Payment with 3D

Merchants can send 3D payment requests to more than one bank Virtual PoS for sales, sales in installments and pre-authorization and pre-authorization in installments transactions by sending a request to Switch 3D Gateway via HTML POST method with stored card data or open card data.

Merchants are expected to enter the PoS credential information for the banks they are currently using under the Bank Identification menu on the Switch Management Screens before sending the 3D request form created in the production environment to the Switch 3D Gateway. After this step, the Switch system stores the values defined by the merchant for each bank in encrypted form.

The smart Switch system decides which bank to send the payment request to in the transactions initiated by the merchant by triggering a 3D request, prepares the 3D Payment form with the bank credential information stored encrypted in the system and sends the request to the relevant Acquirer bank.

The 3D request received by the Acquirer bank is converted into a 3D transaction form and transmitted to the card bank via other modules and the cardholder is shown the screen where he/she will perform the verification process.

After the cardholder completes the 3D verification process, Switch 3D Gateway returns the 3D transaction result to the merchant via the success or fail URL specified by the merchant in the HTML POST.

With the Smart Switch system;

➢  Based on the bank ID sent by the merchant in the API, a payment request can be sent directly to the relevant bank.

➢  If the merchant does not send a bank ID in the API, a payment request can be sent to the bank of the card that the transaction was made.

➢  If the merchant does not send a bank ID in the API and the bank of the card being processed is not an integrated bank in the Switch system, a payment request can be sent via the bank defined by the merchant as default.

➢  If the default bank is not defined, a request can be sent to any of the defined banks.

3D Request Form and Fields

Üye işyeri tarafından hazırlanacak HTML formunda POST isteğinin gönderileceği adresler ve forma alanları aşağıdaki gibidir. Alanların her biri String olarak gönderilebilir.

3D Answer Form and Fields

The 3D secure response message will be POSTed as Html Form by Switch 3D Secure Gateway to the successUrl or failureUrl addresses sent by the merchant in the request message together with the data set below.

Payment Request Hash Calculation with 3D

One of the fields that must be sent when paying with 3D is hashedData. In this field, the hash value generated using certain fields in the content of the 3D request sent must be fed. In the hash value calculation, the following parameters sent in the request must be concatenated as String side by side and the password value generated for the Switch user must be put into the calculation. The final String value obtained is used for hash calculation using SHA256 algorithm. The String produced as a result of the hash is converted to uppercase letters and fed into the hashedData field. The method and example are as follows:

Payment Response Hash Calculation with 3D

The response form sent to the merchant after the 3D payment is received will also contain a field named hashedData. Merchant can check the validity of the incoming data by generating the value in the hashedData field using the following fields from the fields returned in the 3D response form. The Response hash can be obtained by concatenating some fields side by side as String, concatenating the Switch user password to the end of the String, hashing it with the SHA256 algorithm and converting it to uppercase letters, just like the Request hash. The method and example are as follows:

Sample 3D Request and Response Form

A sample HTML form for 3D payment is given below in HTML Table format. After the fields here are filled in as desired, the 3D request hash is calculated and set in the hashedData field, the 3D payment request can be triggered by submitting the form to the test or prod url given below. The posted data must be in application/x-www-form-urlencoded type.

3D_PAY HTML Response Form Sample (Sales)

3D_PAY HTML Request Form Sample (Pre-Authorization)

3D_PAY HTML Response Form Sample (Pre-Authorization)

Sample 3D Request in a Test Environment

After the fields in the 3D request HTML are set and the hash calculation is made and the hashedData field is set, the 3D process is triggered by submitting the form to the following URL for the test environment.

The following data was taken while submitting forms in the test environment.

After these fields are submitted, the Garanti Bank 3D Secure page will open, the default phone number from the dropdown here must be selected and the OK button must be pressed:

After pressing the OK button, you will be redirected to a page like the one below, where 123456 must be written in the SMS Password section for each request. After entering the password, the OK button on this page will be pressed and 3D Verification will be done:

After 3D Verification, the following fields will be returned in the form as a result:

3D_PAY Form Response Data Sample