Invoices

const res = await fetch('https://panel.example.com/api/v1/client/invoices?status=overdue', {
  headers: { Authorization: `Bearer ${clientKey}` },
});

const { data, meta } = await res.json();

$ch = curl_init('https://panel.example.com/api/v1/client/invoices?status=overdue');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $clientKey],
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// Two state fields exist: the filter takes the CUSTOMER one, and the raw state does not separate overdue.
$rows = Kernel::internal('client:Invoices/GetInvoices',
    ['owner_id' => $uid, 'status' => 'overdue'])['data'];

const res = await fetch(`https://panel.example.com/api/v1/client/invoices/${id}`, {
  headers: { Authorization: `Bearer ${clientKey}` },
});

const { data } = await res.json();
if (data.payable && ! data.subscription_locked) enablePayButton();

$ch = curl_init('https://panel.example.com/api/v1/client/invoices/' . $id);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $clientKey],
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// The customer record on an invoice is a snapshot of THE MOMENT it was raised; do not reconcile it with the profile today.
$inv = Kernel::internal('client:Invoices/GetInvoice', ['owner_id' => $uid, 'id' => $id])['data'];
$thenAddress = $inv['billed_to']['address'];

const res = await fetch(`https://panel.example.com/api/v1/client/invoices/${id}/pay`, {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${clientKey}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ payment: { method: 'card' } }),
});

const { data } = await res.json();
if (data.payment.status === 'failed') showError(data.payment.error);

$ch = curl_init('https://panel.example.com/api/v1/client/invoices/' . $id . '/pay');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . $clientKey,
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode(['payment' => ['method' => 'balance']]),
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// A DECLINED CARD is not an error: the answer succeeds, the invoice stays open with its fee, so read the state.
$r = Kernel::internal('client:Invoices/PayInvoice',
    ['owner_id' => $uid, 'id' => $id, 'payment' => ['method' => 'card']])['data'];

if ($r['payment']['status'] === 'failed') $retryLater($id);

const res = await fetch(`https://panel.example.com/api/v1/client/invoices/${id}/coupon`, {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${clientKey}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ code }),
});

const { data } = await res.json();
showNewTotal(data.invoice.total, data.discount);

$ch = curl_init('https://panel.example.com/api/v1/client/invoices/' . $id . '/coupon');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . $clientKey,
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode(['code' => $code]),
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// Apply the coupon BEFORE paying: a closed document cannot be changed and there is no way back.
Kernel::internal('client:Invoices/ApplyInvoiceCoupon',
    ['owner_id' => $uid, 'id' => $id, 'code' => $code]);

Kernel::internal('client:Invoices/PayInvoice',
    ['owner_id' => $uid, 'id' => $id, 'payment' => ['method' => 'balance']]);