Assign saved card (TapPay token) to basket

Assigns a saved TapPay card to a basket and returns eligible promotion activations.

Flow:

1. Validates token format ({card_id}||{customer_id}). Invalid format → returns [].

2. Extracts BIN-6 from masked_card_number[:6].

3. Checks for matching active promotions. No match → clears PreOrder, returns [].

4. Calls TapPay API to resolve the full card (bin_6, fingerprint).

5. Validates TapPay BIN matches masked_card_number prefix. Mismatch → returns [].

6. Creates or updates PreOrder and recreates PreOrderCall records.

Token format: {card_id}||{customer_id}, e.g. "card_E6VV262511||cus_TS03A272".

post

Body

application/json

card_tokenstringRequired

TapPay card token in the format {card_id}||{customer_id}

Example: card_E6VV262511||cus_TS03A272

masked_card_numberstring · min: 6Required

Masked card number. Minimum 6 characters. The first 6 characters are used as the BIN-6 prefix for promotion matching. Must match the BIN returned by TapPay.

Example: 512345******0008

basket_idintegerRequired

Omnitron basket ID

Example: 12345

basket_modified_datestring · date-timeRequired

Last modification timestamp of the basket (ISO 8601)

Example: 2025-06-26T10:30:00Z

currencystring · enumOptional

ISO 4217 currency codes supported by Bankaci

Example: aedPossible values:

Responses

200

Eligible promotion activations

application/json

422

Validation error

application/json

post/preorder/saved_card/

HTTPcURLJavaScriptPython

POST /api/v1/preorder/saved_card/ HTTP/1.1
Host: your-bankaci-instance.example.com
Content-Type: application/json
Accept: */*
Content-Length: 167

{
  "card_token": "card_E6VV262511||cus_TS03A272",
  "masked_card_number": "512345******0008",
  "basket_id": 12345,
  "basket_modified_date": "2025-06-26T10:30:00Z",
  "currency": "aed"
}

{
  "basket_offers": [
    {
      "basket_offer_id": 123,
      "session_code": "3fa85f64-5717-4562-b3fc-2c963f66afa6"
    }
  ]
}