Postmates API to send Ordering detail - webhooks

From what I've learnt here, Postmates API is about other system to schedule delivery using Postmates Service.
We are as POS solution provider is looking for a different integration in which Orders from Postmates will come to our POS system.
Webhooks would be the best solution, but so far the Webhooks of Postmates is not sending the Order detail.
Is there any possible way for POS applications to get Order detail from Postmates?

Related

Best practices to follow when building API service to be used by customers

Throughout my career, I've relied on and used various API services in my project. I saw multiple mechanisms of how these APIs are secured, but most common one seems to be via API Keys.
I am now planning to build out my own API service and being unfamiliar with security part of this I had few questions:
So far, what I gathered is to do the following: Create API key, store it's hash in db, only show api key to user 1 time, check for api key in requests and rate-limit based on it.
But above raises one concern, if someone was to inspect customer website they could easily get this api key (if customer is calling api directly from their front end) and abuse it, correct? This can be done in form of constantly hitting rate-limits or sending bad data to customers dashboard.
I feel like I am missing few key parts here and would appreciate if someone could outline best practices of how this is done nowadays in NodeJS. Thank you.
EDIT: Users of such service would be developers utalizing this API in their product

Should my customers purchase an API plan if I am a partner?

I have a simple question. We are a CRM and are integrating with Docusign. So, whenever our customers want to send an envelope, they can send it from the CRM.
Do our customers have to purchase a separate API plan with Docusign?
From what I have read through, that is not the case but API limit of 1000 API calls per hour apply.
Can anyone confirm this?
You'll want to talk to your Account Manager for specific recommendations, or the Sales team if you don't have one.
As a general matter, you would need to own an API plan as the integration's owner but your customers could use your integration on any DocuSign account that has the appropriate level of features/functionality.

How does the Truevault API exactly work? [request clarification]

I'm currently working with a health company that requests their patient data to be HIPAA compliant.
Being unfamiliar with HIPAA Compliance, after research, I found sites like Truevault that offer HIPAA compliance databases so patient data is securely stored and cannot be stolen.
However, when reading the documentation of their REST Api, I was confused exactly what is the "database" part of Truevault. Their documentation supports APIs for vaults and documents. Vaults store the douments.
Here is my specific question: In the Truevualt Api, would I securely send data to Truevault through a document? If not, then do I need to use another third party service (such as Parse) to first gather the patient data and THEN send it to Truevault?
Any help would be appreciated. Thanks in advance.
TrueVault accepts JSON documents, which we receive via our RESTful API. Furthermore, this data is typically sent from client-side applications directly to TrueVault.
If you have any other questions or need clarification, you can reach us via our Community Forums.
Cheers,
Dan Cleary
Customer Success Engineer at TrueVault

DocuSign Connect vs EventNotification attribute in createEnvelope call

We are doing an integration with DocuSign where users can submit documents stored in our system to DocuSign to get the documents signed. We have the DocuSign Connect feature working in our demo account. We can process messages from DocuSign successfully.
We were concerned that getting users to add a Connect Configuration themselves may be too challenging for some and it will be error-prone.
I see now in the documentation that it is possible to automatically get DocuSign to push notifications by passing the information in the EventNotification attribute when we call createEnvelope. Is this an acceptable way to get push notifications from DocuSign? Will this cause issues with getting the integration certified?
Is there any other way to get Connect configured easily in customer accounts?
This is an old question, but I wanted, for the record to have answers, since it's important to anyone who may be reading this.
We see now in the documentation that it is possible to automatically
get DocuSign to push notifications by passing the information in the
EventNotification attribute when we call createEnvelope. Is this an
acceptable way to get push notifications from DocuSign?
Yes, it is. It's a very good way in fact, to reduce polling and make your app better. We highly recommend that you use EvenNotification and sign-up for events going through a webhook to your app such that you can handle them in your code only when they occur, instead of polling DocuSign APIs repeatedly.
Will this cause issues with getting the integration certified?
The opposite is true. If you use polling you may have issues being certified. Using connect events with a webhook is one way to avoid the need for excessive polling which could cause issues with the certification.
Is there any other way to get Connect configured easily in customer
accounts?
You can configure connect like you suggested using EventNotification at the envelope level. This approach works well for ISVs since you don't need your customers to have admin access to their accounts.
The other option is account-level connect configuration, which does require admin level access and there are some other limitations. This approach adds the connect webhook for all envelopes in the account. So it may or may not be better, depending on your scenario.

create a WEBSERVICE for CreditCard payment processing

How to create a WEBSERVICE for CreditCard payment processing in C#.NET?
I want to process electronic payments. I am currently using PayPal but it costs too much. Many companies are able to provide electronic payments without using gateways. I imagine they use banks web service directly.
I think you have to implement interface for each gateway: Authorize.net, SkipJack, Moneris, Mrw etc. Some of them give you a DLL to use their gateway or provide documentation how to make requests to API. Otherwise I think you need to implement interface for each bank you want to receive payment..

Resources