3DSecure - Freedom Pay

When using this method, 3ds is required, therefore it is necessary to make a request to the ACS server of the card issuer bank

3D Secure (3DS) is an authentication technology to protect against unauthorized use of cards. It allows for verifying the cardholder’s identity before the payment is processed

The authentication process works as follows: after entering the card details, the issuer’s website opens, prompting the cardholder to enter a password or secret code. The code is usually sent via SMS. If the code is entered correctly, the payment is authorized; if not, the transaction is declined

3D Secure is available only for cards issued by banks that support this technology. Payments without 3D Secure are considered less secure

Request

Body Params multipart/form-data

pg_merchant_id

integer

required

Merchant ID in {{project}}
Issued upon connection

pg_payment_id

integer

required

Transaction ID

pg_md

string

required

Parameter from the response
ACS server of the issuer.

pg_pares

string

required

Parameter from response
ACS server of the issuer

pg_salt

string

required

Random string consisting of arbitrary numbers and Latin letters

pg_sig

string

required

Request signature

Request samples

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

Responses

🟢200Success

application/xml

Body

pg_payment_id

integer

required

pg_order_id

string

required

pg_status

string

required

pg_card_mask

string

required

pg_card_token

string

optional

pg_3d_acsurl

string

required

pg_user_id

string

required

pg_3ds

boolean

required

pg_salt

string

required

pg_sig

string

required

Example

<?xml version="1.0" encoding="utf-8"?>
<response>
    <pg_payment_id>7777777777</pg_payment_id>
    <pg_order_id>test</pg_order_id>
    <pg_status>ok</pg_status>
    <pg_card_mask>5555-55XX-XXXX-5555</pg_card_mask>
    <pg_3ds>1</pg_3ds>
    <pg_3d_acsurl>https://secure.freedompay.kz/v2/user/3ds-page/fxz32tcxc-24trf-dfg3-dfgdf-3543543543gdf</pg_3d_acsurl>
    <pg_datetime>2024-09-11T15:57:53+00:00</pg_datetime>
    <pg_salt>some random string</pg_salt>
    <pg_sig>7fba2cf29fdh53462cb7cc91534635af</pg_sig>
</response>

🟢200Error