3DS 結果

POST

https://api.forter-secure.com/v3/orders/{id}/results

Check the 3DS results using the managed order token returned in Forter's response to the order request.

Path Parameters

idstringrequired

Header Parameters

api-versionstringrequired
Example
10.1
Description
Specify the version of the API to target.
Default
10.1
x-forter-siteidstringrequired
Example
a1b2c3d4e5f6
Description
Forter-assigned ID for your account. Note that your Site ID for your test site is different from your production site.
Default
8b47c6d423ba

Body Parameters

bodyv3OrderResultsRequestrequired
Description
Check the 3DS results using the managed order token returned in Forter's response to the order request.
- managedOrderTokenstringrequired
  Description
  The managedOrderToken returned from the create endpoint
  Default
  eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjIwMjMtMDUtMjMifQ.eyJmb3J0ZXJPcGFxdWVEYXRhIjoiZm9ydGVyT3BhcXVlRGF0YSIsImF1ZCI6ImNoZWNrb3V0dG9vbHMiLCJpc3MiOiJodHRwczovL2FwaS5jaGVja291dHRvb2xzLmNvbS92My9tYW5hZ2VkL29yZGVycyIsImV4cCI6MTczMzk0NzYxNH0.i3Q2KsUerRNQMfCGKQgoR_0AIENOKZ0C99kiRtlkuVQqbmhPRo0A4c42XHp0J_-kdJbCW2W1WckgglTy8GGRfwzVfZ2szSxJCB6QOd4uHwn0BN1GeTdY3qjtBHF48ihsDhfYXvII4Kl2zpL54aJfCePuYANedhxAWJZnUCcSKxFDYsj-gHGGApZbgPhnMI1QfUme2CHjpxu2vGTC0xC08OQuYO7vbESQU_YnLsc-xQYBrOy_4XuOEJDq8fK2O5saiZZEknNvLxouAzn16p5lzWJ3sp-tsJR-a9C_KgNqz_Nv4SaeSYQMhJwrYXXLhNP2ueTHdzEObtm7Skp_NQFdXBBF4vMO4HhKKBzNnfWjsKKCb6Utb__AZNbW4XYn9788wdHNVu-TVhiHRYOg19iOHaJS1l8DfHqMN0o-98Cmdu9prhGIvey64FrcEoAf9jhUjT4LN9u0zuH1jbwfpG-owmHEnpAY6dtZilK81zrf6A3OhRIB5_cECdutSa_UHXP1xapUsGoQMy3T5qaecnj6VqwXI1Cc3vrhsaewRCqJqDTeHG2slttrWBrigvXk4rFwWVazn_Y_PCy-WCfcazXK6nTCJTQ_mBoM24S-W6jRlOsfplDDl5cKGrvsulqXDuDqRzJnc_AmkVOWM9AvqqgkC5ef_2xcGprFi4xDjXkScz4

