API Documentation » \OrdersApiV2Controller

category	System
package	ApiV2Controllers

AbstractApiV2Controller Constructor

__construct(\Slim\Slim $api, array $uri)

inherited

Call this constructor from every child controller class in order to set the Slim instance and the request routes arguments to the class.

deprecated	The "__initialize" method will is deprecated and will be removed in a future version. Please use the new "init" for bootstrapping your child API controllers.

Throws	\HttpApiV2Exception Through _validateRequest

Arguments

$api

\Slim\Slim

Slim framework instance, used for request/response manipulation.

$uri

array

This array contains all the segments of the current request, starting from the resource.

History handler for modified, changed and deleted query parameters.

_changeHistory()



Throws	\HttpApiV2Exception

Get the relative URI for the mapped controller.

_getMappedControllerUri(\IntType $index, array $uri) : \the

inherited

Arguments

$index

\IntType

Contains the URI position relative to the current controller.

$uri

array

Contains the original URI

Response

\the

mapped controller URI

Initialize pager and sorters fields.

_initializePagingAndSortingFields()

inherited

One of the common functionaries of the APIv2 is the pagination and sorting. The fields initialized by this method are helpers to facilitate the access to sort and pagination information

Include links to response resources.

_linkResponse(array &$response)

inherited

The APIv2 operates with simple resources that might be linked with other resources. This architecture promotes flexibility so that API consumers can have a simpler structure. This method will search for existing external resources and will add a link to the end of each resource.

IMPORTANT: If for some reason you need to include custom links to your resources do not use this method. Include them inside your controller method manually.

NOTICE #1: This method will only search at the first level of the resource. That means that nested ID values will not be taken into concern.

NOTICE #2: You can provide both associative (single response item) or sequential (multiple response items) arrays and this method will adjust the links accordingly.

Arguments

$response

array

Passed by reference, new links will be appended into the end of each resource.

Add location header to a specific response.

_locateResource(string $p_name, integer $p_id)

inherited

Use this method whenever you want the "Location" header to point to an existing resource so that clients can use it to fetch that resource without having to generate the URL themselves.


Throws	\InvalidArgumentException If the arguments contain an invalid value.

Arguments

$p_name

string

$p_id

integer

Map the sub-resource to another controller.

_mapResponse(array $criteria) : boolean

inherited

Some API resources contain many subresources which makes the creation of a single controller class complicated and hard to maintain. This method will forward the request to a another controller by checking the provided criteria.

Example:

$criteria = array( 'items' => 'OrdersItemsAttributesApiV2Controller', 'totals' => 'OrdersTotalsApiV2Controller' );

Notice: Each controller should map a direct subresource and not deeper ones. This way every API controller is responsible to map its direct subresources.

Throws	\HttpApiV2Exception If the subresource is not supported by the API.

Arguments

$criteria

array

An array containing the mapping criteria.

Response

boolean

Returns whether the request was eventually mapped.

Minimize response using the $fields parameter.

_minimizeResponse(array &$response)

inherited

APIv2 supports the GET "fields" parameter which enables the client to select the exact fields to be included in the response. It does not support nested fields, only first-level.

You can provide both associative (single response item) or sequential (multiple response items) arrays and this method will adjust the links accordingly.

Arguments

$response

array

Passed by reference, it will be minified to the required fields.

Paginate response using the $page and $per_page GET parameters.

_paginateResponse(array &$response, integer $p_totalItemCount = null)

inherited

One of the common functionalities of the APIv2 is the pagination and this can be easily achieved by this function which will update the response with the records that need to be returned. This method will automatically set the pagination headers in the response so that client apps can easily navigate through results.

Arguments

$response

array

Passed by reference, it will be paginated according to the provided parameters.

$p_totalItemCount

integer

|null Optionally set the total number of resources.

[PRIVATE] Prepare response headers.

_prepareResponse()

inherited

This method will prepare default attributes of the API responses. Further response settings must be set explicitly from each controller method separately.

Not available to child-controllers (private method).

