Placing an Order

const url = new URL('https://panel.example.com/api/v1/admin/orders/product-info');
url.searchParams.set('product_id', productId);
url.searchParams.set('client_id', clientId);

const res  = await fetch(url, { headers: { Authorization: `Bearer ${apiKey}` } });
const { data } = await res.json();
const required = data.requirements.filter((r) => r.properties.compulsory);

$qs = http_build_query(['product_id' => $productId, 'client_id' => $clientId]);
$ch = curl_init('https://panel.example.com/api/v1/admin/orders/product-info?' . $qs);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $apiKey],
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// The required questions are written HERE; fill this list before building the order.
$info = Api::Orders()->GetProductInfo([], ['product_id' => $pid, 'client_id' => $cid])['data'];
$must = array_filter($info['requirements'], fn ($r) => $r['properties']['compulsory'] ?? false);

const res = await fetch('https://panel.example.com/api/v1/admin/orders/check-domain', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${apiKey}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ domain, client_id: clientId }),
});

const { data } = await res.json();
if (! data.available) suggestAlternatives();

$ch = curl_init('https://panel.example.com/api/v1/admin/orders/check-domain');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . $apiKey,
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode(['domain' => $domain, 'client_id' => $cid]),
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// Whether a transfer needs a code depends on the extension; learn it here BEFORE ordering.
$d = Api::Orders()->CheckDomain(['domain' => $domain, 'client_id' => $cid])['data'];
$needsCode = (int) $d['tld_info']['epp_code'] === 1;

const res = await fetch('https://panel.example.com/api/v1/admin/orders/coupons?client_id=' + clientId, {
  headers: { Authorization: `Bearer ${apiKey}` },
});

const { data } = await res.json();
const usable = data.filter((c) => ! c.disabled);

$ch = curl_init('https://panel.example.com/api/v1/admin/orders/coupons?client_id=' . $cid);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $apiKey],
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// WITHOUT a client id the 'disabled' field stays thin and an unusable coupon looks open.
$rows = Api::Orders()->GetCoupons([], ['client_id' => $cid])['data'];
$usable = array_filter($rows, fn ($c) => ! $c['disabled']);

const res = await fetch('https://panel.example.com/api/v1/admin/orders/validate-coupons', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${apiKey}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    coupon_ids: picked,
    client_id: clientId,
    cart: { items, subtotal, user_currency: currencyId, is_dealer: false },
  }),
});

const { data } = await res.json();
data.invalid.forEach((c) => showReason(c.code, c.reason));

$ch = curl_init('https://panel.example.com/api/v1/admin/orders/validate-coupons');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . $apiKey,
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode([
        'coupon_ids' => $picked, 'client_id' => $cid, 'cart' => $cart,
    ]),
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// WITHOUT the basket the least-amount and product conditions go unchecked; a coupon passes here and fails at ordering.
$out = Api::Orders()->ValidateCoupons([
    'coupon_ids' => $picked, 'client_id' => $cid, 'cart' => $cart,
])['data'];

$use = $out['kept'];

const res = await fetch('https://panel.example.com/api/v1/admin/orders', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${apiKey}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    client_id: clientId,
    status: 'waiting',
    generate_invoice: true,
    invoice_status: 'unpaid',
    products: [{
      group: 'hosting',
      product_id: 12,
      billing_cycle: 'monthly',
      quantity: 1,
      requirements: answers,
    }],
  }),
});

const { data } = await res.json();

$ch = curl_init('https://panel.example.com/api/v1/admin/orders');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . $apiKey,
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode([
        'client_id' => $cid,
        'generate_invoice' => true,
        'products' => $lines,
    ]),
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// The state you send is NOT kept: it is worked out again from the services made, so read the answer.
$order = Api::Orders()->CreateOrder([
    'client_id' => $cid, 'status' => 'waiting', 'products' => $lines,
])['data'];

$real = $order['status'];