Submit 3DS authentication
Submits a 3DS authentication after optional fingerprinting.
Pass fingerprintingResult if you received it from the iframe postMessage.
Returns updated status and may include challengeUrl if a challenge is required.
Authentication: Uses the merchant’s public/publishable key (pk_...).
Authorizations
HTTP Basic authentication. Use your secret key as the username and an empty string as password. The API key should be base64 encoded in the format 'username:' when sending the Authorization header.
Body
3DS Authentication ID from POST /v1/three-ds/authenticate
"tdsa_1QmCRMJM0r9zBvr4OVmMRa6X"
Base64-encoded fingerprinting result obtained from the hidden iframe postMessage. Omit if no fingerprinting step occurred.
"VGhpcyBpcyBhIHNhbXBsZSciAzRFMgTWV0aG9kIFJlc3VsdA=="
Response
Authentication submitted successfully
3DS Authentication ID
"tdsa_1QmCRMJM0r9zBvr4OVmMRa6X"
Updated authentication status after submit
requires_challenge, succeeded, failed, error, processing "requires_challenge"
Challenge URL — render in iframe when status is requires_challenge
"https://hooks.stripe.com/three_d_secure/challenge/acct_xxx/tdsa_xxx"
Authentication outcome (only present in terminal states)
"authenticated"