Sub-Resource Orders Search

_search()

This method will search all orders with a given search condition.

see	\OrdersApiV2Controller::post()

Perform a search on the response array.

_searchResponse(array &$response, string $p_keyword)

inherited

Normally the best way to filter the results is through the corresponding service but some times there is not specific method for searching the requested resource or subresource. When this is the case use this method to filter the results of the response before returning them back to the client.


Throws	\InvalidArgumentException If search keyword parameter is not a string.

Arguments

$response

array

Contains the response data to be written.

$p_keyword

string

The keyword to be used for the search.

_setJsonValue

_setJsonValue(string $jsonString, string $property, string $value) : string

inherited

Arguments

$jsonString

string

The json formatted string which should be updated.

$property

string

The name or key of the property which should be updated.

$value

string

The new value which should be set.

Response

string

The updated json formatted string.

[PRIVATE] Set header pagination links.

_setPaginationHeader(integer $p_currentPage, integer $p_itemsPerPage, integer $p_totalItemCount)

inherited

Useful for GET responses that return multiple items to the client. The client can use the links to navigate through the records without having to construct them on its own.

link	http://www.w3.org/wiki/LinkHeader

Throws	\HttpApiV2Exception If one of the parameters are invalid.

Arguments

$p_currentPage

integer

Current request page number.

$p_itemsPerPage

integer

The number of items to be returned in each page.

$p_totalItemCount

integer

Total number of the resource items.

[PRIVATE] Set header pagination links.

_setPaginationHeaderByPage(\Pager $pager = null, integer $p_totalItemCount)

inherited

Useful for GET responses that return multiple items to the client. The client can use the links to navigate through the records without having to construct them on its own.

link	http://www.w3.org/wiki/LinkHeader

Throws	\HttpApiV2Exception If one of the parameters are invalid.

Arguments

$pager

\Pager

Pager object with pagination information

$p_totalItemCount

integer

Total number of the resource items.

[PRIVATE] Handle rate limit headers.

_setRateLimitHeader()

inherited

There is a cache file that will store each user session and provide a security mechanism that will protect the shop from DOS attacks or service overuse. Each session will use the hashed "Authorization header" to identify the client. When the limit is reached a "HTTP/1.1 429 Too Many Requests" will be returned.

Headers: X-Rate-Limit-Limit >> Max number of requests allowed. X-Rate-Limit-Remaining >> Number of requests remaining. X-Rate-Limit-Reset >> UTC epoch seconds until the limit is reset.

Important: This method will be executed in every API call and it might slow the response time due to filesystem operations. If the difference is significant then it should be optimized.

Not available to child-controllers (private method).



Throws	\HttpApiV2Exception If request limit exceed - 429 Too Many Requests

Sort response array with the "sort" GET parameter.

_sortResponse(array &$response)

inherited

This method supports nested sort values, so by providing a "+address.street" value to the "sort" GET parameter the records will be sort by street value in ascending order. Method supports sorting up to 5 fields.

Important #1: This method has some advantages and disadvantages over the classic database sort mechanism. First it does not need mapping between the API fields and the database fields. Second it does not depend on external system code to sort the response items, so if for example a domain-service does not support sorting the result can still be sorted before sent to the client. The disadvantages are that it will only support a predefined number of fields and this is a trade-off because the method should not use the "eval" function, which will introduce security risks. Furthermore it might be a bit slower than the database sorting.

Important #2: This method is using PHP's array_multisort which by default will sort strings in a case sensitive manner. That means that strings starting with a capital letter will come before strings starting with a lowercase letter. http://php.net/manual/en/function.array-multisort.php

Example: // will sort ascending by customer ID and descending by customer company api.php/v2/customers?sort=+id,-address.company

Arguments

$response

array

Passed by reference, contains an array of the multiple items that will returned as a response to the client.

[PRIVATE] Validate request before proceeding with response.

_validateRequest()

inherited

This method will validate the request headers, user authentication and other parameters before the controller proceeds with the response.

Not available to child-controllers (private method).



Throws	\HttpApiV2Exception If validation fails - 415 Unsupported media type.

Write JSON encoded response data.

