It sounds like you're free to make your own assumptions and constraints. I would create an API with a payment endpoint, validation endpoint etc. Then I would ha

It sounds like you're free to make your own assumptions and constraints. I would create an API with a payment endpoint, validation endpoint etc. Then I would have a basic web page calling those endpoints. I would not implement security, auditing, logging etc