Responses

200Example v3OrderResultsResponse

v3OrderResultsResponse
- decisionReasonstringrequired
  Description
  The main reason behind the Forter decision
  Default
- forterDecisionstring<APPROVE | DECLINE | NOT_REVIEWED>required
  Description
  The latest Forter decision regarding the attempted action
  Default
  APPROVE
- linkToEventInDashboardstringrequired
  Description
  Link to the event in the decision dashboard
  Default
  https://portal.forter.com/dashboard/:id
- merchantPolicyIdstringrequired
  Description
  UID of the custom policy created in Forter's Policies tool that resulted in this decision
  Default
  0ee8ba28a8654c659addbae9253b707c
- orderIdstringrequired
  Description
  Transaction/order ID. Note that Forter treats this ID as case-insensitive; Order123 and ORDER123 will be identified as the same order.
  Default
  123456
- recommendationstringrequired
  Description
  A specific recommendation for an action that might help the customer to complete their transaction/action (e.g. verify phone via SMS, verify via push notification, verify email, perform a 3DS check, etc.)
  Default
- verificationMethodVerificationMethodrequired
  Description
  The specific verification method to be used when verification is required according to "recommendation" field
  - correlationIdstringrequired
    Description
    A forter unique identifier that was provided as part of a Forter API response recommending additional authentication measures. Used to correlate between the user action which triggered the recommendation and the authentication attempt result. Required when the additional authentication was triggered by Forter's recommendation.
    Default
    HGJ7512345H3DE
  - statusstringrequired
    Description
    Verification status
    Default
    FRICTIONLESS
  - statusCodestringrequired
    Description
    Verification status code
    Default
    100
  - statusMessagestringrequired
    Description
    Text describes the verification status
    Default
    Verification code sent
  - typestring<OTP_SMS | OTP_EMAIL | THREE_DS>required
    Description
    Verification method type
    Default
    THREE_DS
  - verificationIdstringrequired
    Description
    A unique identifier assigned to that specific verification
    Default
    345H3DEHGJ7512
  - verificationSpecificDataVerificationDatarequired
    Description
    Data specific to the verification type performed
    - ThreeDSobject
      - ThreeDSecureResponse
        ACSUrlstringrequired
        Description
        In case of challange, this url is needed to be passed to client side and trigger ftr__.init3DS function
        Default
        https:/ /acs-us-east-1.nd.nds-sandbox-issuer.com/api/v1/acs/browser_sdk_challenges
        ECIValuestringrequired
        Description
        Electronic Commerce Indicator (ECI) is a value that is returned from the Directory Server (Visa, MasterCard, etc) to indicate the authentication results of your customer's credit card payment on 3D Secure. ECI only available when the challenge is not needed or after challenge had been completed. Possible values: 00, 01, 02, 04, 05, 06, 07
        Default
        02
        acsChallengeMandatedstringrequired
        Description
        Indication of whether a challenge is required for the transaction to be authorised due to local/regional mandates or other variable (Y - Challenge is mandated, N - Challenge is not mandated)
        Default
        Y
        acsReferenceNumberstringrequired
        Description
        Unique identifier assigned by the EMVCo Secretariat = required for mobile app implementation
        Default
        ftr-internal-acs-approval
        acsSignedContentstringrequired
        Description
        ACS Signed Content required for mobile app implementation
        Default
        acsTransIDstringrequired
        Description
        Universally Unique transaction identifier assigned by the ACS to identify a single transaction - required for mobile app implementation
        Default
        6fd30e89-8171-4cc3-b86e-3d59582af2f6
        authenticationTypestringrequired
        Description
        Optional authentication type (01 - Static, 02 - Dynamic, 03 - OOB, 04 - Decoupled)
        Default
        01
        authenticationValuestringrequired
        Description
        3DS Authentication value (AV) should be sent to the payment gateway in the authorization call
        Default
        tSvPDt3PINNaoL+ERXdg0jVrmWc=
        bankLiabilityShiftbooleanrequired
        Description
        Indicates whether transaction is supposed to get liability shift from issuer
        Default
        true
        cardEnrolledstringrequired
        Description
        3DS transaction card Enrolled status - should be sent to the payment gateway in the authorization call in some payment gateways
        Default
        Y
        cavvAlgorithmstringrequired
        Description
        3DS Authentication value algorithm - should be sent to the payment gateway in the authorization call in some payment gateways. Possible values (3DS1 only): 0, 1, 2, 3, 4, 7
        Default
        3
        challengeCancelstringrequired
        Description
        Indicator informing the ACS and the DS that the authentication has been canceled. Possible values: 01-99
        Default
        01
        challengeStatusstringrequired