_writeResponse(array $response, integer $p_statusCode = 200)

inherited

Use this method to write a JSON encoded, pretty printed and unescaped response to the client consumer. It is very important that the API provides pretty printed responses because it is easier for users to debug and develop.

IMPORTANT: PHP v5.3 does not support the JSON_PRETTY_PRINT and JSON_UNESCAPED_SLASHES so this method will check for their existance and then use them if possible.

Arguments

$response

array

Contains the response data to be written.

$p_statusCode

integer

(optional) Provide a custom status code for the response, default 200 - Success.

delete

delete()

api

apiVersion	2.1.0
apiName	DeleteOrder
apiGroup	Orders
apiDescription	Remove an entire Order record from the database. This method will also remove the order-items along with their attributes and the order-total records. To see an example usage take a look at `docs/REST/samples/order-service/remove_order.php`
apiExample	{curl} Delete Order With ID = 400597 curl -X DELETE --user admin@shop.de:12345 http://shop.de/api.php/v2/orders/400597
apiSuccessExample	{json} Success-Response { "code": 200, "status": "success", "action": "delete", "resource": "Order", "orderId": 400597 }
apiError	400-BadRequest The order ID value was invalid.
apiErrorExample	Error-Response HTTP/1.1 400 Bad Request { "code": 400, "status": "error", "message": "Order record ID was not provided in the resource URL." }

get

get()

api

apiVersion	2.3.0
apiName	GetOrder
apiGroup	Orders
apiDescription	Get multiple or a single order record through a GET request. This method supports all the GET parameters that are mentioned in the "Introduction" section of this documentation. Important: Whenever you make requests that will return multiple orders the response will contain a smaller version of each order record called order-list-item. This is done for better performance because the creation of a complete order record takes significant time (many objects are involved). If you still need the complete data of an order record you will have to make an extra GET request with the ID provided.
apiExample	{curl} Get All Orders curl -i --user admin@shop.de:12345 http://shop.de/api.php/v2/orders {curl} Get Order With ID = 400242 curl -i --user admin@shop.de:12345 http://shop.de/api.php/v2/orders/400242 {curl} Search Orders curl -i --user admin@shop.de:12345 http://shop.de/api.php/v2/orders?q=DE {curl} Get Order's Items curl -i --user admin@shop.de:12345 http://shop.de/api.php/v2/orders/400573/items {curl} Get Order Item's Attributes curl -i --user admin@shop.de:12345 http://shop.de/api.php/v2/orders/400573/items/57/attributes {curl} Get Orders Totals curl -i --user admin@shop.de:12345 http://shop.de/api.php/v2/orders/400573/totals

getCallableResource

getCallableResource( $controller, array $mappedURI, \Slim\Slim $api)

inherited static

Arguments

$controller

$mappedURI

array

$api

\Slim\Slim

Initializes API Controller

init()

patch

patch()

api

apiVersion	2.3.0
apiName	UpdateOrderStatus
apiGroup	Orders
apiDescription	Use this method if you want to update the status of an existing order and create an order history entry. The status history entry must also contain extra information as shown in the JSON example.
apiParamExample	{json} Order Status History { "statusId": 1, "comment": "This is the entry comment", "customerNotified": false, "customerId": 1 }
apiParam	{Number} statusId The new status ID will also be set in the order record. {String} comment Assign a comment to the status history entry. {Boolean} customerNotified Defines whether the customer was notified by this change. {Number} customerId The customer ID of the admin account.
apiSuccess	(200) Request-Body If successful, this method returns the complete order status history resource in the response body.
apiSuccessExample	{json} Success-Response { "id": 984, "statusId": 3, "dateAdded": "2016-01-22 10:52:11", "comment": "This is the entry's comments", "customerNotified": true, "customerId": 1 }
apiError	400-BadRequest Order data were not provided or order record ID was not provided or is invalid.
apiErrorExample	Error-Response (Empty request body) HTTP/1.1 400 Bad Request { "code": 400, "status": "error", "message": "Order data were not provided." } Error-Response (Missing or invalid ID) HTTP/1.1 400 Bad Request { "code": 400, "status": "error", "message": "Order record ID was not provided or is invalid." }

