---
title: "/orders/authorize (for Advanced Approvals merchants)"
method: POST
path: "/orders/authorize"
---

# /orders/authorize (for Advanced Approvals merchants)

`POST /orders/authorize`

Sandbox (Testing): https://gateway.sand.us.zip.co/orders/authorize

Creates a new checkout context and redirects to the checkout website using details from the request body. Sent from the user's browser via a form POST, will start a checkout session within Zip. It will automatically redirect the user to our Zip checkout.  This endpoint contains the additionalData object which is used by Zip-approved merchants that are implementing our Advanced Approvals feature.

## Headers

- `QP-Territory` string, required
- `X-QP-Signature` string, required

## Request body

- object
  - `orderId` string — Gets or sets the unique ID to use for order creation
  - `merchantId` string, required — Gets or sets the merchant Id
  - `merchantReference` string, required — Gets or sets the unique merchant reference for this authorization.
  - `order` object — Encapsulates an order to create for a merchant
  - `test` boolean — Gets or sets a value indicating whether this is a test order
  - `capture` boolean — Gets or sets a value indicating whether this order should be immediately captured
  - `callbackUrl` string, required — Gets or sets the status callback url
  - `redirectCancelUrl` string, required — Gets or sets the url that the user will be redirected to if they cancel the checkout
  - `redirectConfirmUrl` string, required — Gets or sets the url that the user will be redirected to after they have completed the checkout.
  - `metadata` object — Gets or sets optional metadata attached to the checkout
  - `checkoutFlow` string — Gets or sets the type of the checkout; defaults to Standard; can only be set internally
  - `brandName` string — Gets or sets the brand name of the merchant for this order
  - `additionalData` object
    - `customerLoggedIn` boolean — Indicate whether the customer is currently logged to your site
    - `customerIsMember` boolean — Indicate whether the customer has an account with your site
    - `merchantRiskAssessment` string — Include your own risk score or risk assessment on the customer
    - `sameDevice` boolean — Indicate whether the customer is using an existing device you recognize
    - `fulfillmentMethod` string — Indicate whether the order is online only, or for an in-store pickup
    - `accountCreationDate` string, date — Date the customer first created their account with you
    - `lastTransactionDate` string, date — Date the customer last made a successful purchase with you
    - `customerTransactionCount` string — Total count of the customer’s transactions
    - `customerAverageOrderValue` string — Average order value of all the customer’s past transitions
    - `customerFraudIncidents` boolean — Indicate whether the customer has had any fraud incidents with you in the past

## Other responses

- `302` — 302

---

[API](https://skmtc.dev/zip/apis/gateway-api.md) · [All operations](https://skmtc.dev/zip/apis/gateway-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/zip/gateway-api/revisions/4b1127fdca1e/schema)