        Description
        Ares transStatus value (Possible values: U, N, Y, A, C, D, R, I)
        Default
        Y
        dsTransIDstringrequired
        Description
        Universally unique transaction identifier assigned by the DS to identify a single transaction
        Default
        38bbf46f-c023-4f4c-ae2c-35fb301632a5
        encodedChallengeRequeststringrequired
        Description
        This value will only be available when challenge is needed, in the challenge flow - this must be passed to browser in order to trigger the challenge
        Default
        eyJhY3NUcmFuc0lEIjoiMTEyY2RiNWItMGFlYy00MTY5LThjMWYtYWMyN2JlNjAxMjhhIiwiY2hhbGxlbmdlV2luZG93U2l6ZSI6IjA0IiwibWVzc2FnZVZlcnNpb24iOiIyLjEuMCIsIm1lc3NhZ2VUeXBlIjoiQ1JlcSIsInRocmVlRFNTZXJ2ZXJUcmFuc0lEIjoiZWRhM2MwMzYtZWMyYS00NmZkLTlmYWItNzBlZTgyYjJjNzQ5In0=
        exemptionstring<LOW_VALUE | TRANSACTION_RISK_ANALYSIS | SECURE_CORPORATE | TRUSTED_BENEFICIARY>
        Description
        Exemption that should be used during the authorization process
        Default
        TRANSACTION_RISK_ANALYSIS
        interactionCounterstringrequired
        Description
        Indicates the number of authentication cycles attempted by the Cardholder
        Default
        01
        isFallbackbooleanrequired
        Description
        Indication of whether a 3DS1 challenge was performed as a fallback to 3DS2 error
        Default
        false
        messageCategorystringrequired
        Description
        Identifies the category of the message for a specific use case (01 - PA, 02 - NPA)
        Default
        01
        outOfScopeForPSD2string<ANONYMOUS_PREPAID_CARD | MERCHANT_INITIATED_TRANSACTIONS | ONE_LEG_OUT_EEA | MAIL_ORDER_TELEPHONE_ORDER>
        Description
        This field indicate if transaction is out of scope for PSD2 and exclusion should be requested
        Default
        ANONYMOUS_PREPAID_CARD
        threeDSServerTransIDstringrequired
        Description
        Universally unique transaction identifier assigned by the 3DS Server to identify a single transaction (in 3DS1 equal to XID)
        Default
        26d648a9-da8a-4f8b-a76d-094801d2fd45
        threeDSecureModestringrequired
        Description
        Indicate if the transaction is Frictionless or SCA. Being used by some payment gateways. Possible values: sca, frictionless
        Default
        sca
        threeDSecurePreferencestringrequired
        Description
        The challenge indicator used. Being used by some payment gateways. Possible values: nopref, frictionless, sca, scamandate
        Default
        nopref
        threeDSecureResultstringrequired
        Description
        This field is relevant for 3DS1 and being used by some payment gateways
        Default
        590040
        transStatusstringrequired
        Description
        3DS transStatus value - Indicates whether a transaction qualifies as an authenticated transaction or account verification. should be sent to the payment gateway in the authorization call (Possible values: U, N, Y, A, C, D, R, I)
        Default
        Y
        transStatusReasonstringrequired
        Description
        Provides information on why the Transaction Status field has the specified value. Possible values: 01-99
        Default
        01
        verifyStatusstringrequired
        Description
        Cres transStatus value (Possible values: U, N, Y, A, C, D, R, I, null)
        Default
        Y
        versionstringrequired
        Description
        Version. Possible values: 1.0.2, 2.1.0, 2.2.0
        Default
        2.1.0
    - emailobject
      - Email
        emailstringrequired
        Description
        Email address
        Default
        [email protected]
        emailVerificationobject
        Verification
        sentbooleanrequired
        Description
        True if verification email was sent to email address or verification SMS was sent to phone number
        Default
        true
        timeSentnumber
        Description
        Date verification email or SMS was sent in seconds since unix epoch (UTC, Jan 1, 1970)
        Default
        1389567341
        verifiedbooleanrequired
        Description
        True if customer received email verification message to this address and clicked-through back to merchant's site, or received SMS message and enterd code in merchant's site (two-factor authentication)
        Default
        false
    - phoneobject
      - Phone
        phonestringrequired
        Description
        Phone number including all country and local access codes
        Default
        15557654321
        smsVerifiedobject
        Verification
        sentbooleanrequired
        Description
        True if verification email was sent to email address or verification SMS was sent to phone number
        Default
        true
        timeSentnumber
        Description
        Date verification email or SMS was sent in seconds since unix epoch (UTC, Jan 1, 1970)
        Default
        1389567341
        verifiedbooleanrequired
        Description
        True if customer received email verification message to this address and clicked-through back to merchant's site, or received SMS message and enterd code in merchant's site (two-factor authentication)
        Default
        false

