Step 5 - Challenge - Merchant Warrior API 2.0

If the issuer has opted for a challenge flow, you will need to present the authentication experience (two-factor authentication) to the customer.

Example

Add an iframe to the users browser, either statically or using JavaScript.

Add a form containing the appropriate input elements:

<form class="" id="challengeForm">
  <input type="hidden" name="creq" id="creq"/>
  <!-- This input can carry up to 1024 Base64-URL encoded characters -->
  <input type="hidden" name="threeDSSessionData" id="threeDSSessionData"/>
</form>

Fill out the form inputs and submit them to the acsURL in the iframe.

The acsURL will respond with the cres which will be submitted via POST to your notifyURL that was specified in Step 1.

{"cres": "eyJhY3NUcmFuc0lEIjoiZTg5YzNmNzQtNTlkOS00N2QxLTg3Y2EtZGZlMTQyMmI4MWMwIiwiY2hhbGxlbmdlQ29tcGxldGlvbkluZCI6IlkiLCJtZXNzYWdlVHlwZSI6IkNSZXMiLCJtZXNzYWdlVmVyc2lvbiI6IjIuMS4wIiwidGhyZWVEU1NlcnZlclRyYW5zSUQiOiI5ZDE2MzUwZC1mZDdhLTRjODItYTYwOC1lMjgzZjdlNDNmNmUiLCJ0cmFuc1N0YXR1cyI6IlkifQ=="}

You may want to communicate with your frontend after performing a challenge. If this is the case see postMessage Notifications for further information.