post

post()

api

apiVersion	2.2.0
apiName	CreateOrder
apiGroup	Orders
apiDescription	This method enables the creation of a new order into the system. The order can be bound to an existing customer or be standalone as implemented in the OrderService. Make sure that you check the Order resource representation. To see an example usage take a look at `docs/REST/samples/order-service/create_order.php`.
apiParamExample	{json} Request-Body { "id": 400210, "statusId": 1, "purchaseDate": "2015-11-06 12:22:39", "currencyCode": "EUR", "languageCode": "DE", "totalWeight": 0.123, "comment": "", "paymentType": { "title": "cod", "module": "cod" }, "shippingType": { "title": "Pauschale Versandkosten (Standar", "module": "flat_flat" }, "customer": { "id": 1, "number": "", "email": "admin@shop.de", "phone": "0421 - 22 34 678", "vatId": "", "status": { "id": 0, "name": "Admin", "image": "admin_status.gif", "discount": 0, "isGuest": false } }, "addresses": { "customer": { "gender": "m", "firstname": "John", "lastname": "Doe", "company": "JD Company", "street": "Test Street", "houseNumber": "123", "additionalAddressInfo": "1. Etage", "suburb": "", "postcode": "28219", "city": "Bremen", "countryId": 81, "zoneId": 0, "b2bStatus": false }, "billing": { "gender": "m", "firstname": "John", "lastname": "Doe", "company": "JD Company", "street": "Test Street", "houseNumber": "123", "additionalAddressInfo": "1. Etage", "suburb": "", "postcode": "28219", "city": "Bremen", "countryId": 81, "zoneId": 0, "b2bStatus": false }, "delivery": { "gender": "m", "firstname": "John", "lastname": "Doe", "company": "JD Company", "street": "Test Street", "houseNumber": "123", "additionalAddressInfo": "1. Etage", "suburb": "", "postcode": "28219", "city": "Bremen", "countryId": 81, "zoneId": 0, "b2bStatus": false } }, "items": [ { "id": 1, "model": "12345-s-black", "name": "Ein Artikel", "quantity": 1, "price": 11, "finalPrice": 11, "tax": 19, "isTaxAllowed": true, "discount": 0, "shippingTimeInformation": "", "checkoutInformation": "Checkout information goes here ...", "quantityUnitName": "Liter", "attributes": [ { "id": 1, "name": "Farbe", "value": "rot", "price": 0, "priceType": "+", "optionId": 1, "optionValueId": 1, "combisId": null } ], "downloadInformation": [ { "filename": "Dokument.pdf", "maxDaysAllowed": 5, "countAvailable": 14 } ], "addonValues": { "productId": "2", "quantityUnitId": "1" } } ], "totals": [ { "id": 1, "title": "Zwischensumme:", "value": 50, "valueText": "50,00 EUR", "class": "ot_subtotal", "sortOrder": 10 } ], "statusHistory": [ { "id": 1, "statusId": 1, "dateAdded": "2015-11-06 12:22:39", "comment": "", "customerNotified": true } ], "addonValues": { "customerIp": "", "downloadAbandonmentStatus": "0", "serviceAbandonmentStatus": "0", "ccType": "", "ccOwner": "", "ccNumber": "", "ccExpires": "", "ccStart": "", "ccIssue": "", "ccCvv": "" } }
apiParam	{String} statusId Order status ID, use one of the existing statuses IDs. {String} purchaseDate Must have the 'Y-m-d H:i:s' format. {String} currencyCode Order's currency code, use one of the existing currency codes. {String} languageCode Use one of the existing language codes. {Number} totalWeight The total weight of the order items. {String} comment Order's comments. {Object} paymentType Contains information about the payment type, use values that match with the shop's modules. {String} paymentType.title The payment title. {String} paymentType.module The payment module name. {Object} shippingType Contains information about the shipping type, use values that match with the shop's modules. {String} shippingType.title The shipping title. {String} shippingType.module The shipping module name. {Object} customer Contains the order's customer information. {String} customer.number Customer's number (often referred as CID). {String} customer.email Customer's email address. {String} customer.phone Customer's telephone number. {String} customer.vatId Customer's VAT ID number. {Object} customer.status Contains information about the customer's status on the system. {Number} customer.status.id The customer's status ID must be one of the existing statuses in the shop. {String} customer.status.name The customer-status name. {String} customer.status.image The customer-status image (check the value from the shop). {Number} customer.status.discount The discount that is made to this customer status. {Boolean} customer.status.isGuest Defines whether the customer is a guest. {Object} addresses Contains the address information of the order. There are three different kind of