400Bad Request (Often missing a required parameter)

401Unauthorized (No valid API key provided)

404Not Found (The requested item doesn't exist)

500Server Error (Something went wrong on Forter's end)

curl

curl --request POST \
     --url https://api.forter-secure.com/v3/orders/{id}/results \
     --header 'accept: application/json' \
     --header 'content-type: application/json' \
     --header 'api-version: 10.1' \
     --header 'x-forter-siteid: 8b47c6d423ba' \
     --header 'authorization: Basic <base64-encoded-api-key:>' \
     --data '{
     "managedOrderToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjIwMjMtMDUtMjMifQ.eyJmb3J0ZXJPcGFxdWVEYXRhIjoiZm9ydGVyT3BhcXVlRGF0YSIsImF1ZCI6ImNoZWNrb3V0dG9vbHMiLCJpc3MiOiJodHRwczovL2FwaS5jaGVja291dHRvb2xzLmNvbS92My9tYW5hZ2VkL29yZGVycyIsImV4cCI6MTczMzk0NzYxNH0.i3Q2KsUerRNQMfCGKQgoR_0AIENOKZ0C99kiRtlkuVQqbmhPRo0A4c42XHp0J_-kdJbCW2W1WckgglTy8GGRfwzVfZ2szSxJCB6QOd4uHwn0BN1GeTdY3qjtBHF48ihsDhfYXvII4Kl2zpL54aJfCePuYANedhxAWJZnUCcSKxFDYsj-gHGGApZbgPhnMI1QfUme2CHjpxu2vGTC0xC08OQuYO7vbESQU_YnLsc-xQYBrOy_4XuOEJDq8fK2O5saiZZEknNvLxouAzn16p5lzWJ3sp-tsJR-a9C_KgNqz_Nv4SaeSYQMhJwrYXXLhNP2ueTHdzEObtm7Skp_NQFdXBBF4vMO4HhKKBzNnfWjsKKCb6Utb__AZNbW4XYn9788wdHNVu-TVhiHRYOg19iOHaJS1l8DfHqMN0o-98Cmdu9prhGIvey64FrcEoAf9jhUjT4LN9u0zuH1jbwfpG-owmHEnpAY6dtZilK81zrf6A3OhRIB5_cECdutSa_UHXP1xapUsGoQMy3T5qaecnj6VqwXI1Cc3vrhsaewRCqJqDTeHG2slttrWBrigvXk4rFwWVazn_Y_PCy-WCfcazXK6nTCJTQ_mBoM24S-W6jRlOsfplDDl5cKGrvsulqXDuDqRzJnc_AmkVOWM9AvqqgkC5ef_2xcGprFi4xDjXkScz4"
     }'

javascript

var myHeaders = new Headers();
myHeaders.append("accept", "application/json");
myHeaders.append("content-type", "application/json");
myHeaders.append("api-version", "10.1");
myHeaders.append("x-forter-siteid", "8b47c6d423ba");
myHeaders.append("authorization", "Basic <base64-encoded-api-key:>");

