---
title: "Notify Card Authorisation Operations"
method: POST
path: "/notifications/d1/v2/issuers/{issuerId}/authorisations"
---

# Notify Card Authorisation Operations

`POST /notifications/d1/v2/issuers/{issuerId}/authorisations`

This request is used by D1 to notify the system of the bank about one or several authorisation processed by D1.<br>
The number max of authorisation in the notification is defined at onboarding time with issuer.
Each auhtorisation is linked to a given card id, and can contain a message dedicated for the final end-user.

## Request body

- object
  - `operations` AuthorisationCardOperationNotification[]
    - `operationId` string, required — Id corresponding to Retrieval Reference Number (ISO-8583 SID / Field No 37).
    - `operation` 'PURCHASE' | 'WITHDRAWAL' | 'REFUND' | 'PAYMENT' | 'OTHER', required — operation defines the auhtorisation type. Computed from processing code (ISO-8583 SID / Field No 3) transaction type (Postions 1-2).
    - `status` 'APPROVED' | 'PARTIALLY_APPROVED' | 'REVERSED' | 'DECLINED', required — The operation status. Interpreted value of Action Code (ISO-8583 SID / Field No 39).
    - `startTime` string, required — Transaction local date and time (ISO-8583 / Field No 12)<br> Format ISO 8601 YYYY-MM-DDThh:mm:ssTZD
    - `errorCode` 'INVALID_CARD_STATE' | 'INVALID_CARD_DATA' | 'CONTROL_FAIL' | 'VELOCITY_CHECK_FAIL' | 'BALANCE_CHECK_FAIL' | 'FRAUD_DETECTED' | 'TECHNICAL_ERROR' | 'ISSUER_ERROR' | 'DOMAIN_CONTROL_FAIL' — error code , only present in case of DECLINED operation/authorisation
    - `cardId` string, required — Unique identifier of the card.
    - `details` AuthorisationCardDetails
      - `isoMessageType` string, required — The ISO Message type of the request/advice sent by the switch.<br>Value '1100' represents an authorisation request.
      - `transactionDate` string, required — Transaction local date and time (ISO-8583 SID / Field No 12)<br> Format ISO 8601 YYYY-MM-DDThh:mm:ssTZD
      - `transmissionDate` string, required — Transmission date and time (ISO-8583 SID / Field No 7)<br> Format ISO 8601 YYYY-MM-DDThh:mm:ssTZD
      - `retrievalReferenceNumber` string, required — Retrieval Reference Number (ISO-8583 SID / Field No 37).
      - `stan` string, required — System Trace Audit Number (ISO-8583 SID / Field No 11)
      - `internalStan` string, required — The internal System Trace Audit Number generated by the solution.
      - `actionCode` string, required — The none interpreted Action Code return by the authorisation host (ISO-8583 SID / Field No 39).<br> For example '000' for APPROVED, '002' for PARTIAL APPROVE
      - `declinedReason` 'INVALID_CARD_STATE' | 'INVALID_CARD_DATA' | 'CONTROL_FAIL' | 'VELOCITY_CHECK_FAIL' | 'BALANCE_CHECK_FAIL' | 'FRAUD_DETECTED' | 'TECHNICAL_ERROR' | 'ISSUER_ERROR' | 'DOMAIN_CONTROL_FAIL' — The declined reason of the operation, present only is the authorisation has been DECLINED by Auhtorisation host.
      - `declinedDetails` 'INVALID_CVV2' | 'INVALID_DCVV2' | 'INVALID_EXPIRY_DATE' | 'INVALID_RETRYABLE_DCVV2' | 'NO_ACTIVE_DCVV2' | 'CARD_DELETED' | 'CARD_EXPIRED' | 'CARD_REPLACED' | 'CARD_SUSPENDED' | 'CONTACTLESS_DISABLED' | 'CVV2_LOCKED' | 'EXPIRY_DATE_LOCKED' | 'PIN_LOCKED' | 'COUNTRY_NOT_ALLOWED' | 'CURRENCY_NOT_ALLOWED' | 'MAGSTRIPE_DISABLED' | 'MERCHANT_TYPE_NOT_ALLOWED' | 'ONLINE_PAYMENT_DISABLED' | 'WITHDRAWAL_DISABLED' | 'EMV_AUTHORIZATION_VERIFICATION_FAIL' | 'INVALID_PIN' | 'ABOVE_MAX_AMOUNT' | 'BELOW_MIN_AMOUNT' | 'MAX_AMOUNT_LIMIT_REACHED' | 'MAX_TRANSACTION_LIMIT_REACHED' | 'NOT_ENOUGH_FUND' | 'INVALID_MERCHANT' | 'SUSPECTED_FRAUD' | 'ACCOUNT_NOT_FOUND' | 'FUND_CHECK_FAILED' | 'TECHNICAL_ERROR' — Additional details for declined Reason if available. In table below you will find the possible details for each declined reason | Declined reason | possible declined details | | -------------------- | ------------------------| | INVALID_CARD_DATA | INVALID_CVV2<br>INVALID_DCVV2<br>INVALID_EXPIRY_DATE<br>INVALID_RETRYABLE_DCVV2<br>NO_ACTIVE_DCVV2 | | INVALID_CARD_STATE | CARD_DELETED<br>CARD_EXPIRED<br>CARD_REPLACED<br>CARD_SUSPENDED<br>CONTACTLESS_DISABLED<br>CVV2_LOCKED<br>EXPIRY_DATE_LOCKED<br>PIN_LOCKED | | DOMAIN_CONTROL_FAIL | CONTACTLESS_DISABLED<br>COUNTRY_NOT_ALLOWED<br>CURRENCY_NOT_ALLOWED<br>MAGSTRIPE_DISABLED<br>MERCHANT_TYPE_NOT_ALLOWED<br>ONLINE_PAYMENT_DISABLED<br>WITHDRAWAL_DISABLED | | CONTROL_FAIL | EMV_AUTHORIZATION_VERIFICATION_FAIL<br>INVALID_PIN | | VELOCITY_CHECK_FAIL | ABOVE_MAX_AMOUNT<br>BELOW_MIN_AMOUNT<br>MAX_AMOUNT_LIMIT_REACHED<br>MAX_TRANSACTION_LIMIT_REACHED | | BALANCE_CHECK_FAIL | NOT_ENOUGH_FUND | | FRAUD_DETECTED | INVALID_MERCHANT<br>SUSPECTED_FRAUD | | ISSUER_ERROR | ACCOUNT_NOT_FOUND<br>FUND_CHECK_FAILED |