addresses: customer, billing and delivery. {Object} addresses.customer Contains the customer-address data. {String} addresses.customer.gender The gender value can be either "m" or "f". {String} addresses.customer.firstname First name of the address block. {String} addresses.customer.lastname Last name of the address block. {String} addresses.customer.company Company name of the address block. {String} addresses.customer.street Street of the address block. {string} addresses.customer.houseNumber The house number of the address block. {string} addresses.customer.additionalAddressInfo Additional information of the address block. {String} addresses.customer.suburb Suburb of the address block. {String} addresses.customer.postcode Postcode of the address block. {String} addresses.customer.city City of the address block. {String} addresses.customer.countryId Country ID of the address block. You can use the "countries" resource of the API to get the available countries. {String} addresses.customer.zoneId Zone ID of the address block. You can use the "zones" resource of the API to get the available countries. {Boolean} addresses.customer.b2bStatus Whether the customer has the b2bStatus. {Object} addresses.billing{...} Contains the address block for the billing. It expects the same value types as the customer-address block. See the JSON example above. {Object} addresses.delivery{...} Contains the address block for the billing. It expects the same value types as the customer-address block. See the JSON example above. {Array} items Every order contains a list of order items which can also have their own attributes. {String} items.model Item's model value. {String} items.name Item's name value. {Number} items.quantity Quantity of the purchase. {Number} items.price The initial price of the order item. {Number} items.finalPrice The final price of the order item. {Number} items.tax The tax applied to the value. {Boolean} items.isTaxAllowed Whether tax is allowed. {Number} items.discount Percentage of the discount made for this order. {String} items.shippingTimeInformation Include shipping information to the order. {String} items.checkoutInformation Include checkout information to the order. {String} items.quantityUnitName The Quantity unit name of the order item. {Array} items.attributes Contains some attributes or properties of the order item. The difference between the attributes and the properties is that attributes must have the "optionId" and "optionValueId" values while properties must only have the "combisId" value. The properties system is still included as a fallback to old releases of the shop, so we will use the "attributes" term in this document. {String} items.attributes.name Attribute's name. {String} items.attributes.value Attribute's value. {Number} items.attributes.price Give the attributes price. {String} items.attributes.priceType Make sure that you use one of the existing price types of the shop. {Number} items.attributes.optionId Only-attributes need this value. {Number} items.attributes.optionValueId Only-attributes need this value. {Number} items.attributes.combisId Only-properties need this value. {Array} items.downloadInformation Contains the downloads of the order item. {String} items.downloadInformation.filename Contains a non empty filename. {Number} items.downloadInformation.maxDaysAllowed Contains the number of days where downloads are possible. {Number} items.downloadInformation.countAvailable Contains the number of possible downloads. {Object} items.addonValues (Optional) Contains key value pairs of additional order item data. {Array} totals Contains the order totals. The order totals are entries that display analytic information about the charges of the user. {String} totals.title Order total's title. {Number} totals.value The value stands for the money. {String} totals.valueText String representation of the value containing the currency code. {String} totals.class Internal order-total class. A list of possible values can be seen in the database once you create a complete order record. {Number} totals.sortOrder Defines the order of the totals list as they are being displayed. {Object} addonValues (Optional) Contains key value pairs of additional order data.
apiSuccess	(Success 201) Response-Body If successful, this method returns a complete Order resource in the response body.
apiError	400-BadRequest The body of the request was empty.
apiErrorExample	Error-Response HTTP/1.1 400 Bad Request { "code": 400, "status": "error", "message": "Order data were not provided." }

