---
title: "card_authorization.challenge_response"
method: POST
path: "card_authorization.challenge_response"
tags: ["Event Types"]
---

# card_authorization.challenge_response

`POST card_authorization.challenge_response` (webhook)

Occurs when a cardholder responds to a challenge during card authorization.

## Payload

- object
  - `event_type` 'card_authorization.challenge_response', required — Event type
  - `event_token` string, uuid, required — Globally unique identifier for the event
  - `transaction_token` string, uuid, nullable, required — The token of the transaction associated with the authorization event being challenged
  - `card_token` string, uuid, nullable, required — The token of the card associated with the challenge
  - `challenge_method` 'SMS' | 'OUT_OF_BAND', required — The method used to deliver the challenge to the cardholder
  - `response` 'APPROVE' | 'DECLINE', required — The cardholder's response to the challenge
  - `created` string, date-time, required — The timestamp of when the challenge was created
  - `completed` string, date-time, nullable, required — The timestamp of when the challenge was completed

## Acknowledgement `200`

Return a 200 status to indicate that the data was received successfully

---

[API](https://skmtc.net/lithic-com/apis/lithic-developer-api.md) · [All operations](https://skmtc.net/lithic-com/apis/lithic-developer-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lithic-com/lithic-developer-api/revisions/53ab5d4e2adb/schema)