Token Management

Download card art

Return the card art image itself, ready to be rendered by a browser. The response body is the raw image and the Content-Type header reflects the stored asset.

This is the endpoint that a token’s card_art_url attribute points at. Use that URL as it is given to you — the {id} in the path is the ID of the card art, not of the token, so the URL cannot be constructed from a token ID.

This endpoint takes no API key, so the URL can be used directly as the src of an image element in your storefront. The URL contains an unguessable identifier and the response carries the image only — no token attributes and no cardholder data.

GET

tokens

card-art

{id}

Download card art

curl --request GET \
  --url https://sandbox.hellgate.io/tokens/card-art/{id}

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://sandbox.hellgate.io/tokens/card-art/{id}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://sandbox.hellgate.io/tokens/card-art/{id}"

	req, _ := http.NewRequest("GET", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://sandbox.hellgate.io/tokens/card-art/{id}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body

"<string>"

{
  "code": 404,
  "message": "The requested resource was not found.",
  "classifier": "NOT_FOUND"
}

Path Parameters

string<uuid>

required

The ID of the card art, taken from the token's card_art_url

Response

Success response

The response is of type file.

Forward card dataThis endpoint allows to securely forward cardholder data to a certified third-party provider. It will inject sensitive cardholder data, referenced by a Commerce token, into the request before forwarding it. Commerce requires certain HTTP headers for this feature. These headers are reserved and cannot be used by the caller: | Header | Required | Description | | ----------------- | -------- | ------------------------------------------------------------ | | `x-api-key` | Yes | Authentication of the request. | | `x-hellgate-token`| Yes | Identify the Commerce token to use for the request. | | `x-destination-url` | Yes | Define the target URL to which the request shall be forwarded. | | `x-hellgate-version` | No | Define the API version to use for the request. | Refer to the general documentation about [forwarding senstive data](/products/commerce/v2/guides/forwarding) for more information.

⌘I

Download card art

curl --request GET \
  --url https://sandbox.hellgate.io/tokens/card-art/{id}

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://sandbox.hellgate.io/tokens/card-art/{id}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://sandbox.hellgate.io/tokens/card-art/{id}"

	req, _ := http.NewRequest("GET", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://sandbox.hellgate.io/tokens/card-art/{id}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body

"<string>"

{
  "code": 404,
  "message": "The requested resource was not found.",
  "classifier": "NOT_FOUND"
}

Getting Started

Payments

Authentications

Customer Data

Tokens

Configuration

Automation

Download card art

Path Parameters

Response