LIlightsparkdev
Strong Customer Authentication

Record a security event

Changed on

Record a client-side security-relevant event for the customer with Grid's risk engine (e.g. a sign-in, a sensitive view), to feed adaptive-authentication signals.

This endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns 409.

post/sca/record-event

Request

  • Base URL
    https://api.lightspark.com/grid/2025-10-13
  • URL
    https://api.lightspark.com/grid/2025-10-13/sca/record-event
  • Auth
    HTTP basic

Request body

eventType'RESET_PASSWORD_COMPLETED' | 'FAILED_LOGIN_ATTEMPT' required

A security event on a customer's account that affects Strong Customer Authentication.

endUserIpAddressstring required

The IP address of the end user's device the event was observed from, recorded against the event by the SCA provider. Supply the customer's address, not your server's — it feeds the provider's risk assessment and the adaptive-authentication signals derived from this event.

Example request

{
  "eventType": "FAILED_LOGIN_ATTEMPT",
  "endUserIpAddress": "203.0.113.42"
}

Response

Event recorded; the customer's resulting login-security state is returned (including any lockout).

eventType'RESET_PASSWORD_COMPLETED' | 'FAILED_LOGIN_ATTEMPT' required

A security event on a customer's account that affects Strong Customer Authentication.

suspendedboolean required

Whether the customer's login is currently suspended (locked with no automatic expiry). A suspended customer must go through a password reset (RESET_PASSWORD_COMPLETED) to clear the lockout.

lockedUntilstring date-time nullable

When the customer may attempt to log in again, if temporarily locked. Null when not locked, or when suspended is true (no automatic expiry).

failedAttemptsinteger required

The customer's current cumulative failed-login count.

Example response

{
  "eventType": "FAILED_LOGIN_ATTEMPT",
  "lockedUntil": "2025-10-03T12:15:00Z",
  "failedAttempts": 5
}

Changes

  • d996ddfb9d2bRevision changes
    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

  • f11f1e76bdd7Revision changes
    • warning

      added the new PURCHASE_CARD_LIMIT_REACHED enum value to the response property for the response status