3.3. /postauth endpoint¶

The /postauth endpoint is used to fetch the results of a challenge flow.

Request flow¶

This near-pseudocode describes the flow your code should perform.

Generate the input as described in the reference (2.1.0, 2.2.0).
Example /postauth input body¶
```
{
  "threeDSServerTransID": "51d84cdf-73d9-4610-8b4c-7c6395fee0f0"
}
```

Send the request to the 3-D Secure Server. Consult the requests guide for information about how to make requests. A simple request performed using cURL:

/postauth request example using cURL¶

APIKEY=********-****-****-****-************
curl -H "APIKey: $APIKEY" \
     -H 'Content-Type: application/json; charset=utf-8' \
     -d @input.json \
        https://service.sandbox.3dsecure.io/postauth

If the returned JSON has "messageType": "Erro" or the HTTP response code is not 200, then the request failed.

Note that JSON is returned even if the HTTP status code is not 200, in all but the rarest cases.

See the reference (2.1.0, 2.2.0) for the values returned.

Note

The authentication cache expires 300 seconds after the 3-D Secure Server receives it from the card scheme, it must be fetched before expiry. It will return an error as examplified below.

Authentication response after timeout.¶

{
  "errorCode": "203",
  "errorComponent": "S",
  "errorDescription": "Unknown threeDSServerTransID",
  "errorDetail": "Unknown threeDSServerTransID",
  "messageType": "Erro",
  "messageVersion": "2.2.0",
  "threeDSServerTransID": "33eaca9c-5aff-41d9-ad75-a2cde347be2a"
}