index.js

const express = require('express');
const app = express();
const SquareConnect = require('square-connect');
const {
  PaymentsApi,
  OrdersApi,
  LocationsApi,
  CustomersApi,
  CreateCustomerCardRequest
} = require('square-connect');
const defaultClient = SquareConnect.ApiClient.instance;
const crypto = require('crypto');
const bodyParser = require('body-parser');

app.use(bodyParser.urlencoded({ extended: false }));
app.use(bodyParser.json());

let oauth2 = defaultClient.authentications['oauth2'];
oauth2.accessToken = process.env.ACCESS_TOKEN;

// Use API_BASE_PATH to switch between sandbox env and production env
// sandbox: https://connect.squareupsandbox.com
// production: https://connect.squareup.com
defaultClient.basePath = process.env.API_BASE_PATH;

const paymentsApi = new PaymentsApi();
const ordersApi = new OrdersApi();
const locationsApi = new LocationsApi();
const customersApi = new CustomersApi();

app.post('/chargeForCookie', async (request, response) => {
  const requestBody = request.body;

  try {
    const locations = await locationsApi.listLocations();
    const locationId = locations.locations[0].id;

    const createOrderRequest = {
      idempotency_key: crypto.randomBytes(12).toString('hex'),
      order: {
        line_items: [
          {
            name: "Cookie 🍪",
            quantity: "1",
            base_price_money: {
              amount: 100,
              currency: "USD"
            }
          }
        ]
      }
    }
    const order = await ordersApi.createOrder(locationId, createOrderRequest);

    const createPaymentRequest = {
      "idempotency_key": crypto.randomBytes(12).toString('hex'),
      "source_id": requestBody.nonce,
      "amount_money": {
        ...order.order.total_money,
      },
      "order_id": order.order.id,
      "autocomplete": true,
    };
    const createPaymentResponse = await paymentsApi.createPayment(createPaymentRequest);
    console.log(createPaymentResponse.payment);

    response.status(200).json(createPaymentResponse.payment);
  } catch (e) {
    delete e.response.req.headers;
    delete e.response.req._headers;
    console.log(
      `[Error] Status:${e.status}, Messages: ${JSON.stringify((JSON.parse(e.response.text)).errors, null, 2)}`);

    const { errors } = (JSON.parse(e.response.text));
    sendErrorMessage(errors, response);
  }
});

app.post('/chargeCustomerCard', async (request, response) => {
  const requestBody = request.body;
  const locations = await locationsApi.listLocations();
  const locationId = locations.locations[0].id;

  const createOrderRequest = getOrderRequest();

  const order = await ordersApi.createOrder(locationId, createOrderRequest);

  try {
    const chargeBody = {
      "idempotency_key": crypto.randomBytes(12).toString('hex'),
      "customer_id": requestBody.customer_id,
      "source_id": requestBody.customer_card_id,
      "amount_money": {
        ...order.order.total_money,
      },
      "order_id": order.order.id
    };
    const payment = await paymentsApi.createPayment(chargeBody);
    console.log(payment.payment);

    response.status(200).json(payment.payment);
  } catch (e) {
    delete e.response.req.headers;
    delete e.response.req._headers;
    console.log(
      `[Error] Status:${e.status}, Messages: ${JSON.stringify((JSON.parse(e.response.text)).errors, null, 2)}`);

    const { errors } = (JSON.parse(e.response.text));
    sendErrorMessage(errors, response);
  }
});

app.post('/createCustomerCard', async (request, response) => {
  const requestBody = request.body;
  console.log(requestBody);
  try {
    const body = new CreateCustomerCardRequest(requestBody.nonce);
    console.log(body);
    const customerCardResponse = await customersApi.createCustomerCard(requestBody.customer_id, body);
    console.log(customerCardResponse.card);

    response.status(200).json(customerCardResponse.card);
  } catch (e) {
    delete e.response.req.headers;
    delete e.response.req._headers;
    console.log(
      `[Error] Status:${e.status}, Messages: ${JSON.stringify((JSON.parse(e.response.text)).errors, null, 2)}`);

    const { errors } = (JSON.parse(e.response.text));
    sendErrorMessage(errors, response);
  }
});

function getOrderRequest() {
  return {
    idempotency_key: crypto.randomBytes(12).toString('hex'),
    order: {
      line_items: [
        {
          name: "Cookie 🍪",
          quantity: "1",
          base_price_money: {
            amount: 100,
            currency: "USD"
          }
        }
      ]
    }
  }
}

function sendErrorMessage(errors, response) {
  switch (errors[0].code) {
    case "CARD_DECLINED":
      response.status(400).send({
        errorMessage: "Card declined. Please re-enter card information."
      })
      break;
    case "VERIFY_CVV_FAILURE":
      response.status(400).send({
        errorMessage: "Invalid CVV. Please re-enter card information."
      })
      break;
    case "VERIFY_AVS_FAILURE":
      response.status(400).send({
        errorMessage: "Invalid Postal Code. Please re-enter card information."
      })
      break;
    case "INVALID_EXPIRATION":
      response.status(400).send({
        errorMessage: "Invalid expiration date. Please re-enter card information."
      })
      break;
    case "CARD_TOKEN_USED":
      response.status(400).send({
        errorMessage: "Card token already used; Please try re-entering card details."
      })
      break;
    case "INVALID_CARD":
      response.status(400).send({
        errorMessage: "Invalid card number; Please try re-entering card details."
      })
      break;
    default:
      response.status(400).send({
        errorMessage: "Payment error. Please contact support if issue persists."
      })
      break;
  }
}

// listen for requests :)
const listener = app.listen(process.env.PORT, function () {
  console.log('Your app is listening on port ' + listener.address().port);
});