Skip to main content

3DS

When you need to create a 3DS (3D Secure) order, you must first authenticate the card using the Card Auth endpoints before proceeding with the order creation.

Step 1: Card Authentication​

  1. Use the Create endpoint to ensure authentication is available.
  2. Use the Authenticate endpoint to authenticate the card using the card auth ID.

The authenticate endpoint may return two possible responses:

  • A frictionless response, which means the card is authenticated and you can proceed with the order.
  • A challenge response, which means the card requires additional authentication.

If a challenge response is received, you must redirect the cardholder to the provided challenge URL to complete the authentication process.

Step 2: Retrieve Authentication Values​

Once the cardholder completes the authentication process, retrieve the auth values using the Show endpoint.

The auth values will look like this:

{
  "auth": {
    "value": "c29tZV92YWx1ZQ==",
    "status": "Y",
    "eci": "05",
    "version": "2.2.0",
    "ds_transaction_id": "30cef075-d09f-48d0-989c-601be2365c17",
    "acs_transaction_id": "5b98f216-a856-4795-bb2b-b2897f1570f8",
    "ds_reference_number": "DS_SERVER_REF_1234",
    "acs_reference_number": "ACS_SERVER_REF_1234",
    "tds_purchase_date": "20240905141222"
  }
}

Step 3: Create the Order​

With the auth values obtained, you can now create the order by including the auth values in the order creation request inside the source.auth object.

For detailed information on how to use these endpoints, including request and response examples, please refer to their respective documentation pages.