---
title: "(Mock) ACS Client Authorization"
method: POST
path: "/pws/pws_apata_auth_client/"
tags: ["3DS"]
---

# (Mock) ACS Client Authorization

`POST /pws/pws_apata_auth_client/`

## Request

- Base URL: `https://api.uat.paymentology.com/ppws/api`
- URL: `https://api.uat.paymentology.com/ppws/api/pws/pws_apata_auth_client/`
- Auth: none declared

This API provides 3DS authentication for APATA. It reads the request and mocks a authentication response.

## Request body

- AcsClientRequestModel
  - `clientId` integer: Unique identifier assigned to the client by Paymentology system
  - `rid` integer: Transaction identifier generated by Paymentology system
  - `acsTranId` string: Unique txn ID generated by ACS for every transaction
  - `token` integer: Unique token assigned to each PAN (card number)
  - `messageCategory` string: <ul><li class="docBullet">01 - Payment</li><li class="docBullet">02 - Non-Payment</li></ul>
  - `merchantName` string: Name of Merchant where transaction was initiated
  - `txnAmount` number: Transaction amount in minor units of the ongoing transaction
  - `txnCurrency` string: Currency in which amount is expressed
  - `authType` integer: Authentication type required by the cardholder.<ul><li class="docBullet">0 - No Client Authentication – (OTP via API)</li><li class="docBullet">1 - Client authentication (OOB)</li></ul>
  - `otp` string: One time passcode to be sent to the cardholder either via SMS or Push notification or any other medium
  - `languagePreference` string: Language Preference sent from Paymentology system
  - `additionalData` string: Additional data that may be used in the future
  - `merchantRedirectUrl` string: Url of the merchant app which can be used to redirect cardholders
  - `merchantURL` string: Merchant App URL that Authentication App can call the Merchant app after OOB authentication has occurred.
  - `merchantAppRedirectURL` string: Merchant app declaring their URL within the CReq message, so that the ACS can redirect the cardholder to the merchant app after OOB authentication has occurred.
  - `otpReferenceCode` string: Unique value generated with each new OTP value
  - `stepupRequestId` string: Unique identifier for the step-up authentication request

## Response `200`

Successful Response

- AcsAuthClientResponseModel
  - `rid` integer: Unique authentication reference received in the request.
  - `token` integer: Unique card token received in the request
  - `responseCode` string: Response code to indicate whether transaction was success or failed. <ul><li class="docBullet">00 - Success</li><li class="docBullet">01 - Declined</li></ul>
  - `description` string: Result description
  - `authenticationPerformed` string: Performed authentication methods

## Other responses

- `404`: Webservices does not exist
- `500`: Internal Server error

## Changes

- **2026-11-03** `73c2771493b1`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/paymentology/apis/payapi-docs/changes/pws/pws_apata_auth_client/post.md)

---

[API](https://skmtc.dev/paymentology/apis/payapi-docs.md) - [All operations](https://skmtc.dev/paymentology/apis/payapi-docs/llms.txt) - [OpenAPI document](https://skmtc.dev/paymentology/apis/payapi-docs/revisions/73c2771493b1?raw)