var raw = JSON.stringify({
   "managedOrderToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjIwMjMtMDUtMjMifQ.eyJmb3J0ZXJPcGFxdWVEYXRhIjoiZm9ydGVyT3BhcXVlRGF0YSIsImF1ZCI6ImNoZWNrb3V0dG9vbHMiLCJpc3MiOiJodHRwczovL2FwaS5jaGVja291dHRvb2xzLmNvbS92My9tYW5hZ2VkL29yZGVycyIsImV4cCI6MTczMzk0NzYxNH0.i3Q2KsUerRNQMfCGKQgoR_0AIENOKZ0C99kiRtlkuVQqbmhPRo0A4c42XHp0J_-kdJbCW2W1WckgglTy8GGRfwzVfZ2szSxJCB6QOd4uHwn0BN1GeTdY3qjtBHF48ihsDhfYXvII4Kl2zpL54aJfCePuYANedhxAWJZnUCcSKxFDYsj-gHGGApZbgPhnMI1QfUme2CHjpxu2vGTC0xC08OQuYO7vbESQU_YnLsc-xQYBrOy_4XuOEJDq8fK2O5saiZZEknNvLxouAzn16p5lzWJ3sp-tsJR-a9C_KgNqz_Nv4SaeSYQMhJwrYXXLhNP2ueTHdzEObtm7Skp_NQFdXBBF4vMO4HhKKBzNnfWjsKKCb6Utb__AZNbW4XYn9788wdHNVu-TVhiHRYOg19iOHaJS1l8DfHqMN0o-98Cmdu9prhGIvey64FrcEoAf9jhUjT4LN9u0zuH1jbwfpG-owmHEnpAY6dtZilK81zrf6A3OhRIB5_cECdutSa_UHXP1xapUsGoQMy3T5qaecnj6VqwXI1Cc3vrhsaewRCqJqDTeHG2slttrWBrigvXk4rFwWVazn_Y_PCy-WCfcazXK6nTCJTQ_mBoM24S-W6jRlOsfplDDl5cKGrvsulqXDuDqRzJnc_AmkVOWM9AvqqgkC5ef_2xcGprFi4xDjXkScz4"
});

var requestOptions = {
   method: 'POST',
   headers: myHeaders,
   body: raw,
   redirect: 'follow'
};

fetch("https://api.forter-secure.com/v3/orders/{id}/results", requestOptions)
   .then(response => response.text())
   .then(result => console.log(result))
   .catch(error => console.log('error', error));

ruby

require "uri"
require "json"
require "net/http"

url = URI("https://api.forter-secure.com/v3/orders/{id}/results")

https = Net::HTTP.new(url.host, url.port)
https.use_ssl = true

request = Net::HTTP::Post.new(url)
request["accept"] = "application/json"
request["content-type"] = "application/json"
request["api-version"] = "10.1"
request["x-forter-siteid"] = "8b47c6d423ba"
request["authorization"] = "Basic <base64-encoded-api-key:>"
request.body = JSON.dump({
   "managedOrderToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjIwMjMtMDUtMjMifQ.eyJmb3J0ZXJPcGFxdWVEYXRhIjoiZm9ydGVyT3BhcXVlRGF0YSIsImF1ZCI6ImNoZWNrb3V0dG9vbHMiLCJpc3MiOiJodHRwczovL2FwaS5jaGVja291dHRvb2xzLmNvbS92My9tYW5hZ2VkL29yZGVycyIsImV4cCI6MTczMzk0NzYxNH0.i3Q2KsUerRNQMfCGKQgoR_0AIENOKZ0C99kiRtlkuVQqbmhPRo0A4c42XHp0J_-kdJbCW2W1WckgglTy8GGRfwzVfZ2szSxJCB6QOd4uHwn0BN1GeTdY3qjtBHF48ihsDhfYXvII4Kl2zpL54aJfCePuYANedhxAWJZnUCcSKxFDYsj-gHGGApZbgPhnMI1QfUme2CHjpxu2vGTC0xC08OQuYO7vbESQU_YnLsc-xQYBrOy_4XuOEJDq8fK2O5saiZZEknNvLxouAzn16p5lzWJ3sp-tsJR-a9C_KgNqz_Nv4SaeSYQMhJwrYXXLhNP2ueTHdzEObtm7Skp_NQFdXBBF4vMO4HhKKBzNnfWjsKKCb6Utb__AZNbW4XYn9788wdHNVu-TVhiHRYOg19iOHaJS1l8DfHqMN0o-98Cmdu9prhGIvey64FrcEoAf9jhUjT4LN9u0zuH1jbwfpG-owmHEnpAY6dtZilK81zrf6A3OhRIB5_cECdutSa_UHXP1xapUsGoQMy3T5qaecnj6VqwXI1Cc3vrhsaewRCqJqDTeHG2slttrWBrigvXk4rFwWVazn_Y_PCy-WCfcazXK6nTCJTQ_mBoM24S-W6jRlOsfplDDl5cKGrvsulqXDuDqRzJnc_AmkVOWM9AvqqgkC5ef_2xcGprFi4xDjXkScz4"
})

