v5

latestOpenAPI 3.1.02026-07-262421791.5 MB
webhook-event
3ds

3DS challenge

Triggered when a customer initiates a push notification for 3DS. The provided information can be used to send a push notification to the customer's mobile app.

  • Event type: cards#3ds-challenge
  • Profile level subscriptions: Not Supported
  • Application level subscriptions: Supported

Events may not be delivered in the order they occurred. Use data.occurred_at to reconcile the order. See the Event ordering guide for details.

See the Webhooks guide for setup instructions, signature verification, and best practices.

postWebhookcards#3ds-challenge

Headers

X-Signature-SHA256string

RSA-SHA256 signature of the request body, Base64 encoded. Verify this against the Wise public key to ensure the request is authentic and has not been tampered with.

X-Delivery-Idstring uuid

Unique identifier for this webhook delivery attempt.

X-Test-Notificationboolean

Present with the value true if this is a test notification sent to verify your callback URL during subscription setup.

Payload

OR

Example payload

{
  "schema_version": "4.0.0",
  "subscription_id": "ec6d37c2-4611-457a-b210-d1a5f4e354c7",
  "event_type": "cards#3ds-challenge",
  "sent_at": "2024-09-05T06:47:15.123Z",
  "data": {
    "resource": {
      "client_id": "tw-test-card-issuance",
      "card_token": "3ab81206-d258-4caf-cea5-60067ba82404",
      "profile_id": 29751964,
      "type": "card"
    },
    "challenge_expires_after": 300,
    "occurred_at": "2024-09-05T06:47:15.789Z",
    "challenge_method": "PUSH",
    "transaction": {
      "reference": "148990660",
      "channel": "browser",
      "merchant": {
        "country": "AD",
        "name": "Cards API BBT",
        "url": "http://intrepid-fav.net"
      },
      "money_value": {
        "value": 100,
        "currency": "EUR"
      }
    }
  }
}

Response

Return any 2xx status to acknowledge receipt of the event.

statusstring

Example response

{
  "status": "ok"
}