Payer Auth API v1.0.0

const setupResponse = await fetch('https://auth.etomin.com/api/v1/3ds/setup', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': 'YOUR_API_KEY'
  },
  body: JSON.stringify({
    reference: 'order-12345',
    cardNumber: '4111111111111111',
    expirationMonth: '12',
    expirationYear: '2025',
    amount: '150.00',
    currency: 'MXN',
    callbackUrl: window.location.origin + '/3ds-result',
    billingInfo: {
      firstName: 'Juan',
      lastName: 'Pérez',
      email: 'juan@example.com',
      country: 'MX',
      postalCode: '01000',
      state: 'CDMX',
      address1: 'Av. Reforma 123'
    }
  })
});
const setup = await setupResponse.json();
// setup.transactionId, setup.accessToken, setup.deviceDataCollectionUrl

// Crear iframe oculto para DDC
const iframe = document.createElement('iframe');
iframe.name = 'collectionIframe';
iframe.style.display = 'none';
document.body.appendChild(iframe);

// Crear form y enviar al DDC URL
const form = document.createElement('form');
form.method = 'POST';
form.target = 'collectionIframe';
form.action = setup.deviceDataCollectionUrl;

const input = document.createElement('input');
input.type = 'hidden';
input.name = 'JWT';
input.value = setup.accessToken;
form.appendChild(input);
document.body.appendChild(form);
form.submit();

// Escuchar evento de DDC completado
window.addEventListener('message', function(event) {
  if (event.origin.includes('cardinalcommerce.com')) {
    console.log('DDC Complete:', event.data);
    // Proceder al enrollment
  }
});

const deviceInfo = {
  httpAccept: 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',
  httpUserAgent: navigator.userAgent,
  httpBrowserColorDepth: String(screen.colorDepth),
  httpBrowserJavaEnabled: false,
  httpBrowserJavaScriptEnabled: true,
  httpBrowserLanguage: navigator.language,
  httpBrowserScreenHeight: String(screen.height),
  httpBrowserScreenWidth: String(screen.width),
  httpBrowserTimeDifference: String(new Date().getTimezoneOffset()),
  ipAddress: '0.0.0.0' // Obtener del servidor o servicio externo
};

const enrollResponse = await fetch('https://auth.etomin.com/api/v1/3ds/enrollment', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'x-api-key': 'YOUR_API_KEY'
  },
  body: JSON.stringify({
    transactionId: setup.transactionId,
    deviceInfo
  })
});
const enrollment = await enrollResponse.json();

if (enrollment.challengeRequired) {
  // Crear iframe para step-up challenge
  const stepUpIframe = document.createElement('iframe');
  stepUpIframe.name = 'step-up-iframe';
  stepUpIframe.height = '400';
  stepUpIframe.width = '400';
  document.getElementById('challenge-container').appendChild(stepUpIframe);

  // Enviar JWT al step-up URL
  const stepUpForm = document.createElement('form');
  stepUpForm.method = 'POST';
  stepUpForm.target = 'step-up-iframe';
  stepUpForm.action = enrollment.stepUpUrl;

  const jwtInput = document.createElement('input');
  jwtInput.type = 'hidden';
  jwtInput.name = 'JWT';
  jwtInput.value = enrollment.enrollmentToken;
  stepUpForm.appendChild(jwtInput);

  const mdInput = document.createElement('input');
  mdInput.type = 'hidden';
  mdInput.name = 'MD';
  mdInput.value = enrollment.transactionId;
  stepUpForm.appendChild(mdInput);

  document.body.appendChild(stepUpForm);
  stepUpForm.submit();

  // Escuchar resultado del challenge via postMessage
  window.addEventListener('message', function(event) {
    if (event.data && event.data.type === '3ds-complete') {
      console.log('Challenge complete:', event.data.result);
      // event.data.href contiene la URL de redirección
    }
  });
}

{
  "error": 1,
  "message": "Descripción del error",
  "details": "Detalle técnico (solo en 500)"
}