put

put()

api

apiVersion	2.2.0
apiName	UpdateOrder
apiGroup	Orders
apiDescription	Use this method to update an existing order record. It uses the complete order JSON resource so it might be useful to fetch it through a GET request, alter its values and PUT it back in order to perform the update operation. Take a look in the POST method for more detailed explanation on every resource property. To see an example usage take a look at `docs/REST/samples/order-service/update_order.php`
apiSuccess	Response-Body If successful, this method returns the updated Order resource in the response body.
apiError	400-BadRequest The body of the request was empty or the order record ID was not provided or is invalid.
apiErrorExample	Error-Response (Empty request body) HTTP/1.1 400 Bad Request { "code": 400, "status": "error", "message": "Order data were not provided." } Error-Response (Missing or invalid ID) HTTP/1.1 400 Bad Request { "code": 400, "status": "error", "message": "Order record ID was not provided or is invalid." }

Defines the default page offset for responses that return multiple items.

DEFAULT_PAGE_ITEMS

inherited

var

Default controller to be loaded when no resource was selected.

DEFAULT_CONTROLLER_NAME

inherited

var

Defines the maximum request limit for an authorized client.

DEFAULT_RATE_LIMIT

inherited

var

Defines the duration of an API session in minutes.

DEFAULT_RATE_RESET_PERIOD

inherited

var

Order write service.

orderWriteService : \OrderWriteService

var

Type(s)

\OrderWriteService

Order read service.

orderReadService : \OrderReadService

var

Type(s)

\OrderReadService

Order JSON serializer.

orderJsonSerializer : \OrderJsonSerializer

var

Type(s)

\OrderJsonSerializer

Order list item JSON serializer.

orderListItemJsonSerializer : \OrderListItemJsonSerializer

var

Type(s)

\OrderListItemJsonSerializer

Sub resources.

subresource : array

var

Type(s)

array

Sorter information array.

sorters : array

inherited

var

Type(s)

array

Pagination information.

pager : \Pager

inherited

var	pager

Type(s)

\Pager

Slim Framework instance is used to manipulate the request or response data.

api : \Slim\Slim

inherited

var

Type(s)

\Slim\Slim

Contains the request URI segments after the root api version segment.

uri : array

inherited

Example: URI - api.php/v2/customers/73/addresses CODE - $this->uri[1]; // will return '73'

var

Type(s)

array

OrdersApiV2Controller

Methods

AbstractApiV2Controller Constructor

Arguments

$api

$uri

History handler for modified, changed and deleted query parameters.

Get the relative URI for the mapped controller.

Arguments

$index

$uri

Response

Initialize pager and sorters fields.

Include links to response resources.

Arguments

$response

Add location header to a specific response.

Arguments

$p_name

$p_id

Map the sub-resource to another controller.

Arguments

$criteria

Response

Minimize response using the $fields parameter.

Arguments

$response

Paginate response using the $page and $per_page GET parameters.

Arguments

$response

$p_totalItemCount

[PRIVATE] Prepare response headers.

Sub-Resource Orders Search

Perform a search on the response array.

Arguments

$response

$p_keyword

_setJsonValue

Arguments

$jsonString

$property

$value

Response

[PRIVATE] Set header pagination links.

Arguments

$p_currentPage

$p_itemsPerPage

$p_totalItemCount

[PRIVATE] Set header pagination links.

Arguments

$pager

$p_totalItemCount

[PRIVATE] Handle rate limit headers.

Sort response array with the "sort" GET parameter.

Arguments

$response

[PRIVATE] Validate request before proceeding with response.

Write JSON encoded response data.

Arguments

$response

$p_statusCode

delete

get

getCallableResource

Arguments

$controller

$mappedURI

$api

Initializes API Controller

patch

post

put

Constants

Defines the default page offset for responses that return multiple items.

Default controller to be loaded when no resource was selected.

Defines the maximum request limit for an authorized client.

Defines the duration of an API session in minutes.

Properties

Order write service.

Type(s)