Rejected Frictionless Authentication
Last updated
Was this helpful?
Last updated
Was this helpful?
The steps to follow this flows are:
POST risk/authentication/setup
As we explain before, in this step, you will receive an access token that should be use to secure the connection and a URL that behind the scene we will be capturing the data.
POST risk/authentication/enroll
Using the session ID obtained, in the capture process, and the data obtained in Setup step, we check the enroll of the transaction, and returns the risk level of it. In this case will be Frictionless failure
POST /payments
This authorization is the same endpoint used in Payments API (Simple Authorization), the difference is that a new object is sent in the request, the authorization object:
This JSON object is part of the security measures taken to authenticate online transactions and protect against fraud. Each field contributes to ensuring that the person making the transaction is the legitimate cardholder.
eci: string Required: false Stands for "Electronic Commerce Indicator." The value "05" indicates that the transaction was processed using 3D Secure authentication
eci_raw: string Required: false This is likely the raw Electronic Commerce Indicator value
token: string Required: false A unique token generated for the transaction, used to create a secure channel with the merchant.
commerce_indicator: string Required: false Indicates the type of transaction. "vbv" refers to "Verified by Visa"
pares_status: string Required: false The status returned by the Payer Authentication Response (PaRes). "Y" means that the authentication was successful.
veres_enrolled: string Indicates whether the card is enrolled in the 3D Secure program. "Y" means yes.
acs_transaction_id: string Required: false A unique identifier for the transaction provided by the Access Control Server (ACS)
authentication_transaction_id: string Required: false Another unique identifier for the authentication transaction.
cavv: string Required: false Cardholder Authentication Verification Value. A value generated during the 3D Secure process that helps verify the cardholder's identity
specificationVersion: string Required: false The version of the 3D Secure protocol used, which in this case is "2.2.0."
ree_dss_server_transaction_id: string Required: false Likely an identifier for the transaction as recorded by the 3D Secure server
xid: string Required: false A transaction identifier used in the 3D Secure 1.0 protocol, similar to the CAVV
directory_server_transaction_id: string Required: false A unique identifier for the transaction as recorded by the directory server.
acs_reference_number: string Required: false A reference number for the Access Control Server, which in this case is "Cardinal ACS/"