      - `amount` number, required — The nominal transaction amount value (ISO-8583 SID / Field No 04).<br> Value without decimal separator, use the currency exponent to determine the number of decimal.<br> For example, an amount in euro of €21 is returned 2100.
      - `currencyCode` string, required — Currency Code in ISO 4217 alpha code format
      - `billingAmount` number — The billing amount value from Authorisation (ISO-8583 SID / Field No 06)<br> Value without decimal separator, use the currency exponent to determine the number of decimal.<br> For example, an amount in euro of €21 is returned 2100.
      - `billingCurrencyCode` string — Currency Code in ISO 4217 alpha code format
      - `conversionRate` number — Cardholder billing exchange rate from Auhtorization (ISO-8583 SID / Field No 10)<br>Or used by the solution during conversion.
      - `replacementAmount` number — The replacement amount value from Authorisation (ISO-8583 SID / Field No 30)<br> Value without decimal separator, use the currency exponent to determine the number of decimal.<br> For example, an amount in euro of €21 is returned 2100.
      - `replacementCurrencyCode` string — Currency Code in ISO 4217 alpha code format
      - `accountNumber` string — Account number used when posting with Core Banking System
      - `standInProcessing` boolean — Specify if STAND-In processing has been used or not by D1 Authorisation host. - true if the authorization has been approvded on behalf of the Core Banking System (STAND-IN processing) - false if financial authorization has been approved by the Core Banking system.
      - `functionCode` string, required — Function code (ISO-8583 SID - Field No 24)
      - `messageReasonCode` string — Function code (ISO-8583 SID - Field No 25)
      - `cardPresent` boolean — Point of service data code (ISO-8583 SID / Field No 22) Card Present indicator (Postion 06).
      - `cardDataInputMode` string — Point of service data code (ISO-8583 SID / Field No 22) Card Data Input Mode (Postion 07).<br> See ISO-8583 SID for the list of possible values.
      - `initiatingParty` 'CARDHOLDER' | 'MERCHANT' — Merchant or Cardholder initiated transaction<br>TAG P64 in Additional private data (ISO-8583 SID / Field No 48) Initating-Party (Postion 04).
      - `acquirerCountryCode` string — Acquiring institution country code (ISO-8583 SID / Field No 19).<br> Country code in ISO 3166-1 alpha-2.
      - `merchant` AuthorisationCardDetailsMerchant, required — merchant information as provided from Authorisation (ISO-8583 SID / Field No 42 & 43)
        - `merchantId` string, required — Card acceptor identification code (ISO-8583 SID / Field No 42).
        - `merchantNameAddress` string, required — Card acceptor name and address (ISO-8583 SID / Field No 43).
        - `merchantName` string — merchant accronym (positions 1-24) of Card acceptor name and address (ISO-8583 SID / Field No 43).
        - `city` string — merchant city (positions 25-37) of Card acceptor name and address (ISO-8583 SID / Field No 43).
        - `countryCode` string — merchant country (positions 38-40) of Card acceptor name and address (ISO-8583 SID / Field No 43)<br> Country code in ISO 3166-1 alpha-2.
        - `merchantType` string — MCC / Merchant type (ISO-8583 SID / Field No 18). (not provided for an operation having a status=REVERSED)
      - `digitalCard` AuthorisationCardDetailsDigitalCard — Provided in case Authorisation with a digital card.<br> Information extracted in Tag P55 (Token Data) from Additional Private Data (ISO-8583 SID / Field No 48)
        - `digitalCardId` string, required — Unique identifier of the digital card.
        - `digitalCardRequestorId` string, required — Digital Card requestor identifier. This is provided by the TSP itself.
    - `message` AuthorisationNotificationMessage
      - `format` 'TEXT' | 'HTML' — Format of the message
      - `title` string — Title of the notification
      - `content` string — Message to be displayed

## Response `204`

Successful

## Other responses

- `400` — Bad Request, Invalid request URI, header, paramters.<br> D1 will not retry the request until the issue is considered as resolved.
- `401` — Unauthorized request.<br> D1 will not retry the request until the issue is considered as resolved.
- `403` — Forbidden action<br> D1 will not retry the request until the issue is considered as resolved.
- `404` — Ressource not found, Unknown issuerId<br> D1 will not retry the request until the issue is considered as resolved.
- `500` — Internal Server Error. D1 will retry the request later.
- `503` — The service is temporarily unavailable. D1 will retry the request later.

---

[API](https://skmtc.net/thalescloud/apis/d1-oauth-api.md) · [All operations](https://skmtc.net/thalescloud/apis/d1-oauth-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/thalescloud/d1-oauth-api/versions/96089514858c/schema)