POST
/
v1
/
customers
/
{customerId}
/
accounts
/
{accountId}
/
cards
/
auth
/
confirm
curl --request POST \
  --url https://api.next.orenda.finance/v1/customers/{customerId}/accounts/{accountId}/cards/auth/confirm \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "authId": "auth_7e3a1c9d",
  "action": "accepted"
}
'
{
  "success": true,
  "status": "customer-accepted",
  "message": "Authentication accepted"
}
{
  "success": false,
  "code": "VALIDATION_ERROR",
  "message": "newPin must be 4 digits"
}
{
  "success": false,
  "code": "CARD_NOT_FOUND",
  "message": "Card not found"
}
Answers a pending cardholder authentication challenge (raised in 3DS-related step-up flows). Send the challenge’s authId and an action of accepted or canceled.

Authorizations

​
Authorization
string
header
required

The user's access token. The program and environment come from the token.

Path Parameters

​
customerId
string
required

The customer's id.

​
accountId
string
required

The account the card belongs to. A customer can have several accounts; cards are issued against one.

Body

application/json
​
authId
string
required

Required. The authentication challenge ID.

​
action
enum<string>
required

Required.

Available options:
accepted,
canceled

Response

Confirmed

​
success
boolean
Example:

true

​
status
enum<string>
Available options:
customer-accepted,
customer-canceled
​
message
string