Live data from Hacker News

Amex for Developers

developer.americanexpress.com

21–30 of 95 posts

Re: Amex for Developers

#21
post #9

On the landing page you may see a computer screen with PHP code, but they just offer JAVA and .NET SDK right now, fun fact!

There is nothing stopping you from coding in PHP or any other language. They only provide samples in Java and C# right now.

Re: Amex for Developers

#22

Wow, talk about too little too late. This kind of late to the party strategy is why startups will always be needed to lead innovation. The irony is the highest ranking person at AmEx who really understands this is probably a pretty smart guy who had to fight and lobby for years to rally enough support to make this happen. edit: Its worse than I thought. A quick search shows they brought in high level talent from Goog…

And it appears they only accept XML. I am not sure if this is a considerable change with the trend to support JSON file format.

Re: Amex for Developers

#23

Wow, talk about too little too late. This kind of late to the party strategy is why startups will always be needed to lead innovation. The irony is the highest ranking person at AmEx who really understands this is probably a pretty smart guy who had to fight and lobby for years to rally enough support to make this happen. edit: Its worse than I thought. A quick search shows they brought in high level talent from Goog…

I've heard how Amex can be from a friend who has them as a client. They refuse to let her host their instance of her product on AWS because Amex's security team supposedly hasn't vetted AWS yet. This despite the kinds of customers Amazon already hosts on AWS (the CIA comes to mind). Not to mention that she has several other very large banks as clients that don't have a problem at all being hosted on AWS. Or that exactly zero of the data she deals with is in any way related to sensitive customer data because the product is used by Amex's marketing department.

As an Amex customer I'm glad to know they have strict requirements but the fact is, they're shunning a massive cloud infrastructure service like AWS over a piddly little local co-locted hosting company.

Re: Amex for Developers

#24
post #19

AMEX in Australia: Maybe 1 in 10 merchants even accept it, for that 1 you pay a much higher surcharge.

IDK, I've used Amex in Australia for >50% of my credit card spend. All major supermarkets, department stores, most petrol stations and fast food chains accept it. I assume outside of those categories it really depends where you are though - the cafe across the road from my office accepts Amex with no surcharge and no minimum, but I'm in CBR in the heart of public service territory, so...

Re: Amex for Developers

#25
post #19

AMEX in Australia: Maybe 1 in 10 merchants even accept it, for that 1 you pay a much higher surcharge.

IDK, I've used Amex in Australia for >50% of my credit card spend. All major supermarkets, department stores, most petrol stations and fast food chains accept it. I assume outside of those categories it really depends where you are though - the cafe across the road from my office accepts Amex with no surcharge and no minimum, but I'm in CBR in the heart of public service territory, so...

I goto the supermarket once a week so yeah, thats the only time I use it. I've given up asking otherwise.

Re: Amex for Developers

#26

Hmm. For the typical card-not-present (online) use case, stripe.com and paypal do a pretty darn good job of processing AMEX payment cards, as well as the others. Tokenization is vital in this age of cybermiscreants. Ya don't want customer payment card data in your dbms. The stripe.com API offers tokenization, and it offers the ability to send and validate data like zip/postcode, cvv and street address to cut fraud. T…

>And these service providers offer the >highest The only people I've ever met that recommend Stripe are developers. The only people I'd recommend Square to are merchants whose avg ticket is less than $5 or are borderline hobbyists. The number of hardcore PP users has dropped significantly in the last 5 years, in my experience, to less than 10%.

Square is really competitive up to about $15 a ticket

Re: Amex for Developers

#27
post #9

On the landing page you may see a computer screen with PHP code, but they just offer JAVA and .NET SDK right now, fun fact!

To be honest, that code is pretty bad anyway. "If an arbitrary attribute table doesn't exist, ignore this row and process the next one", no exceptions thrown, no attempt to rectify the situation, no logging, no state change, just ignore it. I can't really think of a situation where you both don't care and don't want to know if your transaction completes.

That aside, this actually looks like it might even contain a SQL injection vulnerability. I'm no Drupal 7 expert (which this code seems to be) but having looked in to the code being ran here, db_table_exists seems to call down to `$this->connection->queryRange("SELECT 1 FROM {" . $table . "}", 0, 1);` in `DatabaseSchema_mysql::tableExists`, which contains an unescaped PDO query. I feel like anyone running this code is going to have a very bad day and it makes me untrusting of the rest of the work they're putting out.

Re: Amex for Developers

#28
post #2

It's interesting for sure, but as a consumer rather than a business, is there a use case for this?

Checking out on Delta via my Delta AmEx allows me to simply login to my AmEx account (saved via a password manager) and checkout without entering my actual card info. The convenience factor there is definitely nice.

Re: Amex for Developers

#29
post #13

It's tempting to think this ship has already sailed and they're late to the party, but I'm actually more concerned. Recently, we saw MasterCard announcing APIs; ultimately the card issuers are the real gatekeepers of their own data and their own integrations, and as more of them move to gain the control back that they ceded with their lack of public developer engagement, the role of payment processors becomes less cl…

Developers are still more likely to implement the one API that provides n payment methods than implement n APIs to get n payment methods.

That is, a payment processor like Stripe that provides AMEX, MC, Bitcoin or what ever is often more valuable than by being able to reduce complexity in the integration of services.

Post reply on HN