PCI ata Security Standards - REST API vs SOAP API

Chris Chang
Chris Chang
Name Dropper First Anniversary Facilitator 1
in Blackbaud Luminate Online® & Blackbaud TeamRaiser® Discussions

Hello All,

I am trying to figure out if it is possible to pull donation related data from the API. I noticed the REST API documentation lists “to maintain PCI ata security standards for credit card transactions, you must call this method directly from the client's browser and never proxy the call through an external server”. Does this apply to the SOAP API as well?

Mainly I want to create a Matillion job (ETL tool) to automatically run API calls to pull donation data and transform it for analysis. Matillion runs on an Azure VM which I believe counts as an external server in this case. I am not specifically pulling credit card transactions but I believe the data I want is in the same endpoint

Best,

Chris


Tagged:

Comments

  • Erik Leaver
    Erik Leaver Blackbaud Employee
    Tenth Anniversary Kudos 5 First Reply Name Dropper

    @Chris Chang The donate REST API is designed for gift processing (creating gifts). I don't think there is a REST call to get gifts (other than sustaining which is for applications that change existing sustaining gifts). You should be able to get the gifts with the SOAP API without any issues. You won't be retrieving any card or token information with the SOAP API.

  • Chris Chang
    Chris Chang
    Name Dropper First Anniversary Facilitator 1

    Hi @Erik Leaver,

    Thank you for your advice. We have been able to retrieve the Donation and DonationCampaign endpoints though we are having trouble with the TransactionSummary endpoint. We are receiving a generic error when we try the following queries:

    select * from TransactionSummary limit 50
    select * from TransactionSummary where date = 2024-08-01 limit 50

    26795ac0c20f63517db1fbde96f61d98-huge-im

    We have successfully queried other records so we know the general structure is working but the TransactionSummary endpoint keeps throwing us that error.

    Best,

    Chris

  • Erik Leaver
    Erik Leaver Blackbaud Employee
    Tenth Anniversary Kudos 5 First Reply Name Dropper

    @Chris Chang TransactionSummary is not something that can be queried by itself. It is an embedded type that can be targeted when calling on Constituent

    It pulls the data from the constituent record under "Transaction Information"

    See:


    FirstTransaction

    Type TransactionSummary.

    LastTransaction

    Type TransactionSummary.

    A transaction summary of this Constituent's most recent monetary transaction.

    LargestTransaction

    Type TransactionSummary.

    A transaction summary of this Constituent's largest monetary transaction.

Categories