Capture successful despite 3Dsecure fail

[Thomas-C258]

Hi all,

I've been implementing advanced checkout, using js SDK and the order API (using django on the backend). I was testing the 3Dsecure implementation using offered test scenarios, and am able to read the correct responses.

My difficulty is what to do with them. I have tried to capture orders that had failed a 3DSecure test, and was able to successfully capture it despite the 3DSecure fail.

Is it my responsibility to interpret the 3DSecure response codes and reject the transaction? Shouldn't paypal decline the capture is 3DSecure fails (and I have SCA_ALWAYS set up)?

Thanks !

[Thomas-C258]

Same thing happens when I make an authorize call on the order API followed by a capture call on the payment API, instead of making a capture call on the order API directly after the create order api call.

But maybe the 3DSecure test scenarios are not configured for capture?

I am using the scenario below and am getting the proper authentication_result object in response.

Failed Step-Up Authentication

Visa: 4868719181895556 Mastercard: 5329879768013724

"authentication_result": { "liability_shift": "NO", "three_d_secure": { "enrollment_status": "Y", "authentication_status": "N" } }

[Thomas-C258 · Accepted solution]

If anyone is wondering, I got the answer from paypal support:

A 3DSecure authentication failure will not imply a decline upon capture of the payment. It doesn't make much sense to me, but paypal says you can absolutely capture (at your own risk) funds based on a failed 3SQ authentication...