Report that the challenge iframe finished, and read the verdict
POST/payments/card/authentications/{id}/challenge
Idempotent: an authentication that already reached a verdict answers with it rather than erroring, so a double-submitting browser is not punished.
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”Our identifier for an authentication.
Example
ca_9Z3K01ARZ3NDEKTSV4RRFFQ69G5FAVAuthentication ID
Responses
Section titled “Responses”Final verdict: authenticated or failed.
An authentication, as the merchant sees it.
Built by hand rather than derived on [CardAuthentication], for the same
reason CheckoutSessionResponse is: the domain type holds things that must
not be echoed. consumed_by, the processor’s own handle, and the merchant
id are all deliberately absent — the merchant references the ca_ id, and
nothing here needs the upstream one.
object
A monetary amount in the currency’s minor units (e.g. cents for USD).
Example
1000Currently supported currencies by Paygasus Pay
Example
USDWhen this authentication stops being usable, in every state — including
authenticated: a verdict that has not been charged by this time
expires and cannot be referenced. Once a charge has used it the field is
informational.
Why it failed, when it did.
Our identifier for an authentication.
Example
ca_9Z3K01ARZ3NDEKTSV4RRFFQ69G5FAVThe lifecycle of one 3DS run.
A plain enum with the state-specific data on [CardAuthentication] rather
than in the variants, matching [crate::checkout_session::CheckoutSessionStatus]
and unlike [crate::payment_intent::CardPaymentIntentStatus]. The reason is
the repository: status is one column and the outcome fields are their own
columns, so [std::str::FromStr] has to round-trip from the string alone.
No such authentication
object
object
When present and true, the caller may retry the same request.
Authentication has no challenge outstanding, or changed while this request was in flight (re-read and retry)
object
object
When present and true, the caller may retry the same request.
Processor unreachable; safe to retry
object
object
When present and true, the caller may retry the same request.