academe / SagePay-Integration

HTTP Messages for the Sage Pay REST (Pi) gateway.
GNU General Public License v3.0
9 stars 5 forks source link

MDX - what's that then? #22

Closed judgej closed 8 years ago

judgej commented 8 years ago

The callback after the user enters their 3D Secure password includes an MD field and an MDX field. It is not clear what MDX is, why it is needed, and how it is used. Do we need to capture it, and if so, why?

judgej commented 8 years ago

I may be misunderstanding the MD field. Reading the Sage Pay Direct documentation, it seems that the MD is supplied by Sage Pay, and is Sage Pay's unique ID for the transaction that it is holding, ready to submit for authorisation when the results of the 3D Secure PIN entry are complete. My initial (wrong) understanding was that the MD was generated by the merchant site.

At this time, Sage Pay is not returning an MD with the transaction response - just the ACS URL and the PA Req. That's what threw me.

judgej commented 8 years ago

From Sage Pay:

Yes the MDX can be ignored it is not used for any actions.