Step-by-step integration guide for secure payment authentication
The /FIDO/Challenge endpoint uses JWTs like other Cruise endpoints, but with extra ReferenceId and ReturnURL claims, to let users enroll in Visa Payment Passkey.
The following payload contains the transaction details:
{
"jti": "41d3e9ab-e74f-4490-b55b-f4011729342e",
"iat": 1790795656,
"iss": "5f6c3fbe5ad3d7567e4f1dd1",
"OrgUnitId": "5b9c4bb3ff626b1344810a01",
"ObjectifyPayload": true,
"ReturnUrl": "http:\/\/www.coldslither.com\/visa\/passkey\/return.php",
"ReferenceId": "7f134392-2960-4e08-835e-c8fbd3851d1a"
}
This is the complete JWT token posted to the iframe:
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJqdGkiOiI0MWQzZTlhYi1lNzRmLTQ0OTAtYjU1Yi1mNDAxMTcyOTM0MmUiLCJpYXQiOjE3OTA3OTU2NTYsImlzcyI6IjVmNmMzZmJlNWFkM2Q3NTY3ZTRmMWRkMSIsIk9yZ1VuaXRJZCI6IjViOWM0YmIzZmY2MjZiMTM0NDgxMGEwMSIsIk9iamVjdGlmeVBheWxvYWQiOnRydWUsIlJldHVyblVybCI6Imh0dHA6XC9cL3d3dy5jb2xkc2xpdGhlci5jb21cL3Zpc2FcL3Bhc3NrZXlcL3JldHVybi5waHAiLCJSZWZlcmVuY2VJZCI6IjdmMTM0MzkyLTI5NjAtNGUwOC04MzVlLWM4ZmJkMzg1MWQxYSJ9.A_UzmKlkZNtOr7QlrmMIwtoVLX3m0Fgj_fZ8t2NNdiY