Product Information API: GET /{reference} Endpoint

import express from "express";
const app = express();
app.use(express.json());

app.get("/payments/:reference", (req, res) => {
  const auth = req.headers["authorization"];
  if (auth !== `Bearer ${process.env.VTPE_API_SECRET}`) {
    return res.status(401).json({ error: "UNAUTHORIZED", errorMessage: "Invalid or missing API Secret" });
  }

  const { reference } = req.params;

  // Look up reference in your database
  const order = db.findOrder(reference);

  if (!order) {
    return res.status(404).json({ error: "NOT_FOUND", errorMessage: "Reference not found" });
  }
  if (order.isPaid) {
    return res.status(409).json({ error: "ALREADY_PAID", errorMessage: "Payment already completed" });
  }

  return res.json({
    reference: order.reference,
    total_amount: order.totalAmount,
    currency: order.currency,
    amount_detail: order.amountDetail ?? [],
    details: order.details ?? []
  });
});

from flask import Flask, request, jsonify
import os

app = Flask(__name__)

@app.route("/payments/<reference>")
def get_payment(reference):
    auth = request.headers.get("Authorization", "")
    if auth != f"Bearer {os.environ['VTPE_API_SECRET']}":
        return jsonify({"error": "UNAUTHORIZED", "errorMessage": "Invalid or missing API Secret"}), 401

    # Look up reference in your database
    order = db.find_order(reference)

    if not order:
        return jsonify({"error": "NOT_FOUND", "errorMessage": "Reference not found"}), 404
    if order.is_paid:
        return jsonify({"error": "ALREADY_PAID", "errorMessage": "Payment already completed"}), 409

    return jsonify({
        "reference": order.reference,
        "total_amount": order.total_amount,
        "currency": order.currency,
        "amount_detail": order.amount_detail or [],
        "details": order.details or []
    })