Payment Flows

Learn how Bamboo handles the full payment lifecycle, including API and Redirect flows, card validation, purchase creation, capture, and refunds.

This guide introduces the complete payment flow in Bamboo, from purchase creation and authorization, to capture and post-authorization operations like cancellation or refund.

🔒

All operations are executed via RESTful API using application/json. HTTPS with TLS 1.3 is mandatory.

Before diving into individual operations, it’s important to understand the two types of flows supported by the platform.



Payment Flows

Depending on the payment method, Bamboo supports two types of transaction flows.


ℹ️

Each payment method specifies whether it uses API or Redirect flow in its documentation page.



API Flow

Used for direct card transactions or tokenized flows. The full payment is processed via backend, and the final status is returned in the same response.

  1. BuyThe customer initiates the transaction on the merchant site.
  2. HTTP POSTThe merchant sends a POST /api/Purchase request to Bamboo.
  3. AuthorizeBamboo forwards the request to the acquirer for processing.
  4. Authorization OKThe acquirer returns the authorization result.
  5. ResponseBamboo sends the result (COMPLETED, REJECTED, etc.) to the merchant.
  6. OKThe merchant displays the result to the customer.


Redirect Flow

Used for payment methods that require the payer to complete the transaction in an external interface (including QR codes, wallets).

  1. BuyThe customer initiates the transaction.
  2. HTTP POSTThe merchant sends the purchase request to Bamboo.
  3. Pending for redirectionBamboo responds with an Action.URL.
  4. Redirection URLThe merchant redirects the customer.
  5. RedirectThe customer is taken to the payment interface.
  6. Payment PageThe page shows transaction details and form.
  7. Submit PaymentThe customer enters the required data and confirms the payment.
  8. Authorization OKThe acquirer authorizes the transaction.
  9. Authorization ResponseBamboo sends the result to the merchant.
  10. OKThe merchant displays the result to the customer.
💡

Redirect flows always include an Action object in the API response. Monitor status via webhooks to detect when the transaction moves from PENDING to COMPLETED or REJECTED.



Payment Operations

The following operations define the full lifecycle of a purchase in Bamboo, from validation to capture.