift certificate code.

Throws:

  • IllegalArgumentException - if ignore is negative.

getPaymentMethod() 
getPaymentMethod(): String

Returns the identifier of the payment method represented by this payment instrument.

Returns:

  • the identifier of the payment method represented by this payment instrument.

isCreditCardExpired() 
isCreditCardExpired(): Boolean

Returns true if this payment instrument represents an expired credit card. This check is only logical if the credit card expiration month and year are set. If either of these attributes are not set, then this method always returns false.

Returns:

  • true if this payment instrument represents an expired credit card, false otherwise

isPermanentlyMasked() 
isPermanentlyMasked(): Boolean

Returns true if the account information for this Payment Instrument has been permanently masked as a result of the data retention security policy for the site or a creditcard tokenization, and false otherwise.

When account information is masked only the last 4 digits of the credit card or bank account number are recoverable. The bank account driver's license number and bank routing number are completely masked.

Returns:

  • whether or not the account information has been masked

setBankAccountDriversLicense(String) 
setBankAccountDriversLicense(license: String): void

Set the driver's license number associated with a bank account payment instrument.

Parameters:

  • license - the bank account holder driver's license.

setBankAccountDriversLicenseStateCode(String) 
setBankAccountDriversLicenseStateCode(stateCode: String): void

Set the driver's license state code associated with a bank account payment instrument.

Parameters:

  • stateCode - the state in which the bank account driver's license was issued.

setBankAccountHolder(String) 
setBankAccountHolder(holder: String): void

Set the full name of the holder of a bank account payment instrument.

Parameters:

  • holder - the bank account holder's full name.

setBankAccountNumber(String) 
setBankAccountNumber(accountNumber: String): void

Set the bank account number of a bank account payment instrument.

Parameters:

  • accountNumber - the bank account number.

setBankRoutingNumber(String) 
setBankRoutingNumber(routingNumber: String): void

Set the bank routing number of a bank account payment instrument.

Parameters:

  • routingNumber - the bank account rounting number.

setCreditCardExpirationMonth(Number) 
setCreditCardExpirationMonth(aValue: Number): void

Sets the month of the year in which the credit card expires. Permissible values are from 1 to 12.

Parameters:

  • aValue - the month of the year in which the credit card expires. Permissible values are from 1 to 12.

setCreditCardExpirationYear(Number) 
setCreditCardExpirationYear(aValue: Number): void

Sets the year in which the credit card expires, such as '2004'.

Parameters:

  • aValue - the year in which the credit card expires.

setCreditCardHolder(String) 
setCreditCardHolder(aValue: String): void

Sets the name of the credit card owner.

Parameters:

  • aValue - the name of the credit card owner.

setCreditCardIssueNumber(String) 
setCreditCardIssueNumber(aValue: String): void

Set the credit card issue number. This attribute is only used by specific credit/debit card processors such as Solo and Switch in the UK.

Parameters:

  • aValue - the credit card issue number

setCreditCardNumber(String) 
setCreditCardNumber(aValue: String): void

Sets the credit card number for this payment.

Parameters:

  • aValue - the new value of the credit card number.

setCreditCardToken(String) 
setCreditCardToken(token: String): void

Secure credit card data can be replaced by a token by utilizing a tokenization provider, which securely stores the credit card data using the token as a key. The stored data can later reused by including the token in a request. In this way credit card processes such as authorization and capture can be implemented without being responsible for persisting the credit card data.

An Exception will be thrown when the token is null or blank.

When setting a credit card token, the account information (including the creditcard number) is masked and all creditcard attributes are frozen and an attempt to change will be result in an exception.

Parameters:

  • token - the token

See Also:

setCreditCardType(String) 
setCreditCardType(aValue: String): void

Sets the type of the credit card.

Parameters:

  • aValue - the type of the credit card.

setCreditCardValidFromMonth(Number) 
setCreditCardValidFromMonth(aValue: Number): void

Sets the month of the year in which the credit card became valid (1-12). This attribute is not used by all credit card types

Parameters:

  • aValue - the month of the year in which the credit card became valid (1-12).

setCreditCardValidFromYear(Number) 
setCreditCardValidFromYear(aValue: Number): void

Sets the year in which the credit card became valid, such as '2001'. This attribute is not used by all credit card types.

Parameters:

  • aValue - the year in which the credit card became valid

setGiftCertificateCode(String) 
setGiftCertificateCode(giftCertificateCode: String): void

Sets the Gift Certificate code for this Payment Instrument.

Parameters:

  • giftCertificateCode - the Gift Certificate code.

setGiftCertificateID(String) 
setGiftCertificateID(giftCertificateID: String): void

Sets the Gift Certificate ID for this Payment Instrument.

Parameters:

  • giftCertificateID - the Gift Certificate ID.