response = https.request(request)
puts response.read_body

python

import requests
import json

url = "https://api.forter-secure.com/v3/orders/{id}/results"

payload = json.dumps({
   "managedOrderToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjIwMjMtMDUtMjMifQ.eyJmb3J0ZXJPcGFxdWVEYXRhIjoiZm9ydGVyT3BhcXVlRGF0YSIsImF1ZCI6ImNoZWNrb3V0dG9vbHMiLCJpc3MiOiJodHRwczovL2FwaS5jaGVja291dHRvb2xzLmNvbS92My9tYW5hZ2VkL29yZGVycyIsImV4cCI6MTczMzk0NzYxNH0.i3Q2KsUerRNQMfCGKQgoR_0AIENOKZ0C99kiRtlkuVQqbmhPRo0A4c42XHp0J_-kdJbCW2W1WckgglTy8GGRfwzVfZ2szSxJCB6QOd4uHwn0BN1GeTdY3qjtBHF48ihsDhfYXvII4Kl2zpL54aJfCePuYANedhxAWJZnUCcSKxFDYsj-gHGGApZbgPhnMI1QfUme2CHjpxu2vGTC0xC08OQuYO7vbESQU_YnLsc-xQYBrOy_4XuOEJDq8fK2O5saiZZEknNvLxouAzn16p5lzWJ3sp-tsJR-a9C_KgNqz_Nv4SaeSYQMhJwrYXXLhNP2ueTHdzEObtm7Skp_NQFdXBBF4vMO4HhKKBzNnfWjsKKCb6Utb__AZNbW4XYn9788wdHNVu-TVhiHRYOg19iOHaJS1l8DfHqMN0o-98Cmdu9prhGIvey64FrcEoAf9jhUjT4LN9u0zuH1jbwfpG-owmHEnpAY6dtZilK81zrf6A3OhRIB5_cECdutSa_UHXP1xapUsGoQMy3T5qaecnj6VqwXI1Cc3vrhsaewRCqJqDTeHG2slttrWBrigvXk4rFwWVazn_Y_PCy-WCfcazXK6nTCJTQ_mBoM24S-W6jRlOsfplDDl5cKGrvsulqXDuDqRzJnc_AmkVOWM9AvqqgkC5ef_2xcGprFi4xDjXkScz4"
})
headers = {
   'accept': 'application/json',
   'content-type': 'application/json',
   'api-version': '10.1',
   'x-forter-siteid': '8b47c6d423ba',
   'authorization': 'Basic <base64-encoded-api-key:>'
}

response = requests.request("POST", url, headers=headers, data=payload)

print(response.text)

200

// Example v3OrderResultsResponse
{
  "decisionReason": "",
  "forterDecision": "",
  "linkToEventInDashboard": "",
  "merchantPolicyId": "",
  "orderId": "",
  "recommendation": "",
  "verificationMethod": {
    "correlationId": "",
    "status": "",
    "statusCode": "",
    "statusMessage": "",
    "type": "",
    "verificationId": "",
    "verificationSpecificData": {
      "ThreeDS": {},
      "email": {},
      "phone": {}
    }
  }
}

400

// Bad Request (Often missing a required parameter)

401

// Unauthorized (No valid API key provided)

404

// Not Found (The requested item doesn't exist)

500

// Server Error (Something went wrong on Forter's end)

フォルターの注文リクエストに対する応答で返された管理された注文トークンを使用して、3DSの結果を確認してください。