Sign in
webhook-event
3ds

3DS challenge

Triggered when a customer initiates a push notification for 3DS. The provided information can be used to send a push notification to the customer's mobile app. See the Webhooks guide for setup instructions, signature verification, and best practices.

Events may not be delivered in the order they occurred. Use data.occurred_at to reconcile the order. See the Event Ordering guide for details.

  • Event type: cards#3ds-challenge
  • Profile level subscriptions: Not Supported
  • Application level subscriptions: Supported
postWebhookcards#3ds-challenge

Headers

X-Signature-SHA256string

RSA-SHA256 signature of the request body, Base64 encoded. Verify this against the Wise public key to ensure the request is authentic and has not been tampered with.

X-Delivery-Idstring uuid

Unique identifier for this webhook delivery attempt.

X-Test-Notificationboolean

Present with the value true if this is a test notification sent to verify your callback URL during subscription setup.

Payload

OR

Example payload

{
  "schema_version": "4.0.0",
  "subscription_id": "ec6d37c2-4611-457a-b210-d1a5f4e354c7",
  "event_type": "cards#3ds-challenge",
  "sent_at": "2024-09-05T06:47:15.123Z",
  "data": {
    "resource": {
      "client_id": "tw-test-card-issuance",
      "card_token": "3ab81206-d258-4caf-cea5-60067ba82404",
      "profile_id": 29751964,
      "type": "card"
    },
    "challenge_expires_after": 300,
    "occurred_at": "2024-09-05T06:47:15.789Z",
    "challenge_method": "PUSH",
    "transaction": {
      "reference": "148990660",
      "channel": "browser",
      "merchant": {
        "country": "AD",
        "name": "Cards API BBT",
        "url": "http://intrepid-fav.net"
      },
      "money_value": {
        "value": 100,
        "currency": "EUR"
      }
    }
  }
}

Response

Return any 2xx status to acknowledge receipt of the event.

statusstring

Example response

{
  "status": "ok"
}

Changes