---
title: "Solve payment challenge"
method: POST
path: "/rest/payments/{payment-id}/init/{init-id}/challenges/{challenge-id}/response"
tags: ["Strong Customer Authentication"]
---

# Solve payment challenge

`POST /rest/payments/{payment-id}/init/{init-id}/challenges/{challenge-id}/response`

## Request

- Base URL: `https://api.nrich.qwist.cloud`
- URL: `https://api.nrich.qwist.cloud/rest/payments/{payment-id}/init/{init-id}/challenges/{challenge-id}/response`
- Auth: one of:
  - HTTP bearer
  - HTTP basic
- TypeScript: <https://skmtc.dev/qwist/apis/finx-api/docs/rest/payments/:payment-id/init/:init-id/challenges/:challenge-id/response/post.ts> (a function with typed inputs; its response is checked against the schema)

This endpoint is used to answer an authorization challenge that was issued by the financial provider.  In addition to the normal transport layer encryption it is possible to encrypt the challenge response using [JSON web encryption](/reference/jwe-encryption). Note that a challenge can only be answered once.  Subsequent submission of a response to the same challenge will result in an error.

## Parameters

- `#/paths/~1rest~1payments~1{payment-id}~1init/post/parameters/0` (unresolved $ref)
- `#/paths/~1rest~1payments~1{payment-id}~1init~1{init-id}/get/parameters/1` (unresolved $ref)
- `#/paths/~1rest~1accesses~1{access-id}~1syncs~1{sync-id}~1challenges~1{challenge-id}/get/parameters/2` (unresolved $ref)

## Request body

- union
  - 0 (unresolved $ref)
  - 1 (unresolved $ref)
  - 2 (unresolved $ref)
  - 3 (unresolved $ref)

## Other responses

- `202` (unresolved $ref)
- `400` (unresolved $ref)
- `401` (unresolved $ref)
- `409` (unresolved $ref)

## Changes

- **2026-11-03** `398592d93b1f`: 4 breaking, 2 info
  - added the new path request parameter `challenge-id`
  - added the new path request parameter `init-id`
  - added the new path request parameter `payment-id`
  - removed `#/components/schemas/0, #/components/schemas/1, #/components/schemas/2, #/components/schemas/3` from the request body `oneOf` list
  - …2 more

[Operation history](https://skmtc.dev/qwist/apis/finx-api/changes/rest/payments/:payment-id/init/:init-id/challenges/:challenge-id/response/post.md)

---

[API](https://skmtc.dev/qwist/apis/finx-api.md) - [All operations](https://skmtc.dev/qwist/apis/finx-api/llms.txt) - [OpenAPI document](https://skmtc.dev/qwist/apis/finx-api/revisions/398592d93b1f?raw)