Gestion des Cartes

1
// POST /api/payments/cards
2
const response = await fetch('/api/payments/cards', {
3
  method: 'POST',
4
  headers: { 'Content-Type': 'application/json' },
5
  body: JSON.stringify({
6
    type: 'virtual',
7
    currency: 'eur',
8
    spendingLimit: {
9
      amount: 500000,        // 5000.00 EUR en centimes
10
      interval: 'monthly',   // "daily" | "weekly" | "monthly" | "yearly"
11
    },
12
    metadata: {
13
      label: 'Carte achats en ligne',
14
    },
15
  }),
16
});
17
18
const { data: card } = await response.json();
19
// card.id = "card_7stu8vwx9yz"
20
// card.number = "4242 4242 4242 1234" (visible une seule fois)
21
// card.cvc = "123" (visible une seule fois)

1
// Geler une carte
2
await fetch('/api/payments/cards/card_7stu8vwx9yz/freeze', {
3
  method: 'POST',
4
});
5
6
// Degeler une carte
7
await fetch('/api/payments/cards/card_7stu8vwx9yz/unfreeze', {
8
  method: 'POST',
9
});

1
// PATCH /api/payments/cards/:id
2
await fetch('/api/payments/cards/card_7stu8vwx9yz', {
3
  method: 'PATCH',
4
  headers: { 'Content-Type': 'application/json' },
5
  body: JSON.stringify({
6
    spendingLimit: {
7
      amount: 1000000,       // 10 000.00 EUR
8
      interval: 'monthly',
9
    },
10
    allowedCategories: [
11
      'online_shopping',
12
      'travel',
13
      'restaurants',
14
    ],
15
  }),
16
});

// DELETE /api/payments/cards/:id
await fetch('/api/payments/cards/card_7stu8vwx9yz', {
  method: 'DELETE',
});
// Status: 200 OK - Carte resiliee definitivement

1
import { z } from 'zod';
2
3
// Schema de validation carte
4
export const cardSchema = z.object({
5
  type: z.enum(['virtual', 'physical']),
6
  currency: z.string().length(3).default('eur'),
7
  spendingLimit: z.object({
8
    amount: z.number().positive().max(10000000), // Max 100K EUR
9
    interval: z.enum(['daily', 'weekly', 'monthly', 'yearly']),
10
  }).optional(),
11
  allowedCategories: z.array(z.string()).optional(),
12
  blockedMerchants: z.array(z.string()).optional(),
13
});
14
15
// Masquage du numero de carte
16
export function maskCardNumber(last4: string): string {
17
  return `**** **** **** ${last4}`;
18
}
19
20
// Verification 3D Secure requise
21
export function requires3DS(amount: number, currency: string): boolean {
22
  // SCA exemption: montants < 30 EUR
23
  if (currency === 'eur' && amount < 3000) return false;
24
  return true;
25
}