3D Secure

Some payment acquirers demand use of 3D secure and Áskell tries to make that as simple as possible. There are a couple of things to keep in mind when using Áskell with a payment acquirer that is 3D Secure. Áskell supports Saltpay and Valitorpay as 3D secure payment acquirers.

Roughly speaking the process works like this:

1. When accepting a payment by card, a new TemporaryPaymentMethod needs to generated by calling POST /api/temporarypaymentmethod/. The answer from Áskell contains two variables, token and card_verification_url.

2. The user needs to see a iframe or modal window with card_verification_url so they can enter the code that they get via, for example, text from the card issuer.

3. At the same time the status of token needs to be checked by calling GET /api/temporarypaymentmethod/{token}/. Accepted statuses are

   • initial

   • tokencreated

   • failed

   When the status tokencreated is achieved, the iframe or modal window can be closed.

4. Finally, there are two options available to confirm the payment card so it can be charged.

   1. Add the card to an existing customer.

      In this case the API call POST /api/customers/paymentmethod/ is used

   2. Adding a new subscription to a customer.

      In this case the API call POST /api/subscriptions/multi/ is used