--- title: "Fetch a 3D Secure Session" method: GET path: "/3d_secure_sessions/{3d_secure_session_id}" tags: ["3D Secure Sessions"] --- # Fetch a 3D Secure Session `GET /3d_secure_sessions/{3d_secure_session_id}` ## Request - Base URL: `https://finix.sandbox-payments-api.com` - URL: `https://finix.sandbox-payments-api.com/3d_secure_sessions/{3d_secure_session_id}` - Auth: HTTP basic - TypeScript: (a function with typed inputs; its response is checked against the schema) Retrieve the details of a `3D Secure Session` to check the state of the authentication and read the values the card network returned. ## Headers - `Finix-Version` string ## Response `200` A single `3D Secure Session` object. - 3dSecureSession - `id` string: The ID of the `3D Secure Session`. - `created_at` string, date-time: Timestamp of when the object was created. - `updated_at` string, date-time: Timestamp of when the object was last updated. - `3d_secure_authentication` object, nullable: The authentication values the card network returns. Pass this object, or the ID of this `3D Secure Session`, when you create the [Transfer](/api/transfers) or [Authorization](/api/authorizations). This field is `null` until the authentication process finishes. It stays `null` when `state` is `FAILED`. - `cardholder_authentication` string: Provides evidence that the cardholder authentication occurred or that the [Merchant](/api/merchants) attempted authentication. This is unique for each authentication transaction and is sometimes referred to as the cardholder authentication verification value (CAVV). - `electronic_commerce_indicator` 'AUTHENTICATED' | 'ATTEMPTED' | 'NON_AUTHENTICATED': The result of the authentication, and the value that determines who carries chargeback liability for fraud. - `AUTHENTICATED`: The issuer authenticated the [buyer](/api/identities). Liability for fraud chargebacks shifts to the issuer. - `ATTEMPTED`: The issuer could not authenticate the buyer, so the card network authenticated on the issuer's behalf. Liability for fraud chargebacks shifts to the issuer. - `NON_AUTHENTICATED`: The buyer was not authenticated. Liability for fraud chargebacks stays with the seller. - `transaction_id` string: The ID the issuer assigns to the 3D Secure transaction. - `3d_secure_authentication_session_id` string, nullable: The ID of the authentication session with the 3D Secure vendor. This is not the ID of the `3D Secure Session` resource. - `3d_secure_authentication_url` string, nullable: The hosted URL where the [buyer](/api/identities) completes authentication. Redirect the buyer to this URL to run the redirect flow. This field is `null` when you create the session from a `token_id` and complete the authentication with Finix.js. - `3d_secure_version` string, nullable: The version of the 3D Secure protocol used for the authentication. - `amount` integer: The amount that was authenticated, in the smallest unit of the currency (for example, `1000` = $10.00). - `authentication_type` 'null' | 'FRICTIONLESS' | 'CHALLENGE' | 'ATTEMPT', nullable: How the buyer was authenticated. This field is populated when `state` is `SUCCEEDED`. - `FRICTIONLESS`: The issuer authenticated the buyer from the data in the request, without presenting a challenge. - `CHALLENGE`: The issuer presented the buyer with a challenge, such as a one-time passcode. - `ATTEMPT`: The card network authenticated on the issuer's behalf. - `currency` 'CAD' | 'USD': ISO 4217 3-letter currency code. - `failure_code` 'null' | 'AUTHENTICATION_FAILED' | 'AUTHENTICATION_TIMED_OUT' | 'CARD_NOT_ENROLLED' | 'CHALLENGE_REQUIRED' | 'DIRECTORY_SERVER_UNAVAILABLE' | 'ISSUER_SERVER_UNAVAILABLE' | 'PROTOCOL_ERROR' | 'SUSPECTED_FRAUD' | 'TRANSACTION_CANCELLED_BY_CARDHOLDER' | 'TRANSACTION_NOT_PERMITTED' | 'TRANSIENT_SYSTEM_FAILURE' | 'UNSUPPORTED_3D_SECURE_VERSION', nullable: The code for why the authentication process could not finish. This field is populated when `state` is `FAILED`. - `failure_message` string, nullable: A human-readable description of why the authentication process could not finish. - `merchant_id` string: The ID of the [Merchant](/api/merchants) the payment processes under. - `payment_instrument_id` string, nullable: The ID of the [Payment Instrument](/api/payment-instruments) that was authenticated. This field is `null` when you create the session from a `token_id`. - `redirect_url` string, nullable: The URL the buyer returns to after they finish authentication. This field is `null` when you create the session from a `token_id`. - `state` 'PENDING' | 'SUCCEEDED' | 'FAILED': The state of the authentication process. A `state` of `SUCCEEDED` means the process finished. It does not mean the buyer was authenticated: a session where the issuer declined to authenticate the buyer also ends in `SUCCEEDED`. Read `3d_secure_authentication.electronic_commerce_indicator` for the authentication result. - `PENDING`: The authentication process has not finished. - `SUCCEEDED`: The authentication process finished and returned a result. - `FAILED`: The authentication process could not finish. See `failure_code` and `failure_message`. - `tags` Tags, nullable: Include up to 50 `key: value` pairs to annotate requests with custom metadata. - Maximum character length for individual `keys` is 40. - Maximum character length for individual `values` is 500. (For example, `order_number: 25`, `item_type: produce`, `department: sales`) ## Other responses - `401`: Unauthorized. Authentication is required and has failed or has not been provided. - `403`: Forbidden. The client is authenticated but does not have permission to access the resource. - `404`: Not Found. The requested resource could not be found on the server. - `406`: Not Acceptable. The server could not accept the submitted request. Confirm how the request was formatted and submitted. ## Changes - **2026-10-14** `8c3b82d51eff`: 1 info - endpoint added [Operation history](https://skmtc.dev/finix/apis/finix-api-reference/changes/3d_secure_sessions/:3d_secure_session_id/get.md) --- [API](https://skmtc.dev/finix/apis/finix-api-reference.md) - [All operations](https://skmtc.dev/finix/apis/finix-api-reference/llms.txt) - [OpenAPI document](https://skmtc.dev/finix/apis/finix-api-reference/revisions/c62db965e7dc?raw)