JWT

JWT creation and validation for the 3DS Client SDK. Creates a signed JWT used as the authentication handshake between the merchant and the 3DS SDK, and validates the JWT returned after the consumer authentication.

Create a JWT for 3DS Client SDK

post

https://emea.gsc.verifone.cloud/oidc/3ds-servicehttps://us.gsc.verifone.cloud/oidc/3ds-servicehttps://nz.gsc.verifone.cloud/oidc/3ds-servicehttps://cst.test-gsc.vfims.com/oidc/3ds-servicehttps://uscst-gb.gsc.vficloud.net/oidc/3ds-service

/v2/jwt/create

The API creates a JSON Web Token (JWT) which is then used as a method of authentication between the merchant and the 3DS Client SDK.

Authorizations

BearerAuthBasicAuth

AuthorizationstringRequired

JWT Bearer token. Pass as: Authorization: Bearer <token>. The JWT must be signed with your Verifone-provisioned private key and must include entity_id, sub (user_id), and roles claims.

Body

application/json

threeds_contract_idstringRequired

The ID of the threeDSContractId used.

Example: cfbdce5a-2604-4ab5-b959-90ae2854d281

Responses

201

Created

application/json

jwtstringRequired

JWT to handle authentication

Example: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJqdGkiOiJjNmZjZGU3NS02M2MxLTRiMDktODA4MS0xYjdmMGUyZDQ2MmMiLCJpc3MiOiI1ZDEyMmU1OGMxYjQxMjI5M2MwYTUwZDIiLCJPcmdVbml0SWQiOiI1ZDExMmJjMWJiODc2ODIyNDBmOGRjMGQiLCJQYXlsb2FkIjp7fSwiaWF0IjoxNzE1MTgwMDk5fQ.yfNWLd2ssMoUpJt2QOUhf9p1B3dcl0xFOeaPYi8MUxI

threeds_contract_idstringRequired

The ID of the threeDSContractId used.

Example: 7076974d-04b9-4375-9814-e9313f6bd036

400

Bad Request

application/json

401

Unauthorized

application/json

403

Forbidden

application/json

404

Not Found

application/json

500

Internal Server Error

application/json

504

Gateway Time-out

application/json

post

/v2/jwt/create

HTTPcURLJavaScriptPython

POST /oidc/3ds-service/v2/jwt/create HTTP/1.1
Host: emea.gsc.verifone.cloud
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 62

{
  "threeds_contract_id": "cfbdce5a-2604-4ab5-b959-90ae2854d281"
}

{
  "jwt": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJqdGkiOiJjNmZjZGU3NS02M2MxLTRiMDktODA4MS0xYjdmMGUyZDQ2MmMiLCJpc3MiOiI1ZDEyMmU1OGMxYjQxMjI5M2MwYTUwZDIiLCJPcmdVbml0SWQiOiI1ZDExMmJjMWJiODc2ODIyNDBmOGRjMGQiLCJQYXlsb2FkIjp7fSwiaWF0IjoxNzE1MTgwMDk5fQ.yfNWLd2ssMoUpJt2QOUhf9p1B3dcl0xFOeaPYi8MUxI",
  "threeds_contract_id": "7076974d-04b9-4375-9814-e9313f6bd036"
}

Validate a JWT for 3DS Client SDK

post

https://emea.gsc.verifone.cloud/oidc/3ds-servicehttps://us.gsc.verifone.cloud/oidc/3ds-servicehttps://nz.gsc.verifone.cloud/oidc/3ds-servicehttps://cst.test-gsc.vfims.com/oidc/3ds-servicehttps://uscst-gb.gsc.vficloud.net/oidc/3ds-service

/v2/jwt/validate

The API validates the JSON Web Token (JWT) and returns the consumer authentication outcome to the merchant.

Authorizations

BearerAuthBasicAuth

AuthorizationstringRequired

JWT Bearer token. Pass as: Authorization: Bearer <token>. The JWT must be signed with your Verifone-provisioned private key and must include entity_id, sub (user_id), and roles claims.

Body

application/json

authentication_idstringRequired

Authentication ID for completing the 3D Secure flow. To complete the transaction, the value is required to be passed on the Authenticate message to link the Lookup and Authenticate message together.

Example: 8894172e-52b2-4815-82da-ca3c5f005268

jwtstringRequired

JWT with authentication details.

Example: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJqdGkiOiJjNmZjZGU3NS02M2MxLTRiMDktODA4MS0xYjdmMGUyZDQ2MmMiLCJpc3MiOiI1ZDEyMmU1OGMxYjQxMjI5M2MwYTUwZDIiLCJPcmdVbml0SWQiOiI1ZDExMmJjMWJiODc2ODIyNDBmOGRjMGQiLCJQYXlsb2FkIjp7fSwiaWF0IjoxNzE1MTgwMDk5fQ.yfNWLd2ssMoUpJt2QOUhf9p1B3dcl0xFOeaPYi8MUxI

threeds_contract_idstringRequired

The ID of the threeDSContractId used.

Example: af8f5e0d-799d-4421-a8ee-04002a15af53

Responses

201

Created

application/json

authentication_idstringRequired

Authentication ID for completing the 3D Secure flow. To complete the transaction, the value is required to be passed on the Authenticate message to link the Lookup and Authenticate message together.

Example: 8894172e-52b2-4815-82da-ca3c5f005268

action_codestringRequired

The resulting state of the transaction

error_nostringRequired

Application error number(s). A non-zero value represents the error encountered while attempting to process the message request. NOTE: Multiple error numbers are separated by a comma.

Example: 0

error_descstringRequired

Application error description for the associated error number(s). NOTE: Multiple error descriptions are separated by a comma.

Example: Error Processing Message Request

400

Bad Request

application/json

401

Unauthorized

application/json

403

Forbidden

application/json

404

Not Found

application/json

500

Internal Server Error

application/json

504

Gateway Time-out

application/json

post

/v2/jwt/validate

HTTPcURLJavaScriptPython

POST /oidc/3ds-service/v2/jwt/validate HTTP/1.1
Host: emea.gsc.verifone.cloud
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 409

{
  "authentication_id": "8894172e-52b2-4815-82da-ca3c5f005268",
  "jwt": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJqdGkiOiJjNmZjZGU3NS02M2MxLTRiMDktODA4MS0xYjdmMGUyZDQ2MmMiLCJpc3MiOiI1ZDEyMmU1OGMxYjQxMjI5M2MwYTUwZDIiLCJPcmdVbml0SWQiOiI1ZDExMmJjMWJiODc2ODIyNDBmOGRjMGQiLCJQYXlsb2FkIjp7fSwiaWF0IjoxNzE1MTgwMDk5fQ.yfNWLd2ssMoUpJt2QOUhf9p1B3dcl0xFOeaPYi8MUxI",
  "threeds_contract_id": "af8f5e0d-799d-4421-a8ee-04002a15af53"
}

{
  "authentication_id": "8894172e-52b2-4815-82da-ca3c5f005268",
  "action_code": "text",
  "error_no": "0",
  "error_desc": "Error Processing Message Request",
  "validation_result": {
    "authorization_payload": "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",
    "cavv": "MTIzNDU2Nzg5MDEyMzQ1Njc4OTA=",
    "cavv_algorithm": "2",
    "eci_flag": "05",
    "enrolled": "Y",
    "pares_status": "Y",
    "reason_code": "1001",
    "reason_desc": "Error Processing Message Request",
    "signature_verification": "Y",
    "xid": "AgIAABTXCmieAEiwml9DlVAsiBI="
  }
}