Create an order and its payment session

Optional; must match a store-scoped key.

Only for a pay-what-you-want price, and floored at that price's minimum. Sending it for a fixed price is a 422; the server never takes a total from a client.

Must be a price on the store's configured bump product.

Defaults to the store's currency. Sorai never converts.

The payment method to pay with. Required for an order with something to charge; ignored when the order totals zero, which is settled without a payment method.

The buyer's name, required on every order, including one that totals zero. Trimmed, then 2 to 100 characters with at least one letter and no line breaks or control characters.

Kept for integrations that send it directly. The checkout form no longer asks buyers for a phone number by default; a store can add a phone field to its checkout form to collect one instead.

Where the buyer is, as an ISO 3166-1 alpha-2 code. Required when the order has something to charge.

Answers to the store's checkout form. Unknown keys are dropped.

The _sorai_attr payload, copied onto the order.

The affiliate referral code the visitor arrived with: the _sorai_ref cookie's value, carried here as its own field rather than as a key inside attribution, which is first-touch and never overwritten. An unknown code, or one whose relationship is not active, simply attributes nothing; it is never an error, and it never changes a total.

The page this checkout was started from, for attribution. Either a page uuid, or the synthetic product:{uuid} form the storefront's built-in product template sends when a product has no page of its own; in that case the order records no page and the product id is recorded on the order's attribution instead. Omit it when there is nothing to attribute; any other value is a 422 invalid_page_id.

The token from a link back to an unpaid order. The new order is linked to that one and keeps its affiliate. An invalid token is ignored.

The session parameter from a checkout link the merchant's server opened. price_id and quantity must match what it was opened for, and a discount code is refused unless the link allows them. An expired, already paid or unknown session is a 422. While the link has an order waiting for payment, that order is answered instead of a new one.