Deprecated:

Use setGiftCertificateCode(String)

Warning

Open Commerce API (deprecated)
Shop Baskets (deprecated)
Shop Categories (deprecated)
Shop Content (deprecated)
Shop Content Search (deprecated)
Shop Custom Objects (deprecated)
Shop Customers (deprecated)
Shop Folders (deprecated)
Shop Gift Certificate (deprecated)
Shop Order Search (deprecated)
Shop Orders (deprecated)
Shop Price Adjustment Limits (deprecated)
Shop Product Lists (deprecated)
Shop Product Search (deprecated)
Shop Products (deprecated)
Shop Promotions (deprecated)
Shop Search Suggestion (deprecated)
Shop Sessions (deprecated)
Shop Site (deprecated)
Shop Stores (deprecated)
Data A/B Test Search (deprecated)
Data A/B Tests (deprecated)
Data Alerts (deprecated)
Data Campaign Search (deprecated)
Data Campaigns (deprecated)
Data Cartridges (deprecated)
Data Catalog Search (deprecated)
Data Catalogs (deprecated)
Data Category Search (deprecated)
Data Code Versions (deprecated)
Data Coupon Redemption Search (deprecated)
Data Coupon Search (deprecated)
Data Coupons (deprecated)
Data Custom Object Definitions (deprecated)
Data Custom Objects (deprecated)
Data Custom Objects Search (deprecated)
Data Customer Group Search (deprecated)
Data Customer Groups (deprecated)
Data Customer Lists (deprecated)
Data Gift Certificate Search (deprecated)
Data Gift Certificates (deprecated)
Data Global Custom Objects (deprecated)
Data Global Locale Info (deprecated)
Data Global Preferences (deprecated)
Data Global Site Preferences (deprecated)
Data Inventory List Search (deprecated)
Data Inventory Lists (deprecated)
Data Job Execution Search (deprecated)
Data Jobs (deprecated)
Data Libraries (deprecated)
Data Locale Info (deprecated)
Data Log Requests (deprecated)
Data Metrics (deprecated)
Data OCAPI Configs (deprecated)
Data Orders (deprecated)
Data Permissions (deprecated)
Data Product Search (deprecated)
Data Products (deprecated)
Data Promotion Campaign Assignment Search (deprecated)
Data Promotion Search (deprecated)
Data Promotions (deprecated)
Data Recommender Names (deprecated)
Data Role Search (deprecated)
Data Roles (deprecated)
Data Settings (deprecated)
Data Site Preferences (deprecated)
Data Site Search (deprecated)
Data Sites (deprecated)
Data Slot Configuration Campaign Assignment Search (deprecated)
Data Slot Configuration Search (deprecated)
Data Slot Configurations (deprecated)
Data Slot Search (deprecated)
Data Slots (deprecated)
Data Sorting Rule Search (deprecated)
Data Source Code Group Search (deprecated)
Data Source Code Groups (deprecated)
Data Store Search (deprecated)
Data Stores (deprecated)
Data System Object Definition Search (deprecated)
Data System Object Definitions (deprecated)
Data User Search (deprecated)
Data Users (deprecated)
Script API
B2C Commerce Script API 26.4
TopLevel
dw.alert
dw.campaign
dw.catalog
dw.content
dw.crypto
dw.customer
dw.customer.oauth
dw.customer.shoppercontext
dw.experience
dw.experience.cms
dw.experience.image
dw.extensions.applepay
dw.extensions.facebook
dw.extensions.paymentapi
dw.extensions.paymentrequest
dw.extensions.payments
dw.extensions.pinterest
dw.io
dw.job
dw.net
dw.object
dw.order
AbstractItem
AbstractItemCtnr
Appeasement
AppeasementItem
Basket
BasketMgr
BonusDiscountLineItem
CouponLineItem
CreateAgentBasketLimitExceededException
CreateBasketFromOrderException
CreateCouponLineItemException
CreateOrderException
CreateTemporaryBasketLimitExceededException
GiftCertificate
GiftCertificateLineItem
GiftCertificateMgr
GiftCertificateStatusCodes
Invoice
InvoiceItem
LineItem
LineItemCtnr
Order
OrderAddress
OrderItem
OrderMgr
OrderPaymentInstrument
OrderProcessStatusCodes
PaymentCard
PaymentInstrument
PaymentMethod
PaymentMgr
PaymentProcessor
PaymentStatusCodes
PaymentTransaction
PriceAdjustment
PriceAdjustmentLimitTypes
ProductLineItem
ProductShippingCost
ProductShippingLineItem
ProductShippingModel
Return
ReturnCase
ReturnCaseItem
ReturnItem
Shipment
ShipmentShippingCost
ShipmentShippingModel
ShippingLineItem
ShippingLocation
ShippingMethod
ShippingMgr
ShippingOrder
ShippingOrderItem
SumItem
TaxGroup
TaxItem
TaxMgr
TrackingInfo
TrackingRef
dw.order.hooks
dw.rpc
dw.sitemap
dw.suggest
dw.svc
dw.system
dw.template
dw.util
dw.value
dw.web
dw.ws
B2C Commerce Developer Sandbox REST API

DID THIS ARTICLE SOLVE YOUR ISSUE?
Let us know so we can improve!